$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/69013c08-1e79-3b92-bde2-f7fe9be7b522.roa File: 69013c08-1e79-3b92-bde2-f7fe9be7b522.roa (raw, json) Hash identifier: YsklFvFtKwW8iIFpf4TJ1F1Vs9ZyVAh7xP6kwCvfNXU= Subject key identifier: 90:95:22:06:6D:7E:5B:E3:E9:28:C0:66:04:CB:E5:F6:0A:49:A4:D1 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A4BAC9ED2F2268F08E8F4400 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/69013c08-1e79-3b92-bde2-f7fe9be7b522.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 199.223.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:c9:ed:2f:22:68:f0:8e:8f:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=8c2129b9-58e6-412a-8149-d20729391c73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d9:50:33:d1:9c:7a:4c:c0:a3:cf:17:1b:29: b2:fe:32:91:3d:b0:8c:8b:18:17:f3:24:88:10:4b: 2f:50:58:0e:9a:b4:63:e2:1d:ed:87:79:6d:61:c3: 6e:78:60:f0:eb:68:eb:ba:9c:a0:23:91:e2:3f:8e: f4:61:8a:27:6a:37:bd:18:47:70:a1:de:38:34:78: 7f:0c:a0:c4:26:52:2a:23:fd:49:88:eb:2a:74:df: 3c:f5:88:de:fe:41:81:72:97:2f:4e:d4:8e:51:a9: 3e:3a:17:cd:d7:95:e6:5f:ca:ec:dd:f2:35:d1:a5: bd:af:76:d0:a3:32:35:9b:0d:b0:d3:ee:70:e0:3e: be:cc:e7:e6:21:bd:67:3b:23:84:97:d5:3f:67:e5: c8:f2:8e:6a:82:56:c1:22:af:41:38:17:a6:41:c2: d3:13:a7:86:22:30:8e:70:b6:7a:1c:f9:03:98:46: f5:32:d4:12:32:02:3c:86:7a:d7:2a:40:b0:67:23: af:bb:e2:d4:3d:96:b7:d4:45:61:de:da:dc:24:57: 35:9e:bf:81:26:87:2f:4b:ec:e4:b2:63:9d:b3:72: 7a:c2:d7:87:56:e5:5f:b8:ef:8a:9e:59:0c:96:0b: 59:bf:31:73:91:14:b6:21:ba:4a:5d:da:8a:d1:49: ed:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:95:22:06:6D:7E:5B:E3:E9:28:C0:66:04:CB:E5:F6:0A:49:A4:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/69013c08-1e79-3b92-bde2-f7fe9be7b522.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 199.223.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:b3:85:e1:9d:f9:a5:ea:9f:02:14:05:7c:7f:c4:23:c3:11: 01:d4:e7:15:f8:d9:67:49:91:45:f3:1c:ff:05:c3:fc:c7:2a: 66:f3:5b:34:23:79:86:9b:81:cc:f0:19:16:9f:eb:91:d8:59: a8:95:4d:41:b5:a4:fe:3d:90:4b:4f:4d:4e:54:19:a0:29:ab: 7a:a0:18:86:ff:94:b5:8a:95:e1:67:4f:d8:65:d4:0c:cf:54: a8:33:fe:56:c6:c6:15:6f:53:d5:e3:f7:76:51:28:c1:d8:c9: 97:be:aa:f0:89:b7:d6:09:a6:32:53:9e:6d:91:87:3a:9c:09: 17:84:0b:20:9a:ed:1b:0b:af:8a:ec:74:c0:b5:74:c6:ae:c1: ec:ad:e9:02:f0:20:26:8e:8e:17:26:f0:f6:6d:cc:c4:69:98: 75:b1:a3:0a:de:ca:59:04:65:f7:e8:a1:59:5a:4d:d8:89:7a: a1:57:7e:4a:e7:0b:54:27:cc:19:4f:d4:7a:d8:f1:f2:c0:6f: 70:55:58:67:4b:e8:3b:6e:6d:24:c4:0f:d5:07:cf:a9:e0:1d: 9f:61:3c:0e:1d:73:15:64:ac:31:f8:4a:33:fe:d4:86:57:95: 7d:0c:fc:cc:1f:84:b5:c9:ef:b2:3f:bb:1f:e8:cf:33:18:e2: 9b:e1:6d:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkusntLyJo8I6PRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OGMyMTI5YjktNThlNi00MTJhLTgxNDktZDIwNzI5MzkxYzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNlQM9GcekzAo88XGymy/jKRPbCMixgX8ySI EEsvUFgOmrRj4h3th3ltYcNueGDw62jrupygI5HiP470YYonaje9GEdwod44NHh/ DKDEJlIqI/1JiOsqdN889Yje/kGBcpcvTtSOUak+OhfN15XmX8rs3fI10aW9r3bQ ozI1mw2w0+5w4D6+zOfmIb1nOyOEl9U/Z+XI8o5qglbBIq9BOBemQcLTE6eGIjCO cLZ6HPkDmEb1MtQSMgI8hnrXKkCwZyOvu+LUPZa31EVh3trcJFc1nr+BJocvS+zk smOds3J6wteHVuVfuO+KnlkMlgtZvzFzkRS2IbpKXdqK0Unt5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJCVIgZtflvj6SjAZgTL5fYKSaTRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjkwMTNjMDgtMWU3OS0z YjkyLWJkZTItZjdmZTliZTdiNTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx9/uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHizheGd+aXqnwIUBXx/xCPDEQHU5xX42WdJkUXzHP8Fw/zHKmbzWzQj eYabgczwGRaf65HYWaiVTUG1pP49kEtPTU5UGaApq3qgGIb/lLWKleFnT9hl1AzP VKgz/lbGxhVvU9Xj93ZRKMHYyZe+qvCJt9YJpjJTnm2RhzqcCReECyCa7RsLr4rs dMC1dMauweyt6QLwICaOjhcm8PZtzMRpmHWxowreylkEZffooVlaTdiJeqFXfkrn C1QnzBlP1HrY8fLAb3BVWGdL6DtubSTED9UHz6ngHZ9hPA4dcxVkrDH4SjP+1IZX lX0M/MwfhLXJ77I/ux/ozzMY4pvhbbU= -----END CERTIFICATE-----Generated at Sat Apr 26 20:59:12 2025 by rpki-client