$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/252f3ae8-7aea-3989-8b62-f1bbe5c9c3d3.roa File: 252f3ae8-7aea-3989-8b62-f1bbe5c9c3d3.roa (raw, json) Hash identifier: uvKygpp6JFdRl87nrt/kJf/1fD/pgiw5IfYzJ4LIxAo= Subject key identifier: 58:6B:F7:22:11:7E:8E:A2:28:41:66:80:E1:B6:77:31:39:E5:C7:D6 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5820E037013361A12FFDBC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/252f3ae8-7aea-3989-8b62-f1bbe5c9c3d3.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 199.36.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:0e:03:70:13:36:1a:12:ff:db:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=ffe62ea0-d265-4cfa-bad2-4e86d97a6317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fa:62:6e:1c:04:a2:c1:03:f8:03:f5:9d:32: 86:62:cc:e1:9f:c2:a9:90:37:8e:fb:96:29:3e:78: 19:8c:43:5c:0e:c5:d4:ae:5e:ab:ba:5d:35:cd:0e: 4b:76:3c:dd:a3:10:71:66:8f:6c:85:21:85:13:45: 93:27:e2:97:29:7e:52:30:72:09:13:ea:d9:fb:51: 89:93:81:02:67:89:6f:68:79:a4:40:05:8c:76:2a: a2:5c:6d:ed:6d:b9:2f:5c:4a:52:75:55:c0:f6:50: 18:a3:b0:7f:81:f3:31:c7:02:10:4b:12:ec:71:e5: a3:b2:4a:70:68:d6:69:d0:fe:3b:62:2a:8c:00:8d: f5:d1:9c:99:2b:ae:aa:ea:38:0d:77:94:95:fc:4e: a1:80:85:d7:ef:10:a9:cb:0b:96:17:ef:14:d4:13: 42:8a:ca:eb:3d:3f:89:66:c2:84:2e:38:23:6c:10: 9d:21:74:c5:27:88:fb:53:58:0a:7c:00:c2:cd:95: 68:d9:94:b7:de:17:8c:da:4c:e6:b5:f5:20:65:4e: df:0a:dc:3e:3c:7a:3b:59:99:3f:0c:77:53:03:8d: 8e:c7:53:c1:b9:bc:ff:ec:9e:78:de:ea:76:dc:34: 17:a2:93:4d:21:ab:0a:50:90:af:34:a7:d8:82:5e: ab:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:6B:F7:22:11:7E:8E:A2:28:41:66:80:E1:B6:77:31:39:E5:C7:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/252f3ae8-7aea-3989-8b62-f1bbe5c9c3d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 199.36.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:21:17:c9:f5:f2:6d:df:1c:0f:81:a9:8f:ae:fe:64:09:ff: ba:d8:40:7c:30:a4:a9:22:58:b0:83:8a:77:9a:25:9e:34:0d: c9:6e:c6:27:31:ca:5c:4c:16:9f:39:d5:21:b9:9c:9d:9b:2d: e4:bf:86:54:d7:81:5a:5f:5b:08:41:a7:a7:87:03:15:e2:39: b0:04:b1:12:e1:25:e7:56:d8:fe:8e:42:6e:8c:5d:4f:37:92: a6:f8:01:1b:41:de:d4:11:f8:a1:2d:37:10:42:fa:6f:5e:ea: c4:c0:95:cb:24:93:6a:01:f7:e4:cf:5b:e0:04:63:ae:c6:da: 84:1b:96:f4:eb:3b:50:1b:20:c5:01:ff:6d:d5:75:85:54:8a: 8a:20:63:5c:33:2b:6c:2f:0a:61:64:43:83:9b:76:80:18:ca: f1:72:3a:48:72:02:7f:6d:e9:08:fd:94:d5:52:43:ab:13:9a: d6:3f:ce:ee:16:2c:43:7e:49:1d:54:a7:be:b0:45:5c:0a:c8: 62:8b:f8:59:00:0d:c1:6d:6b:80:53:81:67:c1:e5:e6:75:7d: e9:5f:01:eb:7a:d0:1a:96:c1:8c:97:7e:7e:6a:dd:3b:b3:eb: 4d:15:7e:77:e4:ef:0e:6c:7b:db:32:b0:49:06:bf:86:59:c5: 77:6c:61:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgg4DcBM2GhL/28AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZmZlNjJlYTAtZDI2NS00Y2ZhLWJhZDItNGU4NmQ5N2E2MzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPpibhwEosED+AP1nTKGYszhn8KpkDeO+5Yp PngZjENcDsXUrl6rul01zQ5LdjzdoxBxZo9shSGFE0WTJ+KXKX5SMHIJE+rZ+1GJ k4ECZ4lvaHmkQAWMdiqiXG3tbbkvXEpSdVXA9lAYo7B/gfMxxwIQSxLsceWjskpw aNZp0P47YiqMAI310ZyZK66q6jgNd5SV/E6hgIXX7xCpywuWF+8U1BNCisrrPT+J ZsKELjgjbBCdIXTFJ4j7U1gKfADCzZVo2ZS33heM2kzmtfUgZU7fCtw+PHo7WZk/ DHdTA42Ox1PBubz/7J543up23DQXopNNIasKUJCvNKfYgl6rWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFhr9yIRfo6iKEFmgOG2dzE55cfWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjUyZjNhZTgtN2FlYS0z OTg5LThiNjItZjFiYmU1YzljM2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyScMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACghF8n18m3fHA+BqY+u/mQJ/7rYQHwwpKkiWLCDineaJZ40Dcluxicx ylxMFp851SG5nJ2bLeS/hlTXgVpfWwhBp6eHAxXiObAEsRLhJedW2P6OQm6MXU83 kqb4ARtB3tQR+KEtNxBC+m9e6sTAlcskk2oB9+TPW+AEY67G2oQblvTrO1AbIMUB /23VdYVUioogY1wzK2wvCmFkQ4ObdoAYyvFyOkhyAn9t6Qj9lNVSQ6sTmtY/zu4W LEN+SR1Up76wRVwKyGKL+FkADcFta4BTgWfB5eZ1felfAet60BqWwYyXfn5q3Tuz 600Vfnfk7w5se9sysEkGv4ZZxXdsYZ0= -----END CERTIFICATE-----Generated at Fri Mar 14 08:10:38 2025 by rpki-client