$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/ea25304e-5e06-3ced-b3a0-30a19c749708.roa File: ea25304e-5e06-3ced-b3a0-30a19c749708.roa (raw, json) Hash identifier: Ke3xFZejkwgAgeN3KNx/Z1xHBZqEZDBa2Vjmx8mjB+g= Subject key identifier: 6C:A4:70:C3:F6:32:DF:0A:8B:43:17:E9:E2:87:F2:F1:A7:AC:C2:50 Certificate issuer: /CN=35be4068-f7e5-404b-9693-dcff4b2e8f95 Certificate serial: 010D0C9F43285848F4F69A11A6BCB693EA9840C0 Authority key identifier: C7:9B:4D:25:4A:8B:FB:52:4F:3B:6E:96:D2:D8:02:62:D1:A9:07:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/ea25304e-5e06-3ced-b3a0-30a19c749708.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 64236 IP address blocks: 199.91.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/35be4068-f7e5-404b-9693-dcff4b2e8f95.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/35be4068-f7e5-404b-9693-dcff4b2e8f95.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:9a:11:a6:bc:b6:93:ea:98:40:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35be4068-f7e5-404b-9693-dcff4b2e8f95 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=4814821f-f34f-405d-875d-01642d4000fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:38:18:ef:a1:16:d5:cb:b6:22:ac:9f:c9:2f: df:83:26:01:c5:82:f9:ce:ac:ec:61:6e:64:af:b9: 05:30:de:64:e9:cb:ac:73:ab:53:6d:a0:97:d1:23: f3:7f:cc:e8:26:5d:fa:fc:cf:9f:7d:1f:29:0b:cc: 70:4b:5c:03:5b:63:03:92:b2:c8:26:25:24:fb:3f: 3a:74:c0:46:62:e9:33:2e:ef:fa:1d:71:d2:9d:c6: aa:86:35:8b:28:f6:ee:de:03:e6:a2:70:9b:7a:d0: c5:9b:52:a1:ff:c9:6f:df:f4:b3:11:25:25:00:37: d2:8f:e3:b6:4e:ec:08:5b:a8:fb:76:50:c4:0b:39: 5f:4b:99:02:bb:7f:0d:95:f1:f8:76:6f:12:71:2b: c9:15:47:4b:3e:4d:a9:f2:0e:ba:8c:f9:8b:dd:6e: 89:d2:8c:9b:6f:b2:b1:89:e6:66:02:1e:24:30:3f: 43:d6:96:fc:1d:6f:07:01:c4:79:c1:00:a2:be:7c: 54:38:fb:0c:05:76:a8:d8:57:fc:b5:6e:4f:1d:f9: eb:5e:af:53:0c:66:ce:12:e2:e3:93:7f:22:5f:5f: 3a:40:0a:00:de:6a:f8:f5:38:22:fa:61:d0:af:2e: 81:b7:8f:cc:87:0e:73:e7:0d:d2:eb:25:75:bf:0a: ca:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:A4:70:C3:F6:32:DF:0A:8B:43:17:E9:E2:87:F2:F1:A7:AC:C2:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/ea25304e-5e06-3ced-b3a0-30a19c749708.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/35be4068-f7e5-404b-9693-dcff4b2e8f95.crl X509v3 Authority Key Identifier: keyid:C7:9B:4D:25:4A:8B:FB:52:4F:3B:6E:96:D2:D8:02:62:D1:A9:07:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95.cer sbgp-ipAddrBlock: critical IPv4: 199.91.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:26:d1:34:17:cc:1c:56:15:29:63:61:cd:13:01:74:cb:27: 8e:fd:ee:35:e2:91:fd:60:d3:fc:be:af:7e:6c:3a:54:ba:6d: af:40:06:d1:87:f7:df:da:70:86:d0:53:fc:f8:4c:63:1f:23: 0c:a9:b4:37:aa:93:e8:96:5d:13:9d:14:77:b9:92:2d:c9:63: 30:4a:9c:a7:00:d4:44:81:74:63:f6:52:e3:e0:fe:be:62:d0: c1:db:58:8c:fd:f4:a0:cd:58:90:5a:29:28:fb:0e:9e:4a:bb: a5:76:2d:b0:ad:ab:e1:62:9b:d2:8c:a2:5d:93:07:90:d8:a8: e5:30:da:8b:c9:6a:3a:e7:66:aa:33:e5:8f:29:2c:b7:19:cb: 0e:06:49:a6:0d:1d:f7:bd:2f:ab:14:db:45:a6:67:a2:64:26: f9:23:6c:07:bb:98:bc:59:42:6a:c3:c3:79:47:ed:00:d7:13: 5e:42:09:3f:18:21:fc:61:c1:37:51:79:5f:64:c3:b1:e0:3c: ed:b7:4a:9a:9a:5a:f2:21:8b:ef:a6:f8:fd:cf:03:11:97:bb: af:97:01:d6:f6:5a:31:ab:d1:29:35:b2:f5:86:8f:f2:e6:38: 5b:82:c9:60:e3:b7:a6:41:f7:9f:0d:c1:fe:59:7c:5e:ed:c2: 6a:bf:53:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09poRpry2k+qYQMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZTQwNjgtZjdlNS00MDRiLTk2OTMtZGNmZjRiMmU4 Zjk1MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk NDgxNDgyMWYtZjM0Zi00MDVkLTg3NWQtMDE2NDJkNDAwMGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDgY76EW1cu2IqyfyS/fgyYBxYL5zqzsYW5k r7kFMN5k6cusc6tTbaCX0SPzf8zoJl36/M+ffR8pC8xwS1wDW2MDkrLIJiUk+z86 dMBGYukzLu/6HXHSncaqhjWLKPbu3gPmonCbetDFm1Kh/8lv3/SzESUlADfSj+O2 TuwIW6j7dlDECzlfS5kCu38NlfH4dm8ScSvJFUdLPk2p8g66jPmL3W6J0oybb7Kx ieZmAh4kMD9D1pb8HW8HAcR5wQCivnxUOPsMBXao2Ff8tW5PHfnrXq9TDGbOEuLj k38iX186QAoA3mr49Tgi+mHQry6Bt4/Mhw5z5w3S6yV1vwrKVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGykcMP2Mt8Ki0MX6eKH8vGnrMJQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zNWJl NDA2OC1mN2U1LTQwNGItOTY5My1kY2ZmNGIyZThmOTUvZWEyNTMwNGUtNWUwNi0z Y2VkLWIzYTAtMzBhMTljNzQ5NzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzViZTQwNjgtZjdlNS00MDRiLTk2 OTMtZGNmZjRiMmU4Zjk1LzM1YmU0MDY4LWY3ZTUtNDA0Yi05NjkzLWRjZmY0YjJl OGY5NS5jcmwwHwYDVR0jBBgwFoAUx5tNJUqL+1JPO26W0tgCYtGpB88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zNWJlNDA2OC1mN2U1LTQwNGItOTY5My1kY2Zm NGIyZThmOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx1usMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJcm0TQXzBxWFSljYc0TAXTLJ4797jXikf1g0/y+r35sOlS6ba9ABtGH 99/acIbQU/z4TGMfIwyptDeqk+iWXROdFHe5ki3JYzBKnKcA1ESBdGP2UuPg/r5i 0MHbWIz99KDNWJBaKSj7Dp5Ku6V2LbCtq+Fim9KMol2TB5DYqOUw2ovJajrnZqoz 5Y8pLLcZyw4GSaYNHfe9L6sU20WmZ6JkJvkjbAe7mLxZQmrDw3lH7QDXE15CCT8Y IfxhwTdReV9kw7HgPO23SpqaWvIhi++m+P3PAxGXu6+XAdb2WjGr0Sk1svWGj/Lm OFuCyWDjt6ZB958Nwf5ZfF7twmq/U9A= -----END CERTIFICATE-----Generated at Fri Mar 14 11:17:56 2025 by rpki-client