$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/40c2e6b5-5ee9-310f-afaf-0480a64cdd21.roa File: 40c2e6b5-5ee9-310f-afaf-0480a64cdd21.roa (raw, json) Hash identifier: bWn9rKTMtWlbf/XVPK0vh+Wm8efAVshVew2rpO6YLFc= Subject key identifier: C0:43:3F:C8:70:E8:53:F6:B8:B0:AB:78:34:0C:40:FD:65:32:BC:92 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A4BACE5F9B06094ED0E66880 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/40c2e6b5-5ee9-310f-afaf-0480a64cdd21.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 199.223.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:ce:5f:9b:06:09:4e:d0:e6:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=fcb29317-07e8-4b85-9e3e-58ad1fce9fed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:99:da:84:ec:8d:dc:09:46:58:44:fc:ee:48: 02:37:d1:15:f4:82:07:6c:d9:7c:48:99:6b:2a:75: 06:94:8c:0f:a5:12:91:c0:08:dd:e6:59:5b:46:fd: 45:dd:dd:6e:f7:2f:1e:8d:7a:ab:1a:db:d1:30:5f: 40:2d:a3:10:32:a8:99:45:78:80:66:72:a0:87:d8: 00:9a:e5:0e:76:0c:f6:a1:b8:f4:13:4b:cb:c0:ec: 24:14:a8:ea:4c:c9:8f:79:2f:26:56:69:ba:7f:5d: 7c:03:97:9e:3e:ab:a9:1a:27:24:8c:af:40:41:df: 35:54:7c:85:f8:6f:95:48:48:ea:9a:15:da:4e:78: f5:7b:6e:16:d1:70:26:8b:15:9d:c3:93:58:35:20: 01:f6:8e:89:7f:2b:10:d8:e3:bc:6b:96:4b:d1:7f: 64:ee:58:50:6b:7f:04:3c:b2:60:ac:a8:f2:d7:c9: 01:24:5d:5d:46:fe:68:a8:1b:55:9f:87:d3:15:8c: 51:0c:25:ad:52:a0:b1:df:f5:4b:d8:ed:e9:0c:fb: 35:b2:6f:cc:d9:f7:db:b3:82:0e:27:fe:e2:37:4c: 37:77:5f:8e:9c:8f:14:27:bc:7c:9b:48:f2:3f:dc: bd:0b:6b:55:d3:62:a4:2d:af:c2:69:2f:fc:d7:73: 61:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:43:3F:C8:70:E8:53:F6:B8:B0:AB:78:34:0C:40:FD:65:32:BC:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/40c2e6b5-5ee9-310f-afaf-0480a64cdd21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 199.223.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:7b:01:9a:78:9a:a8:5e:9e:1d:cd:44:9d:42:da:25:de:d7: c4:fc:b0:7f:40:d1:1a:0e:7b:90:35:a8:81:9e:18:0b:e5:71: 10:8c:82:98:fd:c2:1d:97:67:85:a5:e5:32:3e:22:3e:3e:77: bd:df:97:67:f1:0b:f9:8b:10:25:e4:e6:02:a2:23:7a:4d:91: c7:7a:7b:5a:3a:ca:1c:03:02:86:82:c6:0c:6e:9d:eb:44:cf: 00:35:1e:1f:c3:2d:7b:55:2d:a7:68:5b:2c:6b:e6:4a:f0:a0: d6:b8:bc:25:12:c2:b4:d9:d0:97:9c:6d:5c:10:b0:85:99:d9: c3:e4:d1:d6:6b:3d:de:75:8c:1f:a4:ff:ab:f6:d0:78:c7:e9: 72:2e:c8:30:d6:b0:76:aa:ab:d4:53:d5:1e:e7:f1:c0:d8:8c: c6:ec:25:1f:9b:bf:f3:4e:15:fd:37:cb:52:c3:45:ad:06:70: c4:a5:d1:bf:b3:64:0b:66:b5:78:f7:11:81:b3:ec:64:9e:ca: f2:e8:0e:93:09:90:b9:bc:de:1d:c8:81:f0:8e:24:85:df:7e: 4b:ed:42:3a:24:9a:da:dc:86:ab:be:ef:c1:49:8b:e9:72:78: 4c:35:58:c1:ed:37:b5:35:fc:16:24:36:aa:06:34:c7:bc:4c: 5d:4c:21:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkus5fmwYJTtDmaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZmNiMjkzMTctMDdlOC00Yjg1LTllM2UtNThhZDFmY2U5ZmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5nahOyN3AlGWET87kgCN9EV9IIHbNl8SJlr KnUGlIwPpRKRwAjd5llbRv1F3d1u9y8ejXqrGtvRMF9ALaMQMqiZRXiAZnKgh9gA muUOdgz2obj0E0vLwOwkFKjqTMmPeS8mVmm6f118A5eePqupGickjK9AQd81VHyF +G+VSEjqmhXaTnj1e24W0XAmixWdw5NYNSAB9o6JfysQ2OO8a5ZL0X9k7lhQa38E PLJgrKjy18kBJF1dRv5oqBtVn4fTFYxRDCWtUqCx3/VL2O3pDPs1sm/M2ffbs4IO J/7iN0w3d1+OnI8UJ7x8m0jyP9y9C2tV02KkLa/CaS/813NhfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMBDP8hw6FP2uLCreDQMQP1lMrySMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDBjMmU2YjUtNWVlOS0z MTBmLWFmYWYtMDQ4MGE2NGNkZDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx9/oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFx7AZp4mqhenh3NRJ1C2iXe18T8sH9A0RoOe5A1qIGeGAvlcRCMgpj9 wh2XZ4Wl5TI+Ij4+d73fl2fxC/mLECXk5gKiI3pNkcd6e1o6yhwDAoaCxgxunetE zwA1Hh/DLXtVLadoWyxr5krwoNa4vCUSwrTZ0JecbVwQsIWZ2cPk0dZrPd51jB+k /6v20HjH6XIuyDDWsHaqq9RT1R7n8cDYjMbsJR+bv/NOFf03y1LDRa0GcMSl0b+z ZAtmtXj3EYGz7GSeyvLoDpMJkLm83h3IgfCOJIXffkvtQjokmtrchqu+78FJi+ly eEw1WMHtN7U1/BYkNqoGNMe8TF1MIS0= -----END CERTIFICATE-----Generated at Sat Apr 26 19:58:36 2025 by rpki-client