$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/5f1baae2-e684-36ca-90d9-fe3a9fba8078.roa File: 5f1baae2-e684-36ca-90d9-fe3a9fba8078.roa (raw, json) Hash identifier: qZITjcY+s8kyAJh8nLBU7u43uTz7pBpjJ/mnBtMZn38= Subject key identifier: 21:4E:70:9D:90:5B:62:5B:65:EA:FD:06:1E:43:78:7B:16:D9:55:6C Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584961B98B5791D66452AAAD9A00 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/5f1baae2-e684-36ca-90d9-fe3a9fba8078.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 14618 IP address blocks: 199.255.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:8b:57:91:d6:64:52:aa:ad:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=334b2dc4-c674-4f2d-ab51-4072db648767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:60:80:a5:7e:f8:c8:50:f9:01:ba:d1:f0:16: 0e:88:42:2f:85:0b:e7:6e:7d:71:16:62:ae:2a:4c: 18:6b:89:a9:6c:5f:73:b7:4b:22:e8:dc:9d:3b:cc: 69:49:63:4e:8a:8e:89:31:ee:76:48:f8:d3:8e:54: 4a:75:34:bf:c9:2c:39:eb:5e:bd:b4:e2:e8:49:ab: c0:fe:a2:34:a8:e2:32:dc:de:9e:cc:fa:10:af:a1: f7:b6:18:1a:64:9b:b2:c5:f4:39:da:84:bc:e3:a7: 9f:73:f8:27:87:ce:66:86:4e:7c:eb:9f:e5:8f:7e: 7c:cb:4a:4b:70:17:4e:d2:0b:ff:46:16:81:af:0f: 3f:85:6c:b9:bc:32:e3:c7:92:b5:19:c4:75:6d:e7: 87:23:13:c8:f0:a3:d7:64:80:31:1b:c7:24:dd:9e: 40:0c:a0:b2:b0:34:1b:4d:1a:d6:e1:bc:6d:ad:05: 42:ab:19:ac:bb:51:65:e2:66:18:2b:06:eb:00:3f: 20:a6:24:31:b0:bb:fc:0a:1b:a8:53:bd:43:fa:15: e5:54:b4:1e:f7:95:f8:b3:ba:a3:2f:ab:60:c8:4c: ec:e9:f2:04:b2:b4:d0:b3:bc:d1:48:29:cd:3f:b1: 0a:45:3e:2c:72:03:14:86:30:93:e6:2c:fb:f7:f3: cc:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:4E:70:9D:90:5B:62:5B:65:EA:FD:06:1E:43:78:7B:16:D9:55:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/5f1baae2-e684-36ca-90d9-fe3a9fba8078.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 199.255.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:67:43:77:11:5b:5a:da:10:74:79:ff:c9:67:e3:35:12:43: 11:69:71:d8:6f:f7:f2:cf:d0:84:db:eb:d0:af:25:36:f0:17: a5:33:3e:a9:bc:ae:ce:5b:13:5b:4f:11:4b:1c:ca:43:97:52: d6:88:19:60:82:80:10:18:6a:78:5c:a8:bf:c5:a3:6e:e1:80: a4:b9:e0:d1:a3:4c:a9:e9:d5:99:79:b0:5e:55:6f:3d:c8:be: dc:e2:76:e4:80:a0:57:a4:5f:17:4c:ef:4f:d7:d5:ed:64:89: d5:e2:ed:1c:45:94:af:7e:df:de:59:4f:bc:03:29:c8:51:34: a5:f0:81:2d:77:63:3e:25:33:0b:04:1b:23:ca:ae:5f:ca:d4: 1c:ac:93:21:04:1f:d1:4f:b2:1b:95:c7:f9:ea:7f:aa:df:61: 42:77:d4:86:9c:a1:9f:1e:7c:64:41:95:86:87:42:5a:1a:ba: 99:46:c4:ae:5a:bb:48:2f:27:5b:00:87:8e:59:e6:c0:cc:0b: 24:13:e1:90:d1:89:e3:ad:cf:f8:9f:3c:3a:9a:7f:0a:13:03: 15:1d:ef:25:e1:10:7a:58:3d:96:0c:b2:ae:e2:43:25:2f:3e: 39:42:c1:c8:4d:8b:6a:03:f1:46:e8:66:17:89:9b:26:53:45: 16:64:3c:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElhuYtXkdZkUqqtmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk MzM0YjJkYzQtYzY3NC00ZjJkLWFiNTEtNDA3MmRiNjQ4NzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGCApX74yFD5AbrR8BYOiEIvhQvnbn1xFmKu KkwYa4mpbF9zt0si6NydO8xpSWNOio6JMe52SPjTjlRKdTS/ySw56169tOLoSavA /qI0qOIy3N6ezPoQr6H3thgaZJuyxfQ52oS846efc/gnh85mhk5865/lj358y0pL cBdO0gv/RhaBrw8/hWy5vDLjx5K1GcR1beeHIxPI8KPXZIAxG8ck3Z5ADKCysDQb TRrW4bxtrQVCqxmsu1Fl4mYYKwbrAD8gpiQxsLv8ChuoU71D+hXlVLQe95X4s7qj L6tgyEzs6fIEsrTQs7zRSCnNP7EKRT4scgMUhjCT5iz79/PM6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCFOcJ2QW2JbZer9Bh5DeHsW2VVsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvNWYxYmFhZTItZTY4NC0z NmNhLTkwZDktZmUzYTlmYmE4MDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/8jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9nQ3cRW1raEHR5/8ln4zUSQxFpcdhv9/LP0ITb69CvJTbwF6UzPqm8 rs5bE1tPEUscykOXUtaIGWCCgBAYanhcqL/Fo27hgKS54NGjTKnp1Zl5sF5Vbz3I vtziduSAoFekXxdM70/X1e1kidXi7RxFlK9+395ZT7wDKchRNKXwgS13Yz4lMwsE GyPKrl/K1ByskyEEH9FPshuVx/nqf6rfYUJ31IacoZ8efGRBlYaHQloauplGxK5a u0gvJ1sAh45Z5sDMCyQT4ZDRieOtz/ifPDqafwoTAxUd7yXhEHpYPZYMsq7iQyUv PjlCwchNi2oD8UboZheJmyZTRRZkPAE= -----END CERTIFICATE-----Generated at Sat Apr 26 13:24:10 2025 by rpki-client