$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/c0d5de4a-0562-33cc-b40a-38580e29f6b5.roa File: c0d5de4a-0562-33cc-b40a-38580e29f6b5.roa (raw, json) Hash identifier: J0CaDaPFCdNimbOUU5ZU0rOBgp3XYt21cetAzYoqndo= Subject key identifier: 0D:06:55:C1:A4:A1:2C:67:CB:1C:A3:AC:EF:B2:10:B1:57:30:78:C8 Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F43285849A61F3D65DEB6F6C628C18300 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/c0d5de4a-0562-33cc-b40a-38580e29f6b5.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 3356 IP address blocks: 199.0.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:3d:65:de:b6:f6:c6:28:c1:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=1c3235bf-6784-4770-a9e4-583a499665af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:9b:60:45:18:b9:1f:bf:f7:64:e6:83:cf:75: 95:8d:54:90:35:50:43:f6:0a:1e:19:ce:a9:82:28: b8:0f:e8:e1:73:99:46:56:cc:a4:d0:5e:92:a4:6e: f4:ba:85:41:4c:b9:01:aa:de:38:68:60:d4:6c:dc: ba:46:50:bf:8d:2c:fc:ef:c1:d0:f6:f4:de:21:24: 4b:b2:c9:f5:b0:23:64:47:1d:89:19:74:27:78:64: 7e:01:f5:d4:c5:bc:e0:5d:44:ab:fe:a2:db:b5:9e: 60:ed:91:2f:d5:db:cd:3b:97:dd:fc:72:8c:0f:cb: a4:b2:9d:05:e4:d1:51:02:3e:56:1f:ad:99:63:d0: 3c:05:1a:51:ed:de:22:6d:a6:11:9a:b1:09:e9:37: b7:cc:bc:54:cf:a2:5d:13:0c:ed:cf:b5:62:03:d5: cb:b0:8e:1e:1d:bc:b0:b7:e0:ef:b3:1e:a9:3e:10: 73:a7:3f:57:ec:6a:44:07:45:cd:57:0d:52:d3:c0: b8:2d:09:97:08:6f:69:7b:a4:1c:c2:85:3c:56:0d: 56:59:e3:a1:da:3b:54:c2:75:c8:3d:4d:c6:de:22: 27:43:ee:d1:51:07:aa:97:ed:9e:67:39:e4:e2:0b: bc:a4:75:b4:a4:61:cd:41:04:59:0c:98:39:36:79: 03:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:06:55:C1:A4:A1:2C:67:CB:1C:A3:AC:EF:B2:10:B1:57:30:78:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/c0d5de4a-0562-33cc-b40a-38580e29f6b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 199.0.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:30:e1:b2:21:75:57:c4:76:10:e1:d9:50:d3:78:d3:39:09: 33:4a:dd:32:f9:a1:8f:05:b2:39:c8:8a:a3:0e:9b:31:52:76: 6a:90:80:e3:a0:cc:53:e5:6f:74:cb:df:9b:0e:e8:ea:f0:cd: 01:34:15:eb:f9:ed:ce:81:04:cf:4e:6a:9a:9e:fb:15:09:f6: 51:57:1e:8c:c5:98:6f:44:ef:86:ad:10:ab:53:c3:88:5e:fc: d3:b3:b8:a6:ea:df:92:c1:70:b0:a6:c4:16:18:41:e1:db:4f: 84:d2:bf:0e:78:0f:02:9b:33:65:1a:c2:89:0e:d9:50:19:9e: e6:7a:5f:de:94:11:ce:19:da:45:eb:5b:6b:fc:0a:d9:d1:08: 90:6f:0c:b2:ac:3d:b5:95:2c:f8:0b:ea:92:e8:e5:ab:d8:94: ac:49:52:d7:1a:29:f7:6d:d5:a6:93:c5:93:08:83:07:46:a1: 1d:86:2f:c8:85:5f:79:3b:6e:e3:6f:6b:1d:a0:be:56:b0:c6: 6c:fb:26:4c:4f:20:fe:ff:cb:0e:b6:6a:3b:03:7b:72:84:48: d5:b0:15:59:55:07:bd:41:96:09:ea:c5:a4:44:44:6e:af:5a: 3b:05:87:c5:8d:e0:24:92:d8:30:1d:d9:e9:8e:04:80:3b:48: c9:42:27:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmHz1l3rb2xijBgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk MWMzMjM1YmYtNjc4NC00NzcwLWE5ZTQtNTgzYTQ5OTY2NWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJtgRRi5H7/3ZOaDz3WVjVSQNVBD9goeGc6p gii4D+jhc5lGVsyk0F6SpG70uoVBTLkBqt44aGDUbNy6RlC/jSz878HQ9vTeISRL ssn1sCNkRx2JGXQneGR+AfXUxbzgXUSr/qLbtZ5g7ZEv1dvNO5fd/HKMD8uksp0F 5NFRAj5WH62ZY9A8BRpR7d4ibaYRmrEJ6Te3zLxUz6JdEwztz7ViA9XLsI4eHbyw t+Dvsx6pPhBzpz9X7GpEB0XNVw1S08C4LQmXCG9pe6QcwoU8Vg1WWeOh2jtUwnXI PU3G3iInQ+7RUQeql+2eZznk4gu8pHW0pGHNQQRZDJg5NnkDtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA0GVcGkoSxnyxyjrO+yELFXMHjIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvYzBkNWRlNGEtMDU2Mi0z M2NjLWI0MGEtMzg1ODBlMjlmNmI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwC5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgw4bIhdVfEdhDh2VDTeNM5CTNK3TL5oY8FsjnIiqMOmzFSdmqQgOOg zFPlb3TL35sO6OrwzQE0Fev57c6BBM9Oapqe+xUJ9lFXHozFmG9E74atEKtTw4he /NOzuKbq35LBcLCmxBYYQeHbT4TSvw54DwKbM2UawokO2VAZnuZ6X96UEc4Z2kXr W2v8CtnRCJBvDLKsPbWVLPgL6pLo5avYlKxJUtcaKfdt1aaTxZMIgwdGoR2GL8iF X3k7buNvax2gvlawxmz7JkxPIP7/yw62ajsDe3KESNWwFVlVB71BlgnqxaRERG6v WjsFh8WN4CSS2DAd2emOBIA7SMlCJ0Y= -----END CERTIFICATE-----Generated at Sat Apr 26 19:52:13 2025 by rpki-client