$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/09223a2e-2947-361f-938a-98cbd7de56d5.roa File: 09223a2e-2947-361f-938a-98cbd7de56d5.roa (raw, json) Hash identifier: oHN+1930bq7MgdN5k9t2/LsdX/CpcY0h/Fia2ovqk6M= Subject key identifier: 25:70:00:F6:83:D3:7B:90:DC:87:1E:13:5C:36:93:BB:E2:F3:B2:B9 Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087 Certificate serial: 010D0C9F4328584988CF225A2C4D734AB96CEE80 Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/09223a2e-2947-361f-938a-98cbd7de56d5.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 1239 IP address blocks: 161.199.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:22:5a:2c:4d:73:4a:b9:6c:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=21afcb04-1258-4487-bfc7-a9027e9d9a50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:3b:17:14:a4:b7:e9:3a:8f:a0:ca:53:3c:a6: 14:ca:eb:52:31:e0:8a:a8:9c:69:66:5a:89:60:13: af:9c:50:28:84:04:48:e6:a6:88:02:91:66:ce:db: 46:48:5c:c2:0a:8c:36:d8:c4:84:e4:93:f1:23:34: 22:a6:ce:a1:57:5d:3c:21:d3:77:c9:79:17:d2:17: c3:a5:a2:a8:07:07:45:e6:46:60:3d:4d:d1:9d:e5: f5:6d:2b:62:ca:b8:6f:90:4d:f2:60:87:09:10:1b: 51:2f:6e:28:f9:03:81:2d:18:e9:5e:55:50:ea:b8: 8a:06:7f:e4:43:31:92:e3:f0:4a:d3:9d:60:f1:d2: 99:a1:b4:2b:32:7f:2a:46:6e:fd:31:e2:10:0f:05: 5e:57:9b:41:57:63:43:86:79:e5:ab:0a:30:ed:a2: 42:bd:9c:c4:82:1b:af:c2:df:05:33:02:e9:06:95: 40:dd:c4:a4:65:e4:19:7a:b0:bb:1e:f3:14:b1:6f: 79:45:59:06:c5:ea:72:ec:91:69:a8:f9:0f:8b:33: be:29:73:d3:39:c9:f8:68:10:ff:fe:0b:5c:9f:b2: 94:7c:99:41:62:c7:e4:84:e5:ad:56:14:68:e0:65: f2:5c:52:6d:14:95:3f:9b:c6:54:a4:1f:6f:4c:db: bc:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:70:00:F6:83:D3:7B:90:DC:87:1E:13:5C:36:93:BB:E2:F3:B2:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/09223a2e-2947-361f-938a-98cbd7de56d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl X509v3 Authority Key Identifier: keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer sbgp-ipAddrBlock: critical IPv4: 161.199.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:c9:15:ee:bc:a6:35:33:ee:ee:9b:c2:ad:2a:74:e1:b8:18: 8f:29:dc:e1:69:5e:cd:dc:5c:77:62:bd:7d:6e:40:16:8a:9e: fb:c2:67:60:62:22:08:89:29:01:48:04:5c:26:63:b0:b9:10: 72:a7:d3:61:42:dd:c8:27:b9:9e:92:8c:49:71:5e:6d:44:0b: 4b:9b:65:b9:25:99:2d:3a:0f:bb:8e:21:15:a8:3b:a9:e4:30: da:a4:3a:16:37:f7:67:1a:c9:85:36:9b:58:31:51:89:ee:56: 15:76:e5:d5:88:5a:2a:f0:fc:e5:67:eb:a3:16:74:74:5d:89: e6:5d:25:fe:47:c6:c4:3a:dd:28:e0:83:df:24:96:70:3a:50: 28:15:f0:6b:17:df:10:10:ba:c3:a7:30:d7:df:75:0c:3a:ca: ad:9f:0f:ce:75:d9:18:25:3c:16:0c:b6:1b:ce:6b:77:b1:ca: 71:e2:bd:1e:7e:0e:1a:8b:c4:c9:99:00:53:ce:24:41:37:59: 41:a3:c6:9e:8a:9f:cd:1e:e8:25:a3:5d:fa:45:08:1c:4a:48: fd:1c:bc:15:78:c6:a0:4a:5d:6b:d9:3e:0e:14:54:ff:2c:ed: 3f:fb:2b:38:a9:24:9a:37:5d:83:43:b5:f7:cb:1a:d7:b2:79: 84:88:0e:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIzyJaLE1zSrls7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5 MDg3MB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk MjFhZmNiMDQtMTI1OC00NDg3LWJmYzctYTkwMjdlOWQ5YTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzsXFKS36TqPoMpTPKYUyutSMeCKqJxpZlqJ YBOvnFAohARI5qaIApFmzttGSFzCCow22MSE5JPxIzQips6hV108IdN3yXkX0hfD paKoBwdF5kZgPU3RneX1bStiyrhvkE3yYIcJEBtRL24o+QOBLRjpXlVQ6riKBn/k QzGS4/BK051g8dKZobQrMn8qRm79MeIQDwVeV5tBV2NDhnnlqwow7aJCvZzEghuv wt8FMwLpBpVA3cSkZeQZerC7HvMUsW95RVkGxepy7JFpqPkPizO+KXPTOcn4aBD/ /gtcn7KUfJlBYsfkhOWtVhRo4GXyXFJtFJU/m8ZUpB9vTNu8kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCVwAPaD03uQ3IceE1w2k7vi87K5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2 MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvMDkyMjNhMmUtMjk0Ny0z NjFmLTkzOGEtOThjYmQ3ZGU1NmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5 NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2 OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAocfjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfJFe68pjUz7u6bwq0qdOG4GI8p3OFpXs3cXHdivX1uQBaKnvvCZ2Bi IgiJKQFIBFwmY7C5EHKn02FC3cgnuZ6SjElxXm1EC0ubZbklmS06D7uOIRWoO6nk MNqkOhY392cayYU2m1gxUYnuVhV25dWIWirw/OVn66MWdHRdieZdJf5HxsQ63Sjg g98klnA6UCgV8GsX3xAQusOnMNffdQw6yq2fD8512RglPBYMthvOa3exynHivR5+ DhqLxMmZAFPOJEE3WUGjxp6Kn80e6CWjXfpFCBxKSP0cvBV4xqBKXWvZPg4UVP8s 7T/7KzipJJo3XYNDtffLGteyeYSIDkI= -----END CERTIFICATE-----Generated at Sat Apr 26 16:01:47 2025 by rpki-client