$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/2ef512bf-2011-3ef3-a834-b8929445ea4a.roa File: 2ef512bf-2011-3ef3-a834-b8929445ea4a.roa (raw, json) Hash identifier: eB+ozsA4NLlYJHkjWtJhQodHxiZlXWHk/BDZiiXKlWw= Subject key identifier: 96:9B:8A:3C:65:08:75:FA:14:DF:AC:99:DE:6C:EC:7F:17:6B:59:40 Certificate issuer: /CN=405ae070-e9e9-4d3c-b449-868426ff2303 Certificate serial: 010D0C9F43285849CBCF8D009D3B6321F7352840 Authority key identifier: F9:21:3A:33:01:EF:02:BE:09:BE:9D:FF:C2:08:E4:BD:BD:36:E4:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/2ef512bf-2011-3ef3-a834-b8929445ea4a.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 15296 IP address blocks: 199.116.232.0/22 maxlen: 22 199.116.232.0/24 maxlen: 24 199.116.233.0/24 maxlen: 24 199.116.234.0/24 maxlen: 24 199.116.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/405ae070-e9e9-4d3c-b449-868426ff2303.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/405ae070-e9e9-4d3c-b449-868426ff2303.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:8d:00:9d:3b:63:21:f7:35:28:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=405ae070-e9e9-4d3c-b449-868426ff2303 Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=2e5bf70a-1892-42b1-a684-586740dcdb97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:2f:80:78:86:c5:84:80:57:0a:ae:f3:4a:3d: b4:f7:e3:c6:74:ce:7f:56:59:8f:39:63:66:e7:47: 98:75:78:95:4d:16:1b:b7:f3:8c:03:83:2a:3e:d9: 57:61:de:fd:46:44:56:b8:7b:68:a1:68:8b:21:39: d2:28:65:03:81:0e:fe:8a:de:62:37:19:84:40:da: 58:de:4b:3e:37:db:0a:c5:98:a9:cf:13:6d:d8:96: 2b:71:1a:de:16:b4:6a:ca:74:04:d0:27:02:23:20: 00:9b:bc:d5:ce:23:3b:63:41:9a:b7:6e:6c:2a:11: 2b:eb:df:e7:88:6f:5f:f6:d2:d5:f9:52:c3:bd:49: e8:c8:35:b8:21:a5:cb:a8:77:93:c7:28:50:6c:84: ec:8a:77:04:68:db:7e:6c:0a:d1:56:26:c1:53:8d: f6:71:6c:61:22:9f:53:92:0e:61:cf:42:86:fd:cb: cb:2d:b2:4e:1d:41:a8:25:a6:52:e5:38:02:6e:ce: 35:cc:3b:e7:84:5b:0b:7d:4d:fd:03:70:fd:86:f9: 7a:99:55:b4:b4:34:10:ae:8c:12:fd:08:06:4a:22: 97:6b:6e:10:b0:ed:59:95:54:3f:40:20:e1:1c:16: a8:3b:a2:85:8c:57:f0:fa:8e:9f:05:dd:41:c2:9e: 2d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:9B:8A:3C:65:08:75:FA:14:DF:AC:99:DE:6C:EC:7F:17:6B:59:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/2ef512bf-2011-3ef3-a834-b8929445ea4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/405ae070-e9e9-4d3c-b449-868426ff2303.crl X509v3 Authority Key Identifier: keyid:F9:21:3A:33:01:EF:02:BE:09:BE:9D:FF:C2:08:E4:BD:BD:36:E4:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303.cer sbgp-ipAddrBlock: critical IPv4: 199.116.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:e3:54:e3:7b:2d:bf:c2:9d:34:e8:a0:25:ab:18:27:ed:ad: 51:48:be:bb:df:05:5f:53:23:9f:8c:3e:f6:25:d7:0a:e9:7b: 60:06:70:f9:7a:f4:e4:e0:a0:d2:21:7b:3e:e1:f5:26:df:03: bd:65:aa:88:05:47:70:c2:fa:4d:28:c2:e1:57:3e:9b:4f:4c: 09:9f:1a:a0:fc:38:c4:5e:fe:30:da:79:6b:65:94:36:e8:b6: dc:ee:1b:40:3c:36:77:23:75:99:7a:f4:a0:95:14:0b:8f:68: ae:d0:9a:aa:68:dc:29:5f:b7:2b:f8:ec:ae:44:18:2b:f1:80: 46:9b:c9:ed:13:bf:be:db:f9:81:03:91:23:92:0f:80:9f:38: a8:04:a1:c4:f7:52:ae:f4:12:ae:c5:26:14:dd:d0:a2:3d:af: 64:2b:b7:16:d8:b0:d4:03:b2:fd:4d:9c:60:5a:c9:db:07:4e: d9:4f:2a:b3:3f:00:ee:1a:8b:27:f1:af:62:69:a5:c1:2b:3f: 09:43:7f:1a:de:ec:a5:c8:c6:67:65:e2:29:e2:4d:db:55:74: 2b:1e:67:34:26:e6:a8:14:1a:99:28:d6:46:ee:d5:df:fb:a4: e7:f3:3c:53:fd:85:22:42:21:e6:69:0c:1f:86:a1:89:36:84: 19:37:be:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnLz40AnTtjIfc1KEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDA1YWUwNzAtZTllOS00ZDNjLWI0NDktODY4NDI2ZmYy MzAzMB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk MmU1YmY3MGEtMTg5Mi00MmIxLWE2ODQtNTg2NzQwZGNkYjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgC+AeIbFhIBXCq7zSj209+PGdM5/VlmPOWNm 50eYdXiVTRYbt/OMA4MqPtlXYd79RkRWuHtooWiLITnSKGUDgQ7+it5iNxmEQNpY 3ks+N9sKxZipzxNt2JYrcRreFrRqynQE0CcCIyAAm7zVziM7Y0Gat25sKhEr69/n iG9f9tLV+VLDvUnoyDW4IaXLqHeTxyhQbITsincEaNt+bArRVibBU432cWxhIp9T kg5hz0KG/cvLLbJOHUGoJaZS5TgCbs41zDvnhFsLfU39A3D9hvl6mVW0tDQQrowS /QgGSiKXa24QsO1ZlVQ/QCDhHBaoO6KFjFfw+o6fBd1Bwp4tPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJabijxlCHX6FN+smd5s7H8Xa1lAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MDVh ZTA3MC1lOWU5LTRkM2MtYjQ0OS04Njg0MjZmZjIzMDMvMmVmNTEyYmYtMjAxMS0z ZWYzLWE4MzQtYjg5Mjk0NDVlYTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDA1YWUwNzAtZTllOS00ZDNjLWI0 NDktODY4NDI2ZmYyMzAzLzQwNWFlMDcwLWU5ZTktNGQzYy1iNDQ5LTg2ODQyNmZm MjMwMy5jcmwwHwYDVR0jBBgwFoAU+SE6MwHvAr4Jvp3/wgjkvb025GAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80MDVhZTA3MC1lOWU5LTRkM2MtYjQ0OS04Njg0 MjZmZjIzMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx3ToMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADzjVON7Lb/CnTTooCWrGCftrVFIvrvfBV9TI5+MPvYl1wrpe2AGcPl6 9OTgoNIhez7h9SbfA71lqogFR3DC+k0owuFXPptPTAmfGqD8OMRe/jDaeWtllDbo ttzuG0A8NncjdZl69KCVFAuPaK7Qmqpo3Clftyv47K5EGCvxgEabye0Tv77b+YED kSOSD4CfOKgEocT3Uq70Eq7FJhTd0KI9r2QrtxbYsNQDsv1NnGBaydsHTtlPKrM/ AO4aiyfxr2JppcErPwlDfxre7KXIxmdl4iniTdtVdCseZzQm5qgUGpko1kbu1d/7 pOfzPFP9hSJCIeZpDB+GoYk2hBk3vg4= -----END CERTIFICATE-----Generated at Mon May 12 07:23:41 2025 by rpki-client