$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7/58910c8c-d0fa-30e9-a2fd-18e1b80b12ab.roa File: 58910c8c-d0fa-30e9-a2fd-18e1b80b12ab.roa (raw, json) Hash identifier: AGiPGe04ldNdDaw77s3510DtyL/bglMBQCjNs6SkPsg= Subject key identifier: D9:65:A7:13:9C:3B:EF:E7:16:67:46:85:99:2E:9C:52:B8:2D:43:C8 Certificate issuer: /CN=a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7 Certificate serial: 010D0C9F432858494733FFFB59CE073F3CD58800 Authority key identifier: 72:97:B1:4E:30:CE:D9:7E:2E:B8:0E:8B:95:8A:B7:1D:37:5D:45:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7/58910c8c-d0fa-30e9-a2fd-18e1b80b12ab.roa Signing time: Sun 23 Mar 2025 01:00:39 +0000 ROA not before: Sun 23 Mar 2025 01:00:39 +0000 ROA not after: Sat 21 Jun 2025 01:00:39 +0000 asID: 271 IP address blocks: 199.9.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:47:33:ff:fb:59:ce:07:3f:3c:d5:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7 Validity Not Before: Mar 23 01:00:39 2025 GMT Not After : Jun 21 01:00:39 2025 GMT Subject: CN=fd4ea2e9-2983-45e1-a0d6-647be240a29a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f3:7b:15:39:a7:d4:8e:a8:7f:8f:f0:f3:5f: 85:62:61:cc:44:b9:ca:36:32:81:20:f1:64:69:09: 8f:a0:e7:13:e8:f6:c5:25:34:bb:d7:45:06:81:52: 38:7a:e1:2d:bb:06:9a:14:da:5b:9e:5d:39:98:33: 56:91:29:55:5f:a3:6f:68:f7:b9:34:f1:bd:b7:92: ec:23:5d:ad:d4:4d:e8:3e:ba:75:0c:b9:e3:38:2a: 5f:57:cd:d8:ac:43:da:b1:50:90:d4:4d:aa:06:2a: 48:b1:e4:83:a5:0d:d7:82:20:a9:df:79:1a:e6:79: ea:d4:57:59:f9:1b:0f:58:4a:92:5c:cf:5e:ec:7d: 6d:eb:db:2b:8d:ea:81:93:41:7f:94:ea:c6:fd:80: 23:c2:43:35:8d:83:b9:50:52:f6:4f:e8:1f:38:72: 54:c7:15:59:0d:56:48:87:43:0b:7e:2f:04:26:85: 03:d4:ff:3a:a3:ca:a0:02:f5:9d:7d:7c:29:aa:ba: c0:42:68:df:ee:94:54:54:6a:09:30:75:c9:30:a8: ab:83:34:58:7e:3b:a1:95:40:2b:98:0e:99:b4:1c: a8:73:56:f7:a8:96:8c:ba:f3:88:c6:43:4e:43:f9: 4d:56:b1:a7:5b:0d:e3:f8:59:d7:d8:c9:7b:b5:f8: 57:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:65:A7:13:9C:3B:EF:E7:16:67:46:85:99:2E:9C:52:B8:2D:43:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7/58910c8c-d0fa-30e9-a2fd-18e1b80b12ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7.crl X509v3 Authority Key Identifier: keyid:72:97:B1:4E:30:CE:D9:7E:2E:B8:0E:8B:95:8A:B7:1D:37:5D:45:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7.cer sbgp-ipAddrBlock: critical IPv4: 199.9.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:71:4f:25:7a:b6:37:e4:03:5e:4d:55:3a:1b:14:5f:e5:0d: 3d:d3:91:c5:59:f2:5e:35:9a:2d:1e:62:2d:e9:0c:13:67:17: 1b:a8:b1:8f:83:03:fa:64:d4:a6:b9:17:71:50:74:20:3f:31: 2d:79:66:84:74:1e:1c:67:ad:7d:d7:bb:60:69:df:f0:a4:a9: ce:24:82:0b:ad:4f:64:88:a0:79:a1:ff:65:93:31:f9:f8:8a: a7:c1:fa:bc:e6:a9:8c:25:e4:7a:9a:f1:0f:cb:f9:41:22:f3: c9:94:11:c9:94:bc:27:56:3b:65:33:cc:8c:d3:49:9c:c2:bb: 8d:eb:d9:3c:4f:00:40:1d:b7:f2:14:5e:3b:43:79:cf:e5:18: 03:b4:4a:be:7f:12:be:c1:e4:93:8c:ac:fc:3b:cb:bb:e4:11: 77:45:0c:81:cd:56:eb:9e:28:5e:f3:01:29:24:0e:de:c6:84: e5:ea:14:1b:72:c7:58:84:7f:8f:99:1e:15:90:8f:d8:46:90: 39:b1:bb:c1:89:75:5d:a2:a9:14:5c:26:57:52:f7:f3:a3:35: 13:61:c0:6a:32:38:0b:c4:a7:3c:cd:f1:3d:49:0c:a7:81:15: 78:11:06:66:55:02:77:dc:9f:1d:66:60:3a:ec:7c:a7:2c:c6: f4:31:ef:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElHM//7Wc4HPzzViAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFiMWZiNDMtZGIwYy00MmU0LWFkNjItNGUwODZjYTJm NGQ3MB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk ZmQ0ZWEyZTktMjk4My00NWUxLWEwZDYtNjQ3YmUyNDBhMjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPN7FTmn1I6of4/w81+FYmHMRLnKNjKBIPFk aQmPoOcT6PbFJTS710UGgVI4euEtuwaaFNpbnl05mDNWkSlVX6NvaPe5NPG9t5Ls I12t1E3oPrp1DLnjOCpfV83YrEPasVCQ1E2qBipIseSDpQ3XgiCp33ka5nnq1FdZ +RsPWEqSXM9e7H1t69srjeqBk0F/lOrG/YAjwkM1jYO5UFL2T+gfOHJUxxVZDVZI h0MLfi8EJoUD1P86o8qgAvWdfXwpqrrAQmjf7pRUVGoJMHXJMKirgzRYfjuhlUAr mA6ZtByoc1b3qJaMuvOIxkNOQ/lNVrGnWw3j+FnX2Ml7tfhXUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNllpxOcO+/nFmdGhZkunFK4LUPIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hMWIx ZmI0My1kYjBjLTQyZTQtYWQ2Mi00ZTA4NmNhMmY0ZDcvNTg5MTBjOGMtZDBmYS0z MGU5LWEyZmQtMThlMWI4MGIxMmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYTFiMWZiNDMtZGIwYy00MmU0LWFk NjItNGUwODZjYTJmNGQ3L2ExYjFmYjQzLWRiMGMtNDJlNC1hZDYyLTRlMDg2Y2Ey ZjRkNy5jcmwwHwYDVR0jBBgwFoAUcpexTjDO2X4uuA6LlYq3HTddRdcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hMWIxZmI0My1kYjBjLTQyZTQtYWQ2Mi00ZTA4 NmNhMmY0ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwk5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5xTyV6tjfkA15NVTobFF/lDT3TkcVZ8l41mi0eYi3pDBNnFxuosY+D A/pk1Ka5F3FQdCA/MS15ZoR0HhxnrX3Xu2Bp3/Ckqc4kggutT2SIoHmh/2WTMfn4 iqfB+rzmqYwl5Hqa8Q/L+UEi88mUEcmUvCdWO2UzzIzTSZzCu43r2TxPAEAdt/IU XjtDec/lGAO0Sr5/Er7B5JOMrPw7y7vkEXdFDIHNVuueKF7zASkkDt7GhOXqFBty x1iEf4+ZHhWQj9hGkDmxu8GJdV2iqRRcJldS9/OjNRNhwGoyOAvEpzzN8T1JDKeB FXgRBmZVAnfcnx1mYDrsfKcsxvQx7wI= -----END CERTIFICATE-----Generated at Wed May 7 06:52:53 2025 by rpki-client