$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/5a0ae7fa-e747-3e80-bbce-2e0f5ad57f24.roa File: 5a0ae7fa-e747-3e80-bbce-2e0f5ad57f24.roa (raw, json) Hash identifier: SiglAnI+JSdwTbo9Au8EUwxg+YuVChIFX3VvQ4kL9FQ= Subject key identifier: BE:84:27:D6:05:42:A2:CB:A5:54:03:55:40:CE:5A:07:D2:AF:23:EA Certificate issuer: /CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Certificate serial: 010D0C9F432858490021481DE753BD6384DAB080 Authority key identifier: 5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/5a0ae7fa-e747-3e80-bbce-2e0f5ad57f24.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 21766 IP address blocks: 199.189.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:48:1d:e7:53:bd:63:84:da:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=3ae326f3-b3ac-4823-a099-97646c27a63b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:60:a9:a1:3b:bf:6d:4e:6e:ae:a3:4b:de:c8: 79:25:d5:bc:b2:e8:d6:f3:ff:fa:82:09:17:fa:9a: e7:ed:4f:a3:99:dc:8e:23:92:b6:28:e2:fe:5b:64: e1:7a:d2:36:55:28:83:b8:75:e5:17:49:12:82:4f: 3a:ab:15:e6:a6:e1:99:b2:78:e5:e5:04:3e:48:fe: bf:a6:85:30:4c:1e:ca:99:4c:ef:64:81:d6:72:14: 95:1a:13:9b:24:42:86:81:64:8c:8e:f9:8c:1b:a8: 34:91:7b:3b:6d:10:9b:89:16:b0:e8:4c:fa:b6:4e: 17:c0:c3:d4:53:b8:55:52:74:64:cc:e1:c1:d8:42: c4:97:9b:52:33:16:f6:f0:36:12:1d:5e:9f:6b:8a: 6a:21:85:71:6f:ee:f8:05:9e:f4:48:54:d8:3c:6c: 4d:14:4c:a0:37:29:49:a0:4f:20:f1:7d:60:2d:e4: 22:f1:1b:fe:51:ff:84:cb:a4:82:fd:04:4c:97:ac: 7d:19:01:fe:d0:81:f7:ae:e2:22:dd:0f:a9:b6:17: 15:6c:16:32:a0:03:b2:37:93:72:5c:e4:5f:92:b3: bf:fe:e8:6a:f5:65:9b:31:dd:7b:f1:0c:fa:49:9c: ce:6e:2e:d6:b6:13:8f:d6:25:8d:9e:4e:28:a9:e2: 3a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:84:27:D6:05:42:A2:CB:A5:54:03:55:40:CE:5A:07:D2:AF:23:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/5a0ae7fa-e747-3e80-bbce-2e0f5ad57f24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl X509v3 Authority Key Identifier: keyid:5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer sbgp-ipAddrBlock: critical IPv4: 199.189.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:4c:bd:09:7d:52:5d:be:f4:0a:75:36:52:b6:30:09:3e:1a: b7:83:18:5c:e4:19:9e:3a:bd:91:a6:9a:00:2d:72:35:df:a5: 64:85:40:98:d5:bf:6b:7e:86:9b:e4:33:dd:6f:a3:48:58:ea: 07:ac:7b:20:94:77:0c:ee:b0:3b:2a:62:57:17:94:e7:f3:ef: c1:b1:fe:3a:8e:6b:4e:6f:ff:41:61:31:db:d7:09:d1:f7:99: 58:0a:cc:7b:44:be:d4:67:70:fa:27:dc:dd:cb:f2:d4:5b:c7: c7:4c:75:9f:d9:03:cc:37:f7:22:f4:42:07:8f:45:da:82:da: 30:87:b8:b5:47:06:29:67:31:21:4b:a5:7d:a7:c6:7a:0a:6a: 95:ab:2d:ce:56:9f:8a:5e:54:eb:58:a3:08:87:1c:2e:a5:73: b8:6d:4f:e8:a3:9a:f1:3f:86:23:c3:c9:52:cc:3f:b5:b2:85: 8d:3f:14:68:29:20:4c:09:3e:4c:f5:38:1c:14:2d:cc:57:5d: 5d:75:cd:40:39:b0:39:9f:2c:da:69:d6:38:51:da:01:ee:3e: 64:3c:e2:dc:4f:e4:81:fd:86:26:1c:a2:92:05:02:60:5f:3d: 28:ca:61:23:b9:64:c2:24:de:94:81:3a:b2:6a:81:3a:fa:74: 9b:e9:d7:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAIUgd51O9Y4TasIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTdkN2YxNGUtNzJjNC00N2U0LWFkMDYtYTFiNzJmOTRj N2IxMB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk M2FlMzI2ZjMtYjNhYy00ODIzLWEwOTktOTc2NDZjMjdhNjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2CpoTu/bU5urqNL3sh5JdW8sujW8//6ggkX +prn7U+jmdyOI5K2KOL+W2ThetI2VSiDuHXlF0kSgk86qxXmpuGZsnjl5QQ+SP6/ poUwTB7KmUzvZIHWchSVGhObJEKGgWSMjvmMG6g0kXs7bRCbiRaw6Ez6tk4XwMPU U7hVUnRkzOHB2ELEl5tSMxb28DYSHV6fa4pqIYVxb+74BZ70SFTYPGxNFEygNylJ oE8g8X1gLeQi8Rv+Uf+Ey6SC/QRMl6x9GQH+0IH3ruIi3Q+pthcVbBYyoAOyN5Ny XORfkrO//uhq9WWbMd178Qz6SZzObi7WthOP1iWNnk4oqeI6FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL6EJ9YFQqLLpVQDVUDOWgfSryPqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3 ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3MmY5NGM3YjEvNWEwYWU3ZmEtZTc0Ny0z ZTgwLWJiY2UtMmUwZjVhZDU3ZjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTdkN2YxNGUtNzJjNC00N2U0LWFk MDYtYTFiNzJmOTRjN2IxL2E3ZDdmMTRlLTcyYzQtNDdlNC1hZDA2LWExYjcyZjk0 YzdiMS5jcmwwHwYDVR0jBBgwFoAUXtwOAtpu5BW/4iOR5NyjJ1ELeg0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3 MmY5NGM3YjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx73wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAItMvQl9Ul2+9Ap1NlK2MAk+GreDGFzkGZ46vZGmmgAtcjXfpWSFQJjV v2t+hpvkM91vo0hY6geseyCUdwzusDsqYlcXlOfz78Gx/jqOa05v/0FhMdvXCdH3 mVgKzHtEvtRncPon3N3L8tRbx8dMdZ/ZA8w39yL0QgePRdqC2jCHuLVHBilnMSFL pX2nxnoKapWrLc5Wn4peVOtYowiHHC6lc7htT+ijmvE/hiPDyVLMP7WyhY0/FGgp IEwJPkz1OBwULcxXXV11zUA5sDmfLNpp1jhR2gHuPmQ84txP5IH9hiYcopIFAmBf PSjKYSO5ZMIk3pSBOrJqgTr6dJvp144= -----END CERTIFICATE-----Generated at Sat Apr 12 01:38:59 2025 by rpki-client