$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/f40e0e47-941a-3211-9018-ea3a5bb33892.roa File: f40e0e47-941a-3211-9018-ea3a5bb33892.roa (raw, json) Hash identifier: /NAK/vFEfI0OndlqdcYSzJEbJqZJ1BidN8wdO3p9Zxg= Subject key identifier: 2F:1B:C5:5F:E6:E6:A2:B5:7B:66:59:4B:22:CF:D9:58:84:E3:61:C7 Certificate issuer: /CN=a3e00c5c-5e66-4d69-8173-b03c82880bc1 Certificate serial: 010D0C9F432858496A199CB3DC04BDC153D54B20 Authority key identifier: D4:74:D8:AD:B3:79:80:04:10:A4:04:FA:EC:10:CA:29:C1:49:53:E3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/f40e0e47-941a-3211-9018-ea3a5bb33892.roa Signing time: Fri 04 Apr 2025 13:00:59 +0000 ROA not before: Fri 04 Apr 2025 13:00:59 +0000 ROA not after: Thu 03 Jul 2025 13:00:59 +0000 asID: 26661 IP address blocks: 199.96.184.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/a3e00c5c-5e66-4d69-8173-b03c82880bc1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/a3e00c5c-5e66-4d69-8173-b03c82880bc1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:19:9c:b3:dc:04:bd:c1:53:d5:4b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3e00c5c-5e66-4d69-8173-b03c82880bc1 Validity Not Before: Apr 4 13:00:59 2025 GMT Not After : Jul 3 13:00:59 2025 GMT Subject: CN=bd5e80e2-930c-4ccb-ab57-e71d9371a1c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:7a:6b:06:51:6d:24:14:4f:d9:48:33:98:e3: c7:04:a0:75:14:43:49:e1:32:d1:77:fa:bf:6c:99: b7:0c:3c:95:b1:71:2f:ef:e1:e6:25:7a:06:5c:1e: 81:bd:17:de:ef:a1:67:ef:68:59:d2:70:82:5f:31: 66:97:9c:5c:03:fa:ca:d7:07:9f:1a:1b:ec:78:32: 60:b8:ff:4c:d4:ec:f3:e7:ed:c7:e8:60:73:98:3d: 36:81:5c:fc:34:a9:53:a1:a0:b4:c5:2b:d2:cc:d0: 95:4e:26:0c:5a:5e:46:24:28:4d:8f:fd:9a:57:77: b9:f2:17:c4:7d:c6:c3:36:b9:76:4c:b6:84:d6:71: f0:25:89:e4:38:41:9b:bc:07:77:77:e7:03:5d:a6: 29:12:ad:1b:09:bc:ae:89:cf:09:87:89:b6:d3:63: 52:48:af:aa:e8:6d:93:35:47:4a:91:20:dd:73:19: d6:cb:df:2a:e5:e5:04:eb:66:67:2f:6b:42:b0:19: ee:12:04:12:32:e8:11:ff:c4:60:38:22:d2:94:f5: 28:b6:a2:80:4b:21:d2:88:5f:e1:4c:dd:f5:9b:74: a0:54:fb:bf:3d:fe:50:f5:ca:13:5c:a3:29:48:4a: 30:54:8b:2a:4b:3c:e6:a0:ab:01:eb:db:84:23:f9: 52:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:1B:C5:5F:E6:E6:A2:B5:7B:66:59:4B:22:CF:D9:58:84:E3:61:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/f40e0e47-941a-3211-9018-ea3a5bb33892.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/a3e00c5c-5e66-4d69-8173-b03c82880bc1.crl X509v3 Authority Key Identifier: keyid:D4:74:D8:AD:B3:79:80:04:10:A4:04:FA:EC:10:CA:29:C1:49:53:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1.cer sbgp-ipAddrBlock: critical IPv4: 199.96.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:c3:57:44:68:01:5d:e9:d2:06:63:c4:99:e9:4d:99:6a:74: 58:1b:65:bb:ea:64:40:24:c5:08:91:9d:1b:01:7d:6f:07:cb: 07:38:49:c5:5e:a0:38:71:31:38:15:be:fe:ae:f2:ce:ea:4e: da:74:75:c2:9c:c7:2e:f5:2a:ff:da:d1:d2:ac:15:f0:da:1b: 52:8e:2c:22:a7:2f:7b:d0:56:2d:1a:dc:2f:7b:e6:83:ff:05: 11:4b:7e:2b:d5:f0:d8:f8:b9:0e:f7:2d:9f:7b:84:38:5d:e4: 88:00:cd:39:b5:32:07:56:12:98:c3:79:63:c0:82:1a:9b:1f: fb:2c:16:bc:93:fe:70:9b:b6:a0:db:c7:a9:c5:45:69:47:77: 08:d9:9e:b3:21:2a:d8:40:09:07:66:e1:7c:a3:8c:52:b7:c8: bc:7c:37:9d:20:70:79:70:e4:22:6b:82:42:9e:84:f7:58:40: 47:cb:8c:67:9b:73:1e:61:49:10:8a:a5:09:5b:99:9f:48:f7: 40:57:4a:34:42:4b:af:a9:46:4f:a1:f8:c4:fc:0a:3b:52:f8: 96:52:ad:26:c0:27:5e:62:01:5d:88:2c:3e:e8:a5:a2:34:6b: 5d:e5:7c:2e:2e:fb:af:75:46:f1:cc:8e:b2:f5:6b:22:cc:bb: 83:1f:18:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElqGZyz3AS9wVPVSyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNlMDBjNWMtNWU2Ni00ZDY5LTgxNzMtYjAzYzgyODgw YmMxMB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk YmQ1ZTgwZTItOTMwYy00Y2NiLWFiNTctZTcxZDkzNzFhMWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33prBlFtJBRP2UgzmOPHBKB1FENJ4TLRd/q/ bJm3DDyVsXEv7+HmJXoGXB6BvRfe76Fn72hZ0nCCXzFml5xcA/rK1wefGhvseDJg uP9M1Ozz5+3H6GBzmD02gVz8NKlToaC0xSvSzNCVTiYMWl5GJChNj/2aV3e58hfE fcbDNrl2TLaE1nHwJYnkOEGbvAd3d+cDXaYpEq0bCbyuic8Jh4m202NSSK+q6G2T NUdKkSDdcxnWy98q5eUE62ZnL2tCsBnuEgQSMugR/8RgOCLSlPUotqKASyHSiF/h TN31m3SgVPu/Pf5Q9coTXKMpSEowVIsqSzzmoKsB69uEI/lS9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC8bxV/m5qK1e2ZZSyLP2ViE42HHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hM2Uw MGM1Yy01ZTY2LTRkNjktODE3My1iMDNjODI4ODBiYzEvZjQwZTBlNDctOTQxYS0z MjExLTkwMTgtZWEzYTViYjMzODkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTNlMDBjNWMtNWU2Ni00ZDY5LTgx NzMtYjAzYzgyODgwYmMxL2EzZTAwYzVjLTVlNjYtNGQ2OS04MTczLWIwM2M4Mjg4 MGJjMS5jcmwwHwYDVR0jBBgwFoAU1HTYrbN5gAQQpAT67BDKKcFJU+MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hM2UwMGM1Yy01ZTY2LTRkNjktODE3My1iMDNj ODI4ODBiYzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx2C4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7DV0RoAV3p0gZjxJnpTZlqdFgbZbvqZEAkxQiRnRsBfW8Hywc4ScVe oDhxMTgVvv6u8s7qTtp0dcKcxy71Kv/a0dKsFfDaG1KOLCKnL3vQVi0a3C975oP/ BRFLfivV8Nj4uQ73LZ97hDhd5IgAzTm1MgdWEpjDeWPAghqbH/ssFryT/nCbtqDb x6nFRWlHdwjZnrMhKthACQdm4XyjjFK3yLx8N50gcHlw5CJrgkKehPdYQEfLjGeb cx5hSRCKpQlbmZ9I90BXSjRCS6+pRk+h+MT8CjtS+JZSrSbAJ15iAV2ILD7opaI0 a13lfC4u+691RvHMjrL1ayLMu4MfGFE= -----END CERTIFICATE-----Generated at Sat May 10 11:41:41 2025 by rpki-client