$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/2d9d3321-db9f-306c-9228-ae06be4dece8.roa File: 2d9d3321-db9f-306c-9228-ae06be4dece8.roa (raw, json) Hash identifier: lDuOM0aRhNshuwDAZ1jVIhFcbSsvagce0FbNxzZxfq8= Subject key identifier: 24:A3:BE:A3:C7:AA:36:CD:43:1D:48:18:44:DC:EE:FF:33:E1:D2:1E Certificate issuer: /CN=96aa12fd-20f6-4f37-aab7-a27391ae096e Certificate serial: 010D0C9F4328584979743FDDCF650C3B68773E00 Authority key identifier: 64:2E:31:9D:C5:17:1B:E0:F6:CD:30:94:51:D8:10:99:B1:1D:AE:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/2d9d3321-db9f-306c-9228-ae06be4dece8.roa Signing time: Thu 10 Apr 2025 01:00:46 +0000 ROA not before: Thu 10 Apr 2025 01:00:46 +0000 ROA not after: Wed 09 Jul 2025 01:00:46 +0000 asID: 396982 IP address blocks: 199.47.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:79:74:3f:dd:cf:65:0c:3b:68:77:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96aa12fd-20f6-4f37-aab7-a27391ae096e Validity Not Before: Apr 10 01:00:46 2025 GMT Not After : Jul 9 01:00:46 2025 GMT Subject: CN=d1a2fe5b-fbe3-4938-9978-0ce63562ae9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:fd:d4:5f:22:d8:81:bb:ac:8c:64:67:41:bb: 46:f9:35:4d:4b:c4:bf:1e:db:7f:93:d2:5f:f3:6c: c1:f7:f2:3b:b1:a2:8a:3e:04:7b:1e:7b:f4:32:68: 90:0b:99:33:f9:28:1f:bc:bf:8a:2d:04:59:92:39: ff:43:98:6a:6b:40:e9:14:b7:74:e0:fa:44:4e:41: 89:81:35:9c:09:66:45:ab:c9:b6:94:32:d3:54:67: 34:2c:b2:ce:3b:85:19:72:f4:ec:85:d8:58:b5:ed: 11:35:99:b4:d2:20:2d:e0:da:f9:85:bb:8c:24:d0: 15:2d:0e:ba:9f:e9:f6:cf:be:b4:a8:c2:68:ab:36: a5:c7:d4:84:df:0c:b9:f9:7a:de:66:bd:b5:3a:71: 36:75:44:b4:df:b6:0c:ac:57:c4:c9:eb:d6:8b:f6: 5c:c7:6a:bd:b1:fd:c8:f9:b0:75:8c:30:47:40:a9: 9e:48:ca:34:e6:36:11:84:ce:5c:cf:2f:7b:fd:5f: 41:5a:3a:44:ed:e0:3d:d6:27:20:65:62:22:b9:bd: 1c:4f:33:d5:9e:65:c3:28:42:0b:c3:6a:ca:00:c3: ca:8c:03:a8:57:62:fc:46:46:0d:59:97:f8:73:3d: 3a:4d:7c:3e:bd:c3:fa:0a:4b:94:cf:cb:79:fd:1a: da:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:A3:BE:A3:C7:AA:36:CD:43:1D:48:18:44:DC:EE:FF:33:E1:D2:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/2d9d3321-db9f-306c-9228-ae06be4dece8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.crl X509v3 Authority Key Identifier: keyid:64:2E:31:9D:C5:17:1B:E0:F6:CD:30:94:51:D8:10:99:B1:1D:AE:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer sbgp-ipAddrBlock: critical IPv4: 199.47.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:3d:f9:bb:f3:33:d6:61:01:df:ed:79:53:15:28:97:e0:e5: 77:e2:73:17:3a:6c:86:09:59:75:9e:63:c4:1c:df:31:f1:2c: 1c:74:79:6b:a0:e3:17:57:4f:17:ea:d3:c8:7a:3d:04:5a:38: 43:d1:14:29:74:b1:8a:a2:6c:cb:2b:5a:57:a4:f6:12:85:5d: 75:a7:44:59:da:ca:f7:9d:a8:c5:26:5e:8b:02:ac:bb:85:b2: 54:b9:5b:13:04:09:17:be:ec:bb:35:8b:25:48:e7:17:74:02: 56:fb:a5:c9:e2:f1:55:44:80:42:3f:51:9d:84:76:77:fe:6c: 88:07:c7:4e:1e:4b:e4:5b:03:e6:60:60:8f:8a:bc:d5:d4:b3: 16:2f:c8:be:77:96:d9:b0:5b:4e:20:ca:24:2a:cc:e4:c0:ae: 6e:91:fd:9d:59:b7:42:de:b3:52:38:53:81:03:80:9e:32:2b: a9:52:bb:b2:d7:73:1c:6a:42:7f:c9:28:91:be:ab:32:da:96: bd:e5:37:b6:d2:a0:28:64:de:05:6c:4f:27:a1:65:70:1b:83: b9:8c:c1:ca:52:e9:74:fa:0c:15:4f:52:36:3f:77:ab:c4:57: e4:7f:e4:47:62:51:67:6f:cb:5e:1c:f5:ea:35:02:ca:52:45: 4c:0b:f8:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl5dD/dz2UMO2h3PgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTZhYTEyZmQtMjBmNi00ZjM3LWFhYjctYTI3MzkxYWUw OTZlMB4XDTI1MDQxMDAxMDA0NloXDTI1MDcwOTAxMDA0NlowLzEtMCsGA1UEAxMk ZDFhMmZlNWItZmJlMy00OTM4LTk5NzgtMGNlNjM1NjJhZTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjv3UXyLYgbusjGRnQbtG+TVNS8S/Htt/k9Jf 82zB9/I7saKKPgR7Hnv0MmiQC5kz+SgfvL+KLQRZkjn/Q5hqa0DpFLd04PpETkGJ gTWcCWZFq8m2lDLTVGc0LLLOO4UZcvTshdhYte0RNZm00iAt4Nr5hbuMJNAVLQ66 n+n2z760qMJoqzalx9SE3wy5+XreZr21OnE2dUS037YMrFfEyevWi/Zcx2q9sf3I +bB1jDBHQKmeSMo05jYRhM5czy97/V9BWjpE7eA91icgZWIiub0cTzPVnmXDKEIL w2rKAMPKjAOoV2L8RkYNWZf4cz06TXw+vcP6CkuUz8t5/RraEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCSjvqPHqjbNQx1IGETc7v8z4dIeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85NmFh MTJmZC0yMGY2LTRmMzctYWFiNy1hMjczOTFhZTA5NmUvMmQ5ZDMzMjEtZGI5Zi0z MDZjLTkyMjgtYWUwNmJlNGRlY2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOTZhYTEyZmQtMjBmNi00ZjM3LWFh YjctYTI3MzkxYWUwOTZlLzk2YWExMmZkLTIwZjYtNGYzNy1hYWI3LWEyNzM5MWFl MDk2ZS5jcmwwHwYDVR0jBBgwFoAUZC4xncUXG+D2zTCUUdgQmbEdrl8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS85NmFhMTJmZC0yMGY2LTRmMzctYWFiNy1hMjcz OTFhZTA5NmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxy9vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADc9+bvzM9ZhAd/teVMVKJfg5Xficxc6bIYJWXWeY8Qc3zHxLBx0eWug 4xdXTxfq08h6PQRaOEPRFCl0sYqibMsrWlek9hKFXXWnRFnayvedqMUmXosCrLuF slS5WxMECRe+7Ls1iyVI5xd0Alb7pcni8VVEgEI/UZ2Ednf+bIgHx04eS+RbA+Zg YI+KvNXUsxYvyL53ltmwW04gyiQqzOTArm6R/Z1Zt0Les1I4U4EDgJ4yK6lSu7LX cxxqQn/JKJG+qzLalr3lN7bSoChk3gVsTyehZXAbg7mMwcpS6XT6DBVPUjY/d6vE V+R/5EdiUWdvy14c9eo1AspSRUwL+Nk= -----END CERTIFICATE-----Generated at Sat Apr 26 17:39:20 2025 by rpki-client