$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/8ae67e8a-104d-3a84-8b85-450caa25862f.roa File: 8ae67e8a-104d-3a84-8b85-450caa25862f.roa (raw, json) Hash identifier: Bo0mo6FksWVQFBQX1L5pp7WgM6Uk3d75Acvk36mDUoY= Subject key identifier: B9:91:86:7B:C3:9E:D5:26:40:96:10:83:30:83:D5:03:54:D9:22:A2 Certificate issuer: /CN=ed8e4dfa-e90e-4e3d-a515-901708c3f7f8 Certificate serial: 010D0C9F4328584988CF21B6FE894D7D081C3680 Authority key identifier: D9:1D:19:AF:3F:93:04:6D:4D:59:36:4D:D7:1C:E9:87:1B:5D:84:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/8ae67e8a-104d-3a84-8b85-450caa25862f.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 32402 IP address blocks: 199.7.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:21:b6:fe:89:4d:7d:08:1c:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed8e4dfa-e90e-4e3d-a515-901708c3f7f8 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=09e6236f-78a6-49a9-a83a-c7dfc020d6bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1a:08:06:d7:8a:8f:2b:18:5b:f2:31:39:4f: b3:7a:9b:48:d9:ba:f5:b7:fc:72:c2:eb:86:b8:5c: f1:b8:1a:35:b9:67:ac:5b:7f:e9:fc:82:5a:e4:66: dd:a9:8a:00:49:98:8c:6c:7e:fc:03:e1:e2:69:53: 6b:6f:33:8d:da:40:fe:94:3b:50:ff:01:ab:bc:d1: 4d:8f:90:15:75:0c:03:35:2b:df:f8:c0:86:93:20: 30:0f:3b:2a:1b:93:5d:28:64:1d:90:20:6c:e3:e3: 3c:48:0e:3c:32:44:e5:85:3a:e9:41:b3:34:57:10: 7d:36:61:31:d9:38:f8:a4:5a:c9:d2:77:06:f1:fc: 71:6b:ee:f0:31:43:ea:e0:aa:59:0b:5c:80:5f:c1: 61:aa:4a:95:cb:68:bf:2a:ab:ed:9c:08:78:a4:50: 5f:84:a4:92:20:f4:0d:00:3e:cd:3b:0a:b7:f5:96: dd:ed:8a:70:07:f8:59:c7:46:96:d4:85:1a:90:0f: 89:b8:24:8f:0b:f0:6c:6c:01:2e:8f:00:a5:82:10: 09:ed:a3:89:b8:71:19:95:4b:25:a2:a9:ca:e9:d6: d2:77:b1:82:e9:48:7c:cb:80:1e:68:80:b3:94:02: 82:0c:31:ac:a9:61:14:21:d9:1d:48:29:d0:44:b3: 7f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:91:86:7B:C3:9E:D5:26:40:96:10:83:30:83:D5:03:54:D9:22:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/8ae67e8a-104d-3a84-8b85-450caa25862f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.crl X509v3 Authority Key Identifier: keyid:D9:1D:19:AF:3F:93:04:6D:4D:59:36:4D:D7:1C:E9:87:1B:5D:84:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.cer sbgp-ipAddrBlock: critical IPv4: 199.7.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:1a:e3:c4:61:0b:df:e7:17:d2:11:cf:99:2b:44:fb:19:42: a1:ab:55:3f:c0:bb:40:e3:29:87:e3:5b:49:fd:fa:5e:20:48: 23:8d:e9:a5:a7:df:f7:11:31:a5:96:02:c2:21:f5:d3:22:a0: da:49:37:2c:8d:c4:54:ab:e0:ed:16:02:63:ab:41:27:a1:66: d1:a0:33:eb:49:4d:30:38:39:15:26:ec:f4:2a:31:ca:bf:c5: 1f:c1:ff:44:dc:29:49:aa:c0:fb:35:17:17:b7:5b:ae:e5:c3: c0:94:3f:27:69:3f:59:ed:b5:e2:a1:54:f0:9a:bb:91:d3:a2: d6:85:2b:05:62:b4:f6:2c:9a:30:63:a4:2c:a5:22:e3:2b:03: af:bc:56:4f:21:53:51:e7:68:5a:1a:1a:da:6b:78:3a:90:d3: c1:1f:2f:41:33:4a:49:78:3c:47:2f:d1:04:0c:2c:2b:2c:22: 40:d0:a1:e8:df:b0:5c:d3:60:4e:14:a4:e7:f0:81:48:b6:a0: e4:a2:f6:55:5f:d5:39:ec:df:df:ba:9f:c6:5a:5e:ba:75:87: b1:82:e8:0f:13:d7:ab:53:ce:ba:8d:a0:68:5c:b9:99:c2:b9: 8b:7a:2f:ba:cb:32:1e:60:14:4a:93:dc:ab:67:a1:ee:2a:5b: aa:51:6b:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIzyG2/olNfQgcNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWQ4ZTRkZmEtZTkwZS00ZTNkLWE1MTUtOTAxNzA4YzNm N2Y4MB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk MDllNjIzNmYtNzhhNi00OWE5LWE4M2EtYzdkZmMwMjBkNmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRoIBteKjysYW/IxOU+zeptI2br1t/xywuuG uFzxuBo1uWesW3/p/IJa5GbdqYoASZiMbH78A+HiaVNrbzON2kD+lDtQ/wGrvNFN j5AVdQwDNSvf+MCGkyAwDzsqG5NdKGQdkCBs4+M8SA48MkTlhTrpQbM0VxB9NmEx 2Tj4pFrJ0ncG8fxxa+7wMUPq4KpZC1yAX8FhqkqVy2i/KqvtnAh4pFBfhKSSIPQN AD7NOwq39Zbd7YpwB/hZx0aW1IUakA+JuCSPC/BsbAEujwClghAJ7aOJuHEZlUsl oqnK6dbSd7GC6Uh8y4AeaICzlAKCDDGsqWEUIdkdSCnQRLN/uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLmRhnvDntUmQJYQgzCD1QNU2SKiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lZDhl NGRmYS1lOTBlLTRlM2QtYTUxNS05MDE3MDhjM2Y3ZjgvOGFlNjdlOGEtMTA0ZC0z YTg0LThiODUtNDUwY2FhMjU4NjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZWQ4ZTRkZmEtZTkwZS00ZTNkLWE1 MTUtOTAxNzA4YzNmN2Y4L2VkOGU0ZGZhLWU5MGUtNGUzZC1hNTE1LTkwMTcwOGMz ZjdmOC5jcmwwHwYDVR0jBBgwFoAU2R0Zrz+TBG1NWTZN1xzphxtdhOswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lZDhlNGRmYS1lOTBlLTRlM2QtYTUxNS05MDE3 MDhjM2Y3ZjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwe6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABka48RhC9/nF9IRz5krRPsZQqGrVT/Au0DjKYfjW0n9+l4gSCON6aWn 3/cRMaWWAsIh9dMioNpJNyyNxFSr4O0WAmOrQSehZtGgM+tJTTA4ORUm7PQqMcq/ xR/B/0TcKUmqwPs1Fxe3W67lw8CUPydpP1ntteKhVPCau5HTotaFKwVitPYsmjBj pCylIuMrA6+8Vk8hU1HnaFoaGtpreDqQ08EfL0EzSkl4PEcv0QQMLCssIkDQoejf sFzTYE4UpOfwgUi2oOSi9lVf1Tns39+6n8ZaXrp1h7GC6A8T16tTzrqNoGhcuZnC uYt6L7rLMh5gFEqT3Ktnoe4qW6pRazk= -----END CERTIFICATE-----Generated at Sat Apr 26 12:54:58 2025 by rpki-client