$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3df446ef-8f84-35ef-9354-563bf5792560.roa File: 3df446ef-8f84-35ef-9354-563bf5792560.roa (raw, json) Hash identifier: O6jtuO+GsxUbmnFRIBAz4Kf6ewb296QxojYs22u4SeQ= Subject key identifier: 83:99:F8:2D:9E:5D:71:03:F8:55:8C:7B:98:CF:9E:63:38:EB:20:FD Certificate issuer: /CN=3b72c968-d673-4a7a-bfec-4071a7be5317 Certificate serial: 010D0C9F43285849C0A4E238D589370EFD5D3F8C Authority key identifier: D4:D0:6C:E1:8F:F9:73:1D:53:22:23:6D:36:3F:38:F6:81:03:B5:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3df446ef-8f84-35ef-9354-563bf5792560.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 42567 IP address blocks: 99.192.207.0/24 maxlen: 24 199.59.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:e2:38:d5:89:37:0e:fd:5d:3f:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b72c968-d673-4a7a-bfec-4071a7be5317 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=f4ba26ff-102a-4132-bbb9-e2fce1604cf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c9:4f:e6:bc:5c:8c:b6:cb:d0:50:5e:de:f2: 29:c9:1d:e0:18:79:46:9b:82:35:e6:ae:16:ce:04: 0e:78:47:6e:be:14:1b:94:05:cf:83:c6:d3:07:df: 67:b1:11:06:d1:39:4d:82:26:23:36:71:25:45:f0: bf:de:d4:9d:da:a4:03:47:af:c0:fc:71:5e:14:64: 8d:19:06:b4:6b:ef:85:6f:a3:e4:3f:bf:6a:b2:84: 7a:d1:d3:0b:96:6f:9f:aa:68:51:4b:01:6c:5c:d7: 66:d1:c9:31:9a:97:ca:1d:55:ca:17:ed:5b:37:88: 3b:93:5b:2e:2d:fd:f3:bf:56:52:8e:02:c1:5b:83: b2:e9:d6:4f:41:8c:e4:cc:fe:00:97:20:6e:4e:2b: 0e:9c:70:a1:50:5c:a7:d6:dc:b2:29:92:52:3a:c4: 26:96:eb:1e:49:bb:dd:d9:68:21:63:ee:39:35:46: 67:4a:85:db:3f:7e:95:dd:70:80:19:42:f0:20:fb: 25:02:ad:9f:d7:2d:d3:0c:04:15:21:b0:ce:0c:6f: 77:5a:2a:6f:37:5c:17:48:2e:8f:eb:15:72:fb:98: 38:f8:cc:56:90:8e:91:47:2a:8b:4e:15:8f:bf:dd: 85:a8:9f:c8:42:54:38:5e:b5:9a:a6:72:95:44:df: 69:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:99:F8:2D:9E:5D:71:03:F8:55:8C:7B:98:CF:9E:63:38:EB:20:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3df446ef-8f84-35ef-9354-563bf5792560.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.crl X509v3 Authority Key Identifier: keyid:D4:D0:6C:E1:8F:F9:73:1D:53:22:23:6D:36:3F:38:F6:81:03:B5:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317.cer sbgp-ipAddrBlock: critical IPv4: 99.192.207.0/24 199.59.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:f7:c4:e6:c9:c2:df:65:b3:0b:48:24:26:4d:90:00:5e:25: f6:79:44:ab:1d:cf:3d:57:f8:04:8b:d2:a7:f3:c5:f6:ed:9b: b4:a8:9c:56:0e:a9:09:85:82:d1:e4:1f:aa:16:32:ea:b6:98: c7:d7:52:62:99:bb:bf:3f:8c:23:c6:4a:4f:66:68:a2:14:11: 02:7c:3c:24:5b:92:49:ec:bc:a0:d4:ee:7d:63:7f:33:82:5c: ac:1e:dd:07:56:75:03:fa:d7:3a:f2:d0:39:7f:f6:09:a3:7c: d1:3e:b0:2a:ae:88:6e:79:74:fd:77:ac:b3:d0:7b:d6:44:17: 74:4a:74:58:4b:13:76:59:fc:83:09:e7:28:0b:fa:ff:29:2e: 5b:b9:02:4f:73:86:3a:1d:5a:0c:b9:c4:47:65:7c:33:52:84: 21:9d:5b:57:45:2a:2d:53:fd:6b:b9:53:cf:e1:7f:a8:39:21: 75:76:a7:7f:52:af:58:ce:25:d4:77:c3:3b:fd:ce:16:10:5d: 82:23:d9:a6:af:f1:80:51:9e:21:5b:72:43:2d:b9:b5:3c:80: b6:fe:75:0b:fe:ae:21:4e:0e:f8:24:a7:da:94:46:c7:f7:73: 07:41:0e:50:f5:9c:63:bb:42:12:16:e1:6e:21:50:1d:86:5d: 7e:6b:be:73 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEnApOI41Yk3Dv1dP4wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I3MmM5NjgtZDY3My00YTdhLWJmZWMtNDA3MWE3YmU1 MzE3MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk ZjRiYTI2ZmYtMTAyYS00MTMyLWJiYjktZTJmY2UxNjA0Y2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMlP5rxcjLbL0FBe3vIpyR3gGHlGm4I15q4W zgQOeEduvhQblAXPg8bTB99nsREG0TlNgiYjNnElRfC/3tSd2qQDR6/A/HFeFGSN GQa0a++Fb6PkP79qsoR60dMLlm+fqmhRSwFsXNdm0ckxmpfKHVXKF+1bN4g7k1su Lf3zv1ZSjgLBW4Oy6dZPQYzkzP4AlyBuTisOnHChUFyn1tyyKZJSOsQmluseSbvd 2WghY+45NUZnSoXbP36V3XCAGULwIPslAq2f1y3TDAQVIbDODG93WipvN1wXSC6P 6xVy+5g4+MxWkI6RRyqLThWPv92FqJ/IQlQ4XrWapnKVRN9ptQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFIOZ+C2eXXED+FWMe5jPnmM46yD9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zYjcy Yzk2OC1kNjczLTRhN2EtYmZlYy00MDcxYTdiZTUzMTcvM2RmNDQ2ZWYtOGY4NC0z NWVmLTkzNTQtNTYzYmY1NzkyNTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvM2I3MmM5NjgtZDY3My00YTdhLWJm ZWMtNDA3MWE3YmU1MzE3LzNiNzJjOTY4LWQ2NzMtNGE3YS1iZmVjLTQwNzFhN2Jl NTMxNy5jcmwwHwYDVR0jBBgwFoAU1NBs4Y/5cx1TIiNtNj849oEDtW8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zYjcyYzk2OC1kNjczLTRhN2EtYmZlYy00MDcx YTdiZTUzMTcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAY8DPAwQA xzteMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABH3xObJwt9lswtIJCZNkABeJfZ5RKsdzz1X+ASL0qfzxfbt m7SonFYOqQmFgtHkH6oWMuq2mMfXUmKZu78/jCPGSk9maKIUEQJ8PCRbkknsvKDU 7n1jfzOCXKwe3QdWdQP61zry0Dl/9gmjfNE+sCquiG55dP13rLPQe9ZEF3RKdFhL E3ZZ/IMJ5ygL+v8pLlu5Ak9zhjodWgy5xEdlfDNShCGdW1dFKi1T/Wu5U8/hf6g5 IXV2p39Sr1jOJdR3wzv9zhYQXYIj2aav8YBRniFbckMtubU8gLb+dQv+riFODvgk p9qURsf3cwdBDlD1nGO7QhIW4W4hUB2GXX5rvnM= -----END CERTIFICATE-----Generated at Mon May 12 16:56:24 2025 by rpki-client