$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/30becd11-c4bc-3a34-83b9-2f8d898106fa.roa File: 30becd11-c4bc-3a34-83b9-2f8d898106fa.roa (raw, json) Hash identifier: zuWLFVyLVvLiuz8iE0zKhnC2DWDRRLiZTLujfqG97a4= Subject key identifier: F5:17:D8:7E:7F:22:E1:49:68:61:E4:5D:5C:19:19:F2:0A:EA:CB:D4 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB6EAC1A8656D8526CB580 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/30becd11-c4bc-3a34-83b9-2f8d898106fa.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 199.36.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:6e:ac:1a:86:56:d8:52:6c:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=38640c20-1d23-47bf-97e8-5d88bc29c813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:49:09:a4:02:ae:aa:fd:1e:55:4e:b1:14:e4: 0f:7d:8b:f5:15:e7:e4:56:f7:0a:c3:0b:3a:d0:29: 8c:d8:d3:c7:7c:55:ef:86:75:90:2b:5c:a9:ec:d3: 11:20:40:52:b9:bd:b8:3d:d0:3f:99:fb:ad:2f:2e: b8:a2:f0:c9:59:8c:4e:94:9b:21:0d:2f:08:85:7a: 2d:71:51:f7:18:50:b5:1e:6f:fb:f3:d5:06:bf:05: 47:4f:69:d3:1c:d2:44:a4:f4:93:75:a1:dc:0c:1d: 17:a7:8a:08:70:c0:08:5b:28:a6:b4:7d:04:6f:8d: 4b:23:89:c7:ba:50:7a:34:73:4d:98:7c:22:1b:f5: 32:20:b8:d4:b0:20:6b:98:fe:08:4b:0d:92:f5:a5: e7:eb:ac:af:0f:d7:00:9f:6e:d4:de:1e:6f:cf:b9: cf:93:d4:56:26:54:fd:73:4e:b4:60:57:c1:5e:8f: 97:45:f7:b7:23:0f:e0:16:b1:51:92:df:d6:c3:64: 36:ba:84:27:c0:20:04:51:67:2c:6c:2d:b2:29:94: 49:ba:1b:98:8c:51:85:29:5b:ae:9c:5d:9d:48:03: e7:e3:92:b1:20:2f:8f:42:da:80:38:cf:50:18:06: 30:13:ff:c1:71:da:25:83:3f:ff:cc:aa:a9:75:52: 55:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:17:D8:7E:7F:22:E1:49:68:61:E4:5D:5C:19:19:F2:0A:EA:CB:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/30becd11-c4bc-3a34-83b9-2f8d898106fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 199.36.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:ae:72:14:f0:bd:1e:99:8a:95:12:15:7e:db:d2:26:33:ba: 83:a4:2c:f3:d7:cb:ea:a0:a3:9c:8d:72:46:ce:bf:5d:45:3e: fb:30:37:10:78:99:82:0f:69:7b:1e:b3:9d:d3:b6:1e:d6:e2: 34:aa:43:cc:0e:77:c6:08:95:0e:ef:ee:3e:d6:b6:76:c2:cb: c5:98:d9:f1:ab:11:70:f6:ce:48:d2:d1:c1:48:58:cb:fc:d3: 59:45:d9:2b:40:3a:e5:f7:f1:b7:4b:fb:d4:16:ab:ce:65:68: d2:86:f1:a1:a4:2a:0c:39:42:36:d5:3d:07:01:7a:40:36:39: f5:f0:b5:c2:f7:b5:be:ac:6d:18:da:22:7e:cb:1f:15:78:cc: 97:3f:8d:74:1b:9c:78:02:7a:5b:88:0e:ef:07:64:31:14:5a: 45:0d:c0:14:e5:d1:2c:ac:95:a6:91:08:ae:00:7b:b0:b3:94: 72:bc:58:ca:c0:20:4f:a3:02:8e:4f:89:e4:2a:f8:9d:8e:2a: e9:bd:b7:c8:a1:78:bb:e2:c5:05:b1:e5:18:d2:ec:a3:28:09: 3f:f2:51:e3:fe:91:13:0c:af:ef:f5:92:5a:ba:6c:24:2d:5c: 84:71:83:f3:af:dd:eb:eb:2e:5e:3d:ff:81:d5:80:93:97:03: a9:61:42:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku26sGoZW2FJstYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk Mzg2NDBjMjAtMWQyMy00N2JmLTk3ZTgtNWQ4OGJjMjljODEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEkJpAKuqv0eVU6xFOQPfYv1FefkVvcKwws6 0CmM2NPHfFXvhnWQK1yp7NMRIEBSub24PdA/mfutLy64ovDJWYxOlJshDS8IhXot cVH3GFC1Hm/789UGvwVHT2nTHNJEpPSTdaHcDB0Xp4oIcMAIWyimtH0Eb41LI4nH ulB6NHNNmHwiG/UyILjUsCBrmP4ISw2S9aXn66yvD9cAn27U3h5vz7nPk9RWJlT9 c060YFfBXo+XRfe3Iw/gFrFRkt/Ww2Q2uoQnwCAEUWcsbC2yKZRJuhuYjFGFKVuu nF2dSAPn45KxIC+PQtqAOM9QGAYwE//Bcdolgz//zKqpdVJVgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPUX2H5/IuFJaGHkXVwZGfIK6svUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzBiZWNkMTEtYzRiYy0z YTM0LTgzYjktMmY4ZDg5ODEwNmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxySaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFeuchTwvR6ZipUSFX7b0iYzuoOkLPPXy+qgo5yNckbOv11FPvswNxB4 mYIPaXses53Tth7W4jSqQ8wOd8YIlQ7v7j7WtnbCy8WY2fGrEXD2zkjS0cFIWMv8 01lF2StAOuX38bdL+9QWq85laNKG8aGkKgw5QjbVPQcBekA2OfXwtcL3tb6sbRja In7LHxV4zJc/jXQbnHgCeluIDu8HZDEUWkUNwBTl0SyslaaRCK4Ae7CzlHK8WMrA IE+jAo5PieQq+J2OKum9t8iheLvixQWx5RjS7KMoCT/yUeP+kRMMr+/1klq6bCQt XIRxg/Ov3evrLl49/4HVgJOXA6lhQi4= -----END CERTIFICATE-----Generated at Sat Apr 26 19:58:15 2025 by rpki-client