$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/eb45dc83-d338-3cf2-ad31-602fdd36b7fd.roa File: eb45dc83-d338-3cf2-ad31-602fdd36b7fd.roa (raw, json) Hash identifier: 9ipRebw/+WDpx01JSSoBTC/OVsh3GYb2kDFjFn7S9TM= Subject key identifier: E6:D3:2B:7D:6C:1E:E1:CA:DA:D1:BB:B1:9F:C1:7C:97:88:63:F9:7B Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F43285849A61F42A4A207202460C09300 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/eb45dc83-d338-3cf2-ad31-602fdd36b7fd.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 3356 IP address blocks: 199.0.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:42:a4:a2:07:20:24:60:c0:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=1ca56489-02e6-47ca-a1f9-4a106bfc145b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b0:5c:82:16:fc:0e:62:d0:03:12:70:e0:2d: da:18:48:0a:92:85:ad:ed:b5:30:e3:63:a1:f5:e4: 96:57:62:90:c4:40:51:27:6c:3c:e2:56:34:cf:89: cd:25:25:08:84:4e:bd:f1:02:b8:e4:76:3f:ca:40: 1a:82:d2:7b:8c:ed:e1:42:ab:ff:a6:14:fa:37:73: 7e:33:3e:1e:bb:7f:4b:d5:f3:b4:e2:d7:fc:04:a4: 11:e5:f1:c2:ba:37:a1:85:62:80:7e:09:a4:b4:95: 6b:a7:8e:4a:70:f1:1e:52:f8:ab:6f:42:eb:31:e8: ec:96:26:2d:8f:31:fd:e2:e5:9a:12:7e:d8:3a:17: c9:19:0b:72:3a:8b:90:73:e7:60:1f:43:29:09:ae: 21:a3:dd:79:d6:d8:f8:a9:63:6a:93:69:80:cb:f3: ba:c7:53:ba:99:ff:9d:fb:4d:cb:26:94:bb:b3:49: 4a:fd:6c:d1:1e:e6:c8:23:77:51:13:83:9a:1b:9d: 5b:21:2b:9d:65:ca:16:82:23:69:f1:24:80:02:dd: 46:dc:7d:6e:13:ed:f6:e1:56:4b:7a:62:1f:82:76: 50:45:35:f4:5f:08:a6:75:ef:e4:7e:8b:bf:b7:a5: 29:18:58:01:f8:98:08:62:ae:bd:96:ed:24:f1:58: b9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:D3:2B:7D:6C:1E:E1:CA:DA:D1:BB:B1:9F:C1:7C:97:88:63:F9:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/eb45dc83-d338-3cf2-ad31-602fdd36b7fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 199.0.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:58:1e:eb:84:c5:02:f2:9e:9f:2b:59:61:74:00:e7:0a:22: c9:df:d9:c9:22:51:1f:70:3b:ee:ac:db:10:c4:2d:9c:e7:a8: 87:9c:f2:03:57:96:33:ab:e5:28:f5:c5:b3:1b:36:de:e8:f4: 1e:c3:45:51:f4:a2:36:63:c6:6a:5e:b5:4a:c6:fa:48:1f:58: 65:d5:cd:27:7e:bb:0a:a5:15:a0:f0:7a:df:45:72:89:a7:8a: f6:0a:4b:8f:fd:15:64:a7:2c:3e:e5:c6:95:b9:6f:36:db:6a: ce:1c:ca:0c:53:d0:4f:b0:e7:d0:4b:c4:7f:5e:09:1d:1e:27: ec:46:73:43:64:b8:5f:8a:b9:29:40:8e:c2:f8:d7:01:04:91: 94:0c:c8:10:39:5e:f7:b4:9d:1a:77:6b:29:77:99:8f:ad:12: 34:85:3a:57:3d:e3:99:6a:60:b4:b8:c7:d0:cf:7f:4e:c3:3c: 58:36:06:5b:3a:d9:83:bf:a2:33:7b:e9:cd:f8:16:bb:5a:ee: f1:30:49:b6:9c:73:d2:62:9f:fa:96:bd:3c:4b:5d:78:15:57: 2d:6c:31:75:dc:40:8b:1e:5d:ee:3b:6b:19:84:db:05:28:d2: b6:ef:00:68:be:8c:d9:a5:48:ad:fc:04:bf:cd:77:88:53:fc: 38:57:5c:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmH0KkogcgJGDAkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk MWNhNTY0ODktMDJlNi00N2NhLWExZjktNGExMDZiZmMxNDViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLBcghb8DmLQAxJw4C3aGEgKkoWt7bUw42Oh 9eSWV2KQxEBRJ2w84lY0z4nNJSUIhE698QK45HY/ykAagtJ7jO3hQqv/phT6N3N+ Mz4eu39L1fO04tf8BKQR5fHCujehhWKAfgmktJVrp45KcPEeUvirb0LrMejsliYt jzH94uWaEn7YOhfJGQtyOouQc+dgH0MpCa4ho9151tj4qWNqk2mAy/O6x1O6mf+d +03LJpS7s0lK/WzRHubII3dRE4OaG51bISudZcoWgiNp8SSAAt1G3H1uE+324VZL emIfgnZQRTX0Xwimde/kfou/t6UpGFgB+JgIYq69lu0k8Vi57QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFObTK31sHuHK2tG7sZ/BfJeIY/l7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvZWI0NWRjODMtZDMzOC0z Y2YyLWFkMzEtNjAyZmRkMzZiN2ZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwC4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJYHuuExQLynp8rWWF0AOcKIsnf2ckiUR9wO+6s2xDELZznqIec8gNX ljOr5Sj1xbMbNt7o9B7DRVH0ojZjxmpetUrG+kgfWGXVzSd+uwqlFaDwet9Fcomn ivYKS4/9FWSnLD7lxpW5bzbbas4cygxT0E+w59BLxH9eCR0eJ+xGc0NkuF+KuSlA jsL41wEEkZQMyBA5Xve0nRp3ayl3mY+tEjSFOlc945lqYLS4x9DPf07DPFg2Bls6 2YO/ojN76c34Frta7vEwSbacc9Jin/qWvTxLXXgVVy1sMXXcQIseXe47axmE2wUo 0rbvAGi+jNmlSK38BL/Nd4hT/DhXXGQ= -----END CERTIFICATE-----Generated at Sat Apr 26 15:55:25 2025 by rpki-client