$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b/ae8c8fa6-957c-379d-8e86-602baa8282b0.roa File: ae8c8fa6-957c-379d-8e86-602baa8282b0.roa (raw, json) Hash identifier: u/VmjdXk4S0YiSEnIXBG+ccKLeVa+a17segJ5LdPUcE= Subject key identifier: 71:BB:BB:ED:EA:8F:1F:90:F0:DF:F2:20:C1:F2:44:83:A9:11:FB:00 Certificate issuer: /CN=4a60bbee-04d5-4806-9055-a09c70ce8f2b Certificate serial: 010D0C9F43285849806F20C73A352735C0CD9680 Authority key identifier: BA:C0:A5:A5:2B:19:03:F8:61:E2:8B:40:F8:72:6A:05:E7:34:8D:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b/ae8c8fa6-957c-379d-8e86-602baa8282b0.roa Signing time: Sat 12 Apr 2025 13:01:01 +0000 ROA not before: Sat 12 Apr 2025 13:01:01 +0000 ROA not after: Fri 11 Jul 2025 13:01:01 +0000 asID: 16509 IP address blocks: 199.4.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b/4a60bbee-04d5-4806-9055-a09c70ce8f2b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b/4a60bbee-04d5-4806-9055-a09c70ce8f2b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:6f:20:c7:3a:35:27:35:c0:cd:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a60bbee-04d5-4806-9055-a09c70ce8f2b Validity Not Before: Apr 12 13:01:01 2025 GMT Not After : Jul 11 13:01:01 2025 GMT Subject: CN=cb74a95b-51bf-4142-a84d-918a5b88f4d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:12:45:73:36:85:49:20:e5:0c:60:82:95:34: 86:26:aa:79:d0:56:62:ca:05:5b:3f:87:b1:68:57: b3:20:3e:d0:fd:e2:6b:4e:1e:81:ac:5f:44:d1:14: a3:ac:65:fa:5b:aa:d5:07:79:2f:ae:41:b4:25:02: fe:d3:0a:b8:7e:41:47:f8:cb:c4:9e:c9:53:cc:30: 56:56:30:5d:36:e1:3f:94:e1:30:74:34:3a:40:78: 82:c2:4f:65:21:2d:01:54:64:c5:54:c4:d2:26:a8: d1:8e:db:66:34:d1:49:c2:ce:07:5d:59:0a:0d:3e: 76:62:b5:ca:45:68:7a:e9:a6:54:fd:d9:7a:ae:9b: c4:6f:76:c7:bf:b5:cd:3a:f3:3e:9e:a0:98:1c:cc: 58:6b:a7:81:e5:cb:71:19:a8:31:1b:b2:10:6f:39: cb:1f:01:58:f9:75:2c:1d:1e:0f:5f:46:07:ed:10: 5a:3a:c3:72:ca:96:07:c0:8b:74:64:0e:f1:45:28: 9f:a3:66:c4:26:2f:7b:76:56:b1:c4:bd:89:4d:42: 1d:93:c9:3a:39:d1:5c:dd:62:4b:c6:c0:98:0b:80: e3:dc:1d:5c:70:f0:d8:b0:36:36:c3:91:23:20:7f: 92:eb:91:42:5a:1d:05:89:9a:46:a3:1c:cc:7f:8c: fe:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:BB:BB:ED:EA:8F:1F:90:F0:DF:F2:20:C1:F2:44:83:A9:11:FB:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b/ae8c8fa6-957c-379d-8e86-602baa8282b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b/4a60bbee-04d5-4806-9055-a09c70ce8f2b.crl X509v3 Authority Key Identifier: keyid:BA:C0:A5:A5:2B:19:03:F8:61:E2:8B:40:F8:72:6A:05:E7:34:8D:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b.cer sbgp-ipAddrBlock: critical IPv4: 199.4.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:9b:db:3d:ca:89:cb:26:a4:3b:ba:b7:42:ec:5f:a4:69:a7: e2:14:b7:46:21:3c:bf:c1:91:58:05:b2:73:58:78:39:8e:a7: 51:9d:be:a3:4b:dc:24:98:f4:80:d6:d6:9e:c8:9d:40:4f:e9: 00:38:c3:a7:44:54:fd:1f:66:e7:a8:97:3b:55:a5:64:89:84: 4e:76:90:a0:8e:93:c7:7e:ef:ad:cd:44:7e:1b:8e:dd:ca:c1: 5f:8d:78:3f:b6:d8:c3:06:f4:8d:f7:6e:a5:3b:22:fc:58:3e: 89:86:57:ba:9e:a7:97:0a:82:a8:c6:7a:5a:e8:4b:77:b4:ba: 0e:b6:03:99:e6:b2:20:d4:b9:d0:13:ae:1a:38:77:95:91:7e: 74:aa:d2:bf:ee:60:fc:ce:ae:a9:00:69:37:e0:61:9b:8b:ca: 6d:f1:d5:60:1c:00:70:64:2e:04:b6:cb:a4:0e:e8:94:05:25: b8:80:19:52:51:ad:47:6b:6b:ef:1b:d7:51:80:3a:7b:b5:7d: 55:c8:3f:1d:66:0b:3d:82:6d:03:9d:33:bc:30:dc:09:a4:fe: 64:8e:ff:eb:00:3c:3e:da:5c:c3:39:bd:68:28:1b:dc:1d:45: bb:83:a7:5a:6b:a4:e1:7c:5d:90:4c:6d:6b:09:11:c4:2b:5e: bb:05:06:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmAbyDHOjUnNcDNloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGE2MGJiZWUtMDRkNS00ODA2LTkwNTUtYTA5YzcwY2U4 ZjJiMB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk Y2I3NGE5NWItNTFiZi00MTQyLWE4NGQtOTE4YTViODhmNGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxJFczaFSSDlDGCClTSGJqp50FZiygVbP4ex aFezID7Q/eJrTh6BrF9E0RSjrGX6W6rVB3kvrkG0JQL+0wq4fkFH+MvEnslTzDBW VjBdNuE/lOEwdDQ6QHiCwk9lIS0BVGTFVMTSJqjRjttmNNFJws4HXVkKDT52YrXK RWh66aZU/dl6rpvEb3bHv7XNOvM+nqCYHMxYa6eB5ctxGagxG7IQbznLHwFY+XUs HR4PX0YH7RBaOsNyypYHwIt0ZA7xRSifo2bEJi97dlaxxL2JTUIdk8k6OdFc3WJL xsCYC4Dj3B1ccPDYsDY2w5EjIH+S65FCWh0FiZpGoxzMf4z+0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHG7u+3qjx+Q8N/yIMHyRIOpEfsAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80YTYw YmJlZS0wNGQ1LTQ4MDYtOTA1NS1hMDljNzBjZThmMmIvYWU4YzhmYTYtOTU3Yy0z NzlkLThlODYtNjAyYmFhODI4MmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGE2MGJiZWUtMDRkNS00ODA2LTkw NTUtYTA5YzcwY2U4ZjJiLzRhNjBiYmVlLTA0ZDUtNDgwNi05MDU1LWEwOWM3MGNl OGYyYi5jcmwwHwYDVR0jBBgwFoAUusClpSsZA/hh4otA+HJqBec0jZUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80YTYwYmJlZS0wNGQ1LTQ4MDYtOTA1NS1hMDlj NzBjZThmMmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwSHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJqb2z3KicsmpDu6t0LsX6Rpp+IUt0YhPL/BkVgFsnNYeDmOp1GdvqNL 3CSY9IDW1p7InUBP6QA4w6dEVP0fZueolztVpWSJhE52kKCOk8d+763NRH4bjt3K wV+NeD+22MMG9I33bqU7IvxYPomGV7qep5cKgqjGelroS3e0ug62A5nmsiDUudAT rho4d5WRfnSq0r/uYPzOrqkAaTfgYZuLym3x1WAcAHBkLgS2y6QO6JQFJbiAGVJR rUdra+8b11GAOnu1fVXIPx1mCz2CbQOdM7ww3Amk/mSO/+sAPD7aXMM5vWgoG9wd RbuDp1prpOF8XZBMbWsJEcQrXrsFBg0= -----END CERTIFICATE-----Generated at Sat Apr 26 14:48:35 2025 by rpki-client