$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/d3a5dd72-8e2a-305c-8745-ad834707c297.roa File: d3a5dd72-8e2a-305c-8745-ad834707c297.roa (raw, json) Hash identifier: Piw7vgSWhLzQPPyzQG638xpHI2q8kIf0BMTG6XrD70o= Subject key identifier: 50:63:B8:4B:E8:F3:72:B1:9E:59:73:C8:DF:BE:75:1E:5D:45:97:0B Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F43285848FD56B98E4651451A94B02418 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/d3a5dd72-8e2a-305c-8745-ad834707c297.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 211440 IP address blocks: 199.48.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:b9:8e:46:51:45:1a:94:b0:24:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=d260b206-8466-43c7-8a48-80f10e76c350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:4b:08:83:a4:c9:a7:20:32:9e:85:08:48:37: b2:a9:cb:0e:4c:30:0a:10:9b:6c:85:da:4a:da:c2: fd:6f:f9:74:bf:42:c4:0c:20:50:be:5e:89:37:14: 03:47:ca:d6:44:8f:7f:c0:6a:ca:3d:f5:11:43:3f: 1c:8d:15:a7:69:31:06:f1:28:33:c2:92:2d:bb:b5: e1:40:fb:7c:24:52:38:12:c3:fe:de:a4:9a:91:c9: 29:f4:3f:0f:6c:6b:52:5d:e5:6b:aa:9f:d3:31:f3: 70:2a:07:de:0e:b5:18:3b:bd:0b:db:3f:2e:48:50: 05:a0:df:6c:5f:51:f7:f6:ef:86:b2:0c:54:9f:01: 26:b9:61:c4:22:b9:53:a1:eb:2e:fc:74:45:03:fc: 7e:e5:08:e5:f3:ff:a8:c7:d9:97:a7:54:1e:95:85: 2b:b1:e1:64:27:71:63:e2:2b:64:5d:74:62:77:51: 69:4f:a5:52:8f:f8:23:74:70:98:d6:c6:59:1b:69: bd:20:82:bc:46:48:ed:e4:23:0d:19:03:4c:99:76: 88:4d:37:d3:59:05:d4:01:28:43:40:bf:b5:78:ca: 09:27:ad:70:4b:8d:fb:a3:8d:df:0d:15:8d:80:60: 5f:4b:60:0d:1a:57:55:c2:30:69:c6:b2:30:54:fa: 9a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:63:B8:4B:E8:F3:72:B1:9E:59:73:C8:DF:BE:75:1E:5D:45:97:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/d3a5dd72-8e2a-305c-8745-ad834707c297.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 199.48.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:a9:06:90:57:b1:9e:f1:a9:7a:a5:83:c6:26:da:e7:46:e6: df:a0:47:c8:b9:ff:fb:be:97:7d:17:78:fc:9f:77:d4:fc:a8: af:72:74:55:0d:71:42:06:7f:bb:2d:40:9c:9b:05:cf:7f:dc: bf:66:b4:0d:af:c6:44:5c:c3:30:dd:1e:7f:34:6c:16:89:3a: f3:9f:16:98:4d:93:43:01:e0:57:8f:be:ef:b3:3f:e2:1c:f6: 7e:06:85:12:03:7e:04:fb:19:af:58:aa:ba:d8:eb:b2:af:e5: 91:4f:cb:c1:9c:a3:bc:c1:9b:77:d5:fa:d2:a0:7f:b8:6f:07: c0:59:2b:71:cf:a8:52:bf:de:c2:b5:c7:d2:85:4c:f9:14:37: c0:e9:93:14:da:fd:19:af:90:79:8d:8a:d1:fb:eb:14:66:89: 79:6b:eb:af:63:5d:bd:b6:d8:22:37:3a:cb:74:de:46:35:93: db:3a:69:a4:38:56:f2:9c:5f:46:d8:59:e1:18:2d:10:a5:a6: a5:15:79:c2:fb:da:43:e0:2a:a0:e9:e8:6f:ff:82:33:4e:81: 41:ab:0d:c5:4c:2c:3f:1e:12:9d:28:f4:3c:0b:de:5c:6a:dc: cc:3d:59:c6:69:0b:48:b4:37:eb:48:dd:dc:86:c5:77:1c:d7: f2:df:cd:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9VrmORlFFGpSwJBgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZDI2MGIyMDYtODQ2Ni00M2M3LThhNDgtODBmMTBlNzZjMzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5UsIg6TJpyAynoUISDeyqcsOTDAKEJtshdpK 2sL9b/l0v0LEDCBQvl6JNxQDR8rWRI9/wGrKPfURQz8cjRWnaTEG8SgzwpItu7Xh QPt8JFI4EsP+3qSakckp9D8PbGtSXeVrqp/TMfNwKgfeDrUYO70L2z8uSFAFoN9s X1H39u+GsgxUnwEmuWHEIrlToesu/HRFA/x+5Qjl8/+ox9mXp1QelYUrseFkJ3Fj 4itkXXRid1FpT6VSj/gjdHCY1sZZG2m9IIK8Rkjt5CMNGQNMmXaITTfTWQXUAShD QL+1eMoJJ61wS437o43fDRWNgGBfS2ANGldVwjBpxrIwVPqaiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFBjuEvo83KxnllzyN++dR5dRZcLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvZDNhNWRkNzItOGUyYS0z MDVjLTg3NDUtYWQ4MzQ3MDdjMjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzCwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGpBpBXsZ7xqXqlg8Ym2udG5t+gR8i5//u+l30XePyfd9T8qK9ydFUN cUIGf7stQJybBc9/3L9mtA2vxkRcwzDdHn80bBaJOvOfFphNk0MB4FePvu+zP+Ic 9n4GhRIDfgT7Ga9YqrrY67Kv5ZFPy8Gco7zBm3fV+tKgf7hvB8BZK3HPqFK/3sK1 x9KFTPkUN8DpkxTa/RmvkHmNitH76xRmiXlr669jXb222CI3Ost03kY1k9s6aaQ4 VvKcX0bYWeEYLRClpqUVecL72kPgKqDp6G//gjNOgUGrDcVMLD8eEp0o9DwL3lxq 3Mw9WcZpC0i0N+tI3dyGxXcc1/LfzfA= -----END CERTIFICATE-----Generated at Sun Apr 27 00:17:57 2025 by rpki-client