$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b/b96e1617-e784-3bbb-ba2d-2f4a764d0e95.roa File: b96e1617-e784-3bbb-ba2d-2f4a764d0e95.roa (raw, json) Hash identifier: ICtu+Ecvrd5h16Yzma5hePtl006qnI0PE+ZMKDo69Ew= Subject key identifier: E7:94:5A:38:7C:5D:49:BC:0F:62:BC:B4:B6:2D:76:3C:AE:BA:40:80 Certificate issuer: /CN=4a60bbee-04d5-4806-9055-a09c70ce8f2b Certificate serial: 010D0C9F43285849806F20D88DC54E10700D34A0 Authority key identifier: BA:C0:A5:A5:2B:19:03:F8:61:E2:8B:40:F8:72:6A:05:E7:34:8D:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b/b96e1617-e784-3bbb-ba2d-2f4a764d0e95.roa Signing time: Sat 12 Apr 2025 13:01:01 +0000 ROA not before: Sat 12 Apr 2025 13:01:01 +0000 ROA not after: Fri 11 Jul 2025 13:01:01 +0000 asID: 14618 IP address blocks: 199.4.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b/4a60bbee-04d5-4806-9055-a09c70ce8f2b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b/4a60bbee-04d5-4806-9055-a09c70ce8f2b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:6f:20:d8:8d:c5:4e:10:70:0d:34:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a60bbee-04d5-4806-9055-a09c70ce8f2b Validity Not Before: Apr 12 13:01:01 2025 GMT Not After : Jul 11 13:01:01 2025 GMT Subject: CN=3a771af4-ea6e-45ad-900c-5e180f8db7d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e9:82:cb:9d:23:74:70:cb:5c:aa:2f:6d:d4: fe:a4:81:f6:5b:7c:33:7e:f7:83:4d:75:c6:b5:9b: 02:be:4f:14:c4:57:4a:05:26:32:3c:ed:37:fc:56: 9e:fb:c1:1a:7a:a1:1b:36:65:8c:ca:08:85:7d:20: 9d:8b:10:8d:bc:13:15:e3:17:ec:19:9d:43:ea:d4: 87:73:1b:89:5a:52:f7:9c:ef:b1:a8:1f:10:e1:8c: dd:5f:bd:a2:bc:03:ba:a8:d3:d1:e1:40:b1:29:d8: fb:94:b5:79:c6:1e:e5:52:d9:1f:4e:94:fe:f7:90: 26:fa:47:15:0d:5a:67:0e:df:dc:b0:6d:8e:7c:ed: 5a:ec:a4:8e:51:c2:56:e6:27:b1:df:b9:38:fd:1e: b0:fe:b8:3f:9b:44:66:07:12:00:23:a0:2b:0e:75: e6:91:70:4b:80:e9:17:53:71:4d:15:4c:ca:91:54: 90:e6:c7:94:5e:37:2e:a5:25:39:e0:75:95:08:2e: e0:98:c7:d3:cc:a5:31:e7:77:2c:29:62:9b:3d:f6: 73:b6:2e:c5:fd:30:09:23:35:fc:40:de:fb:5d:97: c9:5e:cc:65:cf:a6:74:08:b0:34:cb:35:f2:22:b5: fd:e1:32:c8:36:ff:f9:3b:04:bf:76:3e:73:36:87: 5f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:94:5A:38:7C:5D:49:BC:0F:62:BC:B4:B6:2D:76:3C:AE:BA:40:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b/b96e1617-e784-3bbb-ba2d-2f4a764d0e95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b/4a60bbee-04d5-4806-9055-a09c70ce8f2b.crl X509v3 Authority Key Identifier: keyid:BA:C0:A5:A5:2B:19:03:F8:61:E2:8B:40:F8:72:6A:05:E7:34:8D:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b.cer sbgp-ipAddrBlock: critical IPv4: 199.4.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:72:42:65:39:dc:9e:49:d0:5f:61:58:2c:21:55:9b:a1:1c: 86:c4:f9:2c:dd:05:49:02:3f:51:3b:d9:9f:ca:16:8c:eb:46: aa:48:28:14:dd:09:97:46:5f:31:c9:4a:95:7c:5c:01:ec:30: f0:62:69:58:47:38:ac:87:ec:66:2f:ee:f8:cc:d7:c3:78:14: d1:af:c4:c7:69:18:93:ed:5c:b2:2f:5c:ea:34:2a:cf:14:da: af:7e:c3:68:77:22:90:50:17:e4:25:ec:7b:cd:0a:4a:92:91: 80:59:a7:84:5f:e1:19:64:e5:5d:cc:52:e5:bd:5b:1e:3b:cc: 60:44:d9:a4:3e:bf:44:b3:88:7b:42:37:b5:f1:8e:9c:06:96: 7f:16:2f:48:60:4a:70:16:a8:e8:d8:11:5f:71:38:96:a6:f7: a8:27:12:4d:da:41:14:d1:ad:a8:f3:66:bc:6a:cc:2f:9e:98: 94:15:f6:4d:c9:ae:75:e2:9e:74:c7:8b:aa:8a:f5:37:c1:c6: b7:61:aa:c1:62:d3:eb:5e:8e:3e:1e:c9:70:ee:41:86:b5:07: fd:d4:5f:d4:18:d0:17:f9:dc:ec:df:5e:46:78:1d:bd:d7:b2: 59:64:0d:ca:e0:83:6c:b1:23:c8:51:fa:86:36:d1:f8:4d:45: 88:82:76:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmAbyDYjcVOEHANNKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGE2MGJiZWUtMDRkNS00ODA2LTkwNTUtYTA5YzcwY2U4 ZjJiMB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk M2E3NzFhZjQtZWE2ZS00NWFkLTkwMGMtNWUxODBmOGRiN2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyumCy50jdHDLXKovbdT+pIH2W3wzfveDTXXG tZsCvk8UxFdKBSYyPO03/Fae+8EaeqEbNmWMygiFfSCdixCNvBMV4xfsGZ1D6tSH cxuJWlL3nO+xqB8Q4YzdX72ivAO6qNPR4UCxKdj7lLV5xh7lUtkfTpT+95Am+kcV DVpnDt/csG2OfO1a7KSOUcJW5iex37k4/R6w/rg/m0RmBxIAI6ArDnXmkXBLgOkX U3FNFUzKkVSQ5seUXjcupSU54HWVCC7gmMfTzKUx53csKWKbPfZzti7F/TAJIzX8 QN77XZfJXsxlz6Z0CLA0yzXyIrX94TLINv/5OwS/dj5zNodf6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOeUWjh8XUm8D2K8tLYtdjyuukCAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80YTYw YmJlZS0wNGQ1LTQ4MDYtOTA1NS1hMDljNzBjZThmMmIvYjk2ZTE2MTctZTc4NC0z YmJiLWJhMmQtMmY0YTc2NGQwZTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGE2MGJiZWUtMDRkNS00ODA2LTkw NTUtYTA5YzcwY2U4ZjJiLzRhNjBiYmVlLTA0ZDUtNDgwNi05MDU1LWEwOWM3MGNl OGYyYi5jcmwwHwYDVR0jBBgwFoAUusClpSsZA/hh4otA+HJqBec0jZUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80YTYwYmJlZS0wNGQ1LTQ4MDYtOTA1NS1hMDlj NzBjZThmMmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwSHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJyQmU53J5J0F9hWCwhVZuhHIbE+SzdBUkCP1E72Z/KFozrRqpIKBTd CZdGXzHJSpV8XAHsMPBiaVhHOKyH7GYv7vjM18N4FNGvxMdpGJPtXLIvXOo0Ks8U 2q9+w2h3IpBQF+Ql7HvNCkqSkYBZp4Rf4Rlk5V3MUuW9Wx47zGBE2aQ+v0SziHtC N7XxjpwGln8WL0hgSnAWqOjYEV9xOJam96gnEk3aQRTRrajzZrxqzC+emJQV9k3J rnXinnTHi6qK9TfBxrdhqsFi0+tejj4eyXDuQYa1B/3UX9QY0Bf53OzfXkZ4Hb3X sllkDcrgg2yxI8hR+oY20fhNRYiCdlI= -----END CERTIFICATE-----Generated at Sat Apr 26 13:18:11 2025 by rpki-client