$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/a43753c7-82e9-3f9b-a08e-bafa55597a98.roa File: a43753c7-82e9-3f9b-a08e-bafa55597a98.roa (raw, json) Hash identifier: k0mR2miYnfHpWtvrJzTxNH/nxsGdTPFofd6j7kZnoxM= Subject key identifier: 6C:60:2C:38:FC:47:09:42:7D:FC:44:6C:F1:F6:FF:B1:33:B1:6B:C7 Certificate issuer: /CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c Certificate serial: 010D0C9F432858499829C84E93C511B035957400 Authority key identifier: 27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/a43753c7-82e9-3f9b-a08e-bafa55597a98.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 125 IP address blocks: 199.64.52.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:c8:4e:93:c5:11:b0:35:95:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=ff504886-09ba-474a-9e27-5baa291886b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:13:6d:b7:c2:3c:c0:46:64:ed:aa:ea:7b:9e: 3b:6f:85:6d:ef:6b:78:97:7e:7c:9b:b1:d5:89:48: 4e:08:84:46:29:0c:f4:e6:bc:60:87:30:c6:56:fb: 86:54:1a:b9:5e:cd:df:b3:bb:22:ae:b5:7d:5d:41: d6:2c:35:ff:78:6f:0f:24:31:64:6d:7a:78:0c:67: 01:60:2b:16:e0:1c:19:1c:cb:5b:fd:a8:f1:8c:7f: 38:b7:c3:0e:50:f1:3b:3c:d3:61:4b:01:d4:7b:32: 2f:c6:5e:f9:4a:0b:78:da:35:a4:60:04:57:e2:40: 1e:ae:c2:38:8c:1a:6e:f7:21:72:ae:6a:3b:de:14: b8:f6:5e:09:fe:3c:0e:0d:00:6f:c3:4e:c2:be:e8: 45:16:b9:3c:4c:61:37:0a:c2:8d:ed:03:7f:ae:e3: 5c:6c:c6:f0:61:31:54:71:6a:09:a1:86:3a:24:eb: 81:dd:15:d0:1e:eb:aa:ec:62:79:e3:31:e9:62:84: df:db:03:e7:ff:64:bc:ca:2d:a4:83:6f:23:b4:c2: 22:99:99:2b:92:c8:96:20:c2:78:1a:e8:d4:28:b9: bb:10:2c:ca:3d:31:05:92:d7:ce:0e:bd:44:90:a8: 01:6f:16:25:74:9f:a8:b2:25:6a:5f:a6:88:9b:d7: 9c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:60:2C:38:FC:47:09:42:7D:FC:44:6C:F1:F6:FF:B1:33:B1:6B:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/a43753c7-82e9-3f9b-a08e-bafa55597a98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl X509v3 Authority Key Identifier: keyid:27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer sbgp-ipAddrBlock: critical IPv4: 199.64.52.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:04:c9:a0:19:15:76:cd:92:a3:82:7a:a5:c7:87:d7:5c:87: f6:68:07:24:9b:d7:6d:0d:9a:80:07:d9:b6:96:4f:b4:aa:12: fd:f0:93:09:59:cd:fd:14:92:5f:14:ca:97:17:73:35:bb:11: ca:f6:f4:9e:22:b3:9f:35:af:47:63:71:2a:ca:e4:67:1f:fc: 1c:a2:bc:c7:57:f0:ad:fd:89:a2:0a:97:12:9a:13:d5:1b:cc: e9:be:ce:47:aa:92:a9:6c:0b:60:67:6f:3d:79:56:c5:ff:fd: 0c:1d:32:d4:70:ca:92:49:4a:0c:e0:61:ac:b7:aa:5f:86:54: 63:c6:68:8b:5b:cc:1f:7d:b9:c5:6c:ed:09:dc:4a:89:c9:13: 2c:62:cc:24:4d:47:83:18:1e:24:43:a0:89:c8:73:fd:86:96: d3:5a:13:7f:60:11:d6:eb:71:c5:c8:4f:cc:fa:b4:95:b4:e6: 07:40:d9:69:36:e6:ec:44:3e:86:63:ef:a7:a1:d3:38:d0:1a: ec:9d:45:b9:4f:57:90:bc:ef:ce:71:d8:bb:0d:ae:c9:8a:eb: e5:94:ac:64:67:96:56:b3:bf:14:9a:42:43:ab:5d:72:bb:81: 4f:1f:23:ee:9d:af:dd:65:ae:15:82:d3:67:09:b4:42:ad:b3: d3:82:c4:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKchOk8URsDWVdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIzMTA3N2QtMDU1OS00ZTdhLTljZGYtZmUwMGE1MTJh YjVjMB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk ZmY1MDQ4ODYtMDliYS00NzRhLTllMjctNWJhYTI5MTg4NmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhNtt8I8wEZk7arqe547b4Vt72t4l358m7HV iUhOCIRGKQz05rxghzDGVvuGVBq5Xs3fs7sirrV9XUHWLDX/eG8PJDFkbXp4DGcB YCsW4BwZHMtb/ajxjH84t8MOUPE7PNNhSwHUezIvxl75Sgt42jWkYARX4kAersI4 jBpu9yFyrmo73hS49l4J/jwODQBvw07CvuhFFrk8TGE3CsKN7QN/ruNcbMbwYTFU cWoJoYY6JOuB3RXQHuuq7GJ54zHpYoTf2wPn/2S8yi2kg28jtMIimZkrksiWIMJ4 GujUKLm7ECzKPTEFktfODr1EkKgBbxYldJ+osiVqX6aIm9ecGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGxgLDj8RwlCffxEbPH2/7EzsWvHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MjMx MDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAwYTUxMmFiNWMvYTQzNzUzYzctODJlOS0z ZjliLWEwOGUtYmFmYTU1NTk3YTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODIzMTA3N2QtMDU1OS00ZTdhLTlj ZGYtZmUwMGE1MTJhYjVjLzgyMzEwNzdkLTA1NTktNGU3YS05Y2RmLWZlMDBhNTEy YWI1Yy5jcmwwHwYDVR0jBBgwFoAUJ1dCrsqoI+3BIFyf8CNlXQVl+3YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MjMxMDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAw YTUxMmFiNWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx0A0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIgEyaAZFXbNkqOCeqXHh9dch/ZoBySb120NmoAH2baWT7SqEv3wkwlZ zf0Ukl8UypcXczW7Ecr29J4is581r0djcSrK5Gcf/ByivMdX8K39iaIKlxKaE9Ub zOm+zkeqkqlsC2Bnbz15VsX//QwdMtRwypJJSgzgYay3ql+GVGPGaItbzB99ucVs 7QncSonJEyxizCRNR4MYHiRDoInIc/2GltNaE39gEdbrccXIT8z6tJW05gdA2Wk2 5uxEPoZj76eh0zjQGuydRblPV5C8785x2LsNrsmK6+WUrGRnllazvxSaQkOrXXK7 gU8fI+6dr91lrhWC02cJtEKts9OCxDc= -----END CERTIFICATE-----Generated at Sat Apr 26 19:19:24 2025 by rpki-client