$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2340e8a8-1dd4-36c3-827c-cb73821dd396.roa File: 2340e8a8-1dd4-36c3-827c-cb73821dd396.roa (raw, json) Hash identifier: 1lQ2DUv5VcDsMebY8j4x/PImJfptFDG74fbHGFHQ8S4= Subject key identifier: 28:27:E2:D4:52:1D:6D:02:1F:BF:55:DD:0C:94:4D:B6:12:5B:FA:15 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858499AF4766F38689B9ECA12ACB8 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2340e8a8-1dd4-36c3-827c-cb73821dd396.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 852 IP address blocks: 99.199.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:76:6f:38:68:9b:9e:ca:12:ac:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=c11852fc-9c54-44c0-a35b-45def03e4fde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:66:8b:c1:41:57:28:5d:ab:35:86:01:fa:b6: 0d:69:e8:09:f8:47:66:87:03:d3:10:3b:47:91:54: bf:94:15:8e:14:8d:2c:e9:f5:d1:4b:3f:b3:ef:2c: 98:bb:2b:ce:8a:06:48:f1:e4:38:4f:e6:f3:d4:f5: 56:14:2b:6f:b0:32:e8:ee:ba:62:76:80:33:28:20: 32:d5:b6:db:71:9f:da:5b:40:11:cc:42:e9:6c:6f: ff:96:d7:98:93:32:f6:3a:ba:88:5d:8a:35:5c:8b: 9a:a0:09:43:ae:d5:23:ce:cf:78:68:bb:55:8e:da: 72:ae:0f:1b:d9:36:97:ee:48:cd:1a:32:c4:0b:b6: ef:88:36:db:d5:36:63:7b:be:cd:42:17:4d:af:b2: 06:f0:f4:39:d2:86:2f:6b:c2:9d:34:c6:93:ac:6c: ad:98:76:09:65:ff:b9:ef:cc:5c:75:08:a2:a8:b6: b3:80:18:38:60:b6:cd:49:cf:2a:9c:1e:78:33:f0: fa:25:42:f6:41:e2:2b:e4:c6:74:b9:48:b0:c3:8b: 54:95:a1:0b:c1:9e:ce:48:15:0d:38:2e:c5:e4:df: 8c:d2:6c:84:b7:e1:4f:51:23:e1:f1:e5:28:ab:3b: 79:8d:99:7f:15:59:f9:b5:7c:ff:4f:02:06:d1:6e: 3c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:27:E2:D4:52:1D:6D:02:1F:BF:55:DD:0C:94:4D:B6:12:5B:FA:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2340e8a8-1dd4-36c3-827c-cb73821dd396.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 99.199.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:98:1f:da:55:d5:85:af:a3:eb:3e:fb:25:37:05:8c:d8:d0: 5a:3a:01:99:c0:81:81:f4:80:2c:7a:80:3c:1b:2f:63:e9:39: 41:a9:34:3a:57:6c:db:b6:3e:5d:ad:98:6d:4e:2c:21:99:c1: 21:ff:e2:05:86:89:85:28:6f:eb:67:ec:af:8d:9c:bf:d6:a1: 20:62:64:ca:28:0e:94:c5:8e:de:51:bb:2c:63:e7:e6:0f:f1: f5:d4:d4:7b:36:24:93:eb:0c:47:29:05:ec:e7:27:37:98:ee: e7:42:f3:66:75:a2:4f:ca:5f:00:5b:ea:ce:0a:25:77:06:4c: eb:b5:33:d4:bb:98:ad:99:43:c1:21:cf:be:76:b7:d7:c1:6a: 5a:4d:03:e4:d2:b8:96:dd:2e:67:1f:90:75:f1:fe:32:fe:20: 06:84:a0:a2:9d:24:14:c0:ee:b4:04:58:ae:1d:0b:0b:e6:31: 76:07:3a:7e:82:f4:38:41:39:0f:e8:cc:59:a1:4a:a4:ae:8a: c1:ac:a9:2a:17:26:d3:33:66:56:b2:a9:98:5f:eb:a2:95:6c: 4b:3e:f6:d6:ec:e8:a2:32:3c:0e:43:f1:1c:df:c9:5f:94:3b: 61:fb:21:7f:07:b3:ef:32:bd:4d:7a:75:29:99:1b:cf:a5:0e: 35:46:30:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9HZvOGibnsoSrLgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk YzExODUyZmMtOWM1NC00NGMwLWEzNWItNDVkZWYwM2U0ZmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22aLwUFXKF2rNYYB+rYNaegJ+EdmhwPTEDtH kVS/lBWOFI0s6fXRSz+z7yyYuyvOigZI8eQ4T+bz1PVWFCtvsDLo7rpidoAzKCAy 1bbbcZ/aW0ARzELpbG//lteYkzL2OrqIXYo1XIuaoAlDrtUjzs94aLtVjtpyrg8b 2TaX7kjNGjLEC7bviDbb1TZje77NQhdNr7IG8PQ50oYva8KdNMaTrGytmHYJZf+5 78xcdQiiqLazgBg4YLbNSc8qnB54M/D6JUL2QeIr5MZ0uUiww4tUlaELwZ7OSBUN OC7F5N+M0myEt+FPUSPh8eUoqzt5jZl/FVn5tXz/TwIG0W48vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgn4tRSHW0CH79V3QyUTbYSW/oVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMjM0MGU4YTgtMWRkNC0z NmMzLTgyN2MtY2I3MzgyMWRkMzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHY8cAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmYH9pV1YWvo+s++yU3BYzY0Fo6AZnAgYH0gCx6gDwbL2PpOUGpNDpX bNu2Pl2tmG1OLCGZwSH/4gWGiYUob+tn7K+NnL/WoSBiZMooDpTFjt5Ruyxj5+YP 8fXU1Hs2JJPrDEcpBeznJzeY7udC82Z1ok/KXwBb6s4KJXcGTOu1M9S7mK2ZQ8Eh z752t9fBalpNA+TSuJbdLmcfkHXx/jL+IAaEoKKdJBTA7rQEWK4dCwvmMXYHOn6C 9DhBOQ/ozFmhSqSuisGsqSoXJtMzZlayqZhf66KVbEs+9tbs6KIyPA5D8RzfyV+U O2H7IX8Hs+8yvU16dSmZG8+lDjVGMIA= -----END CERTIFICATE-----Generated at Sun Apr 27 00:14:37 2025 by rpki-client