$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/5b5be480-44ed-31ee-80f8-4d078a62e541.roa File: 5b5be480-44ed-31ee-80f8-4d078a62e541.roa (raw, json) Hash identifier: qpCnyDElPPrpgKqPRtXFI3GwSUqiuKx9D7zjRQpw2bc= Subject key identifier: 3F:91:B9:C4:0F:85:18:0A:54:A4:86:31:D6:58:C1:6C:AF:F5:BB:20 Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F432858493ED3D682270B1E8FBA126000 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/5b5be480-44ed-31ee-80f8-4d078a62e541.roa Signing time: Thu 20 Mar 2025 01:00:39 +0000 ROA not before: Thu 20 Mar 2025 01:00:39 +0000 ROA not after: Wed 18 Jun 2025 01:00:39 +0000 asID: 14061 IP address blocks: 199.4.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3e:d3:d6:82:27:0b:1e:8f:ba:12:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Mar 20 01:00:39 2025 GMT Not After : Jun 18 01:00:39 2025 GMT Subject: CN=a6cc1972-8219-412a-8993-9f701fe17485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:82:3c:b4:d8:5f:f5:43:73:f5:a9:20:a2:02: 8f:97:c9:5d:5e:d1:c1:dd:5f:e4:76:1c:3e:d0:8f: b2:81:5b:a2:2d:bb:02:c9:65:94:c4:35:9f:4a:28: 14:19:22:31:99:5e:79:e2:21:bc:aa:a0:54:58:cd: de:c2:c6:b5:2b:f2:d6:27:79:7b:96:ae:12:48:77: 26:be:45:5b:ff:2c:88:0c:b8:0d:91:f1:4a:3d:fa: d4:5b:4c:b8:1e:e0:db:f6:cf:c1:b9:a4:81:73:e9: 06:83:5a:b6:e7:05:3c:71:82:d6:e2:aa:38:a0:f0: 7a:06:d7:54:63:a2:f2:56:59:18:33:80:27:d0:9f: 9c:9e:be:30:d0:0c:f2:21:c8:6b:2f:75:24:f7:b8: 3c:c6:90:21:7d:ca:a9:01:2a:02:8f:62:f4:7b:b5: aa:0c:96:11:9f:83:e6:12:6d:d4:14:bd:39:6f:ba: 27:7c:b0:7a:4b:a8:28:cb:f2:d8:a6:3c:8b:d1:cb: 29:70:0e:45:55:5e:3f:ca:c5:10:dc:60:f6:cb:ab: c0:d6:4a:c0:d5:a4:82:4e:cd:e5:b3:2c:a5:3c:3f: 10:cb:99:f5:03:95:78:da:0c:60:9e:56:55:bb:59: 3a:47:74:7b:01:da:05:13:1e:63:87:71:84:e8:6b: 51:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:91:B9:C4:0F:85:18:0A:54:A4:86:31:D6:58:C1:6C:AF:F5:BB:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/5b5be480-44ed-31ee-80f8-4d078a62e541.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 199.4.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:1e:7f:77:3a:f8:f1:34:4e:81:0f:b4:f7:91:0e:a9:c4:87: a3:3b:dc:45:b7:6a:0b:49:58:57:9f:0c:c4:48:ce:1d:c3:d9: be:b6:c2:21:72:fd:66:aa:54:d9:c8:a5:4f:a2:55:2a:75:1d: 08:5a:3e:be:cf:41:43:7a:1e:28:3d:44:e6:56:52:6d:90:2f: 6c:9f:08:ae:bc:2b:71:60:44:3f:7e:a0:fd:e9:e3:f8:b6:a3: 9a:7a:84:3e:00:ca:8a:81:d7:b7:1f:e0:a4:a3:b2:97:2b:bb: c9:3d:ff:b5:53:24:dc:33:a7:f2:a0:d6:4f:cc:d0:df:d2:db: 51:a3:09:6d:f9:b4:fc:76:03:0a:fe:94:b4:f2:11:c6:66:3f: aa:40:df:b5:b2:4b:24:11:85:a8:79:dd:f1:50:73:11:e1:ae: 04:25:fe:53:89:e9:f1:47:43:a9:b7:79:84:5f:fd:cb:13:9f: 51:99:92:55:33:24:4e:6b:fe:38:9c:5d:a8:da:56:02:fe:e8: 1c:39:91:bd:a2:b8:b4:19:0b:cc:1d:72:e5:32:16:08:c6:bd: d2:e0:b1:bc:66:2c:47:24:40:d2:61:0a:c2:98:69:19:5f:b4: ac:b5:4b:03:df:77:36:56:36:25:7a:63:54:55:c6:9b:df:1f: 7c:ec:fc:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk+09aCJwsej7oSYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk YTZjYzE5NzItODIxOS00MTJhLTg5OTMtOWY3MDFmZTE3NDg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14I8tNhf9UNz9akgogKPl8ldXtHB3V/kdhw+ 0I+ygVuiLbsCyWWUxDWfSigUGSIxmV554iG8qqBUWM3ewsa1K/LWJ3l7lq4SSHcm vkVb/yyIDLgNkfFKPfrUW0y4HuDb9s/BuaSBc+kGg1q25wU8cYLW4qo4oPB6BtdU Y6LyVlkYM4An0J+cnr4w0AzyIchrL3Uk97g8xpAhfcqpASoCj2L0e7WqDJYRn4Pm Em3UFL05b7onfLB6S6goy/LYpjyL0cspcA5FVV4/ysUQ3GD2y6vA1krA1aSCTs3l syylPD8Qy5n1A5V42gxgnlZVu1k6R3R7AdoFEx5jh3GE6GtRrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD+RucQPhRgKVKSGMdZYwWyv9bsgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvNWI1YmU0ODAtNDRlZC0z MWVlLTgwZjgtNGQwNzhhNjJlNTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwTfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ0ef3c6+PE0ToEPtPeRDqnEh6M73EW3agtJWFefDMRIzh3D2b62wiFy /WaqVNnIpU+iVSp1HQhaPr7PQUN6Hig9ROZWUm2QL2yfCK68K3FgRD9+oP3p4/i2 o5p6hD4AyoqB17cf4KSjspcru8k9/7VTJNwzp/Kg1k/M0N/S21GjCW35tPx2Awr+ lLTyEcZmP6pA37WySyQRhah53fFQcxHhrgQl/lOJ6fFHQ6m3eYRf/csTn1GZklUz JE5r/jicXajaVgL+6Bw5kb2iuLQZC8wdcuUyFgjGvdLgsbxmLEckQNJhCsKYaRlf tKy1SwPfdzZWNiV6Y1RVxpvfH3zs/A8= -----END CERTIFICATE-----Generated at Sat May 10 13:33:27 2025 by rpki-client