$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/0fa850de-079b-3985-8c4e-c1c41937a99b.roa File: 0fa850de-079b-3985-8c4e-c1c41937a99b.roa (raw, json) Hash identifier: VjLEv5PwNiU0is3H3BI9fLLxAasJ7JaUaK+9+8VyPPU= Subject key identifier: 24:BE:69:0D:ED:B5:CC:7C:F0:3B:87:C0:59:CF:71:09:62:5B:93:07 Certificate issuer: /CN=5ddde1fe-7525-49e3-9718-412c13cd42ca Certificate serial: 010D0C9F43285848E21B08E9C98D7A1A6813C400 Authority key identifier: 3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/0fa850de-079b-3985-8c4e-c1c41937a99b.roa Signing time: Fri 14 Feb 2025 19:54:03 +0000 ROA not before: Fri 14 Feb 2025 19:54:03 +0000 ROA not after: Thu 15 May 2025 18:54:03 +0000 asID: 16509 IP address blocks: 199.101.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:1b:08:e9:c9:8d:7a:1a:68:13:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ddde1fe-7525-49e3-9718-412c13cd42ca Validity Not Before: Feb 14 19:54:03 2025 GMT Not After : May 15 18:54:03 2025 GMT Subject: CN=54ab2522-988d-4038-8b86-6508b76f79b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3d:92:1f:48:ce:3a:b6:c6:b5:c2:26:40:b8: 3e:c7:d7:03:b2:f2:5e:9a:21:5c:af:5a:0a:12:de: 5e:82:e0:05:30:ea:39:eb:b9:0f:1c:5e:44:14:92: d4:f9:42:1e:4b:a5:f8:64:67:73:66:a1:c3:77:da: ed:3f:b9:3b:30:c5:9a:45:b7:ee:09:cb:12:d4:9e: 2b:ec:cc:fb:29:1b:3f:84:6e:fa:93:7c:e0:5f:ba: dc:0e:57:1f:7a:d3:bf:83:84:4e:88:0f:1f:f6:8e: 41:74:bb:36:89:b6:7b:e4:bc:14:1f:88:b1:f1:5d: 2a:c2:f0:e5:c0:14:f6:8e:5e:56:a4:da:83:35:12: 8a:dc:f9:d8:8f:c1:cb:d8:7a:fd:e1:bb:35:19:5a: 39:71:22:99:6f:60:f3:92:16:9f:7b:02:5b:33:d6: 67:c7:32:71:85:1e:2f:14:e8:27:be:e2:e6:9e:a0: 33:c3:22:01:c0:e5:a1:71:66:40:52:a4:3f:1e:05: 4d:39:a6:89:00:8d:72:80:a9:98:aa:41:fe:94:93: 14:9a:e3:e0:a0:5a:a3:2e:6e:ff:8d:8f:20:c7:94: 62:c9:ef:18:46:e9:13:0b:c9:3b:23:e4:f9:31:37: 4e:b3:34:76:3f:15:3f:ee:07:82:0d:13:5b:c9:1d: a0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:BE:69:0D:ED:B5:CC:7C:F0:3B:87:C0:59:CF:71:09:62:5B:93:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/0fa850de-079b-3985-8c4e-c1c41937a99b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.crl X509v3 Authority Key Identifier: keyid:3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer sbgp-ipAddrBlock: critical IPv4: 199.101.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:76:b7:50:00:24:53:22:f5:10:6e:a8:1f:c9:7a:6a:9a:94: 28:c7:38:fb:8d:c0:a1:de:ff:37:f4:c2:09:81:6e:77:a2:1d: ad:9e:e7:a7:d5:27:73:41:ac:95:1f:db:2f:f2:e8:5d:1c:4d: cc:51:f3:10:e4:66:12:f4:06:96:85:46:1d:46:e3:e6:19:b9: 93:59:be:c4:ea:02:9d:6e:d0:00:8f:f0:d0:dd:e5:8a:e5:63: b0:f9:a2:46:62:26:76:48:3c:9e:be:2f:16:32:6a:dc:93:96: f4:68:29:04:4f:75:9c:6e:3c:32:a9:32:4e:28:87:f3:02:89: 7e:0a:c8:b9:cf:e5:ca:24:52:d9:d2:81:5c:af:5e:f2:6d:4c: 0e:7d:54:91:65:6f:35:da:4c:e8:ee:42:66:11:f6:ec:43:e8: cf:af:3d:52:64:b8:79:09:99:47:12:97:8f:04:d5:61:6d:be: 5c:48:5f:dd:c8:22:7e:31:7a:c3:d8:67:86:94:00:84:09:c0: fc:f7:89:5b:a8:b4:da:32:52:ec:84:e2:62:cb:94:c5:a3:41: 39:1b:09:b5:14:53:95:a9:dd:23:44:af:35:40:fe:fe:bd:5e: cd:b6:a0:52:33:22:22:aa:d0:7c:72:05:2d:5f:8a:40:20:04: 60:af:b4:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjiGwjpyY16GmgTxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRkZGUxZmUtNzUyNS00OWUzLTk3MTgtNDEyYzEzY2Q0 MmNhMB4XDTI1MDIxNDE5NTQwM1oXDTI1MDUxNTE4NTQwM1owLzEtMCsGA1UEAxMk NTRhYjI1MjItOTg4ZC00MDM4LThiODYtNjUwOGI3NmY3OWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsz2SH0jOOrbGtcImQLg+x9cDsvJemiFcr1oK Et5eguAFMOo567kPHF5EFJLU+UIeS6X4ZGdzZqHDd9rtP7k7MMWaRbfuCcsS1J4r 7Mz7KRs/hG76k3zgX7rcDlcfetO/g4ROiA8f9o5BdLs2ibZ75LwUH4ix8V0qwvDl wBT2jl5WpNqDNRKK3PnYj8HL2Hr94bs1GVo5cSKZb2DzkhafewJbM9ZnxzJxhR4v FOgnvuLmnqAzwyIBwOWhcWZAUqQ/HgVNOaaJAI1ygKmYqkH+lJMUmuPgoFqjLm7/ jY8gx5Riye8YRukTC8k7I+T5MTdOszR2PxU/7geCDRNbyR2gLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCS+aQ3ttcx88DuHwFnPcQliW5MHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZGRk ZTFmZS03NTI1LTQ5ZTMtOTcxOC00MTJjMTNjZDQyY2EvMGZhODUwZGUtMDc5Yi0z OTg1LThjNGUtYzFjNDE5MzdhOTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWRkZGUxZmUtNzUyNS00OWUzLTk3 MTgtNDEyYzEzY2Q0MmNhLzVkZGRlMWZlLTc1MjUtNDllMy05NzE4LTQxMmMxM2Nk NDJjYS5jcmwwHwYDVR0jBBgwFoAUPyEX+C90LrvdwcZoG6YcjoqBYSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZGRkZTFmZS03NTI1LTQ5ZTMtOTcxOC00MTJj MTNjZDQyY2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx2XGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAB2t1AAJFMi9RBuqB/JemqalCjHOPuNwKHe/zf0wgmBbneiHa2e56fV J3NBrJUf2y/y6F0cTcxR8xDkZhL0BpaFRh1G4+YZuZNZvsTqAp1u0ACP8NDd5Yrl Y7D5okZiJnZIPJ6+LxYyatyTlvRoKQRPdZxuPDKpMk4oh/MCiX4KyLnP5cokUtnS gVyvXvJtTA59VJFlbzXaTOjuQmYR9uxD6M+vPVJkuHkJmUcSl48E1WFtvlxIX93I In4xesPYZ4aUAIQJwPz3iVuotNoyUuyE4mLLlMWjQTkbCbUUU5Wp3SNErzVA/v69 Xs22oFIzIiKq0HxyBS1fikAgBGCvtME= -----END CERTIFICATE-----Generated at Sat Apr 26 16:41:43 2025 by rpki-client