$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/6f12b6b3-3f88-3b5f-a379-6b6c651c025b.roa File: 6f12b6b3-3f88-3b5f-a379-6b6c651c025b.roa (raw, json) Hash identifier: C5IN2/YEJLYsobz20+QtyhsXATVyuhriq0bIEIwQm4c= Subject key identifier: 0E:63:97:A8:67:9E:8D:15:71:58:EE:82:7A:BB:78:5D:2D:6B:A5:C6 Certificate issuer: /CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78 Certificate serial: 010D0C9F4328584961B9933C89DEEDAF5F731480 Authority key identifier: A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/6f12b6b3-3f88-3b5f-a379-6b6c651c025b.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 19551 IP address blocks: 199.83.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:93:3c:89:de:ed:af:5f:73:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78 Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=f84315c7-e87c-4f11-a78e-6b7eebb92788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:0d:11:3d:81:d0:b2:4b:d6:40:d7:9c:52:85: 6c:6b:b6:35:08:ba:2a:53:68:11:17:82:01:05:e1: 5f:59:cb:10:1a:25:13:ae:15:c6:4a:c7:f4:1b:c9: 71:c5:a0:ce:ae:52:83:cc:76:a9:87:4e:5a:94:f8: 33:30:d8:1e:27:2c:cd:cf:4c:28:3e:c2:38:36:50: ed:d5:cb:7d:8b:cc:46:49:41:17:12:50:cd:ff:ab: 79:96:05:f4:e9:d4:22:93:57:fa:02:10:63:06:34: 1b:bc:f0:31:02:7a:d4:ce:4a:49:ff:e0:b2:48:d7: 47:fd:7a:4d:40:2c:71:d9:5f:cf:53:ae:0a:8b:37: 9a:86:0b:6e:31:19:e7:d0:55:3b:da:8e:ab:43:93: 66:fe:7b:e6:00:57:c6:15:61:cc:0f:50:6d:3a:79: 7c:70:01:97:42:96:6c:b1:2a:91:d0:82:eb:0e:18: 46:57:af:7a:ad:de:02:cd:0b:19:bf:5d:3b:8c:bb: a0:a8:6e:16:a0:83:55:10:95:2a:2b:4d:3f:61:13: e8:10:8a:6f:19:f7:0f:42:d3:2c:1b:e4:07:bb:56: b0:b2:9a:c2:84:c8:a7:da:6a:55:ef:9a:02:ca:cd: 3e:97:af:a0:0d:91:9c:1e:08:d8:d7:53:7e:6d:b7: 77:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:63:97:A8:67:9E:8D:15:71:58:EE:82:7A:BB:78:5D:2D:6B:A5:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/6f12b6b3-3f88-3b5f-a379-6b6c651c025b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.crl X509v3 Authority Key Identifier: keyid:A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer sbgp-ipAddrBlock: critical IPv4: 199.83.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:08:68:3a:0c:c3:c7:d3:11:23:5e:36:70:ac:68:0e:6d:71: 64:dc:e7:b1:03:6d:4c:1a:eb:c0:f2:be:06:be:95:92:bb:31: 33:d9:b2:aa:4d:d9:67:f9:27:e3:5d:7c:c0:3c:f2:3e:4a:97: 06:bd:e3:19:c2:ee:41:4d:09:64:08:12:00:db:a7:cc:94:9f: 1e:5d:44:68:16:13:e1:ce:f6:03:75:48:ac:ee:2a:b0:eb:9d: f7:1f:7e:ef:dc:fd:1a:ff:c1:04:5a:1d:fa:49:eb:ac:2c:18: 80:1c:2b:60:f1:d2:fc:24:95:26:94:6e:1b:1b:ac:1d:ef:d4: a3:40:6b:3e:bf:b1:6d:4e:14:4a:b4:cd:69:71:dc:2f:b1:4b: 83:db:84:6b:be:15:de:f3:dc:de:86:2e:f4:86:b4:e5:65:9c: cb:93:f7:6e:51:97:63:37:71:63:41:32:18:2a:83:e8:ad:1f: fd:d6:57:ea:4c:ea:b2:71:fe:1b:b5:1e:5c:c9:fb:1a:08:70: a9:27:7a:d9:eb:7e:ad:21:7b:c8:b3:54:89:85:8b:4a:25:68: d3:ab:da:d8:06:a6:5b:09:ef:7b:bd:ed:c3:78:2e:52:3e:c2: dd:c9:d2:cf:f9:72:c7:f1:38:ac:39:36:c8:4c:34:2c:7f:0a: 1d:d1:ce:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElhuZM8id7tr19zFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzQxYjdlOTYtYTZmMC00NGQzLWFlY2MtOTI5NGQ2YmNj Yzc4MB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk Zjg0MzE1YzctZTg3Yy00ZjExLWE3OGUtNmI3ZWViYjkyNzg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5w0RPYHQskvWQNecUoVsa7Y1CLoqU2gRF4IB BeFfWcsQGiUTrhXGSsf0G8lxxaDOrlKDzHaph05alPgzMNgeJyzNz0woPsI4NlDt 1ct9i8xGSUEXElDN/6t5lgX06dQik1f6AhBjBjQbvPAxAnrUzkpJ/+CySNdH/XpN QCxx2V/PU64KizeahgtuMRnn0FU72o6rQ5Nm/nvmAFfGFWHMD1BtOnl8cAGXQpZs sSqR0ILrDhhGV696rd4CzQsZv107jLugqG4WoINVEJUqK00/YRPoEIpvGfcPQtMs G+QHu1awsprChMin2mpV75oCys0+l6+gDZGcHgjY11N+bbd3GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA5jl6hnno0VcVjugnq7eF0ta6XGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNDFi N2U5Ni1hNmYwLTQ0ZDMtYWVjYy05Mjk0ZDZiY2NjNzgvNmYxMmI2YjMtM2Y4OC0z YjVmLWEzNzktNmI2YzY1MWMwMjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzQxYjdlOTYtYTZmMC00NGQzLWFl Y2MtOTI5NGQ2YmNjYzc4LzM0MWI3ZTk2LWE2ZjAtNDRkMy1hZWNjLTkyOTRkNmJj Y2M3OC5jcmwwHwYDVR0jBBgwFoAUoPBBeGGMSJbPqYzGmlOLQFAosrUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNDFiN2U5Ni1hNmYwLTQ0ZDMtYWVjYy05Mjk0 ZDZiY2NjNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx1OAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4IaDoMw8fTESNeNnCsaA5tcWTc57EDbUwa68Dyvga+lZK7MTPZsqpN 2Wf5J+NdfMA88j5Klwa94xnC7kFNCWQIEgDbp8yUnx5dRGgWE+HO9gN1SKzuKrDr nfcffu/c/Rr/wQRaHfpJ66wsGIAcK2Dx0vwklSaUbhsbrB3v1KNAaz6/sW1OFEq0 zWlx3C+xS4PbhGu+Fd7z3N6GLvSGtOVlnMuT925Rl2M3cWNBMhgqg+itH/3WV+pM 6rJx/hu1HlzJ+xoIcKknetnrfq0he8izVImFi0olaNOr2tgGplsJ73u97cN4LlI+ wt3J0s/5csfxOKw5NshMNCx/Ch3RzuQ= -----END CERTIFICATE-----Generated at Sun Apr 27 10:07:54 2025 by rpki-client