$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ec0b63b4-422b-39ca-9779-6ddeff83ae22.roa File: ec0b63b4-422b-39ca-9779-6ddeff83ae22.roa (raw, json) Hash identifier: BzBuEOE6EzYKscPNxbJwpSfrmyGXB+AEJJ3DU7o16ik= Subject key identifier: 8A:D4:21:9B:E8:4D:23:0A:95:16:E8:1F:F4:0A:AE:05:43:40:C9:7F Certificate issuer: /CN=ee74c799-7d4c-4df3-b711-296c34338ef5 Certificate serial: 010D0C9F43285849998F331ED00E99B62C2F3D80 Authority key identifier: 6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ec0b63b4-422b-39ca-9779-6ddeff83ae22.roa Signing time: Mon 21 Apr 2025 13:00:59 +0000 ROA not before: Mon 21 Apr 2025 13:00:59 +0000 ROA not after: Sun 20 Jul 2025 13:00:59 +0000 asID: 399509 IP address blocks: 199.96.86.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:99:8f:33:1e:d0:0e:99:b6:2c:2f:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee74c799-7d4c-4df3-b711-296c34338ef5 Validity Not Before: Apr 21 13:00:59 2025 GMT Not After : Jul 20 13:00:59 2025 GMT Subject: CN=cf7e8038-f981-464a-8909-18987cc9a575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f0:3a:52:09:dc:53:2e:32:2c:1a:1a:0f:5f: 0f:79:42:c2:46:b2:9d:15:d2:d5:a1:98:ea:c3:11: c1:68:98:61:08:6d:dd:d7:df:ff:ed:51:38:9b:99: 90:af:49:86:63:22:00:0a:61:e0:fb:c0:6a:aa:e8: f5:09:25:cb:5d:b4:f0:15:1c:80:b4:1d:d4:0d:f6: b2:3c:0b:c6:ae:d5:b6:80:29:01:dc:17:7f:70:68: 2a:7a:42:42:88:89:96:3b:3e:6d:7d:df:a1:32:3f: 0e:85:b7:26:f0:2b:74:4e:da:06:19:10:4d:7d:12: a3:df:43:50:b7:ea:d4:26:99:87:d4:f0:b4:1d:79: f2:89:97:51:92:98:90:c0:2c:e4:fe:d2:14:e6:d6: e0:1c:6b:cf:3f:4f:d1:02:5c:30:52:9e:99:68:53: fd:20:0f:d3:b0:c1:f1:f1:df:9f:20:0c:95:a5:27: 3a:9c:ee:e6:0b:23:61:61:f1:ef:c2:7e:92:7f:af: 9e:19:25:5d:b7:ef:ba:3a:0e:bb:8e:60:3c:c9:12: c8:d8:19:92:cc:71:8c:0c:25:90:75:79:48:ed:16: a3:f3:ee:0b:11:90:06:16:7f:9a:be:4e:4a:35:25: 66:e2:35:b2:b4:fc:b8:3f:d6:89:0e:54:e4:9b:1c: 59:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:D4:21:9B:E8:4D:23:0A:95:16:E8:1F:F4:0A:AE:05:43:40:C9:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ec0b63b4-422b-39ca-9779-6ddeff83ae22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl X509v3 Authority Key Identifier: keyid:6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer sbgp-ipAddrBlock: critical IPv4: 199.96.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:92:8a:75:cf:22:7b:28:36:b1:11:b5:3c:89:fc:17:98:09: 38:b4:2c:4d:f0:04:ed:e5:84:6c:b2:3f:37:78:96:29:a6:bf: 18:6d:47:fa:93:ef:1d:c2:14:6b:a2:d8:4b:6b:f0:fc:f7:69: 8c:d6:6f:d3:9f:13:7c:27:34:80:49:e2:c0:45:c3:e9:9a:cd: c0:c0:46:39:97:f6:88:f5:d9:ee:65:80:d8:22:9e:f8:65:3d: 11:b3:b5:ff:5b:76:75:d1:77:66:9c:ea:27:dd:db:4d:f4:5c: e0:e0:f5:3d:fc:89:65:01:ba:09:9b:c3:72:2a:d2:8f:d6:9d: 83:72:a2:cb:2b:eb:42:cd:74:18:e1:7f:ed:9a:4e:d5:84:12: ee:d7:22:79:fb:dd:9d:10:4c:ae:e3:77:89:ec:3b:ef:10:57: b0:03:39:0a:b2:9c:93:49:3f:13:0d:20:8e:7d:d3:8e:aa:d5: c8:dd:e4:6a:4e:1d:d4:36:fe:7b:af:8c:9d:fc:49:87:8f:c3: 89:b0:7c:9c:fb:f6:b5:08:06:26:19:78:3b:04:f1:29:06:00: 68:cb:00:c1:35:25:73:a8:4a:b1:d4:af:c8:a9:e5:36:7e:3f: a8:54:3a:ef:69:fa:1f:22:07:d2:8f:6b:78:dc:32:5f:d9:85: db:ae:10:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmZjzMe0A6ZtiwvPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWU3NGM3OTktN2Q0Yy00ZGYzLWI3MTEtMjk2YzM0MzM4 ZWY1MB4XDTI1MDQyMTEzMDA1OVoXDTI1MDcyMDEzMDA1OVowLzEtMCsGA1UEAxMk Y2Y3ZTgwMzgtZjk4MS00NjRhLTg5MDktMTg5ODdjYzlhNTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfA6UgncUy4yLBoaD18PeULCRrKdFdLVoZjq wxHBaJhhCG3d19//7VE4m5mQr0mGYyIACmHg+8Bqquj1CSXLXbTwFRyAtB3UDfay PAvGrtW2gCkB3Bd/cGgqekJCiImWOz5tfd+hMj8Ohbcm8Ct0TtoGGRBNfRKj30NQ t+rUJpmH1PC0HXnyiZdRkpiQwCzk/tIU5tbgHGvPP0/RAlwwUp6ZaFP9IA/TsMHx 8d+fIAyVpSc6nO7mCyNhYfHvwn6Sf6+eGSVdt++6Og67jmA8yRLI2BmSzHGMDCWQ dXlI7Raj8+4LEZAGFn+avk5KNSVm4jWytPy4P9aJDlTkmxxZvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIrUIZvoTSMKlRboH/QKrgVDQMl/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lZTc0 Yzc5OS03ZDRjLTRkZjMtYjcxMS0yOTZjMzQzMzhlZjUvZWMwYjYzYjQtNDIyYi0z OWNhLTk3NzktNmRkZWZmODNhZTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZWU3NGM3OTktN2Q0Yy00ZGYzLWI3 MTEtMjk2YzM0MzM4ZWY1L2VlNzRjNzk5LTdkNGMtNGRmMy1iNzExLTI5NmMzNDMz OGVmNS5jcmwwHwYDVR0jBBgwFoAUbNfgDzg2OujJMgu3w5YFtxms98QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lZTc0Yzc5OS03ZDRjLTRkZjMtYjcxMS0yOTZj MzQzMzhlZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx2BWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHiSinXPInsoNrERtTyJ/BeYCTi0LE3wBO3lhGyyPzd4limmvxhtR/qT 7x3CFGui2Etr8Pz3aYzWb9OfE3wnNIBJ4sBFw+mazcDARjmX9oj12e5lgNginvhl PRGztf9bdnXRd2ac6ifd2030XODg9T38iWUBugmbw3Iq0o/WnYNyossr60LNdBjh f+2aTtWEEu7XInn73Z0QTK7jd4nsO+8QV7ADOQqynJNJPxMNII59046q1cjd5GpO HdQ2/nuvjJ38SYePw4mwfJz79rUIBiYZeDsE8SkGAGjLAME1JXOoSrHUr8ip5TZ+ P6hUOu9p+h8iB9KPa3jcMl/ZhduuEII= -----END CERTIFICATE-----Generated at Wed Apr 30 19:38:20 2025 by rpki-client