$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/95288216-711e-31bc-8bb7-23252f7aee62.roa File: 95288216-711e-31bc-8bb7-23252f7aee62.roa (raw, json) Hash identifier: +j5YGPXonwlBKmt+q6fGhnmrCtd20cd27aomiMZPjk4= Subject key identifier: E8:DE:F4:3A:67:4D:87:B7:3A:11:91:2C:F6:D2:D5:28:3F:57:58:E2 Certificate issuer: /CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76 Certificate serial: 010D0C9F432858491ED6D67C8C18BF1DBEE24F00 Authority key identifier: D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/95288216-711e-31bc-8bb7-23252f7aee62.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 16509 IP address blocks: 199.187.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:d6:7c:8c:18:bf:1d:be:e2:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76 Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=d8ce903d-c3a4-4c50-940f-0dfb99062c14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:80:0c:cf:c7:0a:ab:84:db:76:2a:98:ae:9b: c0:ab:21:4d:22:4d:5e:8e:c8:84:02:84:83:14:ab: 84:33:ef:0a:49:bf:33:fd:4d:5e:32:4d:b0:f9:7d: 26:42:b8:99:44:09:34:a6:db:a3:c1:fd:ae:ba:13: a6:2c:42:e1:3c:08:5e:f2:19:5e:c5:79:91:f6:39: 28:38:3c:33:e2:f7:b3:3d:2f:76:af:ad:d6:2c:8a: 95:f8:a3:b5:09:ee:93:11:47:1c:8d:1f:f5:99:94: 02:27:29:0b:6b:08:84:57:5e:1a:1d:ab:33:bb:32: 1f:45:bc:fe:24:02:f7:7e:55:45:8c:4a:97:e1:b4: e0:ca:18:68:36:fb:6e:ad:bf:36:82:8d:50:7a:98: 87:03:8d:b1:c8:3e:3d:63:ed:36:21:81:54:c3:05: 27:d4:07:50:15:c8:66:22:59:e2:22:58:61:8c:0e: 28:84:0f:cd:03:76:04:c6:af:93:1a:bb:40:97:fe: 7a:8f:aa:34:d3:02:4b:72:30:98:64:b0:6b:e2:b6: b3:c0:94:fa:cc:bb:c7:ad:85:80:00:91:e3:76:69: ad:46:c7:a3:52:85:59:c7:96:84:bc:fa:c7:e7:20: 69:b8:9c:74:d8:09:d7:5b:b4:80:5d:ef:ce:07:11: 29:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:DE:F4:3A:67:4D:87:B7:3A:11:91:2C:F6:D2:D5:28:3F:57:58:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/95288216-711e-31bc-8bb7-23252f7aee62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.crl X509v3 Authority Key Identifier: keyid:D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer sbgp-ipAddrBlock: critical IPv4: 199.187.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:b8:7b:cd:1b:57:55:06:1c:17:0d:49:8e:6f:0e:95:65:f3: dc:18:9b:2e:f7:74:45:b0:82:4e:86:79:94:fd:51:bf:9a:b6: 6d:24:0f:e8:dc:db:82:a0:46:1d:f9:64:6b:c5:7f:7e:5b:96: d1:7b:6d:af:9b:b3:5a:e7:5f:a9:ce:00:fe:34:44:30:ad:50: df:22:80:05:83:15:92:da:bc:06:5a:ca:19:35:c2:25:dd:3d: 96:77:56:35:b4:42:cf:e0:84:56:e6:8a:37:06:89:e0:6c:a1: 27:45:42:ab:e7:8d:f1:c9:8c:37:4b:5a:7a:ec:83:27:53:29: 45:1c:29:44:37:4e:68:be:f7:33:b7:7b:38:2d:6f:a7:ba:54: 0a:bb:8b:5a:a3:6a:41:37:29:c7:76:9f:0f:30:32:18:5a:53: 94:5f:74:64:ab:5e:df:7e:0f:e4:6a:2a:e3:7d:f4:1e:cd:32: 0d:08:fc:be:59:49:12:6a:d4:5e:58:04:62:2b:ec:27:70:8e: d4:68:e1:2b:08:d2:5e:37:d3:25:e4:71:ea:a2:bd:41:57:93: 96:a7:8e:bd:7e:59:2c:01:7e:15:7e:13:d5:44:fb:47:8d:52: 53:2c:0d:d5:3e:52:6b:b5:8b:49:51:05:be:38:d8:b8:12:0b: a2:f1:15:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1tZ8jBi/Hb7iTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNmNDM1YzAtOWQyOC00NzdhLTkwYTktMWI0ZmQ3NWNk YTc2MB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk ZDhjZTkwM2QtYzNhNC00YzUwLTk0MGYtMGRmYjk5MDYyYzE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3oAMz8cKq4TbdiqYrpvAqyFNIk1ejsiEAoSD FKuEM+8KSb8z/U1eMk2w+X0mQriZRAk0ptujwf2uuhOmLELhPAhe8hlexXmR9jko ODwz4vezPS92r63WLIqV+KO1Ce6TEUccjR/1mZQCJykLawiEV14aHaszuzIfRbz+ JAL3flVFjEqX4bTgyhhoNvturb82go1QepiHA42xyD49Y+02IYFUwwUn1AdQFchm IlniIlhhjA4ohA/NA3YExq+TGrtAl/56j6o00wJLcjCYZLBr4razwJT6zLvHrYWA AJHjdmmtRsejUoVZx5aEvPrH5yBpuJx02AnXW7SAXe/OBxEpmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOje9DpnTYe3OhGRLPbS1Sg/V1jiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xY2Y0 MzVjMC05ZDI4LTQ3N2EtOTBhOS0xYjRmZDc1Y2RhNzYvOTUyODgyMTYtNzExZS0z MWJjLThiYjctMjMyNTJmN2FlZTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMWNmNDM1YzAtOWQyOC00NzdhLTkw YTktMWI0ZmQ3NWNkYTc2LzFjZjQzNWMwLTlkMjgtNDc3YS05MGE5LTFiNGZkNzVj ZGE3Ni5jcmwwHwYDVR0jBBgwFoAU1T8UX0FTWvBBwtK/fTtQ5jUy/9QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xY2Y0MzVjMC05ZDI4LTQ3N2EtOTBhOS0xYjRm ZDc1Y2RhNzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7uoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGi4e80bV1UGHBcNSY5vDpVl89wYmy73dEWwgk6GeZT9Ub+atm0kD+jc 24KgRh35ZGvFf35bltF7ba+bs1rnX6nOAP40RDCtUN8igAWDFZLavAZayhk1wiXd PZZ3VjW0Qs/ghFbmijcGieBsoSdFQqvnjfHJjDdLWnrsgydTKUUcKUQ3Tmi+9zO3 ezgtb6e6VAq7i1qjakE3Kcd2nw8wMhhaU5RfdGSrXt9+D+RqKuN99B7NMg0I/L5Z SRJq1F5YBGIr7CdwjtRo4SsI0l430yXkceqivUFXk5anjr1+WSwBfhV+E9VE+0eN UlMsDdU+Umu1i0lRBb442LgSC6LxFfQ= -----END CERTIFICATE-----Generated at Sat Apr 26 16:41:35 2025 by rpki-client