$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/fe25f1e7-0375-39d5-8b39-0c584de0d8cf.roa File: fe25f1e7-0375-39d5-8b39-0c584de0d8cf.roa (raw, json) Hash identifier: b90n+zhkfgrZjrxmVr5IE+sfzZOS7bCo7bJFj1MTL3U= Subject key identifier: FD:27:1F:FC:01:EF:5A:D5:8F:39:39:28:E7:5D:65:52:15:33:45:E2 Certificate issuer: /CN=73c8aa7b-fac7-4435-95df-f01200da47d9 Certificate serial: 010D0C9F432858494F93E6D6979054EB7694CE80 Authority key identifier: E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/fe25f1e7-0375-39d5-8b39-0c584de0d8cf.roa Signing time: Wed 26 Mar 2025 01:00:40 +0000 ROA not before: Wed 26 Mar 2025 01:00:40 +0000 ROA not after: Tue 24 Jun 2025 01:00:40 +0000 asID: 16509 IP address blocks: 199.66.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4f:93:e6:d6:97:90:54:eb:76:94:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c8aa7b-fac7-4435-95df-f01200da47d9 Validity Not Before: Mar 26 01:00:40 2025 GMT Not After : Jun 24 01:00:40 2025 GMT Subject: CN=a583ef62-0395-4c8f-9b37-01f111cb84d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:85:59:0c:1e:c6:73:e5:6f:c1:f2:78:ec:42: 03:2b:fe:02:50:1d:b5:35:f1:a3:69:3e:e6:f6:6d: 30:d2:f0:c9:9d:4c:8f:3c:38:93:f2:d7:5b:ca:fa: fc:33:27:10:8d:65:82:fa:d8:4c:9e:3f:cc:1d:a9: e2:ed:ca:dd:82:de:0b:1e:cc:99:10:b3:d4:11:1c: 18:ed:0c:82:09:23:e2:ff:eb:0d:04:51:82:9e:b8: 9e:90:f5:26:4b:a3:fd:48:f0:8e:29:16:57:8c:15: e4:1f:c6:b5:09:c7:d9:eb:2e:37:b0:44:bc:cf:bf: db:7b:ed:0e:81:c1:c9:61:3f:00:07:c8:b3:1c:9e: e7:a3:44:ec:f7:ac:7c:2e:a9:d3:42:da:8d:89:61: e2:ae:1f:34:f4:bb:d3:0d:d9:6b:c4:bf:5f:47:08: bf:02:63:c2:94:e2:f5:87:80:96:db:01:c3:96:e2: d7:d2:57:8b:1e:2b:31:3e:2d:03:d6:c4:87:57:5b: 4a:0c:c2:e6:e8:7e:83:3d:8d:dd:7a:30:96:4f:10: 52:90:46:95:83:cc:49:00:7d:51:bb:67:d0:de:52: b5:99:83:d9:fa:4e:29:bc:92:12:84:19:71:48:a2: c9:85:46:2c:c3:f9:be:98:6f:dc:78:f0:e8:b4:d3: 82:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:27:1F:FC:01:EF:5A:D5:8F:39:39:28:E7:5D:65:52:15:33:45:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/fe25f1e7-0375-39d5-8b39-0c584de0d8cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl X509v3 Authority Key Identifier: keyid:E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer sbgp-ipAddrBlock: critical IPv4: 199.66.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:39:53:94:a5:1d:de:a9:8d:da:57:bf:b7:d7:a6:cd:5c:d1: 3b:4c:27:46:70:b1:9f:88:d0:ff:63:d5:90:0c:66:6e:f2:11: 0f:42:9b:38:4d:0d:fb:b6:ed:93:f6:b0:5e:5d:ad:22:74:08: a3:1c:d0:65:dd:02:5b:a0:51:60:34:74:22:83:7b:06:54:b8: 28:d6:ce:af:18:98:e2:a3:ee:0c:f3:67:07:3f:6e:66:13:fd: 1a:69:58:94:47:4b:e0:8e:9b:da:66:39:70:d8:fc:6e:de:f6: a6:83:9b:c0:fc:39:d2:9c:81:df:86:c9:b9:02:95:28:f2:1e: 38:f7:c1:67:84:18:3b:15:c8:e4:65:7b:84:0f:4f:24:75:f9: c8:d3:d1:54:48:c6:da:ac:f5:27:ea:ac:3f:f0:4f:1d:b7:82: 09:92:01:6c:eb:02:81:31:4e:22:17:8f:7f:e4:cf:2a:b0:67: 7b:05:47:0a:d0:68:36:20:79:cf:01:f4:f1:68:c4:9e:05:bb: 82:db:76:34:79:88:9b:74:3f:0f:18:89:7e:33:ff:df:24:20: 4a:9c:7a:45:a3:b8:14:3c:8a:f5:b1:7f:8b:f8:fe:bf:0a:aa: 7a:d7:a6:ae:34:d1:a5:82:9d:72:80:64:ee:dd:62:84:ec:a6: fb:b7:60:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElPk+bWl5BU63aUzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzNjOGFhN2ItZmFjNy00NDM1LTk1ZGYtZjAxMjAwZGE0 N2Q5MB4XDTI1MDMyNjAxMDA0MFoXDTI1MDYyNDAxMDA0MFowLzEtMCsGA1UEAxMk YTU4M2VmNjItMDM5NS00YzhmLTliMzctMDFmMTExY2I4NGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4VZDB7Gc+VvwfJ47EIDK/4CUB21NfGjaT7m 9m0w0vDJnUyPPDiT8tdbyvr8MycQjWWC+thMnj/MHani7crdgt4LHsyZELPUERwY 7QyCCSPi/+sNBFGCnriekPUmS6P9SPCOKRZXjBXkH8a1CcfZ6y43sES8z7/be+0O gcHJYT8AB8izHJ7no0Ts96x8LqnTQtqNiWHirh809LvTDdlrxL9fRwi/AmPClOL1 h4CW2wHDluLX0leLHisxPi0D1sSHV1tKDMLm6H6DPY3dejCWTxBSkEaVg8xJAH1R u2fQ3lK1mYPZ+k4pvJIShBlxSKLJhUYsw/m+mG/cePDotNOCnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP0nH/wB71rVjzk5KOddZVIVM0XiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83M2M4 YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEyMDBkYTQ3ZDkvZmUyNWYxZTctMDM3NS0z OWQ1LThiMzktMGM1ODRkZTBkOGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzNjOGFhN2ItZmFjNy00NDM1LTk1 ZGYtZjAxMjAwZGE0N2Q5LzczYzhhYTdiLWZhYzctNDQzNS05NWRmLWYwMTIwMGRh NDdkOS5jcmwwHwYDVR0jBBgwFoAU479wIdxEWa9cY/l4RGY3xgpdsxwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83M2M4YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEy MDBkYTQ3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx0K/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH85U5SlHd6pjdpXv7fXps1c0TtMJ0ZwsZ+I0P9j1ZAMZm7yEQ9CmzhN Dfu27ZP2sF5drSJ0CKMc0GXdAlugUWA0dCKDewZUuCjWzq8YmOKj7gzzZwc/bmYT /RppWJRHS+COm9pmOXDY/G7e9qaDm8D8OdKcgd+GybkClSjyHjj3wWeEGDsVyORl e4QPTyR1+cjT0VRIxtqs9SfqrD/wTx23ggmSAWzrAoExTiIXj3/kzyqwZ3sFRwrQ aDYgec8B9PFoxJ4Fu4LbdjR5iJt0Pw8YiX4z/98kIEqcekWjuBQ8ivWxf4v4/r8K qnrXpq400aWCnXKAZO7dYoTspvu3YHY= -----END CERTIFICATE-----Generated at Sat Apr 26 14:51:06 2025 by rpki-client