$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e66840c2-72e8-367f-bff1-3dc2a9b0557d.roa File: e66840c2-72e8-367f-bff1-3dc2a9b0557d.roa (raw, json) Hash identifier: ltj2NDTgqcF8e0aXCvzj8UVwHlqAS58Mwt/bAg9Kr7c= Subject key identifier: 0B:75:EB:53:96:EB:01:1A:6E:33:4D:B4:2C:1D:49:B1:B2:B6:41:E5 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584961B98AAB327EC5B520E2DE00 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e66840c2-72e8-367f-bff1-3dc2a9b0557d.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 14618 IP address blocks: 199.255.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:8a:ab:32:7e:c5:b5:20:e2:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=318cfcfc-f950-432c-8545-0bd0f3b2e6d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:6a:b1:59:a5:e5:e9:bb:82:7f:da:79:fc:d7: a6:22:67:44:c1:cb:76:34:df:6a:88:c3:5f:00:af: 45:20:6b:e4:b3:63:4c:93:ee:e3:51:2d:f5:35:cb: 68:38:c7:d9:e6:b4:23:7a:5c:e3:22:3b:7d:a6:be: 67:a0:39:e0:e9:7b:3b:c8:3e:77:9d:f0:be:1e:12: 23:53:d1:06:69:d1:90:f8:a6:15:1d:96:29:a3:e6: a1:39:66:33:ca:31:fa:93:6a:b5:5f:30:2e:1d:d5: f9:3f:1f:6a:45:9b:b0:60:d5:ff:27:e5:8d:67:39: d8:77:b4:53:79:c0:db:1b:0c:c8:77:4a:9e:c7:b0: c5:57:31:ae:81:e8:f8:75:b9:97:82:c5:fe:77:99: a7:35:ad:ce:9c:3e:ca:d3:90:01:96:6c:ff:b6:e0: 57:cc:f8:1d:dd:30:13:6e:3c:81:27:90:02:af:93: e2:2d:ef:90:66:ce:ea:63:58:a9:ed:23:2b:fd:5b: b4:f1:e4:5b:60:59:34:39:2a:cb:8e:be:34:af:b8: df:d1:10:47:a9:e6:e7:aa:23:55:01:c4:a7:c8:ac: f8:21:07:ab:ed:4d:b5:99:b7:d1:45:3b:cf:d8:cc: 9e:ab:a2:f8:a7:86:81:3d:0e:f6:1e:91:1c:2f:70: 82:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:75:EB:53:96:EB:01:1A:6E:33:4D:B4:2C:1D:49:B1:B2:B6:41:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e66840c2-72e8-367f-bff1-3dc2a9b0557d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 199.255.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:56:ef:be:3e:b5:f6:15:5a:ad:7d:e9:92:10:14:df:fc:63: fe:98:ab:49:02:d2:db:c9:7a:79:aa:52:3b:5f:c6:2a:63:bf: ba:45:03:22:b5:0d:2f:7d:b3:8b:71:88:c1:ea:d6:cd:e2:e4: fa:98:81:2a:b3:c8:75:a4:d5:e8:a8:0c:e5:32:89:8a:d0:ed: 80:02:59:86:ec:df:45:22:48:01:de:ae:2e:46:ef:81:12:ad: b3:5f:9e:d3:1f:f5:fd:7f:2e:d4:ea:34:2b:ea:b2:97:ff:bf: d1:ed:9a:64:e3:89:f9:16:2c:ba:ab:40:f1:d3:a4:90:a5:8f: 14:f2:97:8d:f9:f1:7c:1c:af:f5:92:b7:29:3f:b1:fc:ee:07: 07:73:65:1f:4a:e5:a4:c4:5e:5c:6e:96:21:51:72:88:70:89: 97:b6:2b:b4:ba:a8:c1:cc:0e:34:b5:71:08:4e:78:c8:f6:04: 02:c6:d7:07:d5:bb:f4:90:ec:28:7b:f9:41:de:f1:aa:38:a4: d0:09:9e:fa:be:ff:41:d4:2e:a4:3f:d8:ee:dd:ea:a3:c5:3d: 2f:ed:f1:fa:8b:dc:c5:b7:d0:22:86:1d:e7:44:1b:1a:7d:0a: 56:a1:22:00:78:bb:8a:93:2f:ec:d4:a5:45:d5:29:84:3a:37: 56:7b:ae:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElhuYqrMn7FtSDi3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk MzE4Y2ZjZmMtZjk1MC00MzJjLTg1NDUtMGJkMGYzYjJlNmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWqxWaXl6buCf9p5/NemImdEwct2NN9qiMNf AK9FIGvks2NMk+7jUS31NctoOMfZ5rQjelzjIjt9pr5noDng6Xs7yD53nfC+HhIj U9EGadGQ+KYVHZYpo+ahOWYzyjH6k2q1XzAuHdX5Px9qRZuwYNX/J+WNZznYd7RT ecDbGwzId0qex7DFVzGugej4dbmXgsX+d5mnNa3OnD7K05ABlmz/tuBXzPgd3TAT bjyBJ5ACr5PiLe+QZs7qY1ip7SMr/Vu08eRbYFk0OSrLjr40r7jf0RBHqebnqiNV AcSnyKz4IQer7U21mbfRRTvP2Myeq6L4p4aBPQ72HpEcL3CCUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAt161OW6wEabjNNtCwdSbGytkHlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvZTY2ODQwYzItNzJlOC0z NjdmLWJmZjEtM2RjMmE5YjA1NTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/8gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNW774+tfYVWq196ZIQFN/8Y/6Yq0kC0tvJenmqUjtfxipjv7pFAyK1 DS99s4txiMHq1s3i5PqYgSqzyHWk1eioDOUyiYrQ7YACWYbs30UiSAHeri5G74ES rbNfntMf9f1/LtTqNCvqspf/v9HtmmTjifkWLLqrQPHTpJCljxTyl4358Xwcr/WS tyk/sfzuBwdzZR9K5aTEXlxuliFRcohwiZe2K7S6qMHMDjS1cQhOeMj2BALG1wfV u/SQ7Ch7+UHe8ao4pNAJnvq+/0HULqQ/2O7d6qPFPS/t8fqL3MW30CKGHedEGxp9 ClahIgB4u4qTL+zUpUXVKYQ6N1Z7rmU= -----END CERTIFICATE-----Generated at Fri Apr 4 23:32:43 2025 by rpki-client