$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/8f21fddd-8bf5-3217-a480-686fff06115a.roa File: 8f21fddd-8bf5-3217-a480-686fff06115a.roa (raw, json) Hash identifier: cwUlOZG8l18ixPxTl2mcoVRmsOXA7sTVp+6/GkHwPu4= Subject key identifier: 95:87:2A:F6:BD:D0:FB:00:18:C7:C5:94:FA:62:09:8C:77:1A:94:B6 Certificate issuer: /CN=b84ab52d-915e-4d8a-b37b-496ea49c6798 Certificate serial: 010D0C9F43285849C20A12BC87E061C67CDF5300 Authority key identifier: DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/8f21fddd-8bf5-3217-a480-686fff06115a.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 1403 IP address blocks: 199.58.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:12:bc:87:e0:61:c6:7c:df:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b84ab52d-915e-4d8a-b37b-496ea49c6798 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=1b8110e1-1ce5-4080-a11e-ca4be9572aea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:38:34:f2:c5:6d:77:2a:3b:a6:96:3f:b9:04: 60:6a:9a:80:7b:94:df:60:a0:93:64:f4:a1:ad:e9: 5e:87:99:61:50:58:1f:b9:a6:d2:b3:14:d4:92:5b: c1:9b:71:c5:75:8e:34:1d:13:fa:f9:67:1d:e3:a1: 80:a1:79:1e:79:76:86:5d:83:4f:eb:20:15:68:40: 44:db:36:3b:cd:4d:1e:63:58:f8:ff:0f:2f:e0:ae: 0d:cc:4c:12:dc:c6:e7:19:4e:ec:57:07:af:f4:96: bb:93:f8:03:aa:5a:56:66:fa:ec:54:e0:cf:f6:ac: 77:6e:83:e5:72:b8:72:6c:21:a7:35:af:18:b7:df: 70:0c:bb:0c:be:3c:b9:67:c3:98:8e:9b:3e:41:ae: 2c:0a:db:fb:bf:0a:dd:1e:6c:99:11:29:57:08:25: ca:89:29:3d:4c:cb:c8:b7:cb:32:d3:5a:7e:51:dc: 95:63:ea:1c:87:89:47:af:8b:0f:f4:8f:75:06:40: 72:57:5a:46:bb:84:7c:29:57:4a:da:4a:6b:d4:85: 3b:1e:2f:34:4c:c5:76:28:90:ab:e2:50:56:96:e1: c2:21:7a:0d:61:dd:8f:3f:13:fb:62:40:d1:b3:bf: 25:52:2b:d5:51:8a:31:95:53:89:0b:9c:9b:22:3e: 8a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:87:2A:F6:BD:D0:FB:00:18:C7:C5:94:FA:62:09:8C:77:1A:94:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/8f21fddd-8bf5-3217-a480-686fff06115a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl X509v3 Authority Key Identifier: keyid:DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer sbgp-ipAddrBlock: critical IPv4: 199.58.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:e2:09:f3:43:89:4c:4d:e6:45:b9:fe:1c:20:e3:4a:00:b8: cf:10:b8:ce:8e:43:3a:f5:a8:d6:2c:e8:d9:0b:cd:b0:dd:e8: 08:42:76:7e:10:63:cf:26:a6:ab:d4:d1:47:6e:a0:be:cf:99: cc:e5:9d:5b:71:8f:8d:60:73:ed:e4:37:36:35:95:d7:98:29: 1d:dd:ff:82:12:22:2c:56:2e:6a:dc:8e:71:7e:d0:8d:70:a0: fa:62:29:fe:80:9a:3a:2d:3b:f7:79:3d:de:46:2a:e0:c9:a9: 81:9a:0f:36:e0:86:cd:8a:ea:f8:69:2a:22:cb:80:e4:b0:f5: 4e:6f:79:cf:22:64:97:c5:48:fd:1f:95:52:60:38:22:cd:b6: 06:21:a7:7b:5a:ec:b5:25:78:77:27:da:ff:34:2c:82:91:85: 37:65:14:f5:da:1f:2a:41:b3:61:78:60:d1:a4:77:2c:b3:bb: 93:a1:5a:2f:b4:5f:59:d1:49:bb:0c:43:0e:d8:b4:c7:bd:7d: 7e:84:38:49:c9:e9:d5:3c:65:07:1e:6e:9a:8c:f1:52:38:7a: a4:45:17:d1:18:bc:d6:af:17:29:5a:b5:5c:9a:44:53:61:ad: 52:ca:92:7b:45:d7:60:13:98:ca:96:19:74:01:73:0d:82:2e: 14:ca:00:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCChK8h+BhxnzfUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg0YWI1MmQtOTE1ZS00ZDhhLWIzN2ItNDk2ZWE0OWM2 Nzk4MB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk MWI4MTEwZTEtMWNlNS00MDgwLWExMWUtY2E0YmU5NTcyYWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDg08sVtdyo7ppY/uQRgapqAe5TfYKCTZPSh releh5lhUFgfuabSsxTUklvBm3HFdY40HRP6+Wcd46GAoXkeeXaGXYNP6yAVaEBE 2zY7zU0eY1j4/w8v4K4NzEwS3MbnGU7sVwev9Ja7k/gDqlpWZvrsVODP9qx3boPl crhybCGnNa8Yt99wDLsMvjy5Z8OYjps+Qa4sCtv7vwrdHmyZESlXCCXKiSk9TMvI t8sy01p+UdyVY+och4lHr4sP9I91BkByV1pGu4R8KVdK2kpr1IU7Hi80TMV2KJCr 4lBWluHCIXoNYd2PPxP7YkDRs78lUivVUYoxlVOJC5ybIj6KYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJWHKva90PsAGMfFlPpiCYx3GpS2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iODRh YjUyZC05MTVlLTRkOGEtYjM3Yi00OTZlYTQ5YzY3OTgvOGYyMWZkZGQtOGJmNS0z MjE3LWE0ODAtNjg2ZmZmMDYxMTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjg0YWI1MmQtOTE1ZS00ZDhhLWIz N2ItNDk2ZWE0OWM2Nzk4L2I4NGFiNTJkLTkxNWUtNGQ4YS1iMzdiLTQ5NmVhNDlj Njc5OC5jcmwwHwYDVR0jBBgwFoAU3bUy71MQu1ndgStV6Nv35hADJHwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iODRhYjUyZC05MTVlLTRkOGEtYjM3Yi00OTZl YTQ5YzY3OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxzr4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALTiCfNDiUxN5kW5/hwg40oAuM8QuM6OQzr1qNYs6NkLzbDd6AhCdn4Q Y88mpqvU0UduoL7PmczlnVtxj41gc+3kNzY1ldeYKR3d/4ISIixWLmrcjnF+0I1w oPpiKf6AmjotO/d5Pd5GKuDJqYGaDzbghs2K6vhpKiLLgOSw9U5vec8iZJfFSP0f lVJgOCLNtgYhp3ta7LUleHcn2v80LIKRhTdlFPXaHypBs2F4YNGkdyyzu5OhWi+0 X1nRSbsMQw7YtMe9fX6EOEnJ6dU8ZQcebpqM8VI4eqRFF9EYvNavFylatVyaRFNh rVLKkntF12ATmMqWGXQBcw2CLhTKAHQ= -----END CERTIFICATE-----Generated at Sat May 10 19:16:09 2025 by rpki-client