$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/e34efcf0-ea69-3cac-ae2a-e49ee83aad34.roa File: e34efcf0-ea69-3cac-ae2a-e49ee83aad34.roa (raw, json) Hash identifier: Cz+XL9lB/x4SLQNUfsPHWyX2eAR57FPuPx9YVYhwO8k= Subject key identifier: E1:24:FA:76:AA:08:0C:6B:82:1F:E5:A6:F0:B7:50:32:7D:0E:1C:EB Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F43285848D641106F24C39F3D8BF1D1C0 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/e34efcf0-ea69-3cac-ae2a-e49ee83aad34.roa Signing time: Mon 10 Feb 2025 14:00:52 +0000 ROA not before: Mon 10 Feb 2025 14:00:52 +0000 ROA not after: Sun 11 May 2025 13:00:52 +0000 asID: 21949 IP address blocks: 199.7.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d6:41:10:6f:24:c3:9f:3d:8b:f1:d1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Feb 10 14:00:52 2025 GMT Not After : May 11 13:00:52 2025 GMT Subject: CN=fdfd75a2-fc35-43eb-b638-19f00280fee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:aa:66:0e:f9:1f:70:51:f4:ff:c5:dd:e9:d8: 73:0a:51:10:17:2e:4b:96:39:c1:05:bb:e8:64:14: 17:c0:9a:2a:29:a5:0c:83:49:32:f9:51:bf:a1:32: 20:40:47:c9:0e:b1:d0:0c:8e:b1:57:f1:25:17:98: 12:6e:40:32:52:93:6f:ca:a4:c4:fd:dc:91:28:16: 12:ec:f8:31:f6:fb:a4:3a:b7:cf:21:8b:c5:af:12: 38:ef:32:37:78:46:a8:22:a7:bc:ba:58:a1:ff:61: ff:40:55:5a:3e:82:fe:b0:6b:66:6f:1b:c2:7c:77: 9f:85:ea:ed:7b:4d:95:e3:9d:98:d9:6d:c0:d4:a8: 7d:66:dc:a7:34:2c:bd:30:78:9b:59:d5:b4:cd:5b: bd:10:b2:a8:80:a8:b9:a5:35:3d:36:b0:f5:4d:05: 02:e7:06:06:95:9d:1c:1b:80:15:82:bd:c8:e4:cd: 23:42:61:d1:ad:8e:3e:bd:b8:4f:5d:a9:4a:de:95: 75:f1:20:26:21:bc:2f:91:67:a2:47:06:70:29:b6: 75:06:68:c0:f1:f5:f7:9d:f1:a3:23:c3:1a:5e:67: 5b:65:22:27:c2:15:7f:9c:c5:24:30:f7:12:62:f6: d7:77:84:0b:04:cb:43:bf:49:c7:05:14:12:10:df: 00:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:24:FA:76:AA:08:0C:6B:82:1F:E5:A6:F0:B7:50:32:7D:0E:1C:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/e34efcf0-ea69-3cac-ae2a-e49ee83aad34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 199.7.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:76:34:f6:5c:fb:12:54:9d:00:ae:08:5f:25:01:39:ce:cc: 75:4f:1f:6d:af:75:b3:4c:69:93:af:63:47:c9:01:f5:4a:6a: 51:ef:78:d9:14:09:0e:a0:29:0b:8a:a1:a2:7e:75:20:2d:dd: 85:43:fe:d6:b0:b2:39:fb:e9:b9:4d:0d:70:8e:4c:54:63:0f: e3:42:4a:a6:e6:c0:55:40:52:41:30:80:31:30:28:73:2a:d2: 2a:5b:f7:70:4d:cb:69:4b:30:8c:7b:91:71:1b:fd:9c:11:98: b5:09:62:2f:65:b8:33:83:61:36:c5:c1:bf:c0:8f:15:53:dc: 50:c1:d6:20:51:90:39:c1:e8:5f:ae:cb:89:dd:6c:b9:a8:a3: 0d:9e:87:87:b6:fb:9f:54:b4:6d:75:d0:9f:4d:f6:3e:05:97: 03:d7:75:90:ad:68:e1:43:b8:27:59:fd:df:f0:6d:e9:d3:c7: 66:38:f2:13:72:4d:83:c2:a0:66:ee:15:cc:84:71:59:9e:37: b1:b6:4b:b7:c0:54:75:da:77:1a:1f:d0:35:ff:ee:ad:51:2a: 3c:a6:e2:42:b9:91:f1:45:d6:68:36:5c:eb:cb:6c:a4:da:a7: d8:64:22:22:c3:0b:45:c8:6b:ef:8f:31:d5:76:02:2f:32:b1: 69:d1:53:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjWQRBvJMOfPYvx0cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI1MDIxMDE0MDA1MloXDTI1MDUxMTEzMDA1MlowLzEtMCsGA1UEAxMk ZmRmZDc1YTItZmMzNS00M2ViLWI2MzgtMTlmMDAyODBmZWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgapmDvkfcFH0/8Xd6dhzClEQFy5LljnBBbvo ZBQXwJoqKaUMg0ky+VG/oTIgQEfJDrHQDI6xV/ElF5gSbkAyUpNvyqTE/dyRKBYS 7Pgx9vukOrfPIYvFrxI47zI3eEaoIqe8ulih/2H/QFVaPoL+sGtmbxvCfHefhert e02V452Y2W3A1Kh9ZtynNCy9MHibWdW0zVu9ELKogKi5pTU9NrD1TQUC5wYGlZ0c G4AVgr3I5M0jQmHRrY4+vbhPXalK3pV18SAmIbwvkWeiRwZwKbZ1BmjA8fX3nfGj I8MaXmdbZSInwhV/nMUkMPcSYvbXd4QLBMtDv0nHBRQSEN8AcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOEk+naqCAxrgh/lpvC3UDJ9DhzrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvZTM0ZWZjZjAtZWE2OS0z Y2FjLWFlMmEtZTQ5ZWU4M2FhZDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxweQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADd2NPZc+xJUnQCuCF8lATnOzHVPH22vdbNMaZOvY0fJAfVKalHveNkU CQ6gKQuKoaJ+dSAt3YVD/tawsjn76blNDXCOTFRjD+NCSqbmwFVAUkEwgDEwKHMq 0ipb93BNy2lLMIx7kXEb/ZwRmLUJYi9luDODYTbFwb/AjxVT3FDB1iBRkDnB6F+u y4ndbLmoow2eh4e2+59UtG110J9N9j4FlwPXdZCtaOFDuCdZ/d/wbenTx2Y48hNy TYPCoGbuFcyEcVmeN7G2S7fAVHXadxof0DX/7q1RKjym4kK5kfFF1mg2XOvLbKTa p9hkIiLDC0XIa++PMdV2Ai8ysWnRU3M= -----END CERTIFICATE-----Generated at Mon Apr 28 02:33:58 2025 by rpki-client