$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/70b6a415-96fc-3c29-8eb6-87b641b70325.roa File: 70b6a415-96fc-3c29-8eb6-87b641b70325.roa (raw, json) Hash identifier: P4zmgkCsqrPGdrahmet4rvs7OyhIKitIm7ykySrDmmU= Subject key identifier: 24:D9:46:14:31:20:21:66:0C:F6:04:51:07:1A:4A:DC:EB:97:CC:50 Certificate issuer: /CN=ee74c799-7d4c-4df3-b711-296c34338ef5 Certificate serial: 010D0C9F43285849998F33B8C82B021994974180 Authority key identifier: 6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/70b6a415-96fc-3c29-8eb6-87b641b70325.roa Signing time: Mon 21 Apr 2025 13:00:59 +0000 ROA not before: Mon 21 Apr 2025 13:00:59 +0000 ROA not after: Sun 20 Jul 2025 13:00:59 +0000 asID: 845 IP address blocks: 199.96.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:99:8f:33:b8:c8:2b:02:19:94:97:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee74c799-7d4c-4df3-b711-296c34338ef5 Validity Not Before: Apr 21 13:00:59 2025 GMT Not After : Jul 20 13:00:59 2025 GMT Subject: CN=bf6c95aa-ffb6-4a9e-ab62-82c7ee55bed7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:26:1d:af:c7:58:37:36:a0:5e:94:a1:61:14: 45:1a:df:60:f5:d3:e3:a1:3d:be:7f:10:20:e4:04: 4e:e5:a5:79:e2:1d:9d:a8:f5:a8:d3:24:04:bf:1c: 08:10:86:5c:7e:e2:f7:68:c4:4d:13:58:0a:b8:93: e4:e3:ef:9b:c7:35:85:62:c9:39:c9:16:9b:b1:e4: 56:df:d5:5b:47:df:35:30:71:38:bb:c8:53:36:52: 01:67:c7:88:c7:8e:54:c8:4b:5a:1e:d8:47:81:b6: 98:5e:9c:a3:07:e8:e4:8e:a5:58:db:c8:4f:7a:49: e0:b5:42:a9:26:dd:c6:7a:d6:9c:48:b0:1b:1d:b5: 23:30:e1:91:c6:7e:e6:47:26:13:d2:dd:1f:2b:08: ae:c7:9a:74:7f:4d:73:ab:15:f2:1b:c2:83:54:be: 64:b7:31:4a:7d:81:3a:94:1c:76:97:64:2a:ad:2e: 22:f7:2a:fa:d9:06:48:dd:80:6b:b1:89:63:26:d4: 10:de:28:39:32:fb:b7:ae:17:3d:79:75:8e:6a:47: 92:ff:dd:3f:d0:b9:0f:e6:79:af:43:e6:18:0b:0b: 3a:24:cf:c5:41:43:fe:ca:2e:7a:29:20:aa:63:ce: 88:54:2f:02:ff:28:66:ef:c3:f9:b8:c5:b9:60:b0: e4:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:D9:46:14:31:20:21:66:0C:F6:04:51:07:1A:4A:DC:EB:97:CC:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/70b6a415-96fc-3c29-8eb6-87b641b70325.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl X509v3 Authority Key Identifier: keyid:6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer sbgp-ipAddrBlock: critical IPv4: 199.96.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:97:ea:59:04:7a:2a:79:74:aa:e2:fa:55:ca:88:af:36:06: b7:5c:e4:4f:28:da:a4:b0:72:d1:a3:9d:95:de:a7:63:5c:77: 3e:97:1d:bd:97:1e:e3:74:07:c9:eb:5f:6d:d9:bb:3f:40:7e: 2f:21:55:ae:8e:3e:6c:44:1b:35:01:b5:07:c1:83:ab:32:c6: 57:df:27:6b:5d:d5:b4:d2:e3:42:d5:d3:25:be:e4:92:1d:f4: fe:59:7a:75:96:78:24:59:f3:05:96:2a:7e:3e:53:ce:3f:60: e1:3d:2d:f9:fd:ae:3d:cb:c8:81:78:d4:66:2c:5a:b5:de:a3: fb:eb:c3:fb:0e:b4:df:8c:99:18:0a:3e:02:d0:95:46:1b:a7: ca:34:17:00:a0:00:14:ea:c0:6c:e7:ef:42:2a:71:b1:8e:f1: 56:ca:23:12:47:02:1f:0d:55:71:ff:28:dc:9e:71:06:a8:45: de:b9:4d:b3:d6:c1:38:1d:eb:93:61:c4:cf:46:28:df:f8:88: 4c:43:22:43:7e:14:e7:47:6f:ef:f5:8b:ab:a0:c2:07:38:26: 3b:cc:03:7f:2e:21:48:5b:7a:19:ff:8a:bf:18:3b:eb:0b:0c: 19:f8:11:5a:db:dc:49:4d:8b:42:15:46:e4:cb:0e:88:c2:a8: 88:05:99:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmZjzO4yCsCGZSXQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWU3NGM3OTktN2Q0Yy00ZGYzLWI3MTEtMjk2YzM0MzM4 ZWY1MB4XDTI1MDQyMTEzMDA1OVoXDTI1MDcyMDEzMDA1OVowLzEtMCsGA1UEAxMk YmY2Yzk1YWEtZmZiNi00YTllLWFiNjItODJjN2VlNTViZWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CYdr8dYNzagXpShYRRFGt9g9dPjoT2+fxAg 5ARO5aV54h2dqPWo0yQEvxwIEIZcfuL3aMRNE1gKuJPk4++bxzWFYsk5yRabseRW 39VbR981MHE4u8hTNlIBZ8eIx45UyEtaHthHgbaYXpyjB+jkjqVY28hPekngtUKp Jt3GetacSLAbHbUjMOGRxn7mRyYT0t0fKwiux5p0f01zqxXyG8KDVL5ktzFKfYE6 lBx2l2QqrS4i9yr62QZI3YBrsYljJtQQ3ig5Mvu3rhc9eXWOakeS/90/0LkP5nmv Q+YYCws6JM/FQUP+yi56KSCqY86IVC8C/yhm78P5uMW5YLDkCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCTZRhQxICFmDPYEUQcaStzrl8xQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lZTc0 Yzc5OS03ZDRjLTRkZjMtYjcxMS0yOTZjMzQzMzhlZjUvNzBiNmE0MTUtOTZmYy0z YzI5LThlYjYtODdiNjQxYjcwMzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZWU3NGM3OTktN2Q0Yy00ZGYzLWI3 MTEtMjk2YzM0MzM4ZWY1L2VlNzRjNzk5LTdkNGMtNGRmMy1iNzExLTI5NmMzNDMz OGVmNS5jcmwwHwYDVR0jBBgwFoAUbNfgDzg2OujJMgu3w5YFtxms98QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lZTc0Yzc5OS03ZDRjLTRkZjMtYjcxMS0yOTZj MzQzMzhlZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx2BUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKqX6lkEeip5dKri+lXKiK82Brdc5E8o2qSwctGjnZXep2Ncdz6XHb2X HuN0B8nrX23Zuz9Afi8hVa6OPmxEGzUBtQfBg6syxlffJ2td1bTS40LV0yW+5JId 9P5ZenWWeCRZ8wWWKn4+U84/YOE9Lfn9rj3LyIF41GYsWrXeo/vrw/sOtN+MmRgK PgLQlUYbp8o0FwCgABTqwGzn70IqcbGO8VbKIxJHAh8NVXH/KNyecQaoRd65TbPW wTgd65NhxM9GKN/4iExDIkN+FOdHb+/1i6ugwgc4JjvMA38uIUhbehn/ir8YO+sL DBn4EVrb3ElNi0IVRuTLDojCqIgFmVc= -----END CERTIFICATE-----Generated at Tue Apr 29 04:03:57 2025 by rpki-client