$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/3f367cac-c0f1-3ea4-a15d-c95b2de49dd7.roa File: 3f367cac-c0f1-3ea4-a15d-c95b2de49dd7.roa (raw, json) Hash identifier: 9Vrt190K4LaWcOurBTdstlexMAyVHOa+BebJwbrPxwQ= Subject key identifier: 06:9F:E5:FC:EC:A3:AB:C6:5D:15:14:46:A6:51:32:74:0B:B8:F9:2A Certificate issuer: /CN=a66a1dc9-26a8-4e01-9916-0d16dd191690 Certificate serial: 010D0C9F432858499DBF38F094C44BDE7839DF80 Authority key identifier: 05:2A:1A:AC:C6:03:CD:7E:BC:FC:8C:07:CA:D6:38:03:64:D8:E4:A1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/3f367cac-c0f1-3ea4-a15d-c95b2de49dd7.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 207420 IP address blocks: 199.26.151.0/24 maxlen: 24 2602:fb3c:81::/48 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/a66a1dc9-26a8-4e01-9916-0d16dd191690.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/a66a1dc9-26a8-4e01-9916-0d16dd191690.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:38:f0:94:c4:4b:de:78:39:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a66a1dc9-26a8-4e01-9916-0d16dd191690 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=aa87b5f4-f949-4e1c-bfb9-0b02f6ced31f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:66:b9:0f:ce:5c:d0:0e:5d:12:02:76:59:28: c8:d4:21:e0:2a:46:46:79:a9:fe:2b:5b:aa:82:1f: 2a:4d:fb:9a:31:b0:f9:90:58:ac:64:67:8f:0d:10: e1:6f:91:6e:07:08:e1:a8:f8:2f:f9:a5:b8:c1:68: bb:95:22:c4:e5:eb:94:a6:a3:2b:08:da:81:ea:46: 53:27:85:a2:73:98:74:e3:87:5a:0a:01:1b:46:54: 86:cf:b8:7b:8a:0e:99:c0:32:61:76:c4:d5:9d:c6: 02:59:3c:ff:38:79:ac:0f:ad:12:9c:c7:6d:de:68: 4f:32:58:d5:fb:1d:14:86:ad:5a:ba:32:50:06:50: 84:e5:b6:9e:d3:9f:ff:32:9f:3b:59:10:0f:71:c4: 6d:4f:a1:f1:fc:fe:bb:d7:52:c0:53:0c:b4:93:22: 3d:5c:ad:9b:fb:b4:dc:ee:c7:a1:ad:da:28:26:e1: a8:78:e3:dd:5d:58:a1:ed:91:42:74:b9:1f:85:69: 20:6a:75:b2:c6:34:e6:a9:c0:9d:b1:9e:fe:bd:8f: e5:d6:80:a0:53:d2:aa:9f:03:bb:56:16:d3:8a:d1: 08:16:9a:3a:42:c8:59:8b:24:45:97:d0:b7:fc:2d: c6:92:45:c5:0b:99:d9:42:4f:83:aa:a9:79:c6:e0: 4a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:9F:E5:FC:EC:A3:AB:C6:5D:15:14:46:A6:51:32:74:0B:B8:F9:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/3f367cac-c0f1-3ea4-a15d-c95b2de49dd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/a66a1dc9-26a8-4e01-9916-0d16dd191690.crl X509v3 Authority Key Identifier: keyid:05:2A:1A:AC:C6:03:CD:7E:BC:FC:8C:07:CA:D6:38:03:64:D8:E4:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690.cer sbgp-ipAddrBlock: critical IPv4: 199.26.151.0/24 IPv6: 2602:fb3c:81::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:a0:84:c1:d7:8a:71:82:71:7a:37:bf:8e:f7:4d:73:b3:3d: f3:91:f5:7a:28:92:da:f0:a7:81:19:2c:be:00:8d:f7:c5:d4: 37:31:f1:9d:6e:34:23:b3:38:72:6a:76:0d:6f:e5:4a:9d:58: 25:e5:a6:b1:9b:a5:61:58:10:b3:35:16:bd:71:65:cc:38:0e: ef:25:75:5e:a6:51:e4:61:25:8a:40:a6:47:a4:c1:89:3f:36: 12:69:3e:44:12:ba:25:37:5e:88:bd:c6:19:18:98:3f:ee:01: 48:b2:a2:25:16:a1:7d:1a:da:25:fc:de:07:ba:b3:70:bf:83: d6:48:be:3f:be:bb:46:c2:eb:49:1c:c7:5b:55:40:d2:bd:2a: d8:b4:dc:f6:1b:73:bf:4b:9c:35:f2:af:13:c1:59:91:43:03: 0a:c5:3b:c2:f7:5d:f4:e0:58:44:d4:cc:f1:2e:5e:17:84:3e: 11:8d:87:c0:33:3d:62:ff:a0:7a:6d:1c:67:5b:e9:bd:5a:bf: 4f:01:3d:96:31:ce:04:10:5d:9e:6e:fa:34:a6:28:4a:8e:50: 5e:f1:3f:4b:59:dd:89:b8:f3:0f:8a:c7:f5:f4:59:10:dc:47: f6:24:a6:78:7d:97:ec:98:a2:50:69:e2:c1:16:a2:a6:b7:c2: c8:37:22:ac -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEmdvzjwlMRL3ng534AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTY2YTFkYzktMjZhOC00ZTAxLTk5MTYtMGQxNmRkMTkx NjkwMB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk YWE4N2I1ZjQtZjk0OS00ZTFjLWJmYjktMGIwMmY2Y2VkMzFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWa5D85c0A5dEgJ2WSjI1CHgKkZGean+K1uq gh8qTfuaMbD5kFisZGePDRDhb5FuBwjhqPgv+aW4wWi7lSLE5euUpqMrCNqB6kZT J4Wic5h044daCgEbRlSGz7h7ig6ZwDJhdsTVncYCWTz/OHmsD60SnMdt3mhPMljV +x0Uhq1aujJQBlCE5bae05//Mp87WRAPccRtT6Hx/P6711LAUwy0kyI9XK2b+7Tc 7sehrdooJuGoeOPdXVih7ZFCdLkfhWkganWyxjTmqcCdsZ7+vY/l1oCgU9KqnwO7 VhbTitEIFpo6QshZiyRFl9C3/C3GkkXFC5nZQk+Dqql5xuBKVwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFAaf5fzso6vGXRUURqZRMnQLuPkqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hNjZh MWRjOS0yNmE4LTRlMDEtOTkxNi0wZDE2ZGQxOTE2OTAvM2YzNjdjYWMtYzBmMS0z ZWE0LWExNWQtYzk1YjJkZTQ5ZGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTY2YTFkYzktMjZhOC00ZTAxLTk5 MTYtMGQxNmRkMTkxNjkwL2E2NmExZGM5LTI2YTgtNGUwMS05OTE2LTBkMTZkZDE5 MTY5MC5jcmwwHwYDVR0jBBgwFoAUBSoarMYDzX68/IwHytY4A2TY5KEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hNjZhMWRjOS0yNmE4LTRlMDEtOTkxNi0wZDE2 ZGQxOTE2OTAuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAxxqXMA8E AgACMAkDBwAmAvs8AIEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAgKCEwdeKcYJxeje/jvdNc7M985H1eiiS 2vCngRksvgCN98XUNzHxnW40I7M4cmp2DW/lSp1YJeWmsZulYVgQszUWvXFlzDgO 7yV1XqZR5GElikCmR6TBiT82Emk+RBK6JTdeiL3GGRiYP+4BSLKiJRahfRraJfze B7qzcL+D1ki+P767RsLrSRzHW1VA0r0q2LTc9htzv0ucNfKvE8FZkUMDCsU7wvdd 9OBYRNTM8S5eF4Q+EY2HwDM9Yv+gem0cZ1vpvVq/TwE9ljHOBBBdnm76NKYoSo5Q XvE/S1ndibjzD4rH9fRZENxH9iSmeH2X7JiiUGniwRaiprfCyDcirA== -----END CERTIFICATE-----Generated at Mon Apr 28 23:29:30 2025 by rpki-client