$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/88eb8d86-28b3-33c8-8b19-16c7663c11d9.roa File: 88eb8d86-28b3-33c8-8b19-16c7663c11d9.roa (raw, json) Hash identifier: sIjsyDw1mWE/r0dcMpt+pOT5QlqL72kjQPnuIFMt89U= Subject key identifier: 95:12:30:BD:73:23:AF:40:98:66:44:BA:92:06:98:C5:E4:5E:0C:89 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F43285849674EF48BE5F48984AB9B9B00 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/88eb8d86-28b3-33c8-8b19-16c7663c11d9.roa Signing time: Thu 03 Apr 2025 13:01:02 +0000 ROA not before: Thu 03 Apr 2025 13:01:02 +0000 ROA not after: Wed 02 Jul 2025 13:01:02 +0000 asID: 19795 IP address blocks: 199.255.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:67:4e:f4:8b:e5:f4:89:84:ab:9b:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Apr 3 13:01:02 2025 GMT Not After : Jul 2 13:01:02 2025 GMT Subject: CN=9665742f-d244-4ab2-8508-fd922b90ea5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:7a:9f:b7:0f:61:b8:f2:f7:4c:4f:34:c1:62: e5:32:fb:9b:28:a1:c3:55:fc:06:76:b2:e2:19:7e: 08:9e:e6:61:bf:d7:b7:34:71:d4:75:06:7f:9b:26: 04:55:28:de:e7:b3:63:d1:89:e6:77:c1:f2:be:a1: 02:8d:ed:53:4a:6f:ed:64:2f:ed:c6:fc:4b:28:cc: ff:92:6c:93:82:00:05:44:37:3c:61:41:58:4b:fd: 88:1d:44:3d:1a:cb:df:ce:14:c0:43:51:d9:73:19: 09:c0:4b:86:6f:89:f9:91:11:00:fa:f2:dd:69:78: b6:44:5e:41:94:49:b8:f2:31:36:45:4b:62:a7:32: 75:a1:f1:8b:e3:82:d7:69:ff:da:73:dd:79:99:32: bd:cf:50:ec:88:9e:88:b4:a6:0e:aa:95:b6:f0:8a: 97:20:60:11:f0:2b:ae:e8:69:f8:c5:d4:ff:5e:16: 35:5c:e5:28:a5:49:a1:ef:52:a4:e3:e0:3b:91:59: e7:e1:91:07:d0:47:c2:53:db:05:86:ce:ba:aa:6f: bb:80:34:ce:20:dc:5c:3b:3f:46:54:89:ab:91:43: 44:a6:89:1e:81:00:86:a7:3f:13:79:33:a0:24:4e: 7e:29:dd:b7:e4:c4:71:f8:d0:bf:bc:ec:67:ca:ad: 07:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:12:30:BD:73:23:AF:40:98:66:44:BA:92:06:98:C5:E4:5E:0C:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/88eb8d86-28b3-33c8-8b19-16c7663c11d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 199.255.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:1e:32:c1:2d:80:00:40:90:94:f2:06:69:f4:ec:a9:de:a0: 86:bc:cf:1e:03:92:1a:cd:3d:5e:fe:bd:29:59:83:ba:6c:3c: 08:a8:4a:cc:65:7a:f8:fb:de:f1:ff:6b:95:89:e5:30:58:25: f4:44:24:e9:fe:2e:56:96:d3:5c:1a:53:1f:64:9d:eb:94:9f: 95:d3:99:3c:13:78:e3:78:8e:cd:81:f1:bc:90:45:ec:df:4f: a7:86:3d:dc:4e:26:58:4d:60:3f:0f:1a:f5:2c:c8:2e:68:45: 86:8c:bc:73:17:35:71:d9:cc:f7:3b:da:3b:42:10:f0:b0:be: be:fd:da:90:84:3a:06:cd:c9:9d:c4:7c:5a:91:d8:3c:93:09: 04:42:15:2c:e1:74:71:6d:7c:df:0f:5d:93:d4:a2:f2:6e:6e: 1a:7e:b1:6c:fe:c7:4e:b1:02:4e:00:51:7a:3a:a2:9f:cb:14: a1:9c:4c:42:aa:a6:d5:4a:22:45:b2:a9:a1:31:bb:b5:2c:4c: 91:19:0e:6a:a5:ee:af:3d:24:db:96:b9:f7:8d:95:ea:f7:e0: b6:72:34:95:8f:19:e8:6d:28:7c:1f:a9:79:9f:10:03:58:ae: cb:18:46:01:1b:3a:46:20:c0:79:52:00:e7:3b:0d:82:13:8d: d4:9c:80:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElnTvSL5fSJhKubmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDQwMzEzMDEwMloXDTI1MDcwMjEzMDEwMlowLzEtMCsGA1UEAxMk OTY2NTc0MmYtZDI0NC00YWIyLTg1MDgtZmQ5MjJiOTBlYTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3qftw9huPL3TE80wWLlMvubKKHDVfwGdrLi GX4InuZhv9e3NHHUdQZ/myYEVSje57Nj0Ynmd8HyvqECje1TSm/tZC/txvxLKMz/ kmyTggAFRDc8YUFYS/2IHUQ9GsvfzhTAQ1HZcxkJwEuGb4n5kREA+vLdaXi2RF5B lEm48jE2RUtipzJ1ofGL44LXaf/ac915mTK9z1DsiJ6ItKYOqpW28IqXIGAR8Cuu 6Gn4xdT/XhY1XOUopUmh71Kk4+A7kVnn4ZEH0EfCU9sFhs66qm+7gDTOINxcOz9G VImrkUNEpokegQCGpz8TeTOgJE5+Kd235MRx+NC/vOxnyq0HuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJUSML1zI69AmGZEupIGmMXkXgyJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvODhlYjhkODYtMjhiMy0z M2M4LThiMTktMTZjNzY2M2MxMWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/8hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJIeMsEtgABAkJTyBmn07KneoIa8zx4DkhrNPV7+vSlZg7psPAioSsxl evj73vH/a5WJ5TBYJfREJOn+LlaW01waUx9kneuUn5XTmTwTeON4js2B8byQRezf T6eGPdxOJlhNYD8PGvUsyC5oRYaMvHMXNXHZzPc72jtCEPCwvr792pCEOgbNyZ3E fFqR2DyTCQRCFSzhdHFtfN8PXZPUovJubhp+sWz+x06xAk4AUXo6op/LFKGcTEKq ptVKIkWyqaExu7UsTJEZDmql7q89JNuWufeNler34LZyNJWPGehtKHwfqXmfEANY rssYRgEbOkYgwHlSAOc7DYITjdScgJE= -----END CERTIFICATE-----Generated at Sat Apr 12 14:54:15 2025 by rpki-client