$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/9a647916-d419-3dbb-868d-b7491eb1551d.roa File: 9a647916-d419-3dbb-868d-b7491eb1551d.roa (raw, json) Hash identifier: pAVccbqJb4hwS+1+zg7V5vr+RHAHc74ofU9xe45flac= Subject key identifier: 43:99:C0:39:1C:8B:BC:23:D5:8D:9E:16:59:F0:17:46:90:DE:40:2B Certificate issuer: /CN=822ab581-a0b4-4f01-9ab1-8dac6d881508 Certificate serial: 010D0C9F432858499F24992F337E6C76CC183A80 Authority key identifier: 41:AB:0B:AD:05:EC:30:E9:3C:36:D9:74:0F:59:A2:B6:07:1D:5A:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/9a647916-d419-3dbb-868d-b7491eb1551d.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 29848 IP address blocks: 199.5.197.0/24 maxlen: 24 199.5.198.0/23 maxlen: 24 199.5.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/822ab581-a0b4-4f01-9ab1-8dac6d881508.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/822ab581-a0b4-4f01-9ab1-8dac6d881508.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:99:2f:33:7e:6c:76:cc:18:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=822ab581-a0b4-4f01-9ab1-8dac6d881508 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=2c00feda-2be7-4b30-a8d5-6c45d43cbdc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:44:15:22:fc:92:bc:cf:9d:e9:02:53:23:55: 25:ad:3b:37:9b:cf:e6:ed:5e:e0:ad:78:83:f2:78: b2:56:90:18:a8:89:a9:15:44:cc:e0:08:a7:60:30: 8d:74:37:02:a0:b9:cc:83:d6:d3:c1:cd:84:71:5f: a6:aa:c5:8e:09:1c:20:bf:6e:a3:9a:e6:02:db:ab: 63:4e:6d:91:0d:48:6d:8e:72:7f:5d:e7:11:d0:44: ac:c0:fc:a7:e6:4b:22:6e:2b:77:f3:50:08:7f:ae: 62:5a:ef:3f:dd:44:12:52:6c:3d:07:68:72:3c:00: 7e:bd:c2:da:93:d3:74:0b:70:4d:b5:3a:6e:ca:0d: 2e:13:1d:42:c6:be:e2:25:85:91:c3:fa:57:38:35: 84:3a:ea:25:d9:14:f5:d4:6d:0f:47:a4:5e:d3:17: 5f:6f:44:f8:e7:5c:be:c4:26:7c:0f:4d:c9:b8:a4: 23:3e:04:12:c8:64:20:e2:7c:bf:86:c2:20:bf:64: 24:96:1f:58:fe:00:12:84:fc:d6:f0:78:50:28:2b: ac:31:f1:f4:26:e8:b9:4a:2d:ff:87:18:49:d0:5b: 7b:48:3e:16:f5:af:7c:40:ef:0f:c5:41:66:15:66: e7:33:d8:da:79:10:2e:ce:7e:a5:b0:06:e5:eb:ce: 51:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:99:C0:39:1C:8B:BC:23:D5:8D:9E:16:59:F0:17:46:90:DE:40:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/9a647916-d419-3dbb-868d-b7491eb1551d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/822ab581-a0b4-4f01-9ab1-8dac6d881508.crl X509v3 Authority Key Identifier: keyid:41:AB:0B:AD:05:EC:30:E9:3C:36:D9:74:0F:59:A2:B6:07:1D:5A:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508.cer sbgp-ipAddrBlock: critical IPv4: 199.5.197.0-199.5.200.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:89:d9:57:ea:8d:31:55:32:58:45:df:28:8e:5b:9e:1a:b4: f8:89:cc:c0:83:92:09:7a:1f:5c:fb:a9:0f:d6:be:12:3a:58: 61:15:8d:5f:b6:ca:5a:2a:77:0c:99:44:4e:99:ce:28:02:17: 23:04:fd:41:f4:0d:92:ed:4b:df:3e:33:50:05:8d:85:be:e9: 2f:b9:c7:b2:e1:c7:a6:8e:a0:e6:48:67:74:ee:dc:da:64:f0: b5:88:db:b4:9d:83:a4:76:a6:99:8e:68:94:8b:a1:24:a7:2b: a5:85:44:46:70:79:b5:c3:90:46:05:19:a9:9d:77:c7:58:c2: 2d:a9:90:49:92:b3:7a:d2:6b:cd:1f:ea:b4:f5:20:30:d6:4a: 28:cd:21:36:ef:27:ee:77:0a:3f:1f:dd:8f:e9:f6:d3:6b:6b: a6:cf:2c:51:91:23:83:ff:55:87:57:4e:92:d3:ee:f8:3a:10: e4:88:97:3a:df:5b:b0:b9:e8:71:2e:2f:fc:05:52:9e:00:3a: 0e:f2:e5:3d:de:7f:76:46:db:06:82:62:a2:f2:df:c2:c3:7d: 86:75:5a:f2:2d:ed:0e:95:ab:63:8b:6c:89:0b:77:4e:86:88: 88:07:78:77:b2:ec:40:e4:87:3d:82:81:d1:b8:02:69:97:ec: 25:7e:ac:97 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEmfJJkvM35sdswYOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIyYWI1ODEtYTBiNC00ZjAxLTlhYjEtOGRhYzZkODgx NTA4MB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk MmMwMGZlZGEtMmJlNy00YjMwLWE4ZDUtNmM0NWQ0M2NiZGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkQVIvySvM+d6QJTI1UlrTs3m8/m7V7grXiD 8niyVpAYqImpFUTM4AinYDCNdDcCoLnMg9bTwc2EcV+mqsWOCRwgv26jmuYC26tj Tm2RDUhtjnJ/XecR0ESswPyn5ksibit381AIf65iWu8/3UQSUmw9B2hyPAB+vcLa k9N0C3BNtTpuyg0uEx1Cxr7iJYWRw/pXODWEOuol2RT11G0PR6Re0xdfb0T451y+ xCZ8D03JuKQjPgQSyGQg4ny/hsIgv2Qklh9Y/gAShPzW8HhQKCusMfH0Jui5Si3/ hxhJ0Ft7SD4W9a98QO8PxUFmFWbnM9jaeRAuzn6lsAbl685ReQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFEOZwDkci7wj1Y2eFlnwF0aQ3kArMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84MjJh YjU4MS1hMGI0LTRmMDEtOWFiMS04ZGFjNmQ4ODE1MDgvOWE2NDc5MTYtZDQxOS0z ZGJiLTg2OGQtYjc0OTFlYjE1NTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODIyYWI1ODEtYTBiNC00ZjAxLTlh YjEtOGRhYzZkODgxNTA4LzgyMmFiNTgxLWEwYjQtNGYwMS05YWIxLThkYWM2ZDg4 MTUwOC5jcmwwHwYDVR0jBBgwFoAUQasLrQXsMOk8Ntl0D1mitgcdWtEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84MjJhYjU4MS1hMGI0LTRmMDEtOWFiMS04ZGFj NmQ4ODE1MDguY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADHBcUD BADHBcgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAUYnZV+qNMVUyWEXfKI5bnhq0+InMwIOSCXofXPupD9a+ EjpYYRWNX7bKWip3DJlETpnOKAIXIwT9QfQNku1L3z4zUAWNhb7pL7nHsuHHpo6g 5khndO7c2mTwtYjbtJ2DpHammY5olIuhJKcrpYVERnB5tcOQRgUZqZ13x1jCLamQ SZKzetJrzR/qtPUgMNZKKM0hNu8n7ncKPx/dj+n202trps8sUZEjg/9Vh1dOktPu +DoQ5IiXOt9bsLnocS4v/AVSngA6DvLlPd5/dkbbBoJiovLfwsN9hnVa8i3tDpWr Y4tsiQt3ToaIiAd4d7LsQOSHPYKB0bgCaZfsJX6slw== -----END CERTIFICATE-----Generated at Tue Apr 29 15:42:08 2025 by rpki-client