$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/808f5071-862a-3086-95ab-72c8a5bdeaa3.roa File: 808f5071-862a-3086-95ab-72c8a5bdeaa3.roa (raw, json) Hash identifier: GppXkdAGmtY1xAemGG9d6ZPi48QN7RGETHa3fiKDS14= Subject key identifier: 35:EC:44:11:5C:BD:9F:27:08:0C:9A:D5:6B:5F:6B:37:7E:50:37:9E Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584961B98AC2869A354ADF4B1680 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/808f5071-862a-3086-95ab-72c8a5bdeaa3.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 16509 IP address blocks: 199.255.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:8a:c2:86:9a:35:4a:df:4b:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=441644a6-bf0b-48f4-a499-4df8ebb94ea0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c4:5f:35:bf:94:0a:b4:88:b5:22:e1:07:6a: 81:f8:6a:91:b2:97:a5:40:c0:47:c5:8e:d0:b9:79: a0:6a:06:a7:2a:bd:6b:4c:9b:c0:87:f0:b2:f5:8e: 12:18:4c:6c:fe:7f:f7:46:3b:85:09:f9:ce:52:6b: 75:d6:c0:eb:87:92:4b:cd:9a:fd:10:2c:d6:8b:60: 02:72:1b:a8:3a:85:88:59:80:b6:40:0e:34:f1:71: ee:31:a7:a6:c2:fc:53:4a:11:88:f6:a5:b6:1c:d2: 5c:a9:ab:ee:14:10:51:76:9c:cc:b9:e1:94:56:00: 04:ca:cc:be:31:20:0c:37:97:9f:c9:52:fc:bf:27: c9:b8:10:f1:3a:a7:9a:45:a6:d9:03:5d:2b:40:c5: e9:33:a3:d7:39:e4:af:92:a3:6d:32:92:f2:44:e3: 0d:d3:bc:38:2a:bf:6f:ea:d7:5a:4b:d8:11:61:a8: db:8a:b5:24:4e:aa:7e:1d:3e:d3:e1:fe:6b:23:80: 37:e6:50:cd:e1:72:c8:22:a3:5e:c4:25:f0:83:63: 4d:81:db:f6:75:67:fc:48:d3:17:18:94:17:ae:87: b1:a2:4c:d6:76:c9:bc:b2:a7:2f:c8:69:5f:80:91: bc:5a:47:22:20:1c:90:6b:b3:16:8a:36:ed:fc:01: 1a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:EC:44:11:5C:BD:9F:27:08:0C:9A:D5:6B:5F:6B:37:7E:50:37:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/808f5071-862a-3086-95ab-72c8a5bdeaa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 199.255.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:82:59:5c:b8:50:b4:42:1b:76:d2:cb:13:76:0c:0d:2c:7b: 5b:78:3f:13:9b:eb:7d:a8:31:d2:f3:14:c8:fd:72:5b:f3:7d: 74:e2:70:e0:be:bc:20:fc:e2:4e:93:07:7b:6d:56:82:4c:74: 00:af:51:4f:75:dd:65:8f:35:37:4f:7b:3b:66:4f:94:51:99: 6a:46:81:93:3a:6e:f8:46:a7:16:54:68:1e:19:20:65:e4:19: 43:42:6d:6e:2d:dd:44:33:55:6c:3e:df:f7:08:42:cb:f7:17: 48:a7:1c:d6:4d:c7:ce:68:b1:b9:f9:77:52:7a:46:50:8a:74: c6:b9:85:8c:71:09:ef:75:ae:9e:38:32:10:09:0c:88:49:a6: 2c:0a:8c:8f:61:ac:6d:cc:e7:3e:71:1b:a5:0f:33:7e:bd:d2: f5:8e:ea:a8:f0:a6:b3:e0:c7:64:26:46:0f:b2:2c:6f:b2:f7: 6f:99:7c:58:c3:ec:e5:1c:35:cb:69:ad:f5:73:d1:13:ed:1b: 61:96:41:60:1f:61:cf:fa:e5:2a:93:1c:51:0b:cc:cd:a2:6c: 90:27:74:81:e9:77:3c:96:25:47:9d:66:9b:40:d0:7a:07:3c: 43:b4:78:74:99:f7:f4:50:4e:5e:74:41:46:aa:12:b0:75:62: db:ba:b9:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElhuYrChpo1St9LFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk NDQxNjQ0YTYtYmYwYi00OGY0LWE0OTktNGRmOGViYjk0ZWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMRfNb+UCrSItSLhB2qB+GqRspelQMBHxY7Q uXmgaganKr1rTJvAh/Cy9Y4SGExs/n/3RjuFCfnOUmt11sDrh5JLzZr9ECzWi2AC chuoOoWIWYC2QA408XHuMaemwvxTShGI9qW2HNJcqavuFBBRdpzMueGUVgAEysy+ MSAMN5efyVL8vyfJuBDxOqeaRabZA10rQMXpM6PXOeSvkqNtMpLyROMN07w4Kr9v 6tdaS9gRYajbirUkTqp+HT7T4f5rI4A35lDN4XLIIqNexCXwg2NNgdv2dWf8SNMX GJQXroexokzWdsm8sqcvyGlfgJG8WkciIByQa7MWijbt/AEaqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDXsRBFcvZ8nCAya1Wtfazd+UDeeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvODA4ZjUwNzEtODYyYS0z MDg2LTk1YWItNzJjOGE1YmRlYWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/8gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGyCWVy4ULRCG3bSyxN2DA0se1t4PxOb632oMdLzFMj9clvzfXTicOC+ vCD84k6TB3ttVoJMdACvUU913WWPNTdPeztmT5RRmWpGgZM6bvhGpxZUaB4ZIGXk GUNCbW4t3UQzVWw+3/cIQsv3F0inHNZNx85osbn5d1J6RlCKdMa5hYxxCe91rp44 MhAJDIhJpiwKjI9hrG3M5z5xG6UPM3690vWO6qjwprPgx2QmRg+yLG+y92+ZfFjD 7OUcNctprfVz0RPtG2GWQWAfYc/65SqTHFELzM2ibJAndIHpdzyWJUedZptA0HoH PEO0eHSZ9/RQTl50QUaqErB1Ytu6udY= -----END CERTIFICATE-----Generated at Sat Apr 19 11:36:49 2025 by rpki-client