$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/16aeb59e-91b7-36f8-aed8-271f44f518a0.roa File: 16aeb59e-91b7-36f8-aed8-271f44f518a0.roa (raw, json) Hash identifier: RQa2GDQ7Y1wloT9JdqqX7ebnhjE43C7KxiMG6FNuc60= Subject key identifier: 77:31:3B:4C:9C:9D:22:0E:A2:5A:80:BB:F2:84:0B:A3:92:F1:AE:E6 Certificate issuer: /CN=c4668147-a71b-4fb3-9ed9-e1e04061bbdd Certificate serial: 010D0C9F432858496CE443583D41363E23FD4A80 Authority key identifier: 25:2C:65:D1:2B:2B:E5:A6:80:45:38:98:E0:6B:67:DB:F5:0A:EE:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/16aeb59e-91b7-36f8-aed8-271f44f518a0.roa Signing time: Sat 05 Apr 2025 13:01:01 +0000 ROA not before: Sat 05 Apr 2025 13:01:01 +0000 ROA not after: Fri 04 Jul 2025 13:01:01 +0000 asID: 197537 IP address blocks: 199.188.196.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6c:e4:43:58:3d:41:36:3e:23:fd:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4668147-a71b-4fb3-9ed9-e1e04061bbdd Validity Not Before: Apr 5 13:01:01 2025 GMT Not After : Jul 4 13:01:01 2025 GMT Subject: CN=32e0e815-019e-415d-91a4-3ed6276e3246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:97:56:51:e8:28:30:b4:bc:2f:ef:42:a2:f3: 36:c2:b3:45:be:05:2b:f1:a3:47:4c:49:c1:d5:d4: fe:af:8f:38:a3:35:1c:9f:e6:e0:fd:54:fd:47:2f: c7:a3:fe:88:ce:f2:87:cd:08:44:46:bf:28:8b:d3: fd:af:1b:1c:72:99:80:f2:a8:b6:c2:35:ee:9e:89: 0e:40:c5:5b:69:60:3c:96:82:20:d6:7f:2f:44:99: 46:fe:ed:82:27:3e:0a:ea:40:ae:a4:30:f9:aa:fa: c0:21:18:12:bb:cb:b3:57:82:fc:7a:62:01:87:20: 45:52:01:84:33:d2:af:8a:b6:11:dd:0f:a3:56:ac: 5c:fb:0b:a3:1a:56:91:2b:5d:ca:b5:73:1d:9b:6a: bd:90:70:06:fc:76:42:36:66:c2:e2:0b:b0:f9:40: d6:14:4e:99:91:aa:a7:be:07:ad:00:fa:67:2a:0d: 2a:81:12:e1:26:51:80:9d:73:c7:23:5d:b2:25:a6: 4e:f2:90:9e:0d:e7:4d:59:51:77:bc:55:21:c2:88: 25:f3:f8:9f:17:b2:f8:8a:4f:72:b4:a9:e8:c5:40: ac:b7:eb:af:01:3d:99:27:5b:f9:44:7e:f2:f8:25: 77:d6:92:06:08:2e:20:3f:7d:c5:61:a2:17:29:5b: e1:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:31:3B:4C:9C:9D:22:0E:A2:5A:80:BB:F2:84:0B:A3:92:F1:AE:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/16aeb59e-91b7-36f8-aed8-271f44f518a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.crl X509v3 Authority Key Identifier: keyid:25:2C:65:D1:2B:2B:E5:A6:80:45:38:98:E0:6B:67:DB:F5:0A:EE:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer sbgp-ipAddrBlock: critical IPv4: 199.188.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:f6:76:11:8d:7a:9d:bd:09:4b:9e:2c:a4:aa:be:6d:88:41: a1:7d:4e:2f:87:e2:97:74:b5:0d:71:37:0e:b1:d8:bd:79:de: b9:2e:8b:62:41:20:28:00:d4:15:36:37:e0:fc:80:61:fc:ee: 29:15:1c:e7:71:ec:0d:b8:37:83:e5:69:2f:c2:6a:4d:ac:44: 1a:02:ac:d9:83:60:b6:dd:ad:4a:11:6a:e3:6b:8c:cd:99:46: 55:fc:26:6e:45:81:13:fa:73:3a:ee:d5:5c:4f:08:29:98:da: 38:93:f4:ec:d6:60:ab:20:7a:8c:81:15:d7:64:89:ce:b4:ac: 8c:d2:fd:10:67:0b:2e:63:c5:8f:02:da:a8:14:11:5b:45:20: f1:d6:2c:bb:e2:51:74:fe:40:90:61:36:56:62:2f:31:33:ad: d6:f8:a3:8d:5b:f9:b1:02:33:e9:9c:8e:f1:2f:f9:50:fc:88: 98:54:2e:a1:a5:05:3f:20:9d:ee:48:79:ab:f6:eb:8e:0d:1a: ce:10:48:52:99:60:6e:df:fb:5a:94:e3:a6:9b:5b:87:b0:83: 50:ad:99:6e:88:56:45:ea:d2:f3:0f:69:ab:46:69:88:f6:47: 6a:1f:20:47:f0:1f:e9:a6:d7:e6:9a:05:8b:14:e0:e1:d9:13: d4:ed:f3:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEls5ENYPUE2PiP9SoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQ2NjgxNDctYTcxYi00ZmIzLTllZDktZTFlMDQwNjFi YmRkMB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk MzJlMGU4MTUtMDE5ZS00MTVkLTkxYTQtM2VkNjI3NmUzMjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJdWUegoMLS8L+9CovM2wrNFvgUr8aNHTEnB 1dT+r484ozUcn+bg/VT9Ry/Ho/6IzvKHzQhERr8oi9P9rxsccpmA8qi2wjXunokO QMVbaWA8loIg1n8vRJlG/u2CJz4K6kCupDD5qvrAIRgSu8uzV4L8emIBhyBFUgGE M9KvirYR3Q+jVqxc+wujGlaRK13KtXMdm2q9kHAG/HZCNmbC4guw+UDWFE6Zkaqn vgetAPpnKg0qgRLhJlGAnXPHI12yJaZO8pCeDedNWVF3vFUhwogl8/ifF7L4ik9y tKnoxUCst+uvAT2ZJ1v5RH7y+CV31pIGCC4gP33FYaIXKVvhxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHcxO0ycnSIOolqAu/KEC6OS8a7mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jNDY2 ODE0Ny1hNzFiLTRmYjMtOWVkOS1lMWUwNDA2MWJiZGQvMTZhZWI1OWUtOTFiNy0z NmY4LWFlZDgtMjcxZjQ0ZjUxOGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzQ2NjgxNDctYTcxYi00ZmIzLTll ZDktZTFlMDQwNjFiYmRkL2M0NjY4MTQ3LWE3MWItNGZiMy05ZWQ5LWUxZTA0MDYx YmJkZC5jcmwwHwYDVR0jBBgwFoAUJSxl0Ssr5aaARTiY4Gtn2/UK7jgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jNDY2ODE0Ny1hNzFiLTRmYjMtOWVkOS1lMWUw NDA2MWJiZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx7zEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACb2dhGNep29CUueLKSqvm2IQaF9Ti+H4pd0tQ1xNw6x2L153rkui2JB ICgA1BU2N+D8gGH87ikVHOdx7A24N4PlaS/Cak2sRBoCrNmDYLbdrUoRauNrjM2Z RlX8Jm5FgRP6czru1VxPCCmY2jiT9OzWYKsgeoyBFddkic60rIzS/RBnCy5jxY8C 2qgUEVtFIPHWLLviUXT+QJBhNlZiLzEzrdb4o41b+bECM+mcjvEv+VD8iJhULqGl BT8gne5Ieav2644NGs4QSFKZYG7f+1qU46abW4ewg1CtmW6IVkXq0vMPaatGaYj2 R2ofIEfwH+mm1+aaBYsU4OHZE9Tt828= -----END CERTIFICATE-----Generated at Sat Apr 26 20:19:08 2025 by rpki-client