$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e/02d90035-da81-3e67-96c7-9feeef8b261e.roa File: 02d90035-da81-3e67-96c7-9feeef8b261e.roa (raw, json) Hash identifier: nHwEuOOJ/MM+lvB7SYUaHvGypG8yLKQiulUKtZ2ztQ0= Subject key identifier: 2F:B9:A8:66:79:BF:A2:2C:6A:A7:47:DA:29:AF:28:67:BE:89:62:F9 Certificate issuer: /CN=45657d9f-043b-4838-9072-ef0906bb567e Certificate serial: 010D0C9F432858492183FE874EA1C4204CBEE900 Authority key identifier: D8:35:B5:C1:42:EB:91:5F:06:FB:C3:99:31:65:E8:42:24:63:EE:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e/02d90035-da81-3e67-96c7-9feeef8b261e.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 16652 IP address blocks: 199.254.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e/45657d9f-043b-4838-9072-ef0906bb567e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e/45657d9f-043b-4838-9072-ef0906bb567e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:83:fe:87:4e:a1:c4:20:4c:be:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45657d9f-043b-4838-9072-ef0906bb567e Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=2e6654eb-2ad3-47b7-a7df-23af973711fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:3b:35:36:5c:02:84:72:6a:c4:cf:a6:71:29: c7:4e:90:77:62:00:6f:d6:f3:cd:b8:03:70:ab:6a: c1:0d:21:4d:9f:ae:d2:a5:75:55:bb:62:81:e1:fd: 5b:3b:86:91:4d:9c:b5:f6:a0:a2:96:0b:0d:e6:0c: b0:c4:b3:fc:78:c3:89:37:f0:aa:54:ae:8d:b8:ee: 51:df:f3:69:f7:28:98:88:2f:37:23:5d:69:19:ab: 05:46:aa:99:e1:45:07:be:d9:f9:0d:1a:5b:5f:c4: 7d:c6:b3:c8:e4:e6:de:88:77:7f:9b:a7:7a:51:26: b3:6f:30:ed:7e:77:aa:d5:2c:32:b6:e2:2e:ea:ba: a3:38:75:51:60:e7:68:92:b5:ab:0e:c6:ae:5e:33: 61:fb:76:2a:f3:8f:72:e0:5f:07:ec:f4:af:74:04: 74:79:c7:66:f0:e8:d5:a2:f9:e1:b6:a6:e0:17:c0: 5a:67:64:9b:38:91:50:67:9d:9c:c7:c9:e3:5a:3f: c6:e8:91:c1:13:c6:47:19:6a:c4:8c:c2:4b:dc:13: 11:68:c5:fd:21:93:be:ea:6a:5b:5b:9c:fe:71:fb: 02:13:a3:4d:88:d5:a4:94:26:cc:c3:e4:c7:a3:4e: 3f:5a:ea:22:c5:37:0b:ac:27:9b:6a:f2:97:23:97: 75:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:B9:A8:66:79:BF:A2:2C:6A:A7:47:DA:29:AF:28:67:BE:89:62:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e/02d90035-da81-3e67-96c7-9feeef8b261e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e/45657d9f-043b-4838-9072-ef0906bb567e.crl X509v3 Authority Key Identifier: keyid:D8:35:B5:C1:42:EB:91:5F:06:FB:C3:99:31:65:E8:42:24:63:EE:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e.cer sbgp-ipAddrBlock: critical IPv4: 199.254.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:c9:5a:dd:6c:2e:49:b9:43:51:ae:86:72:1d:28:55:68:67: 7b:36:50:01:83:c3:f3:1d:97:81:eb:bd:8e:ae:ce:e8:45:b9: 35:3a:3c:f0:e9:47:cb:ac:ba:d0:fe:3b:d2:3d:19:84:ac:6a: ae:cd:0d:54:8f:eb:a3:91:15:9f:e9:85:75:e3:52:ea:57:b7: 69:e2:d9:dd:04:0c:8a:f2:20:c4:af:d8:47:c6:c8:ab:e5:9d: ab:3f:e6:4f:06:b2:a1:24:53:64:9a:44:13:52:e3:15:73:e9: e4:1a:06:7c:06:9b:a4:4e:76:25:4f:92:f2:a9:96:6a:9a:cc: 7d:32:66:f3:b1:8a:f1:68:42:de:2d:80:6b:3c:37:ca:32:10: c3:ca:88:3d:b6:b8:fc:38:b5:57:81:5e:7a:86:a7:af:40:28: 90:cd:17:f8:4c:fc:51:48:15:9d:59:77:90:09:80:c3:2b:fb: ce:fd:84:55:19:ff:eb:75:01:3d:4c:1e:63:3f:41:65:a3:67: b6:e5:2a:8d:cf:3e:ad:bb:27:12:cb:55:fa:52:6c:12:07:0b: 6a:f0:bf:d2:f7:a4:51:45:60:ce:af:0c:a6:e3:13:7e:19:d3: 70:f6:94:0f:81:18:ef:62:96:8d:4d:a6:cd:d1:78:90:d4:ce: b0:e2:17:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhg/6HTqHEIEy+6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU2NTdkOWYtMDQzYi00ODM4LTkwNzItZWYwOTA2YmI1 NjdlMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk MmU2NjU0ZWItMmFkMy00N2I3LWE3ZGYtMjNhZjk3MzcxMWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDs1NlwChHJqxM+mcSnHTpB3YgBv1vPNuANw q2rBDSFNn67SpXVVu2KB4f1bO4aRTZy19qCilgsN5gywxLP8eMOJN/CqVK6NuO5R 3/Np9yiYiC83I11pGasFRqqZ4UUHvtn5DRpbX8R9xrPI5ObeiHd/m6d6USazbzDt fneq1SwytuIu6rqjOHVRYOdokrWrDsauXjNh+3Yq849y4F8H7PSvdAR0ecdm8OjV ovnhtqbgF8BaZ2SbOJFQZ52cx8njWj/G6JHBE8ZHGWrEjMJL3BMRaMX9IZO+6mpb W5z+cfsCE6NNiNWklCbMw+THo04/WuoixTcLrCebavKXI5d1uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC+5qGZ5v6IsaqdH2imvKGe+iWL5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NTY1 N2Q5Zi0wNDNiLTQ4MzgtOTA3Mi1lZjA5MDZiYjU2N2UvMDJkOTAwMzUtZGE4MS0z ZTY3LTk2YzctOWZlZWVmOGIyNjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU2NTdkOWYtMDQzYi00ODM4LTkw NzItZWYwOTA2YmI1NjdlLzQ1NjU3ZDlmLTA0M2ItNDgzOC05MDcyLWVmMDkwNmJi NTY3ZS5jcmwwHwYDVR0jBBgwFoAU2DW1wULrkV8G+8OZMWXoQiRj7mAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NTY1N2Q5Zi0wNDNiLTQ4MzgtOTA3Mi1lZjA5 MDZiYjU2N2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/7uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvJWt1sLkm5Q1GuhnIdKFVoZ3s2UAGDw/Mdl4HrvY6uzuhFuTU6PPDp R8usutD+O9I9GYSsaq7NDVSP66ORFZ/phXXjUupXt2ni2d0EDIryIMSv2EfGyKvl nas/5k8GsqEkU2SaRBNS4xVz6eQaBnwGm6ROdiVPkvKplmqazH0yZvOxivFoQt4t gGs8N8oyEMPKiD22uPw4tVeBXnqGp69AKJDNF/hM/FFIFZ1Zd5AJgMMr+879hFUZ /+t1AT1MHmM/QWWjZ7blKo3PPq27JxLLVfpSbBIHC2rwv9L3pFFFYM6vDKbjE34Z 03D2lA+BGO9ilo1Nps3ReJDUzrDiF9E= -----END CERTIFICATE-----Generated at Wed Apr 30 00:58:58 2025 by rpki-client