$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/fd19fa80-d37b-34fb-b500-b3be510154b7.roa File: fd19fa80-d37b-34fb-b500-b3be510154b7.roa (raw, json) Hash identifier: m5d85jgD4U1YwJ2tPjwd/9DZbtt99hk4xZqiJqBJJJQ= Subject key identifier: 0D:C9:A9:9F:F6:55:D9:4D:BF:9F:72:FE:7F:4E:93:22:55:50:58:86 Certificate issuer: /CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c Certificate serial: 010D0C9F43285849780F134A732E3222EB5F7880 Authority key identifier: 27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/fd19fa80-d37b-34fb-b500-b3be510154b7.roa Signing time: Wed 09 Apr 2025 13:01:01 +0000 ROA not before: Wed 09 Apr 2025 13:01:01 +0000 ROA not after: Tue 08 Jul 2025 13:01:01 +0000 asID: 125 IP address blocks: 199.64.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:78:0f:13:4a:73:2e:32:22:eb:5f:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c Validity Not Before: Apr 9 13:01:01 2025 GMT Not After : Jul 8 13:01:01 2025 GMT Subject: CN=a77456f8-11f5-431f-af5e-8a20eb059f80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3b:71:0d:a0:16:c7:02:8e:0b:55:b1:e4:60: ee:17:f4:f3:ff:0a:76:77:97:94:a8:c5:95:32:6b: 1f:9a:f6:d8:88:7d:fd:d6:36:14:1f:c9:d0:8f:d2: 63:41:95:4d:c3:d9:bb:db:9d:db:51:44:f5:0c:e2: df:30:72:71:39:f2:37:bd:33:89:7a:2e:4a:65:eb: df:94:3b:bc:6f:17:f4:94:80:ad:d5:ae:ea:8a:e0: 21:58:49:c3:4f:66:51:6d:82:63:ef:8b:d6:5d:49: 2e:13:a9:99:65:43:36:8d:9f:15:12:65:ba:e6:b7: 55:d0:a1:ee:f6:f3:9b:e8:cb:7e:63:29:7e:05:f7: 2e:44:49:96:98:7b:01:aa:03:f0:15:14:c4:ad:fc: 19:84:57:29:e0:7d:4d:6c:36:f8:b3:b5:93:71:88: 96:0d:bf:e0:08:40:ec:34:53:9b:ae:c1:84:9d:68: 55:b9:5c:01:3b:c8:e1:a5:a4:1a:a4:83:25:42:d7: 9b:99:4c:8b:40:86:06:ed:62:89:d1:da:29:09:34: dc:df:9c:6c:39:f1:69:38:9f:d5:08:ac:a9:86:5b: 52:a9:55:a1:a8:19:e5:23:f6:19:0a:1c:9e:36:f3: b7:a0:77:f7:d4:f8:d6:04:85:e3:ff:a4:82:2e:3e: eb:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:C9:A9:9F:F6:55:D9:4D:BF:9F:72:FE:7F:4E:93:22:55:50:58:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/fd19fa80-d37b-34fb-b500-b3be510154b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl X509v3 Authority Key Identifier: keyid:27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer sbgp-ipAddrBlock: critical IPv4: 199.64.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:7c:b1:1c:5b:bb:7c:20:6c:0b:b0:41:7e:dd:b7:ed:03:0b: 77:56:54:50:08:0a:7e:a8:1e:64:ea:9b:0a:28:be:38:7f:f4: 35:3b:8b:6d:c8:2d:a8:fa:52:d0:23:2d:f1:13:52:e9:24:61: ae:ec:c5:d0:a5:ad:b0:0c:da:88:e5:06:45:ec:12:57:3f:83: d8:c3:d8:36:c0:2e:76:30:9b:95:dc:6d:1a:23:b6:42:66:95: ec:08:7c:a1:eb:d6:56:71:d6:78:d9:9a:3c:c7:77:0e:c9:47: 07:0f:46:a3:0c:91:1d:65:cf:0e:60:55:a9:e1:44:a0:93:4e: 47:65:c0:33:1a:04:a3:7a:9b:c8:66:f1:b8:01:e9:44:5d:aa: cd:b9:7a:b8:0c:42:cc:b7:6e:dd:a2:27:e8:15:d6:5a:f4:40: 8b:bc:22:43:ae:81:79:ad:a6:5f:c6:7d:3b:51:f8:c5:3f:3f: 9e:84:6c:53:18:a5:40:19:d1:0d:53:97:f0:da:00:1f:4f:5f: f4:1e:58:b5:99:8c:57:42:be:1e:e9:f8:08:8c:62:5d:a2:11: 4b:59:8b:65:31:6e:c9:97:9c:b2:50:19:96:34:e6:13:f5:40: 2c:6e:1d:81:e8:56:ff:fb:d3:62:99:bc:3a:37:f5:45:16:30: 27:29:4b:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl4DxNKcy4yIutfeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIzMTA3N2QtMDU1OS00ZTdhLTljZGYtZmUwMGE1MTJh YjVjMB4XDTI1MDQwOTEzMDEwMVoXDTI1MDcwODEzMDEwMVowLzEtMCsGA1UEAxMk YTc3NDU2ZjgtMTFmNS00MzFmLWFmNWUtOGEyMGViMDU5ZjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DtxDaAWxwKOC1Wx5GDuF/Tz/wp2d5eUqMWV MmsfmvbYiH391jYUH8nQj9JjQZVNw9m7253bUUT1DOLfMHJxOfI3vTOJei5KZevf lDu8bxf0lICt1a7qiuAhWEnDT2ZRbYJj74vWXUkuE6mZZUM2jZ8VEmW65rdV0KHu 9vOb6Mt+Yyl+BfcuREmWmHsBqgPwFRTErfwZhFcp4H1NbDb4s7WTcYiWDb/gCEDs NFObrsGEnWhVuVwBO8jhpaQapIMlQtebmUyLQIYG7WKJ0dopCTTc35xsOfFpOJ/V CKyphltSqVWhqBnlI/YZChyeNvO3oHf31PjWBIXj/6SCLj7rTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA3JqZ/2VdlNv59y/n9OkyJVUFiGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MjMx MDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAwYTUxMmFiNWMvZmQxOWZhODAtZDM3Yi0z NGZiLWI1MDAtYjNiZTUxMDE1NGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODIzMTA3N2QtMDU1OS00ZTdhLTlj ZGYtZmUwMGE1MTJhYjVjLzgyMzEwNzdkLTA1NTktNGU3YS05Y2RmLWZlMDBhNTEy YWI1Yy5jcmwwHwYDVR0jBBgwFoAUJ1dCrsqoI+3BIFyf8CNlXQVl+3YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MjMxMDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAw YTUxMmFiNWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx0CkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGR8sRxbu3wgbAuwQX7dt+0DC3dWVFAICn6oHmTqmwoovjh/9DU7i23I Laj6UtAjLfETUukkYa7sxdClrbAM2ojlBkXsElc/g9jD2DbALnYwm5XcbRojtkJm lewIfKHr1lZx1njZmjzHdw7JRwcPRqMMkR1lzw5gVanhRKCTTkdlwDMaBKN6m8hm 8bgB6URdqs25ergMQsy3bt2iJ+gV1lr0QIu8IkOugXmtpl/GfTtR+MU/P56EbFMY pUAZ0Q1Tl/DaAB9PX/QeWLWZjFdCvh7p+AiMYl2iEUtZi2UxbsmXnLJQGZY05hP1 QCxuHYHoVv/702KZvDo39UUWMCcpS+g= -----END CERTIFICATE-----Generated at Sat Apr 26 17:49:54 2025 by rpki-client