$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/208a5d2f-5933-32e5-aaaa-898bcac06735.roa File: 208a5d2f-5933-32e5-aaaa-898bcac06735.roa (raw, json) Hash identifier: q2DK5aSe140mLme/05IFmDdOVrkM6G+qyeMPSvrjT6g= Subject key identifier: F3:1F:67:73:86:32:7E:64:A9:72:F4:DA:DE:84:7A:A2:B3:5C:D6:1F Certificate issuer: /CN=8ac1a56b-ea33-4bd6-9d3e-00896a91db6b Certificate serial: 010D0C9F4328584937D93AD6D9EA69BAF84C79C0 Authority key identifier: 83:75:3A:63:28:AB:E2:8F:7D:C0:A7:3B:4C:3A:33:CA:63:07:13:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/208a5d2f-5933-32e5-aaaa-898bcac06735.roa Signing time: Mon 17 Mar 2025 13:00:52 +0000 ROA not before: Mon 17 Mar 2025 13:00:52 +0000 ROA not after: Sun 15 Jun 2025 13:00:52 +0000 asID: 30045 IP address blocks: 199.212.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:37:d9:3a:d6:d9:ea:69:ba:f8:4c:79:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ac1a56b-ea33-4bd6-9d3e-00896a91db6b Validity Not Before: Mar 17 13:00:52 2025 GMT Not After : Jun 15 13:00:52 2025 GMT Subject: CN=b42218ac-b624-40a5-9bef-ddbec526adce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5b:d2:be:86:74:6a:23:6f:85:2c:0e:c1:74: e0:ee:ee:78:04:d1:75:e5:cf:e5:90:ea:84:a8:4b: 5b:14:38:8e:50:8f:2a:25:c2:58:50:17:c5:37:cb: 3f:84:91:9c:3c:2d:86:07:fd:df:1d:45:ab:42:d5: 40:8e:4b:97:bd:f0:e9:78:24:3e:a4:c8:fa:2c:7d: dd:3d:74:50:98:3a:32:31:33:0f:5f:9f:1c:ad:c4: fa:76:02:88:27:15:ec:7e:39:71:c1:63:38:81:2c: 5b:33:f7:81:fa:1e:f1:45:4f:91:9e:89:7c:db:9d: 13:41:3b:ab:6a:44:5d:98:5d:15:3e:4c:a0:6f:19: bc:c0:71:e8:33:c8:f0:a9:ba:72:2a:21:ee:3f:78: ea:84:8d:c3:c6:23:18:fd:13:2d:3b:59:1d:06:27: 64:d3:11:df:eb:b2:6d:7e:53:d0:29:8f:40:dc:99: 99:58:51:83:e0:f2:c8:ed:2e:51:f4:35:9b:36:44: ae:46:3d:a8:97:10:0c:17:e7:c7:80:e5:3e:c5:92: 7f:a1:40:b2:6c:d3:1d:4c:5f:be:fa:43:9c:e8:9e: 8e:86:38:28:9a:2c:6f:de:ba:a4:70:0f:d2:ba:96: fe:12:8a:a8:fe:73:45:ad:34:b8:87:8b:2a:d9:08: d0:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:1F:67:73:86:32:7E:64:A9:72:F4:DA:DE:84:7A:A2:B3:5C:D6:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/208a5d2f-5933-32e5-aaaa-898bcac06735.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.crl X509v3 Authority Key Identifier: keyid:83:75:3A:63:28:AB:E2:8F:7D:C0:A7:3B:4C:3A:33:CA:63:07:13:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer sbgp-ipAddrBlock: critical IPv4: 199.212.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:19:02:2d:1e:cc:2c:c6:ff:f9:c9:0c:fa:a1:3b:4e:24:9c: 8d:69:f0:90:3d:12:4f:4b:f4:f9:9f:33:79:0e:fc:ed:e7:d6: d6:7d:d5:ba:1c:10:1f:6e:60:71:5a:0a:4b:f7:52:f7:f4:ac: 3e:12:fd:83:0f:1f:7f:14:22:58:41:10:4b:77:ac:c7:01:96: 1c:2b:a3:8b:d0:71:2c:b1:4c:a0:65:0e:35:8d:9b:25:33:c9: 70:1f:7a:cc:d5:60:d3:d5:18:56:5f:04:e4:3e:4e:5e:e2:ab: db:91:e5:08:50:42:f5:9e:45:4d:8a:35:dc:6b:47:68:55:62: 97:54:27:cc:8e:d2:8d:78:8b:6c:da:de:61:0a:5d:27:83:ea: 2e:2f:1e:8d:98:07:6f:d8:90:1b:11:41:90:b6:0e:4d:a3:69: 77:9d:75:57:b0:69:7b:98:0a:18:c8:98:3b:27:a3:d1:be:b0: 3a:9c:5e:f2:19:a4:39:81:17:ba:db:60:ea:04:19:c3:96:97: 9f:1c:f3:2e:1e:b2:12:27:fc:ff:f7:66:51:75:1d:6a:8a:08: 96:f6:38:30:5a:32:82:12:94:0f:08:84:a7:87:af:70:aa:bd: 03:97:be:ea:60:f9:3f:4c:d5:08:5a:68:43:0d:ab:b0:ae:76: 8e:bc:42:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk32TrW2eppuvhMecAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFjMWE1NmItZWEzMy00YmQ2LTlkM2UtMDA4OTZhOTFk YjZiMB4XDTI1MDMxNzEzMDA1MloXDTI1MDYxNTEzMDA1MlowLzEtMCsGA1UEAxMk YjQyMjE4YWMtYjYyNC00MGE1LTliZWYtZGRiZWM1MjZhZGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1vSvoZ0aiNvhSwOwXTg7u54BNF15c/lkOqE qEtbFDiOUI8qJcJYUBfFN8s/hJGcPC2GB/3fHUWrQtVAjkuXvfDpeCQ+pMj6LH3d PXRQmDoyMTMPX58crcT6dgKIJxXsfjlxwWM4gSxbM/eB+h7xRU+Rnol8250TQTur akRdmF0VPkygbxm8wHHoM8jwqbpyKiHuP3jqhI3DxiMY/RMtO1kdBidk0xHf67Jt flPQKY9A3JmZWFGD4PLI7S5R9DWbNkSuRj2olxAMF+fHgOU+xZJ/oUCybNMdTF++ +kOc6J6Ohjgomixv3rqkcA/Supb+Eoqo/nNFrTS4h4sq2QjQ6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPMfZ3OGMn5kqXL02t6EeqKzXNYfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YWMx YTU2Yi1lYTMzLTRiZDYtOWQzZS0wMDg5NmE5MWRiNmIvMjA4YTVkMmYtNTkzMy0z MmU1LWFhYWEtODk4YmNhYzA2NzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGFjMWE1NmItZWEzMy00YmQ2LTlk M2UtMDA4OTZhOTFkYjZiLzhhYzFhNTZiLWVhMzMtNGJkNi05ZDNlLTAwODk2YTkx ZGI2Yi5jcmwwHwYDVR0jBBgwFoAUg3U6Yyir4o99wKc7TDozymMHEyUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YWMxYTU2Yi1lYTMzLTRiZDYtOWQzZS0wMDg5 NmE5MWRiNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx9QEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAAZAi0ezCzG//nJDPqhO04knI1p8JA9Ek9L9PmfM3kO/O3n1tZ91boc EB9uYHFaCkv3Uvf0rD4S/YMPH38UIlhBEEt3rMcBlhwro4vQcSyxTKBlDjWNmyUz yXAfeszVYNPVGFZfBOQ+Tl7iq9uR5QhQQvWeRU2KNdxrR2hVYpdUJ8yO0o14i2za 3mEKXSeD6i4vHo2YB2/YkBsRQZC2Dk2jaXeddVewaXuYChjImDsno9G+sDqcXvIZ pDmBF7rbYOoEGcOWl58c8y4eshIn/P/3ZlF1HWqKCJb2ODBaMoISlA8IhKeHr3Cq vQOXvupg+T9M1QhaaEMNq7Cudo68Qgk= -----END CERTIFICATE-----Generated at Tue Apr 29 01:22:56 2025 by rpki-client