$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/c39cca32-f395-3fe4-84da-62da6b8d2a29.roa File: c39cca32-f395-3fe4-84da-62da6b8d2a29.roa (raw, json) Hash identifier: HC5UsNDRByysqlBy/3DmztLDccbD+9LAbzpLdlDMRgI= Subject key identifier: 1D:D6:72:E7:02:4C:CA:9B:F7:BD:E8:7D:6B:0C:08:FE:CF:8C:FF:2D Certificate issuer: /CN=cd198da4-dbcc-4bec-a1a0-31d61d5ccc71 Certificate serial: 010D0C9F4328584905B6B3F5AAEF3CDC2882DB00 Authority key identifier: 83:34:B9:70:BA:25:80:24:26:DF:15:AE:FB:C4:6C:D6:42:0B:68:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/c39cca32-f395-3fe4-84da-62da6b8d2a29.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 6079 IP address blocks: 208.99.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:b3:f5:aa:ef:3c:dc:28:82:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd198da4-dbcc-4bec-a1a0-31d61d5ccc71 Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=9b6c7ada-22a3-478a-837a-bfd34b99fd37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:77:b3:e7:8c:22:67:e7:df:0f:0d:79:d8:5f: be:a6:f5:40:eb:75:cd:b3:dc:29:79:1a:e7:26:64: 19:8d:8a:93:e4:f5:8a:3d:ce:86:39:cb:e1:c6:ba: 9e:b2:fe:cc:d7:35:8c:ce:a0:62:7a:89:8b:98:d3: 47:45:32:01:c0:3f:82:c3:fa:6c:55:08:86:fe:1a: d3:f8:af:9e:84:24:eb:8a:b8:65:5e:02:95:29:4e: 84:36:49:8b:2f:cc:86:d3:0a:97:c9:1d:28:d8:cc: 4e:1d:2e:26:07:1b:49:de:31:aa:4c:d2:39:75:f3: 8f:ee:0b:99:d4:52:fd:a2:4b:78:98:fb:17:2b:4c: 61:67:de:12:27:4e:05:0f:4c:ca:74:78:9d:46:b8: 76:ab:c6:a5:84:78:4e:08:46:18:97:55:4d:07:8f: 24:ee:19:07:3e:54:a7:90:88:e6:db:cb:c7:03:5b: 2e:ce:7d:1e:93:08:88:db:76:43:a7:0d:09:71:fe: 0c:7b:de:0b:76:15:98:e7:c2:c7:5d:d9:a6:a7:4f: c1:c9:a2:92:e9:ce:70:3b:6f:9a:1d:c0:27:15:46: 43:f0:5a:d4:43:28:03:fd:3b:37:d5:32:7d:84:18: 5b:f0:9b:e8:3c:66:14:c0:a5:3a:6e:75:9b:f2:26: 70:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:D6:72:E7:02:4C:CA:9B:F7:BD:E8:7D:6B:0C:08:FE:CF:8C:FF:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/c39cca32-f395-3fe4-84da-62da6b8d2a29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.crl X509v3 Authority Key Identifier: keyid:83:34:B9:70:BA:25:80:24:26:DF:15:AE:FB:C4:6C:D6:42:0B:68:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer sbgp-ipAddrBlock: critical IPv4: 208.99.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:8c:f2:90:89:d9:eb:2b:7b:2d:47:b9:b8:40:19:2b:3e:95: 7e:b5:1e:f8:49:2c:0b:06:73:00:aa:fc:84:16:25:c1:03:ee: 44:6e:3e:93:93:b7:29:e3:b4:a0:28:5c:5f:47:a4:ae:5c:06: a4:88:63:8a:7f:99:34:60:91:14:bb:3d:ff:b1:a9:26:04:f5: 33:56:b2:8e:c9:a5:d4:71:28:bc:ea:d1:20:a7:62:72:1a:ed: d1:8f:78:f8:8a:30:bc:9c:4b:4f:90:ca:67:da:40:b2:d0:19: cb:7c:7e:39:26:66:06:8b:7f:b0:1b:ef:93:8e:7d:a0:39:4d: b0:c3:c7:e2:b9:07:3f:d0:13:23:a3:0f:d7:10:97:6a:9e:4d: b7:c3:26:26:27:81:82:71:00:4c:00:dd:ca:79:38:65:16:35: 88:65:e8:6e:69:31:6b:6b:16:62:de:c0:18:d7:9b:dd:09:ed: 69:79:5b:08:6f:76:af:f7:65:b5:d7:e1:96:ed:d9:26:1e:45: 57:cc:f1:f4:35:df:61:4a:27:ff:7a:bc:c4:99:96:83:04:75: df:a4:cd:fc:b6:51:ef:fe:42:55:d0:4f:a2:63:f5:bb:2c:f0: 67:9d:27:99:e9:e4:07:2a:6e:03:c0:05:bd:8b:d3:6c:24:a8: b5:e0:61:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtrP1qu883CiC2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QxOThkYTQtZGJjYy00YmVjLWExYTAtMzFkNjFkNWNj YzcxMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk OWI2YzdhZGEtMjJhMy00NzhhLTgzN2EtYmZkMzRiOTlmZDM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3ez54wiZ+ffDw152F++pvVA63XNs9wpeRrn JmQZjYqT5PWKPc6GOcvhxrqesv7M1zWMzqBieomLmNNHRTIBwD+Cw/psVQiG/hrT +K+ehCTrirhlXgKVKU6ENkmLL8yG0wqXyR0o2MxOHS4mBxtJ3jGqTNI5dfOP7guZ 1FL9okt4mPsXK0xhZ94SJ04FD0zKdHidRrh2q8alhHhOCEYYl1VNB48k7hkHPlSn kIjm28vHA1suzn0ekwiI23ZDpw0Jcf4Me94LdhWY58LHXdmmp0/ByaKS6c5wO2+a HcAnFUZD8FrUQygD/Ts31TJ9hBhb8JvoPGYUwKU6bnWb8iZwFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB3WcucCTMqb973ofWsMCP7PjP8tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZDE5 OGRhNC1kYmNjLTRiZWMtYTFhMC0zMWQ2MWQ1Y2NjNzEvYzM5Y2NhMzItZjM5NS0z ZmU0LTg0ZGEtNjJkYTZiOGQyYTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2QxOThkYTQtZGJjYy00YmVjLWEx YTAtMzFkNjFkNWNjYzcxL2NkMTk4ZGE0LWRiY2MtNGJlYy1hMWEwLTMxZDYxZDVj Y2M3MS5jcmwwHwYDVR0jBBgwFoAUgzS5cLolgCQm3xWu+8Rs1kILaC4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZDE5OGRhNC1kYmNjLTRiZWMtYTFhMC0zMWQ2 MWQ1Y2NjNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0GMkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSM8pCJ2esrey1HubhAGSs+lX61HvhJLAsGcwCq/IQWJcED7kRuPpOT tynjtKAoXF9HpK5cBqSIY4p/mTRgkRS7Pf+xqSYE9TNWso7JpdRxKLzq0SCnYnIa 7dGPePiKMLycS0+QymfaQLLQGct8fjkmZgaLf7Ab75OOfaA5TbDDx+K5Bz/QEyOj D9cQl2qeTbfDJiYngYJxAEwA3cp5OGUWNYhl6G5pMWtrFmLewBjXm90J7Wl5Wwhv dq/3ZbXX4Zbt2SYeRVfM8fQ132FKJ/96vMSZloMEdd+kzfy2Ue/+QlXQT6Jj9bss 8GedJ5np5AcqbgPABb2L02wkqLXgYcc= -----END CERTIFICATE-----Generated at Sat Apr 26 19:55:33 2025 by rpki-client