$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ced1e153-6559-46ef-8f8b-ee841a2a0188/2f0b902b-45b0-3e21-b050-e59891b64dfb.roa File: 2f0b902b-45b0-3e21-b050-e59891b64dfb.roa (raw, json) Hash identifier: 95G7ev+VJYqdQ8xNLf7Jc3EkLTIZSqcYQiksm+yji7w= Subject key identifier: E8:D1:C3:5B:90:16:5C:98:2B:12:9C:84:01:08:DD:62:F4:72:56:52 Certificate issuer: /CN=ced1e153-6559-46ef-8f8b-ee841a2a0188 Certificate serial: 010D0C9F432858499829CDDF2C3A080FE254E190 Authority key identifier: 5F:2B:B2:0E:6A:C5:63:EB:F3:66:68:1A:C6:64:F0:ED:3B:A4:5A:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ced1e153-6559-46ef-8f8b-ee841a2a0188.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ced1e153-6559-46ef-8f8b-ee841a2a0188/2f0b902b-45b0-3e21-b050-e59891b64dfb.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 14618 IP address blocks: 199.48.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ced1e153-6559-46ef-8f8b-ee841a2a0188/ced1e153-6559-46ef-8f8b-ee841a2a0188.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ced1e153-6559-46ef-8f8b-ee841a2a0188/ced1e153-6559-46ef-8f8b-ee841a2a0188.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ced1e153-6559-46ef-8f8b-ee841a2a0188.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:cd:df:2c:3a:08:0f:e2:54:e1:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ced1e153-6559-46ef-8f8b-ee841a2a0188 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=b2a8051d-89da-440b-872c-1c799b694c52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:70:59:71:f7:f6:71:6f:94:f5:16:f4:91:a3: a2:98:61:e7:b8:b2:d0:f6:27:51:cc:ab:fc:39:e5: d6:e0:1d:ee:e0:58:46:f3:a1:1c:6f:3d:84:3c:90: fe:55:32:88:d4:50:04:35:70:3c:e2:ec:40:94:72: 2d:91:c8:47:3e:8f:62:62:7c:61:ac:59:72:00:dd: 72:e5:5f:c5:30:7f:ac:48:58:29:e9:e5:87:62:2f: 4d:90:08:ea:46:ba:aa:2a:cf:91:ac:39:a7:63:12: aa:81:64:27:a6:3b:52:33:7e:4d:dd:86:46:81:0e: 29:83:a3:a6:35:47:a4:89:cb:20:75:df:ac:eb:18: e4:9f:51:9a:07:e4:e6:fa:8c:ff:09:4d:00:70:b5: 3a:bc:d8:32:9f:f8:3b:47:0f:e2:1e:c4:a6:51:cb: 16:0c:a8:ed:7a:bb:0d:e4:c1:76:f7:3c:01:a5:ad: 69:e5:87:86:3d:03:14:8f:cb:4d:29:a5:2d:5b:03: dd:56:18:c4:a2:b1:71:c2:ea:63:ff:3d:42:82:c4: ca:77:72:b1:44:23:14:2b:11:f8:bb:92:37:ac:b8: ca:f9:8e:49:08:eb:81:bb:33:17:00:84:e0:93:01: 30:82:d2:6a:41:71:7a:b4:52:fd:ac:fe:cc:30:45: b0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:D1:C3:5B:90:16:5C:98:2B:12:9C:84:01:08:DD:62:F4:72:56:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ced1e153-6559-46ef-8f8b-ee841a2a0188/2f0b902b-45b0-3e21-b050-e59891b64dfb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ced1e153-6559-46ef-8f8b-ee841a2a0188/ced1e153-6559-46ef-8f8b-ee841a2a0188.crl X509v3 Authority Key Identifier: keyid:5F:2B:B2:0E:6A:C5:63:EB:F3:66:68:1A:C6:64:F0:ED:3B:A4:5A:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ced1e153-6559-46ef-8f8b-ee841a2a0188.cer sbgp-ipAddrBlock: critical IPv4: 199.48.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:0c:ba:16:88:08:42:63:69:55:2e:57:e4:ac:fa:1f:2f:10: 1f:25:8a:4e:aa:be:ac:aa:4e:53:2d:01:4d:6e:ca:3f:9e:5c: 81:85:82:35:e1:16:76:f5:83:64:44:d0:04:79:9d:8d:c1:d8: cd:01:f5:7f:f6:39:27:fd:65:a5:82:89:4a:90:44:67:24:44: 45:a9:e7:7a:57:af:4d:98:bc:74:27:e5:26:89:bc:9e:d7:9e: a7:c6:0f:19:15:a7:5c:d8:93:50:9b:24:ad:bd:7d:50:aa:26: 1f:2c:0b:78:ad:cb:0d:cc:8f:47:cc:a0:d3:48:55:56:0a:9b: eb:29:2c:f6:23:d8:6f:b2:11:db:ed:d5:99:66:06:26:f6:4d: cc:b3:f9:e9:d6:8e:86:d5:c3:cd:67:df:70:cb:9d:49:a3:55: 80:fe:e9:6f:a1:64:31:57:89:8d:4f:ea:92:72:02:31:92:8f: 90:0a:2b:a2:e9:ae:27:eb:9b:5c:97:2f:47:e4:b7:42:66:5e: 1c:98:dd:0a:bd:82:e7:0c:01:7b:1d:8e:10:3e:15:1c:d7:f3: 5c:27:e1:93:65:77:1c:7a:62:73:9a:15:38:9a:83:d0:05:b6: 94:aa:78:4b:4e:c4:8e:3a:a3:e1:2c:5b:4a:38:c1:9a:ab:37: ca:65:42:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKc3fLDoID+JU4ZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VkMWUxNTMtNjU1OS00NmVmLThmOGItZWU4NDFhMmEw MTg4MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk YjJhODA1MWQtODlkYS00NDBiLTg3MmMtMWM3OTliNjk0YzUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXBZcff2cW+U9Rb0kaOimGHnuLLQ9idRzKv8 OeXW4B3u4FhG86Ecbz2EPJD+VTKI1FAENXA84uxAlHItkchHPo9iYnxhrFlyAN1y 5V/FMH+sSFgp6eWHYi9NkAjqRrqqKs+RrDmnYxKqgWQnpjtSM35N3YZGgQ4pg6Om NUekicsgdd+s6xjkn1GaB+Tm+oz/CU0AcLU6vNgyn/g7Rw/iHsSmUcsWDKjtersN 5MF29zwBpa1p5YeGPQMUj8tNKaUtWwPdVhjEorFxwupj/z1CgsTKd3KxRCMUKxH4 u5I3rLjK+Y5JCOuBuzMXAITgkwEwgtJqQXF6tFL9rP7MMEWwfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOjRw1uQFlyYKxKchAEI3WL0clZSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jZWQx ZTE1My02NTU5LTQ2ZWYtOGY4Yi1lZTg0MWEyYTAxODgvMmYwYjkwMmItNDViMC0z ZTIxLWIwNTAtZTU5ODkxYjY0ZGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvY2VkMWUxNTMtNjU1OS00NmVmLThm OGItZWU4NDFhMmEwMTg4L2NlZDFlMTUzLTY1NTktNDZlZi04ZjhiLWVlODQxYTJh MDE4OC5jcmwwHwYDVR0jBBgwFoAUXyuyDmrFY+vzZmgaxmTw7TukWkswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jZWQxZTE1My02NTU5LTQ2ZWYtOGY4Yi1lZTg0 MWEyYTAxODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzCuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFAMuhaICEJjaVUuV+Ss+h8vEB8lik6qvqyqTlMtAU1uyj+eXIGFgjXh Fnb1g2RE0AR5nY3B2M0B9X/2OSf9ZaWCiUqQRGckREWp53pXr02YvHQn5SaJvJ7X nqfGDxkVp1zYk1CbJK29fVCqJh8sC3ityw3Mj0fMoNNIVVYKm+spLPYj2G+yEdvt 1ZlmBib2Tcyz+enWjobVw81n33DLnUmjVYD+6W+hZDFXiY1P6pJyAjGSj5AKK6Lp rifrm1yXL0fkt0JmXhyY3Qq9gucMAXsdjhA+FRzX81wn4ZNldxx6YnOaFTiag9AF tpSqeEtOxI46o+EsW0o4wZqrN8plQqk= -----END CERTIFICATE-----Generated at Sat Apr 26 13:18:09 2025 by rpki-client