$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/1f5fab24-6ae3-369a-845b-2b5879489f6a.roa File: 1f5fab24-6ae3-369a-845b-2b5879489f6a.roa (raw, json) Hash identifier: HzVOyBndHZQ3y1CMe58m4jPCqD+CEOVeK+xgOhqrQ7w= Subject key identifier: 1F:9C:30:D4:5C:AD:71:F5:BD:08:7B:97:7F:05:3C:94:7B:7B:A4:49 Certificate issuer: /CN=3689b9ce-089d-4137-b14d-7e4cd15e53a5 Certificate serial: 010D0C9F432858492C9AE4438FA947C6D7345100 Authority key identifier: 1D:1E:37:FA:79:26:6D:13:76:4D:B9:09:BD:A7:4B:B3:21:FA:8A:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/1f5fab24-6ae3-369a-845b-2b5879489f6a.roa Signing time: Thu 13 Mar 2025 12:21:29 +0000 ROA not before: Thu 13 Mar 2025 12:21:29 +0000 ROA not after: Wed 11 Jun 2025 12:21:29 +0000 asID: 395644 IP address blocks: 199.88.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:9a:e4:43:8f:a9:47:c6:d7:34:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3689b9ce-089d-4137-b14d-7e4cd15e53a5 Validity Not Before: Mar 13 12:21:29 2025 GMT Not After : Jun 11 12:21:29 2025 GMT Subject: CN=1538ccf5-7d20-412c-ab19-d0053a218650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d8:1b:f6:6b:5a:98:d7:94:36:ce:55:07:3c: 81:f5:2e:de:d6:c4:d3:8c:58:90:ea:1a:67:b3:2b: a1:3c:60:9f:45:d3:20:6f:1c:8a:5f:a1:82:b4:71: 6d:43:e8:3c:fd:be:88:96:88:19:2e:85:bf:80:e2: 8c:37:dc:a9:42:b5:6c:4d:9d:a5:38:4e:21:03:f9: c5:7c:a2:25:1e:03:95:a6:a0:17:43:3b:91:97:d3: 87:bf:db:78:38:c5:af:57:16:92:fa:f9:36:5e:4f: 13:e2:57:0d:8d:57:0e:39:62:63:19:46:42:d6:58: d4:32:ad:e1:d6:08:90:ae:7e:98:fe:8a:3b:8a:d2: 04:bb:41:9a:66:e1:a9:96:6b:de:0b:8d:22:d3:36: fc:e8:8c:0a:25:93:25:12:3a:56:a3:fa:64:1c:cf: e0:65:fa:a7:2a:3d:88:7b:7e:a0:ea:d3:65:10:13: 2d:b5:e1:7e:9c:6a:a0:64:07:11:ce:ec:88:f1:05: f0:a1:65:2d:59:29:fe:fd:01:41:cd:3a:46:2f:f3: 96:54:54:3b:f3:26:4e:ca:ae:72:d4:91:94:39:77: 6e:24:c4:ad:0c:72:77:05:2f:a6:c1:9d:27:15:8d: 12:19:e4:63:64:35:e0:a3:f3:f2:cd:86:c0:3a:35: 22:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:9C:30:D4:5C:AD:71:F5:BD:08:7B:97:7F:05:3C:94:7B:7B:A4:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/1f5fab24-6ae3-369a-845b-2b5879489f6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.crl X509v3 Authority Key Identifier: keyid:1D:1E:37:FA:79:26:6D:13:76:4D:B9:09:BD:A7:4B:B3:21:FA:8A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer sbgp-ipAddrBlock: critical IPv4: 199.88.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:da:7e:00:4a:ad:42:2a:17:01:85:11:8e:7f:bd:b5:e6:fa: db:49:99:de:e0:db:df:e0:64:cc:c9:90:3b:0b:e7:ff:c2:ff: bf:76:80:66:1b:7a:1e:71:00:ea:b1:c8:ea:d8:14:d4:4c:3a: 1c:ea:c1:d1:48:8d:1d:00:f9:7a:a5:31:72:13:e7:f7:ee:cc: b3:3e:4d:4b:8a:c9:05:e9:90:9e:75:00:b9:0a:a7:b9:26:0a: 94:85:0e:36:f2:a4:c6:27:9f:ba:2d:16:ad:a2:80:b0:c2:6d: 9b:ea:6b:03:1a:c5:a3:b0:68:8e:a4:88:b4:2a:7c:85:a9:0c: a2:07:c8:c1:e4:9b:f8:bc:2c:3a:c7:94:c7:f5:6c:ef:88:9c: 3a:13:10:b5:33:12:4f:d9:ae:5a:66:ad:ed:0d:25:69:b6:67: 53:8a:b5:19:54:66:ae:a5:3d:5c:38:b6:95:bd:39:a7:08:99: 8b:45:c7:1d:97:a6:60:be:72:45:a6:8a:e4:b1:bd:e4:80:79: 34:56:1e:a7:73:22:2b:a8:aa:89:c6:13:fc:5f:2f:5f:5e:49: bd:09:3f:90:32:6d:8f:8a:79:f2:81:46:7d:8c:b6:d1:33:b5: 45:19:17:9b:b6:d1:af:06:29:8e:9e:0a:b7:97:45:05:d1:c1: 79:1d:ef:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksmuRDj6lHxtc0UQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY4OWI5Y2UtMDg5ZC00MTM3LWIxNGQtN2U0Y2QxNWU1 M2E1MB4XDTI1MDMxMzEyMjEyOVoXDTI1MDYxMTEyMjEyOVowLzEtMCsGA1UEAxMk MTUzOGNjZjUtN2QyMC00MTJjLWFiMTktZDAwNTNhMjE4NjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNgb9mtamNeUNs5VBzyB9S7e1sTTjFiQ6hpn syuhPGCfRdMgbxyKX6GCtHFtQ+g8/b6IlogZLoW/gOKMN9ypQrVsTZ2lOE4hA/nF fKIlHgOVpqAXQzuRl9OHv9t4OMWvVxaS+vk2Xk8T4lcNjVcOOWJjGUZC1ljUMq3h 1giQrn6Y/oo7itIEu0GaZuGplmveC40i0zb86IwKJZMlEjpWo/pkHM/gZfqnKj2I e36g6tNlEBMtteF+nGqgZAcRzuyI8QXwoWUtWSn+/QFBzTpGL/OWVFQ78yZOyq5y 1JGUOXduJMStDHJ3BS+mwZ0nFY0SGeRjZDXgo/PyzYbAOjUiGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+cMNRcrXH1vQh7l38FPJR7e6RJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zNjg5 YjljZS0wODlkLTQxMzctYjE0ZC03ZTRjZDE1ZTUzYTUvMWY1ZmFiMjQtNmFlMy0z NjlhLTg0NWItMmI1ODc5NDg5ZjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzY4OWI5Y2UtMDg5ZC00MTM3LWIx NGQtN2U0Y2QxNWU1M2E1LzM2ODliOWNlLTA4OWQtNDEzNy1iMTRkLTdlNGNkMTVl NTNhNS5jcmwwHwYDVR0jBBgwFoAUHR43+nkmbRN2TbkJvadLsyH6igMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zNjg5YjljZS0wODlkLTQxMzctYjE0ZC03ZTRj ZDE1ZTUzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1j6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/afgBKrUIqFwGFEY5/vbXm+ttJmd7g29/gZMzJkDsL5//C/792gGYb eh5xAOqxyOrYFNRMOhzqwdFIjR0A+XqlMXIT5/fuzLM+TUuKyQXpkJ51ALkKp7km CpSFDjbypMYnn7otFq2igLDCbZvqawMaxaOwaI6kiLQqfIWpDKIHyMHkm/i8LDrH lMf1bO+InDoTELUzEk/Zrlpmre0NJWm2Z1OKtRlUZq6lPVw4tpW9OacImYtFxx2X pmC+ckWmiuSxveSAeTRWHqdzIiuoqonGE/xfL19eSb0JP5AybY+KefKBRn2MttEz tUUZF5u20a8GKY6eCreXRQXRwXkd758= -----END CERTIFICATE-----Generated at Sat Apr 12 00:25:48 2025 by rpki-client