$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/abe08fdd-27c7-3e5b-a0cb-979b69681a5c.roa File: abe08fdd-27c7-3e5b-a0cb-979b69681a5c.roa (raw, json) Hash identifier: oA5eciLAUjmu0YQNj6Gvr1ju+2vtiDnxLUm8zGmrWgk= Subject key identifier: 91:CD:1A:6C:DC:45:09:EE:66:14:86:31:AB:2C:91:3B:67:E0:51:D8 Certificate issuer: /CN=74a9db22-8d49-4938-9c6f-e3fd428c158e Certificate serial: 010D0C9F43285849DC8FB98136651F7D74184C00 Authority key identifier: 98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/abe08fdd-27c7-3e5b-a0cb-979b69681a5c.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 134521 IP address blocks: 199.27.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:b9:81:36:65:1f:7d:74:18:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74a9db22-8d49-4938-9c6f-e3fd428c158e Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=9ac4623e-af76-4e59-985b-7e5fbafb28df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:af:b4:d7:14:3e:f4:da:66:f2:f8:47:3e:f4: b0:f9:5a:f5:07:14:a4:e5:64:03:15:7e:23:73:31: cf:00:30:76:3e:cf:0c:60:4b:ed:20:47:32:8d:ea: 59:60:3c:c2:b6:3f:37:29:cb:8f:e2:81:44:54:ac: bd:a9:36:66:98:91:fa:76:5b:78:75:ba:69:12:75: 7f:76:3d:56:62:c1:7d:f3:54:a6:9c:16:65:0e:aa: 82:ff:71:5b:53:56:3e:b6:f8:95:6a:35:f8:c4:87: 73:5d:88:7b:e5:7d:59:79:46:dc:9d:a7:5f:c2:62: 66:3a:1b:eb:79:70:46:bd:6d:a5:39:5f:49:d7:19: aa:0a:5e:ad:69:98:f2:5a:c4:61:79:80:ab:80:91: e0:a8:f4:4a:ab:30:76:6e:a9:b5:7e:e1:08:52:74: 93:89:96:47:a4:b3:3c:14:cf:43:15:b4:42:cd:76: 5c:a6:a0:05:33:a5:61:c1:09:45:da:72:9c:5b:ea: 6c:71:ea:50:9d:48:03:4a:8d:df:b9:2f:bc:b2:df: ce:f5:03:83:0c:a2:41:37:fd:b0:69:6f:6b:ff:13: 56:90:56:1c:63:b9:61:f2:a2:bf:f2:fa:1b:c8:72: 8c:5b:b4:14:37:61:ac:20:33:82:5b:cf:a4:16:b4: ab:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:CD:1A:6C:DC:45:09:EE:66:14:86:31:AB:2C:91:3B:67:E0:51:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/abe08fdd-27c7-3e5b-a0cb-979b69681a5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.crl X509v3 Authority Key Identifier: keyid:98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer sbgp-ipAddrBlock: critical IPv4: 199.27.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:39:14:bd:00:9c:6b:4e:a8:21:df:1c:ac:96:38:34:2d:92: 49:60:ac:b4:e4:78:40:ca:bf:4b:47:c1:d9:55:70:69:b1:12: 54:f2:9b:9f:0e:8d:7d:95:f4:34:42:42:07:5f:ba:37:f5:0d: 8a:21:f5:2e:ed:94:00:2f:e5:85:93:ff:3d:9c:36:3f:3a:3c: ab:2f:5a:dc:39:c5:4b:0a:59:38:0a:7b:0c:47:9c:93:39:55: a2:5b:1c:5c:9e:f7:a5:3f:3c:a6:e0:d0:bc:a9:dd:96:1a:67: 86:b9:8f:d1:51:06:da:73:6b:6c:40:9f:f9:11:89:b6:8c:c9: 9c:3e:b9:4b:52:49:bb:b2:90:39:a1:a3:ad:ea:2e:41:52:ca: 2a:e5:e2:34:2b:72:9f:d2:7e:22:c2:36:c3:46:31:5e:87:3a: 20:2e:e0:ea:ac:22:ed:ff:8c:15:d6:0a:58:3c:9e:59:fc:aa: b6:a7:ee:6d:86:19:ae:a0:6a:11:e4:bb:d1:d0:73:bb:c5:4c: 2c:17:4d:53:9d:d0:7a:d2:3c:e1:6d:de:10:57:af:6d:c7:0b: a5:26:21:a9:b7:61:02:f8:82:43:a9:f1:c5:31:ed:da:d2:60: 0a:aa:7f:9e:42:b7:87:79:7d:57:a5:83:34:27:16:6e:3c:14: 0f:c8:82:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj7mBNmUffXQYTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRhOWRiMjItOGQ0OS00OTM4LTljNmYtZTNmZDQyOGMx NThlMB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk OWFjNDYyM2UtYWY3Ni00ZTU5LTk4NWItN2U1ZmJhZmIyOGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6+01xQ+9Npm8vhHPvSw+Vr1BxSk5WQDFX4j czHPADB2Ps8MYEvtIEcyjepZYDzCtj83KcuP4oFEVKy9qTZmmJH6dlt4dbppEnV/ dj1WYsF981SmnBZlDqqC/3FbU1Y+tviVajX4xIdzXYh75X1ZeUbcnadfwmJmOhvr eXBGvW2lOV9J1xmqCl6taZjyWsRheYCrgJHgqPRKqzB2bqm1fuEIUnSTiZZHpLM8 FM9DFbRCzXZcpqAFM6VhwQlF2nKcW+pscepQnUgDSo3fuS+8st/O9QODDKJBN/2w aW9r/xNWkFYcY7lh8qK/8vobyHKMW7QUN2GsIDOCW8+kFrSrYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJHNGmzcRQnuZhSGMasskTtn4FHYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NGE5 ZGIyMi04ZDQ5LTQ5MzgtOWM2Zi1lM2ZkNDI4YzE1OGUvYWJlMDhmZGQtMjdjNy0z ZTViLWEwY2ItOTc5YjY5NjgxYTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzRhOWRiMjItOGQ0OS00OTM4LTlj NmYtZTNmZDQyOGMxNThlLzc0YTlkYjIyLThkNDktNDkzOC05YzZmLWUzZmQ0Mjhj MTU4ZS5jcmwwHwYDVR0jBBgwFoAUmPupDsV3auhpmoOFV1QuM6AcJkEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NGE5ZGIyMi04ZDQ5LTQ5MzgtOWM2Zi1lM2Zk NDI4YzE1OGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxxuWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFU5FL0AnGtOqCHfHKyWODQtkklgrLTkeEDKv0tHwdlVcGmxElTym58O jX2V9DRCQgdfujf1DYoh9S7tlAAv5YWT/z2cNj86PKsvWtw5xUsKWTgKewxHnJM5 VaJbHFye96U/PKbg0Lyp3ZYaZ4a5j9FRBtpza2xAn/kRibaMyZw+uUtSSbuykDmh o63qLkFSyirl4jQrcp/SfiLCNsNGMV6HOiAu4OqsIu3/jBXWClg8nln8qran7m2G Ga6gahHku9HQc7vFTCwXTVOd0HrSPOFt3hBXr23HC6UmIam3YQL4gkOp8cUx7drS YAqqf55Ct4d5fVelgzQnFm48FA/IgjE= -----END CERTIFICATE-----Generated at Sun Jun 15 15:00:17 2025 by rpki-client