$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/e9c12cb6-83c6-36c7-9163-89ab2f55a7fa.roa File: e9c12cb6-83c6-36c7-9163-89ab2f55a7fa.roa (raw, json) Hash identifier: iR/IAg3sM2kBVLX3Ebu1fyNNzVdGLt0JMuOKwvAx7vs= Subject key identifier: 2F:AD:A3:DC:5F:25:7C:14:E5:60:9B:6B:A0:73:67:12:3C:A4:0C:C2 Certificate issuer: /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Certificate serial: 010D0C9F43285848F65BE232D75FE8C18F94D480 Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/e9c12cb6-83c6-36c7-9163-89ab2f55a7fa.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 12129 IP address blocks: 199.231.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:e2:32:d7:5f:e8:c1:8f:94:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=219fce60-f361-402e-b4d7-44873b024b29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:67:a8:0d:44:f3:c6:b1:f8:87:65:70:ba:74: 06:47:f9:40:a1:86:3e:02:ee:9e:63:4b:9d:bd:d3: 0c:24:8e:3b:3d:02:58:8d:75:ea:8c:0a:ee:7d:e7: bd:49:f6:7a:8f:58:d8:af:fe:b5:d8:ab:31:c3:4d: 20:92:a8:5e:0b:4f:af:6a:1c:c9:ad:79:4a:91:e5: 45:82:4d:f3:ee:0c:39:c0:70:8e:a6:84:a8:40:77: 88:f6:05:b7:09:39:80:48:ec:41:f9:e0:58:1d:a2: d4:4d:ee:53:c5:73:ee:94:24:81:6f:b2:99:bd:9b: ba:13:3d:3e:8f:bf:33:84:63:12:8e:7a:81:86:47: e6:07:70:d4:27:fb:d2:86:0b:bb:55:3b:bb:23:de: 7e:d9:9f:dd:c6:b7:ec:68:99:9b:cc:fa:93:8f:0e: 7b:f9:38:42:1f:0e:a8:9a:94:b4:c7:1d:27:67:04: 79:ab:cd:94:b1:12:58:21:d6:84:ec:63:db:2d:57: dc:e5:6c:e2:67:da:1b:32:f7:57:42:8f:61:5d:ff: a2:e7:bd:96:d9:3b:ca:75:2f:d7:1a:c1:1a:78:bc: ca:78:61:2d:7e:bb:a4:01:96:c0:58:c8:d8:e1:08: e2:18:a4:eb:98:28:f6:d4:fd:70:d4:a0:bc:79:67: 7f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:AD:A3:DC:5F:25:7C:14:E5:60:9B:6B:A0:73:67:12:3C:A4:0C:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/e9c12cb6-83c6-36c7-9163-89ab2f55a7fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl X509v3 Authority Key Identifier: keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer sbgp-ipAddrBlock: critical IPv4: 199.231.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:ec:44:fb:05:4e:da:51:c9:c2:f8:6c:91:6a:59:86:7d:a5: 3b:6a:2c:5c:7f:5a:39:0e:ae:9f:1e:a9:19:46:e1:39:3f:cd: b4:67:33:54:5a:79:d2:74:9f:77:e8:b5:44:ff:48:6e:3a:eb: e8:bb:27:28:e8:cf:59:dc:cf:a3:f5:cb:8e:7a:6e:29:de:ec: c3:b0:c5:ef:f0:c9:47:37:f7:32:14:b8:d2:50:63:a9:02:98: 93:56:49:55:ce:f9:69:ad:23:7d:53:b5:2a:82:04:3d:00:80: eb:a4:7a:b8:39:5c:9e:bb:e0:a4:00:71:f5:c7:e0:c9:3d:c9: 28:5a:64:e7:14:a7:d1:39:9c:ab:38:c5:df:35:a1:7b:be:63: 74:a2:e0:75:02:a8:a9:17:b0:4d:43:bd:64:40:12:d7:59:96: 3e:f8:ae:3d:4c:4a:1a:23:42:99:eb:88:69:40:31:9b:55:dd: 52:84:d5:16:45:22:9d:77:4e:fa:e5:ad:81:0d:05:6a:67:b7: 6f:9d:fd:6c:c1:04:e0:ad:82:d8:f0:86:ad:b8:54:31:1d:87: e1:e1:ab:35:35:54:e9:2b:a5:0e:59:04:63:9b:7e:7f:85:e1: 25:6f:dc:cf:da:d6:ee:8a:68:8e:3a:03:97:9a:43:cc:30:ae: da:48:59:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W+Iy11/owY+U1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyNjk3NmUtZmJmYi00YWQ4LWEyOGEtYTI1ZjViMDY3 MWRlMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk MjE5ZmNlNjAtZjM2MS00MDJlLWI0ZDctNDQ4NzNiMDI0YjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmeoDUTzxrH4h2VwunQGR/lAoYY+Au6eY0ud vdMMJI47PQJYjXXqjArufee9SfZ6j1jYr/612Ksxw00gkqheC0+vahzJrXlKkeVF gk3z7gw5wHCOpoSoQHeI9gW3CTmASOxB+eBYHaLUTe5TxXPulCSBb7KZvZu6Ez0+ j78zhGMSjnqBhkfmB3DUJ/vShgu7VTu7I95+2Z/dxrfsaJmbzPqTjw57+ThCHw6o mpS0xx0nZwR5q82UsRJYIdaE7GPbLVfc5WziZ9obMvdXQo9hXf+i572W2TvKdS/X GsEaeLzKeGEtfrukAZbAWMjY4QjiGKTrmCj21P1w1KC8eWd/+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC+to9xfJXwU5WCba6BzZxI8pAzCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2 OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIwNjcxZGUvZTljMTJjYjYtODNjNi0z NmM3LTkxNjMtODlhYjJmNTVhN2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyNjk3NmUtZmJmYi00YWQ4LWEy OGEtYTI1ZjViMDY3MWRlL2M0MjY5NzZlLWZiZmItNGFkOC1hMjhhLWEyNWY1YjA2 NzFkZS5jcmwwHwYDVR0jBBgwFoAUUDCuGBTUosBlcB/1dCB21IYNZG8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVm NWIwNjcxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx+c0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABTsRPsFTtpRycL4bJFqWYZ9pTtqLFx/WjkOrp8eqRlG4Tk/zbRnM1Ra edJ0n3fotUT/SG466+i7Jyjoz1ncz6P1y456bine7MOwxe/wyUc39zIUuNJQY6kC mJNWSVXO+WmtI31TtSqCBD0AgOukerg5XJ674KQAcfXH4Mk9yShaZOcUp9E5nKs4 xd81oXu+Y3Si4HUCqKkXsE1DvWRAEtdZlj74rj1MShojQpnriGlAMZtV3VKE1RZF Ip13TvrlrYENBWpnt2+d/WzBBOCtgtjwhq24VDEdh+HhqzU1VOkrpQ5ZBGObfn+F 4SVv3M/a1u6KaI46A5eaQ8wwrtpIWV8= -----END CERTIFICATE-----Generated at Fri Mar 14 14:02:46 2025 by rpki-client