$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/9c0ab96e-07f3-340f-b026-49a7e297e98f.roa File: 9c0ab96e-07f3-340f-b026-49a7e297e98f.roa (raw, json) Hash identifier: WVS4wk0uMfM/wf6H8TX/qqZIZc+PpqXXPIAzG63pl/0= Subject key identifier: 22:85:71:01:4B:85:C0:57:C8:0C:1E:F8:34:24:56:12:DE:63:05:93 Certificate issuer: /CN=969446db-6a2e-47bc-a33b-2dd883bfb899 Certificate serial: 010D0C9F43285848EC9688DF9FB0C671BCA10800 Authority key identifier: 8C:4C:51:45:1B:97:18:EC:29:F6:65:EB:83:73:27:E3:84:C2:00:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/9c0ab96e-07f3-340f-b026-49a7e297e98f.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 33309 IP address blocks: 199.189.204.0/22 maxlen: 22 199.189.204.0/24 maxlen: 24 199.189.205.0/24 maxlen: 24 199.189.206.0/24 maxlen: 24 199.189.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/969446db-6a2e-47bc-a33b-2dd883bfb899.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/969446db-6a2e-47bc-a33b-2dd883bfb899.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:88:df:9f:b0:c6:71:bc:a1:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=969446db-6a2e-47bc-a33b-2dd883bfb899 Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=f62eef33-a1f6-46da-a859-6c13582a688b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:6e:b4:5a:98:e1:36:a2:0d:1d:be:da:c8:06: f1:c4:82:ca:21:63:e1:7b:da:c0:e8:41:53:6f:96: 63:f2:d7:bb:0d:07:dd:67:5c:91:d4:fd:ad:0c:1c: 79:ae:b8:8b:d9:a0:f8:0e:44:72:f5:aa:f6:8f:9c: 3d:b0:f3:5c:0e:e0:f4:b8:3d:bd:16:31:8a:22:c9: ef:e3:ab:e1:a9:b5:97:30:02:02:7b:47:6e:a9:bb: 0e:01:7a:dd:1f:8d:9e:b2:28:2c:59:31:f7:5e:26: 30:85:5a:a8:55:ac:92:1e:f3:05:17:19:6e:81:42: 1d:bd:ec:5d:3d:f3:f8:d2:d2:de:57:df:82:31:7f: ed:dc:6a:ed:e1:d7:41:ad:86:e4:1b:8d:84:5c:3f: 53:10:f5:7b:3e:ac:35:61:28:d6:9f:fc:bf:26:84: 0a:64:e6:08:ab:c2:d2:85:07:69:de:89:cf:6c:14: 1a:18:8d:bf:85:84:1e:25:3f:07:32:3f:e0:fb:5b: 3e:34:61:f3:7b:42:3c:05:dd:e2:9a:1e:b2:be:5b: 0e:f6:b1:a4:89:74:c6:5f:30:8b:95:5c:14:65:bf: 0d:47:85:8a:c1:3d:5c:4f:ed:65:45:fb:65:d9:4d: 4e:62:09:3e:27:55:1b:d1:10:12:19:48:de:eb:8f: 4e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:85:71:01:4B:85:C0:57:C8:0C:1E:F8:34:24:56:12:DE:63:05:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/9c0ab96e-07f3-340f-b026-49a7e297e98f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/969446db-6a2e-47bc-a33b-2dd883bfb899.crl X509v3 Authority Key Identifier: keyid:8C:4C:51:45:1B:97:18:EC:29:F6:65:EB:83:73:27:E3:84:C2:00:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899.cer sbgp-ipAddrBlock: critical IPv4: 199.189.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:64:b6:0a:f4:72:09:c5:43:5c:5f:45:7e:e5:05:c7:4d:8e: 40:6f:43:a4:df:c2:91:50:ae:fd:12:8c:4b:74:08:e7:0e:d2: 3f:f9:f9:03:4b:88:6e:ca:e2:d1:07:a3:cf:0e:8a:b1:5d:09: 5d:22:e9:15:b9:d7:17:eb:0e:71:7f:39:7e:31:0e:91:dd:ce: 6c:1c:af:0b:28:35:64:fa:ad:77:82:8f:e6:67:50:54:c3:9f: 22:f4:6a:8b:03:e6:3a:32:b6:38:6b:ec:aa:97:66:f4:46:50: 4a:d8:c9:cb:71:c8:fc:12:a7:4d:aa:74:08:8c:b5:40:b7:19: 82:2e:5b:4c:9d:14:10:f4:16:fb:f5:2e:05:1f:04:cd:32:dd: a6:94:74:eb:b0:ab:a1:d2:48:3a:fc:86:81:6e:73:56:cb:e9: 4d:27:1a:72:ec:75:1c:5a:f6:58:a5:3b:93:a6:88:e8:0c:a1: 52:4a:16:b3:bb:2e:0d:73:e2:f4:d7:61:10:6e:60:7d:87:7a: f2:41:50:ad:08:af:93:15:94:18:6d:b9:ef:cc:94:10:eb:62: 0a:fc:90:cd:f5:33:24:14:ac:3c:00:ef:1b:6e:0f:d7:13:6f: f8:b1:9a:70:1b:c0:8d:92:b3:08:87:b9:86:ac:9f:70:73:a7: 9c:f1:33:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjslojfn7DGcbyhCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTY5NDQ2ZGItNmEyZS00N2JjLWEzM2ItMmRkODgzYmZi ODk5MB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk ZjYyZWVmMzMtYTFmNi00NmRhLWE4NTktNmMxMzU4MmE2ODhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4260WpjhNqINHb7ayAbxxILKIWPhe9rA6EFT b5Zj8te7DQfdZ1yR1P2tDBx5rriL2aD4DkRy9ar2j5w9sPNcDuD0uD29FjGKIsnv 46vhqbWXMAICe0duqbsOAXrdH42esigsWTH3XiYwhVqoVaySHvMFFxlugUIdvexd PfP40tLeV9+CMX/t3Grt4ddBrYbkG42EXD9TEPV7Pqw1YSjWn/y/JoQKZOYIq8LS hQdp3onPbBQaGI2/hYQeJT8HMj/g+1s+NGHze0I8Bd3imh6yvlsO9rGkiXTGXzCL lVwUZb8NR4WKwT1cT+1lRftl2U1OYgk+J1Ub0RASGUje649OWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCKFcQFLhcBXyAwe+DQkVhLeYwWTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85Njk0 NDZkYi02YTJlLTQ3YmMtYTMzYi0yZGQ4ODNiZmI4OTkvOWMwYWI5NmUtMDdmMy0z NDBmLWIwMjYtNDlhN2UyOTdlOThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTY5NDQ2ZGItNmEyZS00N2JjLWEz M2ItMmRkODgzYmZiODk5Lzk2OTQ0NmRiLTZhMmUtNDdiYy1hMzNiLTJkZDg4M2Jm Yjg5OS5jcmwwHwYDVR0jBBgwFoAUjExRRRuXGOwp9mXrg3Mn44TCANcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85Njk0NDZkYi02YTJlLTQ3YmMtYTMzYi0yZGQ4 ODNiZmI4OTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx73MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZktgr0cgnFQ1xfRX7lBcdNjkBvQ6TfwpFQrv0SjEt0COcO0j/5+QNL iG7K4tEHo88OirFdCV0i6RW51xfrDnF/OX4xDpHdzmwcrwsoNWT6rXeCj+ZnUFTD nyL0aosD5joytjhr7KqXZvRGUErYyctxyPwSp02qdAiMtUC3GYIuW0ydFBD0Fvv1 LgUfBM0y3aaUdOuwq6HSSDr8hoFuc1bL6U0nGnLsdRxa9lilO5OmiOgMoVJKFrO7 Lg1z4vTXYRBuYH2HevJBUK0Ir5MVlBhtue/MlBDrYgr8kM31MyQUrDwA7xtuD9cT b/ixmnAbwI2SswiHuYasn3Bzp5zxM+4= -----END CERTIFICATE-----Generated at Sun Apr 6 19:05:05 2025 by rpki-client