$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7/838643d5-7ffe-38bf-b51f-5afdcd2a55fe.roa File: 838643d5-7ffe-38bf-b51f-5afdcd2a55fe.roa (raw, json) Hash identifier: ukYav+euB6UkWmztHjx2y9ZBSjCKdUaB9W6CrHN191E= Subject key identifier: 52:8E:B5:EC:77:EF:DA:B9:7C:5B:6F:F0:EC:27:7A:AC:64:29:D4:8A Certificate issuer: /CN=df94af30-a8e8-42b4-9e43-649437c0cac7 Certificate serial: 010D0C9F432858492CAE75DF742D38DD8FE57C00 Authority key identifier: 4A:55:61:BC:24:00:53:15:DC:9F:48:CF:55:4F:D6:D8:8A:E2:FC:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7/838643d5-7ffe-38bf-b51f-5afdcd2a55fe.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 397681 IP address blocks: 192.219.99.0/24 maxlen: 24 198.168.2.0/24 maxlen: 24 199.202.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7/df94af30-a8e8-42b4-9e43-649437c0cac7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7/df94af30-a8e8-42b4-9e43-649437c0cac7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:75:df:74:2d:38:dd:8f:e5:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df94af30-a8e8-42b4-9e43-649437c0cac7 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=71a5ad2b-d5de-4045-ba6a-4cd336f0e8ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:09:13:9e:19:09:05:30:07:00:3e:fd:f5:4a: 8b:bc:39:88:ea:95:5a:14:f3:51:3f:45:c9:cd:22: 60:0c:80:84:de:56:b2:88:59:e6:4c:e2:b9:01:04: ad:c4:7b:fe:4b:22:91:bf:6c:62:f7:a1:33:02:64: e9:e4:b5:62:fe:2d:32:e5:e3:37:35:97:41:0c:a9: a7:17:d7:4d:bf:bb:a3:8a:bd:2b:2c:d9:16:9a:2d: 38:5c:01:ae:5e:85:90:1c:6d:5a:df:26:98:df:cc: 81:f6:a4:10:0a:e9:f0:50:cd:7d:97:aa:c9:28:8a: 0e:4d:aa:c2:47:b2:7f:f1:63:c3:76:68:0d:d3:1c: d7:94:43:9f:a5:73:d3:6a:36:fc:d1:79:66:4a:b6: 15:1b:d5:de:e5:29:13:80:ba:94:80:00:ac:95:0d: a6:3f:dd:5d:c7:c3:e4:fc:fb:0d:34:b8:7d:84:15: 0a:a2:fd:68:63:08:af:39:e7:e6:d5:a9:b9:0e:da: 05:85:ea:61:11:83:21:a2:d5:e2:98:2b:8b:74:1e: 34:3d:2c:c3:58:a1:5d:67:3d:a8:a9:ee:fe:2b:79: 7b:e5:01:85:c8:fe:35:fd:e0:6d:a9:a8:a6:ed:3c: 32:0b:1c:0a:1e:6e:b3:54:e7:17:86:d7:b0:9f:54: 46:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:8E:B5:EC:77:EF:DA:B9:7C:5B:6F:F0:EC:27:7A:AC:64:29:D4:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7/838643d5-7ffe-38bf-b51f-5afdcd2a55fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7/df94af30-a8e8-42b4-9e43-649437c0cac7.crl X509v3 Authority Key Identifier: keyid:4A:55:61:BC:24:00:53:15:DC:9F:48:CF:55:4F:D6:D8:8A:E2:FC:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7.cer sbgp-ipAddrBlock: critical IPv4: 192.219.99.0/24 198.168.2.0/24 199.202.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:32:6f:2d:59:92:8d:7d:10:2e:45:39:03:40:04:7e:12:34: 1e:e4:08:8f:44:2c:98:8b:b5:11:ff:e4:6e:0f:fb:93:d4:a2: 7c:a1:b5:4d:9c:04:bd:a7:24:f9:c4:d9:54:4c:78:c2:c9:6c: cf:41:ba:92:2a:7a:57:56:f5:20:da:42:7c:f2:95:2a:d3:a0: 69:cc:b0:59:ab:75:39:6a:1f:9b:d4:df:cf:02:82:30:b0:48: cd:75:52:08:3d:f8:33:fc:3f:58:0e:b7:6a:97:40:35:ba:2d: 5c:4d:78:7f:a8:cd:41:6f:72:a7:45:6d:69:74:04:3f:d2:ee: f0:aa:3b:08:1f:7f:c7:f0:0c:51:e6:03:74:00:95:af:cf:dd: ff:ab:65:c6:18:30:f0:bc:75:e4:b4:0a:cd:40:43:82:22:61: a4:95:09:ff:ea:ef:7c:60:91:bc:5d:1d:fa:7d:35:83:3b:6e: b7:f7:70:ac:b5:b6:fd:ce:ca:dc:a5:36:fd:18:b2:19:c9:60: 2a:88:36:84:7e:7a:ad:d5:84:62:44:e5:36:15:49:67:8c:e2: 26:1e:47:51:12:a0:9e:82:12:02:3a:35:84:d5:1e:ad:be:b1: 6f:4f:a0:2f:e8:8d:6f:92:f9:c2:33:4b:e8:e1:22:f5:5d:2c: cd:1f:05:82 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEksrnXfdC043Y/lfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY5NGFmMzAtYThlOC00MmI0LTllNDMtNjQ5NDM3YzBj YWM3MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk NzFhNWFkMmItZDVkZS00MDQ1LWJhNmEtNGNkMzM2ZjBlOGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgkTnhkJBTAHAD799UqLvDmI6pVaFPNRP0XJ zSJgDICE3layiFnmTOK5AQStxHv+SyKRv2xi96EzAmTp5LVi/i0y5eM3NZdBDKmn F9dNv7ujir0rLNkWmi04XAGuXoWQHG1a3yaY38yB9qQQCunwUM19l6rJKIoOTarC R7J/8WPDdmgN0xzXlEOfpXPTajb80XlmSrYVG9Xe5SkTgLqUgACslQ2mP91dx8Pk /PsNNLh9hBUKov1oYwivOefm1am5DtoFhephEYMhotXimCuLdB40PSzDWKFdZz2o qe7+K3l75QGFyP41/eBtqaim7TwyCxwKHm6zVOcXhtewn1RGRQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFFKOtex379q5fFtv8OwneqxkKdSKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kZjk0 YWYzMC1hOGU4LTQyYjQtOWU0My02NDk0MzdjMGNhYzcvODM4NjQzZDUtN2ZmZS0z OGJmLWI1MWYtNWFmZGNkMmE1NWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGY5NGFmMzAtYThlOC00MmI0LTll NDMtNjQ5NDM3YzBjYWM3L2RmOTRhZjMwLWE4ZTgtNDJiNC05ZTQzLTY0OTQzN2Mw Y2FjNy5jcmwwHwYDVR0jBBgwFoAUSlVhvCQAUxXcn0jPVU/W2Iri/LswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kZjk0YWYzMC1hOGU4LTQyYjQtOWU0My02NDk0 MzdjMGNhYzcuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwNtjAwQA xqgCAwQAx8pbMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAMMyby1Zko19EC5FOQNABH4SNB7kCI9ELJiLtRH/ 5G4P+5PUonyhtU2cBL2nJPnE2VRMeMLJbM9BupIqeldW9SDaQnzylSrToGnMsFmr dTlqH5vU388CgjCwSM11Ugg9+DP8P1gOt2qXQDW6LVxNeH+ozUFvcqdFbWl0BD/S 7vCqOwgff8fwDFHmA3QAla/P3f+rZcYYMPC8deS0Cs1AQ4IiYaSVCf/q73xgkbxd Hfp9NYM7brf3cKy1tv3OytylNv0YshnJYCqINoR+eq3VhGJE5TYVSWeM4iYeR1ES oJ6CEgI6NYTVHq2+sW9PoC/ojW+S+cIzS+jhIvVdLM0fBYI= -----END CERTIFICATE-----Generated at Fri Mar 14 09:40:42 2025 by rpki-client