$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/bba48f6f-7231-3f3a-a8e0-8c3ef5d94fd4.roa File: bba48f6f-7231-3f3a-a8e0-8c3ef5d94fd4.roa (raw, json) Hash identifier: ohBPNQhWJqnb0Du+YjXfPJtdhtBD3VUikNu6r/WlqU0= Subject key identifier: 05:5F:CA:A8:8A:95:54:96:69:A8:61:0F:84:02:5B:89:36:EE:74:57 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584973DEE894B1ECB798B68B1F38 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/bba48f6f-7231-3f3a-a8e0-8c3ef5d94fd4.roa Signing time: Tue 08 Apr 2025 01:00:47 +0000 ROA not before: Tue 08 Apr 2025 01:00:47 +0000 ROA not after: Mon 07 Jul 2025 01:00:47 +0000 asID: 31898 IP address blocks: 199.36.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:73:de:e8:94:b1:ec:b7:98:b6:8b:1f:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Apr 8 01:00:47 2025 GMT Not After : Jul 7 01:00:47 2025 GMT Subject: CN=7e97e274-96c0-47dc-89ca-217f85b79cce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:78:66:fd:22:bd:33:bb:d1:8a:a7:a7:4a:d0: d0:3b:8c:91:41:ef:cb:64:7d:c8:a6:a7:12:06:a4: 71:a5:1b:62:ba:1d:78:9a:37:96:bb:7b:02:aa:e1: 73:a1:4a:6e:6e:11:b1:b5:7f:a0:6d:e6:71:41:4b: 78:46:20:85:8a:a2:d3:96:e7:d5:2b:89:57:c3:50: 31:00:f2:0e:1f:4a:a6:a4:c4:1b:ba:46:c2:ba:32: c4:53:cd:09:6e:6d:0b:e1:d5:c3:31:ad:b7:c0:59: 0a:aa:10:34:9b:42:5a:7f:19:46:44:69:09:56:18: 32:dc:dd:9c:06:ea:fc:a3:7e:eb:2a:64:a7:97:63: ed:bf:4c:a2:20:4d:f9:f7:15:cc:86:bc:93:46:d9: fb:e7:e2:46:f7:32:72:d0:a0:93:97:a7:0c:af:7b: ec:ee:9f:af:25:af:cf:df:a3:b9:91:10:8b:1a:4d: ed:b9:d7:bc:39:a6:bd:f3:32:04:6b:ba:a3:18:f3: fc:ab:dd:34:e8:e2:8c:4e:dc:ff:cd:6a:86:a4:a7: e5:b1:53:46:7b:97:85:ff:8e:f5:a7:12:61:72:9b: 6d:68:40:b8:2b:db:af:8f:00:19:86:eb:c8:b9:35: f7:78:ec:43:b1:a8:ab:c0:75:7d:88:3c:b1:5a:ce: 02:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:5F:CA:A8:8A:95:54:96:69:A8:61:0F:84:02:5B:89:36:EE:74:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/bba48f6f-7231-3f3a-a8e0-8c3ef5d94fd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 199.36.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:c0:fa:51:6c:07:d5:07:6a:db:43:80:70:3e:80:d5:19:1f: 4f:db:a3:98:1c:96:dd:6a:e8:a7:17:b0:90:98:87:87:2e:4d: 1d:e0:41:77:50:c8:c2:00:a2:5a:c7:a6:f0:93:76:61:cf:5e: a2:55:e6:d9:98:6d:b2:9f:b8:2f:08:52:81:20:6b:1e:0a:55: 40:20:3f:3a:cc:fb:e3:a9:60:fa:68:f4:e5:3c:03:82:e6:14: 76:1e:35:c6:40:54:91:55:41:3e:84:64:78:38:53:b3:37:8b: ac:fe:03:9c:2b:71:b4:59:d5:f1:2a:e4:74:60:04:f9:4c:36: ce:50:c0:d8:e8:6e:c7:78:b5:94:e6:05:b3:ff:e4:a1:6d:bc: f2:6b:64:43:91:49:30:52:7b:8d:a9:47:ff:37:b5:4d:f1:0a: ba:0d:50:89:75:57:8b:70:02:60:af:bc:cc:36:f5:fe:b1:fc: 79:12:61:b0:0a:f7:9f:89:a8:96:80:64:99:ea:12:7d:5c:41: f3:ce:c4:b6:ba:76:8f:7a:5c:79:26:60:4f:43:33:5e:60:0e: 7b:3c:f5:97:5e:f2:b1:0c:2c:00:4b:42:23:d7:07:6b:79:a0: 6a:37:e6:0e:38:f9:a7:66:d1:c5:6d:26:c6:10:f3:04:66:54: 41:13:40:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElz3uiUsey3mLaLHzgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDQwODAxMDA0N1oXDTI1MDcwNzAxMDA0N1owLzEtMCsGA1UEAxMk N2U5N2UyNzQtOTZjMC00N2RjLTg5Y2EtMjE3Zjg1Yjc5Y2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinhm/SK9M7vRiqenStDQO4yRQe/LZH3IpqcS BqRxpRtiuh14mjeWu3sCquFzoUpubhGxtX+gbeZxQUt4RiCFiqLTlufVK4lXw1Ax APIOH0qmpMQbukbCujLEU80Jbm0L4dXDMa23wFkKqhA0m0JafxlGRGkJVhgy3N2c Bur8o37rKmSnl2Ptv0yiIE359xXMhryTRtn75+JG9zJy0KCTl6cMr3vs7p+vJa/P 36O5kRCLGk3tude8Oaa98zIEa7qjGPP8q9006OKMTtz/zWqGpKflsVNGe5eF/471 pxJhcpttaEC4K9uvjwAZhuvIuTX3eOxDsairwHV9iDyxWs4CzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAVfyqiKlVSWaahhD4QCW4k27nRXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvYmJhNDhmNmYtNzIzMS0z ZjNhLWE4ZTAtOGMzZWY1ZDk0ZmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyT7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLA+lFsB9UHattDgHA+gNUZH0/bo5gclt1q6KcXsJCYh4cuTR3gQXdQ yMIAolrHpvCTdmHPXqJV5tmYbbKfuC8IUoEgax4KVUAgPzrM++OpYPpo9OU8A4Lm FHYeNcZAVJFVQT6EZHg4U7M3i6z+A5wrcbRZ1fEq5HRgBPlMNs5QwNjobsd4tZTm BbP/5KFtvPJrZEORSTBSe42pR/83tU3xCroNUIl1V4twAmCvvMw29f6x/HkSYbAK 95+JqJaAZJnqEn1cQfPOxLa6do96XHkmYE9DM15gDns89Zde8rEMLABLQiPXB2t5 oGo35g44+adm0cVtJsYQ8wRmVEETQLA= -----END CERTIFICATE-----Generated at Sun Apr 27 00:19:40 2025 by rpki-client