$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/204c1e03-7ef3-3f1a-b01e-d7ee729db418.roa File: 204c1e03-7ef3-3f1a-b01e-d7ee729db418.roa (raw, json) Hash identifier: ycbFwZ5mX5FCn9b3r8ZaNh8lnRixFyY4SUDJKo9PDec= Subject key identifier: DB:CA:88:C7:93:65:9A:EF:BB:41:45:7A:4F:85:73:B8:3A:C9:8F:FD Certificate issuer: /CN=4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7 Certificate serial: 010D0C9F4328584917DBFD73B8CBF14E84BA3200 Authority key identifier: F7:C8:46:F1:D6:FE:04:68:EA:AC:40:E7:0B:41:CA:28:F8:25:DA:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/204c1e03-7ef3-3f1a-b01e-d7ee729db418.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 53589 IP address blocks: 199.16.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:db:fd:73:b8:cb:f1:4e:84:ba:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7 Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=4bc498c6-8d26-47b2-bbaa-f42cf2abc7e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8c:17:e9:04:18:49:05:38:c7:82:aa:22:45: da:7e:35:7f:3c:a5:f2:35:84:04:00:1c:87:5e:01: 62:82:ed:c9:de:3d:ea:96:ec:48:b2:37:2d:2b:7b: ff:ca:fd:1a:b0:88:fb:bb:77:10:9f:18:ad:5f:e8: 89:c2:5e:96:ab:a4:58:b0:e8:d3:f1:13:2e:3c:50: fb:15:2f:45:14:4e:fb:69:7b:04:89:d7:36:98:00: 1b:5f:4d:02:f3:83:68:91:09:70:d0:70:e2:d0:41: 4f:0a:3c:2e:e2:49:fa:94:35:f0:cc:2c:ef:44:8a: 4d:ec:2b:f3:97:97:90:70:4e:a2:a7:ce:14:58:81: d9:f3:db:aa:64:30:fd:fe:8d:2a:55:e5:e4:68:a9: 01:7b:0e:70:e0:27:a9:03:1d:a2:cf:77:a7:a0:91: bd:e3:cc:af:25:2d:f7:10:78:ce:9c:0f:68:02:20: 23:33:c5:1b:de:22:29:6b:0c:a9:58:fb:26:83:ae: 84:e5:1a:e1:09:e5:aa:9c:0e:5b:60:d3:08:f8:50: 9b:95:7d:66:18:13:92:b1:ed:81:9b:3b:c0:4a:d1: ad:bd:15:ca:80:17:96:8b:e1:a2:87:ea:af:ec:01: 26:64:44:9b:4a:a3:45:0b:1a:44:c3:6a:5b:f1:7b: 36:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:CA:88:C7:93:65:9A:EF:BB:41:45:7A:4F:85:73:B8:3A:C9:8F:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/204c1e03-7ef3-3f1a-b01e-d7ee729db418.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.crl X509v3 Authority Key Identifier: keyid:F7:C8:46:F1:D6:FE:04:68:EA:AC:40:E7:0B:41:CA:28:F8:25:DA:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.cer sbgp-ipAddrBlock: critical IPv4: 199.16.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:d9:7d:09:b1:ca:13:82:aa:b5:8d:f7:f9:46:b6:50:a4:08: 00:f4:1b:37:8b:8c:b1:d3:a7:1f:e0:0e:e9:d6:c3:3d:00:ee: b0:5b:f1:f7:84:61:0f:44:8d:d3:a4:df:1f:1a:d4:d2:3c:d6: 66:74:d1:dd:e9:fc:d4:86:90:57:36:02:2a:b2:6f:cc:f6:61: 0e:b9:8b:51:0d:cb:08:6e:37:a5:42:99:0e:c0:2d:6c:27:42: 45:31:b3:4f:f8:36:45:6e:5c:bb:b4:e2:ca:0b:52:80:dd:16: 59:16:db:38:92:a0:35:48:23:62:4d:77:b1:ee:85:a2:a6:48: b3:b4:df:0f:0d:fd:1b:3b:24:f1:1b:6a:64:a2:ae:e4:37:e4: 2f:71:7a:aa:bd:39:2e:1e:2f:63:57:8d:d3:54:b0:fa:9d:ab: 1b:e9:20:d7:bf:f7:6c:56:a4:a3:c1:62:89:10:47:35:2c:57: 1a:52:32:26:30:c1:b3:9a:1a:91:8e:50:42:b0:72:4d:cd:d2: cc:c3:e7:d8:6e:62:c7:07:3e:59:f9:58:2b:56:e9:8d:74:8a: 82:ae:cf:f7:78:6f:4a:0b:6a:c3:23:40:82:6c:a5:60:61:03: 0e:fc:c1:57:e7:9c:f9:ad:fa:7c:a5:7f:57:40:fe:6a:8b:a1: e4:1e:78:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX2/1zuMvxToS6MgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJlNTFlODItN2NjNS00NTAwLWEwZmYtY2MzYTlkNWUz ZmI3MB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk NGJjNDk4YzYtOGQyNi00N2IyLWJiYWEtZjQyY2YyYWJjN2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YwX6QQYSQU4x4KqIkXafjV/PKXyNYQEAByH XgFigu3J3j3qluxIsjctK3v/yv0asIj7u3cQnxitX+iJwl6Wq6RYsOjT8RMuPFD7 FS9FFE77aXsEidc2mAAbX00C84NokQlw0HDi0EFPCjwu4kn6lDXwzCzvRIpN7Cvz l5eQcE6ip84UWIHZ89uqZDD9/o0qVeXkaKkBew5w4CepAx2iz3enoJG948yvJS33 EHjOnA9oAiAjM8Ub3iIpawypWPsmg66E5RrhCeWqnA5bYNMI+FCblX1mGBOSse2B mzvAStGtvRXKgBeWi+Gih+qv7AEmZESbSqNFCxpEw2pb8Xs22QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNvKiMeTZZrvu0FFek+Fc7g6yY/9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YmU1 MWU4Mi03Y2M1LTQ1MDAtYTBmZi1jYzNhOWQ1ZTNmYjcvMjA0YzFlMDMtN2VmMy0z ZjFhLWIwMWUtZDdlZTcyOWRiNDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGJlNTFlODItN2NjNS00NTAwLWEw ZmYtY2MzYTlkNWUzZmI3LzRiZTUxZTgyLTdjYzUtNDUwMC1hMGZmLWNjM2E5ZDVl M2ZiNy5jcmwwHwYDVR0jBBgwFoAU98hG8db+BGjqrEDnC0HKKPgl2lkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80YmU1MWU4Mi03Y2M1LTQ1MDAtYTBmZi1jYzNh OWQ1ZTNmYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxxCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITZfQmxyhOCqrWN9/lGtlCkCAD0GzeLjLHTpx/gDunWwz0A7rBb8feE YQ9EjdOk3x8a1NI81mZ00d3p/NSGkFc2Aiqyb8z2YQ65i1ENywhuN6VCmQ7ALWwn QkUxs0/4NkVuXLu04soLUoDdFlkW2ziSoDVII2JNd7HuhaKmSLO03w8N/Rs7JPEb amSiruQ35C9xeqq9OS4eL2NXjdNUsPqdqxvpINe/92xWpKPBYokQRzUsVxpSMiYw wbOaGpGOUEKwck3N0szD59huYscHPln5WCtW6Y10ioKuz/d4b0oLasMjQIJspWBh Aw78wVfnnPmt+nylf1dA/mqLoeQeeCY= -----END CERTIFICATE-----Generated at Sat May 10 03:52:35 2025 by rpki-client