$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/c038d6f1-52c4-353f-bf06-0895e4955e50.roa File: c038d6f1-52c4-353f-bf06-0895e4955e50.roa (raw, json) Hash identifier: Rs2NQzVI2euuo5B+O0TYKJs4X23pNpkCmsGojYdm2ng= Subject key identifier: AC:8F:CA:8F:06:17:67:6D:B0:9A:78:13:17:74:66:6A:43:8A:EF:A6 Certificate issuer: /CN=35be4068-f7e5-404b-9693-dcff4b2e8f95 Certificate serial: 010D0C9F43285848F4F69A21E43885AF70589D10 Authority key identifier: C7:9B:4D:25:4A:8B:FB:52:4F:3B:6E:96:D2:D8:02:62:D1:A9:07:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/c038d6f1-52c4-353f-bf06-0895e4955e50.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 64236 IP address blocks: 199.193.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/35be4068-f7e5-404b-9693-dcff4b2e8f95.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/35be4068-f7e5-404b-9693-dcff4b2e8f95.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:9a:21:e4:38:85:af:70:58:9d:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35be4068-f7e5-404b-9693-dcff4b2e8f95 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=fa438215-e39d-453e-8b83-66a254bd77bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:85:0c:2d:2d:24:1d:80:4b:d1:2c:fd:8d:38: 75:fd:4e:7d:20:0e:52:eb:cb:6e:0c:53:7e:a5:30: 53:5a:64:82:17:66:c9:c8:97:99:2b:7b:9a:d5:ec: 23:1e:d1:29:6d:83:13:3d:d6:f8:22:1b:ea:51:c1: 6a:70:d9:5b:c0:56:5d:a3:f3:b9:90:2e:73:73:b8: ac:4e:3f:bd:d3:8f:40:b7:84:ed:62:d3:6f:13:50: bf:2b:5a:4d:65:a6:a2:26:26:de:ca:7c:de:1b:0f: 75:21:b7:91:62:92:8d:db:5e:cb:ba:0d:fc:25:9d: 3f:c4:a6:81:f7:08:1e:44:47:1e:d9:fd:00:48:f9: d9:55:41:e6:f0:ec:a0:d5:1d:65:a6:75:59:5d:ca: 2c:24:ce:c7:98:cb:74:18:6c:d2:0b:7e:29:6a:39: bf:84:83:2c:dd:e2:5d:81:39:29:f6:9c:84:f1:fd: 37:16:4c:e7:1e:c2:6c:7b:bd:6b:81:be:0f:8e:ca: f3:4d:c4:30:ee:b1:93:6b:32:44:b4:7a:6d:8f:bc: 5b:12:39:75:1a:1d:3d:18:60:53:1e:da:03:51:30: d4:f6:93:0b:c8:b4:c8:f9:06:89:4e:af:27:9b:9b: cc:25:20:03:5c:d7:ef:d4:8b:61:fd:c9:f6:08:06: 06:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:8F:CA:8F:06:17:67:6D:B0:9A:78:13:17:74:66:6A:43:8A:EF:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/c038d6f1-52c4-353f-bf06-0895e4955e50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/35be4068-f7e5-404b-9693-dcff4b2e8f95.crl X509v3 Authority Key Identifier: keyid:C7:9B:4D:25:4A:8B:FB:52:4F:3B:6E:96:D2:D8:02:62:D1:A9:07:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95.cer sbgp-ipAddrBlock: critical IPv4: 199.193.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:2b:98:34:02:2c:0e:13:a8:14:67:18:c5:da:32:a2:1e:ec: 18:ff:f4:b6:a4:3a:00:cc:ac:27:b7:ec:33:74:dd:5a:e7:a4: 00:6c:b3:fd:49:e0:5f:c8:c3:4d:d1:65:af:67:b5:7a:7c:7d: 6d:26:70:65:12:fc:68:29:3a:79:f3:6b:4c:12:c4:fd:db:19: 97:b7:b9:10:a1:21:31:93:dc:11:a3:d5:44:cd:d6:6e:4a:33: 1e:14:d4:01:58:eb:f2:f9:cf:bd:c6:7b:51:0f:12:87:f5:c0: 8b:c1:3d:f2:1b:0c:47:fa:97:4d:af:44:dc:00:c2:56:d6:89: d2:0e:00:ad:ff:3e:4c:31:de:d5:de:24:b2:9e:04:32:43:d7: f9:1b:ab:00:56:d1:7a:ec:4e:a1:e2:eb:c7:f2:c7:4a:74:ac: ed:6d:3e:ba:fa:06:70:8d:f9:fd:a5:1b:a4:5d:b1:ab:ea:a3: 1a:85:97:6b:4f:ab:0b:b6:8c:9a:1f:d4:dc:76:39:35:32:f9: 4a:b0:2b:55:ca:03:f7:8f:57:66:19:75:28:9f:c1:8f:f5:97: 83:72:6d:99:15:57:46:d9:10:a6:1f:1e:5e:ab:dc:53:d5:5e: b1:89:cf:ac:05:aa:e6:0a:b7:c3:94:e3:a9:0c:6f:c2:3f:49: 44:73:59:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09poh5DiFr3BYnRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZTQwNjgtZjdlNS00MDRiLTk2OTMtZGNmZjRiMmU4 Zjk1MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk ZmE0MzgyMTUtZTM5ZC00NTNlLThiODMtNjZhMjU0YmQ3N2JkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIUMLS0kHYBL0Sz9jTh1/U59IA5S68tuDFN+ pTBTWmSCF2bJyJeZK3ua1ewjHtEpbYMTPdb4IhvqUcFqcNlbwFZdo/O5kC5zc7is Tj+9049At4TtYtNvE1C/K1pNZaaiJibeynzeGw91IbeRYpKN217Lug38JZ0/xKaB 9wgeREce2f0ASPnZVUHm8Oyg1R1lpnVZXcosJM7HmMt0GGzSC34pajm/hIMs3eJd gTkp9pyE8f03FkznHsJse71rgb4PjsrzTcQw7rGTazJEtHptj7xbEjl1Gh09GGBT HtoDUTDU9pMLyLTI+QaJTq8nm5vMJSADXNfv1Ith/cn2CAYGZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKyPyo8GF2dtsJp4Exd0ZmpDiu+mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zNWJl NDA2OC1mN2U1LTQwNGItOTY5My1kY2ZmNGIyZThmOTUvYzAzOGQ2ZjEtNTJjNC0z NTNmLWJmMDYtMDg5NWU0OTU1ZTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzViZTQwNjgtZjdlNS00MDRiLTk2 OTMtZGNmZjRiMmU4Zjk1LzM1YmU0MDY4LWY3ZTUtNDA0Yi05NjkzLWRjZmY0YjJl OGY5NS5jcmwwHwYDVR0jBBgwFoAUx5tNJUqL+1JPO26W0tgCYtGpB88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zNWJlNDA2OC1mN2U1LTQwNGItOTY5My1kY2Zm NGIyZThmOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx8GYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGsrmDQCLA4TqBRnGMXaMqIe7Bj/9LakOgDMrCe37DN03VrnpABss/1J 4F/Iw03RZa9ntXp8fW0mcGUS/GgpOnnza0wSxP3bGZe3uRChITGT3BGj1UTN1m5K Mx4U1AFY6/L5z73Ge1EPEof1wIvBPfIbDEf6l02vRNwAwlbWidIOAK3/Pkwx3tXe JLKeBDJD1/kbqwBW0XrsTqHi68fyx0p0rO1tPrr6BnCN+f2lG6RdsavqoxqFl2tP qwu2jJof1Nx2OTUy+UqwK1XKA/ePV2YZdSifwY/1l4NybZkVV0bZEKYfHl6r3FPV XrGJz6wFquYKt8OU46kMb8I/SURzWSY= -----END CERTIFICATE-----Generated at Fri Mar 14 14:04:27 2025 by rpki-client