$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fca14046-e1b7-32dd-ac32-ee4414b87b9e.roa File: fca14046-e1b7-32dd-ac32-ee4414b87b9e.roa (raw, json) Hash identifier: Z84Ywe0bUMbWNEtbsP6Goi0QGqsn9PzavrPrNhNSUEI= Subject key identifier: 63:2C:4D:81:75:2E:E2:3B:EE:F0:7C:5A:F4:A3:CA:02:DB:72:AC:AF Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A4BAD5B78FBBE720CA85A7A6 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fca14046-e1b7-32dd-ac32-ee4414b87b9e.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 396982 IP address blocks: 199.223.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:d5:b7:8f:bb:e7:20:ca:85:a7:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=aa6e83bc-a411-456c-9346-50a34ca66c4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ed:1b:62:c8:8f:cb:0d:23:e3:8c:e0:8a:3d: 63:e5:59:af:53:80:87:32:94:37:a5:50:04:67:29: e8:3f:4c:c3:d8:e6:73:85:11:a2:a9:4e:9d:5d:16: e2:49:0e:11:c2:3b:75:82:45:d7:b6:f8:e0:b6:27: 54:1f:00:f5:a4:2a:24:62:1c:fd:84:d8:b0:ee:33: cf:84:a6:e1:bb:83:5a:06:70:63:2e:7b:1a:dc:40: 6d:1b:44:a8:39:17:39:cf:ed:3f:d7:f7:74:b0:ef: 01:63:c3:80:0b:e7:ce:e8:a2:33:5c:0d:b7:e8:11: 57:74:c0:f1:f7:fa:45:09:cc:4f:ca:87:d2:e0:c2: b0:10:ee:d3:a8:b3:33:f2:ab:dc:4e:9f:47:64:29: df:3f:95:04:b1:9c:22:04:ed:c0:15:d2:3f:e7:79: 37:74:05:8c:ca:2c:74:36:c8:cb:d3:d8:6d:a1:1f: 34:fd:a4:0a:b0:60:e9:84:d9:22:66:54:1b:6d:9d: eb:0b:45:7e:ea:7e:01:16:76:56:5b:26:9f:e8:b3: 5c:d5:35:9a:c4:95:47:d4:57:a0:d6:4c:37:b1:83: c4:e5:3d:19:f5:25:14:54:5d:4c:71:06:dd:fc:2d: 4d:f4:3f:87:97:f4:3b:2d:ed:13:bb:6b:09:da:e8: 14:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:2C:4D:81:75:2E:E2:3B:EE:F0:7C:5A:F4:A3:CA:02:DB:72:AC:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fca14046-e1b7-32dd-ac32-ee4414b87b9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 199.223.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:f7:10:7d:81:15:05:dd:d3:38:e6:bf:2b:6f:71:bf:b2:18: 92:c3:a0:c1:6e:08:b0:8c:f2:76:78:9e:ee:bd:cb:e6:a6:18: 60:20:25:4d:f4:0a:5d:93:e3:1d:d1:30:20:e7:67:bc:18:5a: a5:3e:86:f1:8a:2b:c8:dc:2d:84:5a:e4:d0:3b:f7:21:6f:c6: d4:ce:c6:df:37:e3:60:2a:3e:aa:81:61:c1:d3:07:73:b6:7b: 1b:71:8b:42:93:f5:04:73:93:fa:7b:74:e4:f7:8d:f2:af:bd: c1:14:2e:9a:43:e4:56:e3:f9:ba:25:64:53:27:7a:c5:a9:32: 1c:68:71:ce:f9:58:ea:51:95:7b:32:2b:19:07:df:98:c2:8e: ff:ee:91:5c:c4:3e:1d:b6:6c:de:b9:2e:a1:d6:2b:37:09:b9: ed:23:39:fc:07:f4:08:30:6e:8a:74:18:0e:f4:56:f7:c2:1a: 9a:e7:3a:5b:39:76:29:e0:0e:18:88:12:5b:6a:d4:8d:1c:18: ba:07:1c:41:71:92:95:7c:12:a8:83:66:1b:24:e6:96:b9:4f: b2:e8:fc:48:15:14:74:ca:44:b8:90:3e:79:8e:58:d3:4f:91: e8:fa:48:90:58:7e:cf:f8:08:a7:bd:b8:57:99:5f:db:da:de: e6:b7:61:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkutW3j7vnIMqFp6YwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YWE2ZTgzYmMtYTQxMS00NTZjLTkzNDYtNTBhMzRjYTY2YzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAou0bYsiPyw0j44zgij1j5VmvU4CHMpQ3pVAE ZynoP0zD2OZzhRGiqU6dXRbiSQ4Rwjt1gkXXtvjgtidUHwD1pCokYhz9hNiw7jPP hKbhu4NaBnBjLnsa3EBtG0SoORc5z+0/1/d0sO8BY8OAC+fO6KIzXA236BFXdMDx 9/pFCcxPyofS4MKwEO7TqLMz8qvcTp9HZCnfP5UEsZwiBO3AFdI/53k3dAWMyix0 NsjL09htoR80/aQKsGDphNkiZlQbbZ3rC0V+6n4BFnZWWyaf6LNc1TWaxJVH1Feg 1kw3sYPE5T0Z9SUUVF1McQbd/C1N9D+Hl/Q7Le0Tu2sJ2ugUgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGMsTYF1LuI77vB8WvSjygLbcqyvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmNhMTQwNDYtZTFiNy0z MmRkLWFjMzItZWU0NDE0Yjg3YjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx9/tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJP3EH2BFQXd0zjmvytvcb+yGJLDoMFuCLCM8nZ4nu69y+amGGAgJU30 Cl2T4x3RMCDnZ7wYWqU+hvGKK8jcLYRa5NA79yFvxtTOxt8342AqPqqBYcHTB3O2 extxi0KT9QRzk/p7dOT3jfKvvcEULppD5Fbj+bolZFMnesWpMhxocc75WOpRlXsy KxkH35jCjv/ukVzEPh22bN65LqHWKzcJue0jOfwH9Agwbop0GA70VvfCGprnOls5 dingDhiIEltq1I0cGLoHHEFxkpV8EqiDZhsk5pa5T7Lo/EgVFHTKRLiQPnmOWNNP kej6SJBYfs/4CKe9uFeZX9va3ua3YfA= -----END CERTIFICATE-----Generated at Sat Apr 26 17:44:07 2025 by rpki-client