$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/99eeaada-6222-3a6a-b4e1-aada8f09e5f5.roa File: 99eeaada-6222-3a6a-b4e1-aada8f09e5f5.roa (raw, json) Hash identifier: TmHVHN/O1VNcbxAtYP7MU7oQpXWOaOWpthcRrUN4/Uo= Subject key identifier: DB:3D:52:BF:65:8F:79:FB:5C:1E:C0:82:8E:42:6A:69:75:F0:C1:88 Certificate issuer: /CN=8ac1a56b-ea33-4bd6-9d3e-00896a91db6b Certificate serial: 010D0C9F4328584937D93AAE357D987B336750C0 Authority key identifier: 83:75:3A:63:28:AB:E2:8F:7D:C0:A7:3B:4C:3A:33:CA:63:07:13:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/99eeaada-6222-3a6a-b4e1-aada8f09e5f5.roa Signing time: Mon 17 Mar 2025 13:00:52 +0000 ROA not before: Mon 17 Mar 2025 13:00:52 +0000 ROA not after: Sun 15 Jun 2025 13:00:52 +0000 asID: 30045 IP address blocks: 192.219.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:37:d9:3a:ae:35:7d:98:7b:33:67:50:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ac1a56b-ea33-4bd6-9d3e-00896a91db6b Validity Not Before: Mar 17 13:00:52 2025 GMT Not After : Jun 15 13:00:52 2025 GMT Subject: CN=179f2fc9-8e2c-46cd-96be-079e9f7321d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:33:b5:3a:12:88:8a:5e:05:d7:93:7d:d5:9b: 33:17:9f:5d:30:50:2f:24:90:77:d9:5b:d5:0e:d2: b3:3c:c0:31:f1:68:8e:2f:28:58:6c:7b:dc:33:fd: 98:7e:f4:08:28:19:d5:1e:87:c6:bd:c0:e8:87:2d: 41:aa:30:68:c1:d3:81:55:a4:9b:78:56:05:59:0c: 65:23:dc:69:a7:5e:74:2f:c3:e7:25:80:d5:55:e7: 9d:4e:4b:92:92:04:36:c7:c9:8c:08:23:c0:35:53: 47:9d:20:5d:b7:1e:af:b5:b3:58:95:36:e6:c8:f4: a6:4c:04:f5:f5:11:95:a4:3a:70:76:07:57:1e:71: 4d:2c:0a:ad:62:c4:fe:dd:7d:57:10:b0:24:b8:fd: 60:d6:af:08:6d:e1:c5:01:17:be:da:c5:77:58:af: 0e:a0:7e:1b:0a:7a:07:cc:d2:79:e3:57:9b:28:45: 99:4f:0c:3f:e8:fd:ef:7a:ec:13:92:4a:d0:e1:e8: 7e:15:d8:34:5b:83:2b:2e:51:1c:6d:5f:43:06:f8: 73:72:0c:60:9c:c7:2f:f1:d2:02:7d:f6:ae:a1:30: fa:75:16:34:66:ed:2c:ad:41:ca:42:9b:a4:b6:90: 9a:ec:23:a4:ed:14:10:f0:e7:6c:1c:42:a2:17:95: c6:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:3D:52:BF:65:8F:79:FB:5C:1E:C0:82:8E:42:6A:69:75:F0:C1:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/99eeaada-6222-3a6a-b4e1-aada8f09e5f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.crl X509v3 Authority Key Identifier: keyid:83:75:3A:63:28:AB:E2:8F:7D:C0:A7:3B:4C:3A:33:CA:63:07:13:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer sbgp-ipAddrBlock: critical IPv4: 192.219.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:c9:c2:d5:57:68:54:cc:fb:74:24:97:e4:57:6c:fa:fd:4d: c8:9f:ea:7b:99:91:85:f2:01:46:da:18:b5:4d:c2:4f:fd:fe: 6e:f7:33:56:b3:6f:06:0d:e7:02:64:df:fe:97:78:4f:46:51: fa:a9:b3:f4:2c:0a:f3:9c:63:a3:9e:70:71:af:ff:1b:d8:fe: d6:80:04:44:05:f1:71:8d:1a:f8:09:d5:3b:65:0c:de:3f:02: 06:88:5b:ba:28:0b:06:1d:55:3c:4c:5b:00:f8:13:bf:80:a2: fc:bc:98:c4:80:44:d2:c2:53:f2:7d:ed:2c:0e:4e:10:82:f8: 57:19:d1:c7:da:3f:71:e6:22:e6:b7:06:3c:c5:0e:c5:5d:b6: c9:43:de:02:9b:e8:4f:ee:e9:07:27:64:a2:d0:62:35:17:dc: 59:f1:78:15:65:24:13:1d:91:01:02:ca:6d:4d:81:61:4b:41: d8:14:a8:e8:bd:3f:33:31:10:f1:20:48:58:46:51:c6:1c:97: 15:f6:1c:79:23:e5:0a:cc:e2:24:89:0d:d3:8a:cb:3d:99:b7: 4e:80:8a:58:cf:96:2c:c4:4f:b9:23:30:5c:12:bc:23:ef:f9: 87:55:f8:20:56:ec:3d:c5:c2:fe:a6:c9:6e:32:99:3d:22:54: 89:78:18:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk32TquNX2YezNnUMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFjMWE1NmItZWEzMy00YmQ2LTlkM2UtMDA4OTZhOTFk YjZiMB4XDTI1MDMxNzEzMDA1MloXDTI1MDYxNTEzMDA1MlowLzEtMCsGA1UEAxMk MTc5ZjJmYzktOGUyYy00NmNkLTk2YmUtMDc5ZTlmNzMyMWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDO1OhKIil4F15N91ZszF59dMFAvJJB32VvV DtKzPMAx8WiOLyhYbHvcM/2YfvQIKBnVHofGvcDohy1BqjBowdOBVaSbeFYFWQxl I9xpp150L8PnJYDVVeedTkuSkgQ2x8mMCCPANVNHnSBdtx6vtbNYlTbmyPSmTAT1 9RGVpDpwdgdXHnFNLAqtYsT+3X1XELAkuP1g1q8IbeHFARe+2sV3WK8OoH4bCnoH zNJ541ebKEWZTww/6P3veuwTkkrQ4eh+Fdg0W4MrLlEcbV9DBvhzcgxgnMcv8dIC ffauoTD6dRY0Zu0srUHKQpuktpCa7COk7RQQ8OdsHEKiF5XGiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNs9Ur9lj3n7XB7Ago5Caml18MGIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YWMx YTU2Yi1lYTMzLTRiZDYtOWQzZS0wMDg5NmE5MWRiNmIvOTllZWFhZGEtNjIyMi0z YTZhLWI0ZTEtYWFkYThmMDllNWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGFjMWE1NmItZWEzMy00YmQ2LTlk M2UtMDA4OTZhOTFkYjZiLzhhYzFhNTZiLWVhMzMtNGJkNi05ZDNlLTAwODk2YTkx ZGI2Yi5jcmwwHwYDVR0jBBgwFoAUg3U6Yyir4o99wKc7TDozymMHEyUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YWMxYTU2Yi1lYTMzLTRiZDYtOWQzZS0wMDg5 NmE5MWRiNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwNsIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnJwtVXaFTM+3Qkl+RXbPr9Tcif6nuZkYXyAUbaGLVNwk/9/m73M1az bwYN5wJk3/6XeE9GUfqps/QsCvOcY6OecHGv/xvY/taABEQF8XGNGvgJ1TtlDN4/ AgaIW7ooCwYdVTxMWwD4E7+Aovy8mMSARNLCU/J97SwOThCC+FcZ0cfaP3HmIua3 BjzFDsVdtslD3gKb6E/u6QcnZKLQYjUX3FnxeBVlJBMdkQECym1NgWFLQdgUqOi9 PzMxEPEgSFhGUcYclxX2HHkj5QrM4iSJDdOKyz2Zt06AiljPlizET7kjMFwSvCPv +YdV+CBW7D3Fwv6myW4ymT0iVIl4GEg= -----END CERTIFICATE-----Generated at Mon Apr 28 10:36:08 2025 by rpki-client