$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/f4018e35-f80e-3b6a-a43f-51f8b97f4469.roa File: f4018e35-f80e-3b6a-a43f-51f8b97f4469.roa (raw, json) Hash identifier: F9bqDSM8eOB/GxKdOCrWrKN/cwxrvS+VmAv+jryToBQ= Subject key identifier: 78:57:E8:40:13:D9:17:D7:CD:60:A9:79:6C:FF:B0:27:8E:86:4B:39 Certificate issuer: /CN=e085fa70-312c-4786-b587-bdb5fc87c36e Certificate serial: 010D0C9F43285848F4F697BBB14A695559521720 Authority key identifier: FB:01:59:26:25:6A:E3:27:F8:7E:FC:D1:9C:57:E2:7B:34:1B:58:6E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/f4018e35-f80e-3b6a-a43f-51f8b97f4469.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 32098 IP address blocks: 199.19.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/e085fa70-312c-4786-b587-bdb5fc87c36e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/e085fa70-312c-4786-b587-bdb5fc87c36e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:97:bb:b1:4a:69:55:59:52:17:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e085fa70-312c-4786-b587-bdb5fc87c36e Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=ca335b55-f565-4c9c-a997-8cfb0b6080f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:71:db:1f:f0:b7:a4:35:1c:c0:5f:01:66:4f: 6d:1d:dd:85:41:d7:9b:ba:29:61:91:56:2b:17:18: 7d:e8:48:71:c9:c8:26:31:f0:9d:df:32:82:24:f1: d9:f4:55:94:ae:3c:09:0f:98:e4:d2:8a:0f:20:37: 72:9b:12:e0:05:ce:bd:58:4c:de:16:5d:39:d5:b1: 45:7a:58:9f:85:cb:9d:0a:89:b8:cb:88:3b:ca:70: 50:59:0d:a9:a5:dc:44:f5:de:2b:2f:b5:35:9d:74: 5e:79:06:fe:f3:b7:1e:8e:4c:40:64:88:f8:b0:1c: 85:d5:5d:67:d3:25:96:c3:4b:94:9b:f3:15:33:e3: da:d4:4c:93:8e:7e:15:da:0b:a1:5c:b3:85:78:4a: f6:45:ae:dc:b7:c1:b0:de:c6:26:86:5a:2b:a8:76: 64:98:cf:2f:75:d6:45:cd:55:c5:29:de:e0:d4:35: 59:d8:80:d4:ff:4e:d5:25:b7:c9:bf:52:e7:08:4a: 84:09:7d:96:2f:ee:fb:07:63:40:5f:4c:6c:a5:4f: 31:2a:35:2c:14:31:43:6e:9e:be:e3:50:3b:cd:13: 5c:0d:51:53:f7:c7:4d:e5:01:cc:62:53:fc:28:2e: 4c:5d:eb:64:47:d5:02:54:65:f3:ca:a0:8b:11:9b: 4f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:57:E8:40:13:D9:17:D7:CD:60:A9:79:6C:FF:B0:27:8E:86:4B:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/f4018e35-f80e-3b6a-a43f-51f8b97f4469.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/e085fa70-312c-4786-b587-bdb5fc87c36e.crl X509v3 Authority Key Identifier: keyid:FB:01:59:26:25:6A:E3:27:F8:7E:FC:D1:9C:57:E2:7B:34:1B:58:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e.cer sbgp-ipAddrBlock: critical IPv4: 199.19.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:d9:f7:b9:b1:10:7b:9b:82:40:c7:28:f0:86:4a:82:83:31: 9f:5a:a1:b6:d7:35:8d:46:ef:a5:a8:35:da:b3:99:80:b6:af: 73:97:d2:9a:90:15:ed:22:d6:24:35:47:35:3d:a9:38:47:12: 56:af:4c:d1:0e:de:e0:7d:f8:4b:fe:41:27:ee:15:62:4d:f2: 86:e9:c6:d9:f5:3c:3d:22:1d:9e:d9:f2:70:69:37:88:9a:b5: bd:7c:da:11:83:6f:e0:27:84:de:f3:ff:39:74:71:2c:2f:a6: f8:36:ad:62:7b:1d:74:69:7c:15:b9:f6:aa:00:20:c4:eb:77: 14:14:7b:f6:44:e5:54:50:e0:ce:d2:0f:94:4f:ac:75:8e:bb: a9:99:43:98:48:37:c1:66:3f:ac:f1:d1:41:4b:4a:39:f3:16: 54:38:f5:a0:53:04:cf:22:38:0f:f1:d7:cf:49:1c:68:68:8f: cc:8d:ba:40:82:39:58:b6:2f:5a:e2:11:10:6d:c6:92:d9:5a: 43:de:b6:53:be:6d:15:e7:64:57:20:0e:19:1d:12:fb:93:f8: c3:d7:8a:39:34:15:cb:86:2f:9a:ef:7f:46:01:10:4a:32:71: c6:82:34:bd:7e:fa:aa:97:08:4c:d2:e0:10:10:e1:e2:83:a8: ce:81:99:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09pe7sUppVVlSFyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTA4NWZhNzAtMzEyYy00Nzg2LWI1ODctYmRiNWZjODdj MzZlMB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk Y2EzMzViNTUtZjU2NS00YzljLWE5OTctOGNmYjBiNjA4MGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXHbH/C3pDUcwF8BZk9tHd2FQdebuilhkVYr Fxh96EhxycgmMfCd3zKCJPHZ9FWUrjwJD5jk0ooPIDdymxLgBc69WEzeFl051bFF elifhcudCom4y4g7ynBQWQ2ppdxE9d4rL7U1nXReeQb+87cejkxAZIj4sByF1V1n 0yWWw0uUm/MVM+Pa1EyTjn4V2guhXLOFeEr2Ra7ct8Gw3sYmhlorqHZkmM8vddZF zVXFKd7g1DVZ2IDU/07VJbfJv1LnCEqECX2WL+77B2NAX0xspU8xKjUsFDFDbp6+ 41A7zRNcDVFT98dN5QHMYlP8KC5MXetkR9UCVGXzyqCLEZtP4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHhX6EAT2RfXzWCpeWz/sCeOhks5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lMDg1 ZmE3MC0zMTJjLTQ3ODYtYjU4Ny1iZGI1ZmM4N2MzNmUvZjQwMThlMzUtZjgwZS0z YjZhLWE0M2YtNTFmOGI5N2Y0NDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTA4NWZhNzAtMzEyYy00Nzg2LWI1 ODctYmRiNWZjODdjMzZlL2UwODVmYTcwLTMxMmMtNDc4Ni1iNTg3LWJkYjVmYzg3 YzM2ZS5jcmwwHwYDVR0jBBgwFoAU+wFZJiVq4yf4fvzRnFfiezQbWG4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lMDg1ZmE3MC0zMTJjLTQ3ODYtYjU4Ny1iZGI1 ZmM4N2MzNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxxNkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEjZ97mxEHubgkDHKPCGSoKDMZ9aobbXNY1G76WoNdqzmYC2r3OX0pqQ Fe0i1iQ1RzU9qThHElavTNEO3uB9+Ev+QSfuFWJN8obpxtn1PD0iHZ7Z8nBpN4ia tb182hGDb+AnhN7z/zl0cSwvpvg2rWJ7HXRpfBW59qoAIMTrdxQUe/ZE5VRQ4M7S D5RPrHWOu6mZQ5hIN8FmP6zx0UFLSjnzFlQ49aBTBM8iOA/x189JHGhoj8yNukCC OVi2L1riERBtxpLZWkPetlO+bRXnZFcgDhkdEvuT+MPXijk0FcuGL5rvf0YBEEoy ccaCNL1++qqXCEzS4BAQ4eKDqM6BmYY= -----END CERTIFICATE-----Generated at Mon Apr 28 17:03:53 2025 by rpki-client