$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/ec651062-e150-3475-8a69-0b79c30db69e.roa File: ec651062-e150-3475-8a69-0b79c30db69e.roa (raw, json) Hash identifier: RO0Ra4vaAmjrJQPjDX80M50XNEMC/VHVg+BwN5R6jWQ= Subject key identifier: B5:51:8E:3E:F2:F0:B9:10:07:0D:4F:25:49:03:84:65:84:C3:08:1E Certificate issuer: /CN=c4668147-a71b-4fb3-9ed9-e1e04061bbdd Certificate serial: 010D0C9F432858496CE4433730DAC3AFDF9A0B80 Authority key identifier: 25:2C:65:D1:2B:2B:E5:A6:80:45:38:98:E0:6B:67:DB:F5:0A:EE:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/ec651062-e150-3475-8a69-0b79c30db69e.roa Signing time: Sat 05 Apr 2025 13:01:01 +0000 ROA not before: Sat 05 Apr 2025 13:01:01 +0000 ROA not after: Fri 04 Jul 2025 13:01:01 +0000 asID: 23532 IP address blocks: 199.188.196.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6c:e4:43:37:30:da:c3:af:df:9a:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4668147-a71b-4fb3-9ed9-e1e04061bbdd Validity Not Before: Apr 5 13:01:01 2025 GMT Not After : Jul 4 13:01:01 2025 GMT Subject: CN=87628586-8df0-4acb-866e-4d9b42f152f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:18:41:15:40:f1:11:76:c9:6d:99:8a:c8:55: 6d:fb:e6:8b:35:01:e9:0a:e7:d8:16:40:fa:0a:13: 35:e1:97:a1:fa:2c:77:09:ed:0a:8d:37:68:86:c2: b8:42:a8:9e:c5:94:b9:4e:b1:80:0c:ec:0b:72:88: c3:ea:90:bd:c5:f7:f2:39:5c:ef:91:1a:7c:46:fb: 54:9b:dd:63:02:ba:41:ed:66:88:6f:36:a0:cf:3d: e3:28:77:b5:d3:77:ed:68:ef:76:f0:30:34:90:86: 1a:06:92:17:3a:08:ae:e7:14:3a:e8:56:c9:95:d0: 4e:8d:c0:a9:18:28:5e:f7:dd:01:ce:73:43:5b:3d: c4:ea:5e:2a:61:66:23:eb:b3:fe:92:b5:60:f3:02: 57:59:86:0d:48:8c:9e:38:10:4c:7b:64:22:60:0f: d6:44:9c:63:90:f2:db:ed:13:3f:ed:ca:be:f8:a6: 06:ef:d7:f5:22:e5:63:71:41:30:1a:90:ff:ce:4d: 1a:56:86:9c:c5:d2:52:70:90:93:77:0b:c7:98:3f: 19:a1:25:18:6c:0b:3d:ea:4a:60:1d:38:2f:44:6a: 5d:8a:07:cb:2e:5b:7f:38:b1:17:c1:df:d2:b4:50: 0a:2d:d4:bd:7f:f4:24:82:15:e4:a4:c4:31:81:5a: 25:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:51:8E:3E:F2:F0:B9:10:07:0D:4F:25:49:03:84:65:84:C3:08:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/ec651062-e150-3475-8a69-0b79c30db69e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.crl X509v3 Authority Key Identifier: keyid:25:2C:65:D1:2B:2B:E5:A6:80:45:38:98:E0:6B:67:DB:F5:0A:EE:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer sbgp-ipAddrBlock: critical IPv4: 199.188.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:15:a6:9e:a8:ff:0c:f9:55:17:d3:a0:f3:3c:9c:92:88:88: e2:9b:e9:7c:75:5a:6d:0b:3c:1f:b1:06:44:60:f4:ab:78:8e: ae:42:4e:44:e3:cc:61:ab:2e:a9:6e:09:fd:14:02:4b:bd:2c: 6e:4f:dd:a2:4a:4f:b6:f9:48:b2:61:b7:f8:8d:9e:ef:84:65: cc:f4:5e:43:c2:82:bd:83:68:8e:45:74:8c:6a:36:da:f5:af: a5:02:42:af:74:10:ef:9c:66:ab:ca:5d:86:5c:ab:b2:c7:ff: 22:d4:b6:99:11:cc:34:61:77:85:a8:70:e9:d9:bd:f9:19:f4: 03:91:aa:9c:af:58:86:9e:62:d6:5c:ee:94:b3:06:cd:5f:62: 28:f5:46:e2:b9:85:3b:52:89:d0:ad:a2:ee:a7:52:42:81:33: 3a:b6:c6:e3:d7:b7:f7:79:70:72:cb:4d:de:64:85:7a:45:f2: 7f:a8:f8:49:cb:6c:36:6c:b4:62:d9:8b:0e:c8:50:7e:9a:4b: ef:5a:93:27:39:eb:32:41:5c:d7:89:d2:09:b8:24:87:da:45: 43:d9:bf:ec:2b:c8:07:59:cb:9b:84:43:c9:8b:76:94:dd:be: 61:6a:ed:66:78:0a:4b:68:5c:12:60:1c:a8:4d:b6:14:44:b6: 61:31:8c:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEls5EM3MNrDr9+aC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQ2NjgxNDctYTcxYi00ZmIzLTllZDktZTFlMDQwNjFi YmRkMB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk ODc2Mjg1ODYtOGRmMC00YWNiLTg2NmUtNGQ5YjQyZjE1MmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBhBFUDxEXbJbZmKyFVt++aLNQHpCufYFkD6 ChM14Zeh+ix3Ce0KjTdohsK4QqiexZS5TrGADOwLcojD6pC9xffyOVzvkRp8RvtU m91jArpB7WaIbzagzz3jKHe103ftaO928DA0kIYaBpIXOgiu5xQ66FbJldBOjcCp GChe990BznNDWz3E6l4qYWYj67P+krVg8wJXWYYNSIyeOBBMe2QiYA/WRJxjkPLb 7RM/7cq++KYG79f1IuVjcUEwGpD/zk0aVoacxdJScJCTdwvHmD8ZoSUYbAs96kpg HTgvRGpdigfLLlt/OLEXwd/StFAKLdS9f/QkghXkpMQxgVoluQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLVRjj7y8LkQBw1PJUkDhGWEwwgeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jNDY2 ODE0Ny1hNzFiLTRmYjMtOWVkOS1lMWUwNDA2MWJiZGQvZWM2NTEwNjItZTE1MC0z NDc1LThhNjktMGI3OWMzMGRiNjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzQ2NjgxNDctYTcxYi00ZmIzLTll ZDktZTFlMDQwNjFiYmRkL2M0NjY4MTQ3LWE3MWItNGZiMy05ZWQ5LWUxZTA0MDYx YmJkZC5jcmwwHwYDVR0jBBgwFoAUJSxl0Ssr5aaARTiY4Gtn2/UK7jgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jNDY2ODE0Ny1hNzFiLTRmYjMtOWVkOS1lMWUw NDA2MWJiZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx7zEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMVpp6o/wz5VRfToPM8nJKIiOKb6Xx1Wm0LPB+xBkRg9Kt4jq5CTkTj zGGrLqluCf0UAku9LG5P3aJKT7b5SLJht/iNnu+EZcz0XkPCgr2DaI5FdIxqNtr1 r6UCQq90EO+cZqvKXYZcq7LH/yLUtpkRzDRhd4WocOnZvfkZ9AORqpyvWIaeYtZc 7pSzBs1fYij1RuK5hTtSidCtou6nUkKBMzq2xuPXt/d5cHLLTd5khXpF8n+o+EnL bDZstGLZiw7IUH6aS+9akyc56zJBXNeJ0gm4JIfaRUPZv+wryAdZy5uEQ8mLdpTd vmFq7WZ4CktoXBJgHKhNthREtmExjHI= -----END CERTIFICATE-----Generated at Sat Apr 26 19:59:28 2025 by rpki-client