$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/4fbf2e6d-2935-36c0-8e49-fd5a8e002992.roa File: 4fbf2e6d-2935-36c0-8e49-fd5a8e002992.roa (raw, json) Hash identifier: tJLRNPdiz1iNBw/HmT8i4hPH21t42SJqTOz8p0pbb4o= Subject key identifier: 42:3C:40:B4:0F:99:5D:01:F7:64:2F:FA:D2:DC:82:78:44:69:4C:FC Certificate issuer: /CN=17e20fae-392b-4b22-b475-c6dff7142fa6 Certificate serial: 010D0C9F43285849CBCF87BB526FF44027BB6570 Authority key identifier: A1:92:8C:F9:58:DA:45:07:22:A0:BC:C9:76:E1:3D:EE:08:F7:66:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/4fbf2e6d-2935-36c0-8e49-fd5a8e002992.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 715 IP address blocks: 199.120.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/17e20fae-392b-4b22-b475-c6dff7142fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/17e20fae-392b-4b22-b475-c6dff7142fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:87:bb:52:6f:f4:40:27:bb:65:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17e20fae-392b-4b22-b475-c6dff7142fa6 Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=a150dc80-1f7a-4c63-a932-bab7017a4b37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2c:57:23:23:17:42:7e:4c:c1:3b:a1:8e:e3: 99:90:f2:b1:5f:de:08:c5:64:53:1b:ae:97:a0:3b: 3a:92:e1:a8:09:4d:4b:67:50:c2:8b:cd:63:6b:06: b2:77:7f:db:a2:4d:8a:86:55:c2:f3:e9:e1:2d:99: 78:0c:5a:f8:f8:94:0d:d7:7f:1d:8d:1d:01:b2:1d: ca:2c:ff:ad:00:37:f2:4c:b9:a1:3b:0a:41:a3:ba: 07:dc:46:1f:56:5a:49:23:2f:6d:97:37:8f:24:23: 36:0b:8f:0a:64:90:17:d1:7a:82:a0:3d:b6:31:6c: 83:b0:12:d2:cb:c9:eb:02:2d:20:b1:01:64:0d:27: 78:ea:b8:e1:06:b0:82:7b:56:10:85:56:27:21:7f: cc:8b:95:77:2c:b3:d5:a1:c6:94:c0:2a:9e:ab:c1: 95:57:74:a6:e5:1c:59:df:0a:72:b1:9d:b0:0a:ec: 73:b7:bb:4d:3e:54:b4:7f:c3:ad:54:2e:0e:2f:d6: a8:7a:ae:47:44:e4:fb:64:5c:c7:58:eb:e0:85:8d: 7c:19:2b:b0:88:22:de:61:f8:b6:96:16:34:2e:37: 0d:14:a1:ce:d8:2b:1f:08:ce:65:30:e8:d9:48:43: 1b:23:83:47:35:c2:4c:18:db:68:2a:61:a1:56:bd: f8:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:3C:40:B4:0F:99:5D:01:F7:64:2F:FA:D2:DC:82:78:44:69:4C:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/4fbf2e6d-2935-36c0-8e49-fd5a8e002992.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/17e20fae-392b-4b22-b475-c6dff7142fa6.crl X509v3 Authority Key Identifier: keyid:A1:92:8C:F9:58:DA:45:07:22:A0:BC:C9:76:E1:3D:EE:08:F7:66:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6.cer sbgp-ipAddrBlock: critical IPv4: 199.120.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:54:09:15:55:1b:b7:68:46:7c:6f:00:22:34:73:a1:83:d0: 26:09:a1:da:3d:5d:b7:f9:5b:72:dc:78:a8:1f:b3:8f:5d:fc: 4a:29:6e:14:64:d0:90:23:f5:80:63:06:d9:0c:0a:01:11:e4: 7f:21:3c:73:ca:2f:dd:f7:dd:7c:66:ef:5b:eb:d2:80:bd:e8: c0:52:eb:a9:01:8a:3d:54:72:1f:e0:ca:db:46:7f:d0:ce:4b: f7:d7:b4:a5:41:e8:2d:d1:46:67:71:e3:5e:92:71:80:ec:19: 11:f1:02:05:54:27:ab:fa:46:7d:e0:fb:38:9b:f5:9a:c7:c4: 16:7d:ad:29:9c:fb:27:a3:d2:5c:b1:a5:23:77:0c:e4:d4:aa: ba:7b:c2:06:b5:53:fe:f3:cb:ad:97:18:2c:f8:76:ed:d8:e4: 50:fe:69:f8:fe:25:f0:1d:72:a5:4f:bd:89:05:ac:25:f0:b1: df:44:08:53:e1:c6:21:c9:c3:49:4f:38:7b:69:a2:55:50:f9: c3:c1:d2:17:c3:0e:21:d2:59:c1:9b:e3:21:45:9d:cd:8e:83: 72:7e:51:eb:4d:db:4f:b9:23:bb:8f:3d:1c:af:ab:55:65:00: 1f:08:8e:7f:1f:fd:a8:26:8b:42:64:82:c1:8a:00:10:e9:c3: 8d:86:97:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnLz4e7Um/0QCe7ZXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTdlMjBmYWUtMzkyYi00YjIyLWI0NzUtYzZkZmY3MTQy ZmE2MB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk YTE1MGRjODAtMWY3YS00YzYzLWE5MzItYmFiNzAxN2E0YjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSxXIyMXQn5MwTuhjuOZkPKxX94IxWRTG66X oDs6kuGoCU1LZ1DCi81jawayd3/bok2KhlXC8+nhLZl4DFr4+JQN138djR0Bsh3K LP+tADfyTLmhOwpBo7oH3EYfVlpJIy9tlzePJCM2C48KZJAX0XqCoD22MWyDsBLS y8nrAi0gsQFkDSd46rjhBrCCe1YQhVYnIX/Mi5V3LLPVocaUwCqeq8GVV3Sm5RxZ 3wpysZ2wCuxzt7tNPlS0f8OtVC4OL9aoeq5HROT7ZFzHWOvghY18GSuwiCLeYfi2 lhY0LjcNFKHO2CsfCM5lMOjZSEMbI4NHNcJMGNtoKmGhVr34PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEI8QLQPmV0B92Qv+tLcgnhEaUz8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xN2Uy MGZhZS0zOTJiLTRiMjItYjQ3NS1jNmRmZjcxNDJmYTYvNGZiZjJlNmQtMjkzNS0z NmMwLThlNDktZmQ1YThlMDAyOTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMTdlMjBmYWUtMzkyYi00YjIyLWI0 NzUtYzZkZmY3MTQyZmE2LzE3ZTIwZmFlLTM5MmItNGIyMi1iNDc1LWM2ZGZmNzE0 MmZhNi5jcmwwHwYDVR0jBBgwFoAUoZKM+VjaRQcioLzJduE97gj3ZmswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xN2UyMGZhZS0zOTJiLTRiMjItYjQ3NS1jNmRm ZjcxNDJmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx3iQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9UCRVVG7doRnxvACI0c6GD0CYJodo9Xbf5W3LceKgfs49d/EopbhRk 0JAj9YBjBtkMCgER5H8hPHPKL9333Xxm71vr0oC96MBS66kBij1Uch/gyttGf9DO S/fXtKVB6C3RRmdx416ScYDsGRHxAgVUJ6v6Rn3g+zib9ZrHxBZ9rSmc+yej0lyx pSN3DOTUqrp7wga1U/7zy62XGCz4du3Y5FD+afj+JfAdcqVPvYkFrCXwsd9ECFPh xiHJw0lPOHtpolVQ+cPB0hfDDiHSWcGb4yFFnc2Og3J+UetN20+5I7uPPRyvq1Vl AB8Ijn8f/agmi0JkgsGKABDpw42Gl6U= -----END CERTIFICATE-----Generated at Sat May 10 22:26:54 2025 by rpki-client