$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/6f7d065b-e8db-3eae-837a-394398429919.roa File: 6f7d065b-e8db-3eae-837a-394398429919.roa (raw, json) Hash identifier: 3goQ7g7oTsRfRZ/q6fdjUy/Ke0iBDy9rpBFdVaCKwtc= Subject key identifier: AA:E3:83:31:F4:93:F0:E2:03:B3:AF:B8:7B:AA:9B:21:10:5B:97:43 Certificate issuer: /CN=888d6cc7-0aa2-467e-9649-a453942c2d85 Certificate serial: 010D0C9F432858494303F3C94934AF3333D3BC80 Authority key identifier: 85:9E:C9:BC:47:3A:4F:8D:1F:C8:6B:8F:48:E7:B2:AA:BE:7A:56:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/6f7d065b-e8db-3eae-837a-394398429919.roa Signing time: Fri 21 Mar 2025 13:00:50 +0000 ROA not before: Fri 21 Mar 2025 13:00:50 +0000 ROA not after: Thu 19 Jun 2025 13:00:50 +0000 asID: 979 IP address blocks: 199.7.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/888d6cc7-0aa2-467e-9649-a453942c2d85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/888d6cc7-0aa2-467e-9649-a453942c2d85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:43:03:f3:c9:49:34:af:33:33:d3:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=888d6cc7-0aa2-467e-9649-a453942c2d85 Validity Not Before: Mar 21 13:00:50 2025 GMT Not After : Jun 19 13:00:50 2025 GMT Subject: CN=a4da610c-4653-419d-b6e5-85e4b21070ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b4:e6:8f:55:d4:c7:70:33:ec:a0:e4:99:bb: ad:c1:e6:ba:4d:b9:66:0d:cf:97:b8:c0:2e:40:d1: 8a:d4:5f:9d:c1:ec:71:4c:3d:bf:da:29:33:08:1b: f1:fc:c6:c8:c4:e1:fe:07:8f:07:7a:df:39:c7:b3: b0:90:14:97:6a:8e:7f:08:07:eb:4c:06:78:40:77: c2:f9:ff:d9:51:e6:d3:89:2c:6e:08:93:fd:3e:69: 17:27:ea:b0:d1:f8:a4:90:43:81:77:63:68:e1:3b: 04:80:4d:ab:ae:0b:56:c7:99:f0:e3:2f:2d:2c:1e: f7:fe:93:7d:14:cc:a4:bd:69:30:02:2b:9f:e2:98: 98:87:d5:e3:b6:c0:2d:06:f5:e9:69:5d:93:5e:8b: 3d:03:df:5c:be:42:5a:19:20:bf:45:8a:05:31:b6: d7:27:5e:ba:da:de:e5:69:50:74:45:7c:58:fe:d2: 6a:ca:ae:3a:c1:a2:36:5b:8f:43:d0:dd:f1:bc:1c: 43:95:39:28:8b:91:f6:a8:2f:03:76:fe:62:0a:0e: c9:47:9c:6c:da:1f:50:67:96:a3:32:da:55:37:ef: c9:82:d3:88:7f:17:db:15:e8:96:0c:fb:9e:60:d8: 92:11:2e:10:55:a6:92:bb:d6:05:47:ab:14:9f:6a: 35:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:E3:83:31:F4:93:F0:E2:03:B3:AF:B8:7B:AA:9B:21:10:5B:97:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/6f7d065b-e8db-3eae-837a-394398429919.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/888d6cc7-0aa2-467e-9649-a453942c2d85.crl X509v3 Authority Key Identifier: keyid:85:9E:C9:BC:47:3A:4F:8D:1F:C8:6B:8F:48:E7:B2:AA:BE:7A:56:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85.cer sbgp-ipAddrBlock: critical IPv4: 199.7.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:f6:25:d0:d6:ba:a2:1f:df:b9:c1:05:ae:9f:a2:55:f5:8c: 4e:2d:23:01:17:08:d9:b9:bd:00:75:d4:16:31:56:e6:82:a4: 30:b9:55:15:4a:87:9f:e5:cc:f9:a2:44:30:e1:8a:cc:c9:2c: 76:15:6b:9a:5d:dd:45:76:96:86:a1:d5:6b:d0:07:f1:d0:7e: 60:57:68:f0:9f:48:1f:b0:7c:aa:6f:2c:31:27:a0:75:dd:f7: 8f:5c:66:16:50:7f:fb:86:0e:d6:8e:25:0a:8a:c0:d1:d4:80: 1a:8b:b0:1b:88:24:ac:b6:33:32:80:88:21:f7:23:f8:62:b0: 87:66:f7:4e:dc:04:c5:06:b7:2a:4e:c3:54:5c:21:6e:98:57: d3:91:55:ac:ea:aa:9f:2e:3a:2d:da:b1:91:0e:40:d7:9b:9e: 76:1c:ea:62:1a:30:f4:6a:82:60:07:47:87:2a:2a:69:1b:bd: b0:91:6c:1e:c3:fb:fa:30:dc:7f:a3:b2:64:63:18:cc:90:c1: 92:cf:fc:bd:f2:23:20:51:c3:49:1a:94:9c:d0:c5:b5:f4:62: 76:71:1f:2f:e8:6b:82:10:17:c1:74:3e:a9:9d:63:33:36:c7: d2:21:57:7a:06:61:9a:11:a6:99:72:71:b4:04:39:2b:29:ae: e7:71:6b:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElDA/PJSTSvMzPTvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg4ZDZjYzctMGFhMi00NjdlLTk2NDktYTQ1Mzk0MmMy ZDg1MB4XDTI1MDMyMTEzMDA1MFoXDTI1MDYxOTEzMDA1MFowLzEtMCsGA1UEAxMk YTRkYTYxMGMtNDY1My00MTlkLWI2ZTUtODVlNGIyMTA3MGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbTmj1XUx3Az7KDkmbutwea6TblmDc+XuMAu QNGK1F+dwexxTD2/2ikzCBvx/MbIxOH+B48Het85x7OwkBSXao5/CAfrTAZ4QHfC +f/ZUebTiSxuCJP9PmkXJ+qw0fikkEOBd2No4TsEgE2rrgtWx5nw4y8tLB73/pN9 FMykvWkwAiuf4piYh9XjtsAtBvXpaV2TXos9A99cvkJaGSC/RYoFMbbXJ1662t7l aVB0RXxY/tJqyq46waI2W49D0N3xvBxDlTkoi5H2qC8Ddv5iCg7JR5xs2h9QZ5aj MtpVN+/JgtOIfxfbFeiWDPueYNiSES4QVaaSu9YFR6sUn2o1JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKrjgzH0k/DiA7OvuHuqmyEQW5dDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84ODhk NmNjNy0wYWEyLTQ2N2UtOTY0OS1hNDUzOTQyYzJkODUvNmY3ZDA2NWItZThkYi0z ZWFlLTgzN2EtMzk0Mzk4NDI5OTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODg4ZDZjYzctMGFhMi00NjdlLTk2 NDktYTQ1Mzk0MmMyZDg1Lzg4OGQ2Y2M3LTBhYTItNDY3ZS05NjQ5LWE0NTM5NDJj MmQ4NS5jcmwwHwYDVR0jBBgwFoAUhZ7JvEc6T40fyGuPSOeyqr56VrIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84ODhkNmNjNy0wYWEyLTQ2N2UtOTY0OS1hNDUz OTQyYzJkODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxweMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG32JdDWuqIf37nBBa6folX1jE4tIwEXCNm5vQB11BYxVuaCpDC5VRVK h5/lzPmiRDDhiszJLHYVa5pd3UV2loah1WvQB/HQfmBXaPCfSB+wfKpvLDEnoHXd 949cZhZQf/uGDtaOJQqKwNHUgBqLsBuIJKy2MzKAiCH3I/hisIdm907cBMUGtypO w1RcIW6YV9ORVazqqp8uOi3asZEOQNebnnYc6mIaMPRqgmAHR4cqKmkbvbCRbB7D +/ow3H+jsmRjGMyQwZLP/L3yIyBRw0kalJzQxbX0YnZxHy/oa4IQF8F0PqmdYzM2 x9IhV3oGYZoRpplycbQEOSsprudxa7g= -----END CERTIFICATE-----Generated at Sat Apr 26 20:22:08 2025 by rpki-client