$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/a4d572d7-4e1a-3495-99a5-851c0396c090.roa File: a4d572d7-4e1a-3495-99a5-851c0396c090.roa (raw, json) Hash identifier: erBR+qb1bM5GK6ZKjN3bQB9HxdUMqq8M49ZGfaxOPy8= Subject key identifier: EA:22:96:5A:E2:DA:98:D8:21:62:38:51:93:D9:4F:8E:98:24:C2:A5 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584961B992DD1F543800BC42C3C0 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/a4d572d7-4e1a-3495-99a5-851c0396c090.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 14618 IP address blocks: 199.255.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:92:dd:1f:54:38:00:bc:42:c3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=43ffc1cd-249d-43d5-907b-e05333566df3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c1:fc:66:0f:20:d5:d1:8a:c6:b8:6e:ac:fb: ba:94:dc:c4:af:91:2c:79:0e:c5:b1:4c:93:70:b1: 22:2f:ed:ef:e8:cb:31:e2:00:3e:b2:b8:62:09:8e: 26:77:73:2b:91:a8:f6:7f:41:75:1d:15:dd:a6:09: 57:30:ae:42:f4:10:91:bd:49:bb:80:68:eb:b9:26: be:da:0d:33:df:db:f1:18:ff:60:a0:52:42:e7:bb: c2:15:de:95:8e:72:56:1c:69:59:dc:1e:d3:c8:d8: eb:82:a7:82:14:f8:18:fc:3a:1b:3a:d7:38:be:1c: f2:48:ab:f9:eb:6b:3b:03:15:b6:b1:c4:4b:05:1f: 15:a6:32:63:35:dd:35:58:64:5c:19:91:d2:5f:3b: d0:b2:36:ce:ec:24:05:ee:3f:ff:d4:5b:b8:5b:56: 97:01:03:9b:59:31:a9:f2:46:42:cc:b2:d7:96:71: e1:37:ea:f9:76:f5:43:58:92:0a:90:7b:5c:01:56: 1e:1c:ce:36:fc:44:d8:fb:71:33:0c:6a:24:8a:2a: 62:24:9a:62:06:e0:85:1c:d1:24:2c:be:dc:79:1d: 8a:d3:f4:b4:0d:d5:d8:c2:b5:7b:78:4a:d2:85:b4: 23:62:62:c9:6c:3b:56:64:f8:88:d5:89:52:67:57: e7:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:22:96:5A:E2:DA:98:D8:21:62:38:51:93:D9:4F:8E:98:24:C2:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/a4d572d7-4e1a-3495-99a5-851c0396c090.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 199.255.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:46:5d:c6:08:75:67:f3:27:ff:b9:35:f6:72:9f:d3:83:70: a7:04:b8:60:bb:28:49:c9:de:c0:77:a5:79:f1:02:7e:20:7c: 73:a7:c7:2a:72:6f:8b:7d:97:fa:5a:59:72:86:74:84:21:9b: cb:cf:cd:02:cf:a6:ca:2e:25:52:cb:7e:1a:09:e7:62:21:93: b6:a1:0a:4b:6e:95:18:31:ad:30:27:0f:1e:7b:e7:37:35:b8: 20:8d:da:6d:59:75:bb:1f:bd:09:b6:74:61:34:cf:38:da:a6: 44:3b:52:e0:4b:30:e4:8e:47:c1:e7:69:1f:56:e0:c9:d2:65: 49:8a:8c:ea:c2:8a:90:24:a8:0a:89:90:32:7c:bc:23:12:fe: 25:d8:d0:2e:28:9a:b7:61:34:21:40:f4:42:56:cc:04:da:3f: 27:e8:5c:de:8f:84:6b:18:7b:40:bb:23:72:5d:0a:09:dc:9f: d0:9a:ee:90:7c:7c:5c:11:ef:c6:db:23:3c:c6:3b:6c:a8:44: cf:75:14:44:20:80:22:0c:73:9a:d6:4f:c4:f5:5e:c3:ed:52: 04:94:34:12:ae:5d:01:8e:78:95:a0:06:8b:37:68:93:99:b5: 7a:c0:cc:99:fa:cb:b7:fc:09:02:df:5c:c7:f0:81:88:5e:83: 66:9a:ef:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElhuZLdH1Q4ALxCw8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk NDNmZmMxY2QtMjQ5ZC00M2Q1LTkwN2ItZTA1MzMzNTY2ZGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMH8Zg8g1dGKxrhurPu6lNzEr5EseQ7FsUyT cLEiL+3v6Msx4gA+srhiCY4md3Mrkaj2f0F1HRXdpglXMK5C9BCRvUm7gGjruSa+ 2g0z39vxGP9goFJC57vCFd6VjnJWHGlZ3B7TyNjrgqeCFPgY/DobOtc4vhzySKv5 62s7AxW2scRLBR8VpjJjNd01WGRcGZHSXzvQsjbO7CQF7j//1Fu4W1aXAQObWTGp 8kZCzLLXlnHhN+r5dvVDWJIKkHtcAVYeHM42/ETY+3EzDGokiipiJJpiBuCFHNEk LL7ceR2K0/S0DdXYwrV7eErShbQjYmLJbDtWZPiI1YlSZ1fn5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOoillri2pjYIWI4UZPZT46YJMKlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvYTRkNTcyZDctNGUxYS0z NDk1LTk5YTUtODUxYzAzOTZjMDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/8hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRGXcYIdWfzJ/+5NfZyn9ODcKcEuGC7KEnJ3sB3pXnxAn4gfHOnxypy b4t9l/paWXKGdIQhm8vPzQLPpsouJVLLfhoJ52Ihk7ahCktulRgxrTAnDx575zc1 uCCN2m1ZdbsfvQm2dGE0zzjapkQ7UuBLMOSOR8HnaR9W4MnSZUmKjOrCipAkqAqJ kDJ8vCMS/iXY0C4omrdhNCFA9EJWzATaPyfoXN6PhGsYe0C7I3JdCgncn9Ca7pB8 fFwR78bbIzzGO2yoRM91FEQggCIMc5rWT8T1XsPtUgSUNBKuXQGOeJWgBos3aJOZ tXrAzJn6y7f8CQLfXMfwgYheg2aa7zM= -----END CERTIFICATE-----Generated at Sat Apr 26 13:23:58 2025 by rpki-client