$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/50a98511-3c5a-3722-9533-7e6dc0d97e76.roa File: 50a98511-3c5a-3722-9533-7e6dc0d97e76.roa (raw, json) Hash identifier: mGYiAJtbLrQ4K5W185ecfHo5sfLvkA25jOui90fsp/o= Subject key identifier: D0:F9:B6:62:F5:3B:64:14:C6:17:1B:16:92:F8:11:05:96:49:46:95 Certificate issuer: /CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d Certificate serial: 010D0C9F4328584988CF2A1B4DEAAFE6298EF160 Authority key identifier: C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/50a98511-3c5a-3722-9533-7e6dc0d97e76.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 26512 IP address blocks: 199.119.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:2a:1b:4d:ea:af:e6:29:8e:f1:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=4be83b62-e0b5-4232-890b-d85cbc53cc05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:90:e6:95:cc:5d:c5:15:6e:01:68:fd:8d:4d: 80:5d:91:f6:c0:09:f1:35:d3:71:3f:7e:64:92:90: 33:41:1b:1f:b5:72:2a:61:3f:96:7f:4e:0d:52:e3: f7:ef:47:0e:74:ac:50:3f:76:33:b8:1c:c9:0f:61: df:fd:b1:6b:91:26:e7:7f:64:1d:fe:96:eb:a1:01: b8:c0:d4:ef:a5:db:3f:97:24:9d:75:74:e6:44:6c: 9d:8a:e5:d2:c6:88:35:42:ee:e0:3e:c1:ea:5c:04: 5d:6f:54:ca:72:2b:79:0a:c5:4b:e6:cc:8f:75:af: 43:7a:e4:15:3d:ce:23:83:f2:8a:52:0a:48:e6:2a: 4c:78:76:c3:70:f9:81:76:f7:1c:06:f3:fd:0d:9e: e9:bf:96:94:e1:03:ad:3b:e7:3b:54:9c:91:1b:d2: 62:3e:e0:02:36:45:80:3e:1c:4b:91:56:37:6c:0a: 0a:a8:5b:e9:0e:f9:90:ff:7c:20:16:39:7d:cc:82: 4b:da:45:e5:4d:6b:da:46:5f:9c:0e:30:a7:83:40: 10:2b:f2:6c:7e:30:49:78:3e:7b:ad:2e:06:d4:4b: b5:38:02:f4:2e:de:de:d5:fc:11:18:ff:dc:2b:13: 5c:0c:99:da:40:03:3b:11:96:97:18:f5:40:68:16: 0d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:F9:B6:62:F5:3B:64:14:C6:17:1B:16:92:F8:11:05:96:49:46:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/50a98511-3c5a-3722-9533-7e6dc0d97e76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl X509v3 Authority Key Identifier: keyid:C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer sbgp-ipAddrBlock: critical IPv4: 199.119.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:53:d5:fe:80:e6:13:50:66:8a:47:dc:b1:b8:5b:25:27:28: 0a:d9:5e:5b:34:76:19:f7:b8:ce:44:18:c1:19:dc:63:9a:cd: 67:11:fc:1e:cd:5f:99:71:67:04:53:8f:9f:61:3f:e1:25:9a: 45:a2:a8:c2:25:8e:99:e7:a3:4b:e0:7e:09:e4:01:ed:2b:1c: e2:4d:f0:6f:b1:dc:2b:97:49:cb:cc:cd:23:8b:4d:f0:4d:e5: 1f:6c:6e:e9:79:50:b0:c5:77:00:f2:9b:39:b9:2a:93:2c:6b: b7:1a:ee:64:41:7f:a5:a8:e3:ef:71:a3:dc:5a:02:f5:1c:89: b5:7b:8a:f0:9f:99:20:5a:1b:b4:2c:a1:16:9a:d6:b7:e1:c4: 63:26:0f:4d:3b:c1:82:a2:c5:96:97:57:59:05:e3:a3:65:4d: 44:97:84:9f:25:6a:e7:b3:fd:9a:e9:7e:22:5b:6a:35:b1:24: 6c:09:42:43:b6:2c:01:ef:f5:a2:66:e8:63:ab:18:cd:bb:74: 9b:bd:c0:7c:34:b8:68:47:9c:0a:67:f8:c5:69:f8:ab:81:36: 4b:3e:2e:12:a8:55:6c:4e:08:d7:47:48:f4:6a:db:d5:65:57: aa:d6:e6:11:d7:99:0d:35:80:52:40:7a:5b:2e:b9:d7:bd:67: 9f:4b:9e:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIzyobTeqv5imO8WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjVmMmM4MDQtYjNiOS00YjU2LWE3MTktZGQ3MjI2MmE3 YTZkMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk NGJlODNiNjItZTBiNS00MjMyLTg5MGItZDg1Y2JjNTNjYzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopDmlcxdxRVuAWj9jU2AXZH2wAnxNdNxP35k kpAzQRsftXIqYT+Wf04NUuP370cOdKxQP3YzuBzJD2Hf/bFrkSbnf2Qd/pbroQG4 wNTvpds/lySddXTmRGydiuXSxog1Qu7gPsHqXARdb1TKcit5CsVL5syPda9DeuQV Pc4jg/KKUgpI5ipMeHbDcPmBdvccBvP9DZ7pv5aU4QOtO+c7VJyRG9JiPuACNkWA PhxLkVY3bAoKqFvpDvmQ/3wgFjl9zIJL2kXlTWvaRl+cDjCng0AQK/JsfjBJeD57 rS4G1Eu1OAL0Lt7e1fwRGP/cKxNcDJnaQAM7EZaXGPVAaBYNfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFND5tmL1O2QUxhcbFpL4EQWWSUaVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mNWYy YzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcyMjYyYTdhNmQvNTBhOTg1MTEtM2M1YS0z NzIyLTk1MzMtN2U2ZGMwZDk3ZTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjVmMmM4MDQtYjNiOS00YjU2LWE3 MTktZGQ3MjI2MmE3YTZkL2Y1ZjJjODA0LWIzYjktNGI1Ni1hNzE5LWRkNzIyNjJh N2E2ZC5jcmwwHwYDVR0jBBgwFoAUxGAfl7n2ifTPOb15P9g9I3XsQiEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mNWYyYzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcy MjYyYTdhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx3eHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBT1f6A5hNQZopH3LG4WyUnKArZXls0dhn3uM5EGMEZ3GOazWcR/B7N X5lxZwRTj59hP+ElmkWiqMIljpnno0vgfgnkAe0rHOJN8G+x3CuXScvMzSOLTfBN 5R9sbul5ULDFdwDymzm5KpMsa7ca7mRBf6Wo4+9xo9xaAvUcibV7ivCfmSBaG7Qs oRaa1rfhxGMmD007wYKixZaXV1kF46NlTUSXhJ8lauez/ZrpfiJbajWxJGwJQkO2 LAHv9aJm6GOrGM27dJu9wHw0uGhHnApn+MVp+KuBNks+LhKoVWxOCNdHSPRq29Vl V6rW5hHXmQ01gFJAelsuude9Z59LnpA= -----END CERTIFICATE-----Generated at Mon Apr 28 11:35:32 2025 by rpki-client