$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/8d49585c-078a-3eae-a1d7-7c479bf35c7e.roa File: 8d49585c-078a-3eae-a1d7-7c479bf35c7e.roa (raw, json) Hash identifier: VgINF/64sFYXjHxPjjEGTVDKv2qggf0DUke2V3scWKg= Subject key identifier: 9D:85:28:EF:4A:9D:38:88:F0:CE:96:AC:D1:D8:04:E1:9A:7F:3B:75 Certificate issuer: /CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d Certificate serial: 010D0C9F4328584988CF2A0B955E6A6865405390 Authority key identifier: C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/8d49585c-078a-3eae-a1d7-7c479bf35c7e.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 26512 IP address blocks: 199.119.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:2a:0b:95:5e:6a:68:65:40:53:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=e2c59cd1-1824-4182-a8e8-e1a1f42e5cc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:64:b4:e0:64:af:31:ab:25:12:f4:c5:89:00: f2:1e:d6:fa:d9:66:d3:7e:7b:92:0b:62:6a:48:4f: 84:19:b3:3f:ce:5d:4d:c2:a4:50:e9:12:20:c0:96: fd:04:de:ce:32:90:c3:ce:96:7d:56:c7:d1:ac:31: 81:02:a8:df:48:69:67:55:97:6c:fa:3c:1b:c7:b3: d8:7c:43:e2:3d:11:f1:ba:e4:21:57:04:95:2d:4e: ce:4c:88:90:12:b1:04:3a:2f:49:96:10:3c:4f:6b: 8c:77:6d:43:62:5f:88:f9:ff:2e:91:d3:77:85:ad: 1c:bf:95:34:3b:cb:8b:15:21:b1:c2:b8:8d:27:1c: 28:d2:20:53:88:38:05:a0:a1:c8:89:cc:45:77:42: 0f:0b:26:ca:61:ee:45:d4:af:2d:1c:ae:db:75:87: bd:4a:71:55:a1:1d:a6:1b:be:4c:35:d3:8e:b7:15: fd:cf:c5:2f:bc:9a:1d:6e:c4:39:af:f9:a8:9d:a7: b2:e9:14:37:91:2b:a7:b8:18:5b:66:c7:21:35:4d: 0d:4f:79:77:3b:03:29:d2:a8:aa:d4:0d:73:0d:b6: fe:ac:e6:b6:ae:59:50:9d:8e:2b:c9:a5:d7:e7:66: 44:09:df:64:9c:4a:54:19:a8:ab:15:a5:23:57:83: d4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:85:28:EF:4A:9D:38:88:F0:CE:96:AC:D1:D8:04:E1:9A:7F:3B:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/8d49585c-078a-3eae-a1d7-7c479bf35c7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl X509v3 Authority Key Identifier: keyid:C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer sbgp-ipAddrBlock: critical IPv4: 199.119.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:98:65:cc:df:28:51:13:ad:cd:e6:87:35:8b:20:e6:bf:5d: 09:5e:a8:49:91:0c:5e:49:e6:db:6b:f1:df:dc:4f:58:6d:a0: 17:72:58:92:35:65:db:65:a7:26:b2:9f:84:47:14:63:04:62: 5f:c6:53:7e:28:4a:12:1d:bd:f6:1f:9e:af:71:c3:5e:6b:a2: fa:61:34:93:ec:ec:b8:ba:db:59:13:63:2b:bb:68:16:52:59: 12:b5:d8:9d:96:cc:d2:83:cc:71:cd:53:11:ca:8c:ae:9a:9b: 18:f3:9d:3b:ae:ec:fe:23:96:4b:4d:7a:6c:ef:bb:57:24:0b: 63:bd:ce:6e:8e:f0:14:d2:37:c8:6c:b2:56:d5:37:16:dc:6f: ac:51:7b:08:00:12:87:79:06:e5:e9:99:66:45:7a:48:7e:94: 61:58:3b:d1:68:b5:04:a2:1e:68:f3:0e:03:06:68:76:38:7e: bc:42:42:8c:2f:51:e1:e9:33:35:92:1a:b3:df:4d:0c:4d:c7: 42:af:3a:cc:6f:aa:61:a5:9b:c2:c8:02:92:5f:85:73:92:f5: c8:cf:9d:69:79:3e:a8:8e:97:b5:c8:9d:92:bc:8d:07:94:69: 71:f7:1c:46:2f:7c:e1:ef:9b:7b:a0:df:58:e8:80:cb:c9:7b: 44:77:af:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIzyoLlV5qaGVAU5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjVmMmM4MDQtYjNiOS00YjU2LWE3MTktZGQ3MjI2MmE3 YTZkMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk ZTJjNTljZDEtMTgyNC00MTgyLWE4ZTgtZTFhMWY0MmU1Y2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWS04GSvMaslEvTFiQDyHtb62WbTfnuSC2Jq SE+EGbM/zl1NwqRQ6RIgwJb9BN7OMpDDzpZ9VsfRrDGBAqjfSGlnVZds+jwbx7PY fEPiPRHxuuQhVwSVLU7OTIiQErEEOi9JlhA8T2uMd21DYl+I+f8ukdN3ha0cv5U0 O8uLFSGxwriNJxwo0iBTiDgFoKHIicxFd0IPCybKYe5F1K8tHK7bdYe9SnFVoR2m G75MNdOOtxX9z8UvvJodbsQ5r/monaey6RQ3kSunuBhbZschNU0NT3l3OwMp0qiq 1A1zDbb+rOa2rllQnY4ryaXX52ZECd9knEpUGairFaUjV4PUvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ2FKO9KnTiI8M6WrNHYBOGafzt1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mNWYy YzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcyMjYyYTdhNmQvOGQ0OTU4NWMtMDc4YS0z ZWFlLWExZDctN2M0NzliZjM1YzdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjVmMmM4MDQtYjNiOS00YjU2LWE3 MTktZGQ3MjI2MmE3YTZkL2Y1ZjJjODA0LWIzYjktNGI1Ni1hNzE5LWRkNzIyNjJh N2E2ZC5jcmwwHwYDVR0jBBgwFoAUxGAfl7n2ifTPOb15P9g9I3XsQiEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mNWYyYzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcy MjYyYTdhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx3eGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASYZczfKFETrc3mhzWLIOa/XQleqEmRDF5J5ttr8d/cT1htoBdyWJI1 Zdtlpyayn4RHFGMEYl/GU34oShIdvfYfnq9xw15rovphNJPs7Li621kTYyu7aBZS WRK12J2WzNKDzHHNUxHKjK6amxjznTuu7P4jlktNemzvu1ckC2O9zm6O8BTSN8hs slbVNxbcb6xRewgAEod5BuXpmWZFekh+lGFYO9FotQSiHmjzDgMGaHY4frxCQowv UeHpMzWSGrPfTQxNx0KvOsxvqmGlm8LIApJfhXOS9cjPnWl5PqiOl7XInZK8jQeU aXH3HEYvfOHvm3ug31jogMvJe0R3r3g= -----END CERTIFICATE-----Generated at Mon Apr 28 12:41:12 2025 by rpki-client