$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/cae92603-341e-3d54-9fda-0cf1e572484c.roa File: cae92603-341e-3d54-9fda-0cf1e572484c.roa (raw, json) Hash identifier: 6HKCp8eGhMoMb2PXeby1fZi+uS5P+CMTvnN/bFy7hw4= Subject key identifier: CD:7A:C5:A6:B2:EB:2D:1D:9B:AE:3B:DC:6D:00:B0:69:74:83:6B:71 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F43285849C4D4C38252A57E77E7168600 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/cae92603-341e-3d54-9fda-0cf1e572484c.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 21949 IP address blocks: 199.247.192.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:c3:82:52:a5:7e:77:e7:16:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=9e03d4ea-b792-4940-8ca7-a0447bb1e08a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d9:21:ef:bc:bc:99:13:e0:8d:dc:7d:62:69: 37:29:93:17:d2:59:b5:b0:0c:8b:9c:88:76:11:a8: 11:ee:bf:4e:d7:71:db:0b:cb:98:d8:f6:62:28:81: 85:fe:80:e7:62:04:f8:de:a6:6f:58:e3:3c:72:f3: 62:bd:75:04:ba:60:70:01:e5:fa:ce:64:72:86:7b: b7:4c:bd:16:fe:7b:0c:83:62:ff:5c:25:05:ef:38: e8:2d:94:78:ab:ab:e2:39:df:31:a9:05:74:c8:57: ab:30:9a:3e:4b:ec:e2:42:dd:e8:94:88:36:91:6d: d6:1b:9a:83:56:96:26:0d:dc:0b:02:89:48:fe:fd: f1:ec:5e:e5:28:d2:a2:f6:92:ea:fc:fd:9d:27:6e: 2d:fe:dc:3d:ae:8a:0f:67:6a:01:bf:ba:fe:d4:92: 1a:bf:53:2b:94:c6:ba:5d:ac:5d:a8:11:03:61:e5: 1e:32:34:67:77:55:3f:2e:34:1d:d8:6b:47:60:ac: bc:e4:70:e2:28:4c:e5:3c:2f:35:00:66:79:ea:20: 66:6d:e0:7a:b6:ac:31:d5:78:53:d3:fa:35:a1:15: e8:55:ac:71:22:5e:0b:14:a9:be:98:f0:d9:81:de: cf:89:89:aa:83:f9:aa:13:88:1c:60:57:5d:57:dc: ac:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:7A:C5:A6:B2:EB:2D:1D:9B:AE:3B:DC:6D:00:B0:69:74:83:6B:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/cae92603-341e-3d54-9fda-0cf1e572484c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 199.247.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:49:86:79:a5:99:97:81:75:e1:bc:0b:36:45:35:ed:24:6a: 4e:bd:39:4b:a1:5d:41:85:28:a8:0c:1d:cb:66:cd:10:04:b3: 24:75:c7:e6:8d:08:e3:ab:83:66:5c:29:c7:ac:a8:33:34:99: d4:68:ae:62:89:6a:7a:b4:fd:bb:15:b5:af:04:4e:a3:08:c6: c7:8e:97:e6:4a:da:62:a5:7e:9f:0e:af:4c:e8:62:ee:69:b8: 3c:14:15:d9:92:2e:a7:37:87:74:77:90:d9:25:ef:d9:88:e6: 11:57:12:e8:f0:72:a3:43:5a:b7:58:5d:5a:c1:e2:69:aa:ac: 48:c3:ad:14:51:b4:a9:36:1e:3f:61:1d:cf:2e:44:ed:0f:1a: d7:5a:1d:c7:d0:97:d7:ef:ff:27:07:cb:c0:65:ef:51:fd:72: 27:31:11:9b:51:f7:40:ca:ce:a0:e9:d1:b5:00:77:89:83:ab: c6:ca:0e:1a:94:17:25:37:00:c1:ee:63:53:50:65:54:1b:83: 97:8b:2c:81:8b:b0:fc:06:3a:6a:04:db:e6:25:5a:73:fb:bd: 5d:97:fd:9e:5c:4d:27:61:05:1e:fd:c1:2f:29:ac:5b:ea:57: 48:cc:a3:3c:10:66:3b:ec:b2:1e:7f:c0:c6:ce:83:6e:fc:46: 58:f5:32:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnE1MOCUqV+d+cWhgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk OWUwM2Q0ZWEtYjc5Mi00OTQwLThjYTctYTA0NDdiYjFlMDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidkh77y8mRPgjdx9Ymk3KZMX0lm1sAyLnIh2 EagR7r9O13HbC8uY2PZiKIGF/oDnYgT43qZvWOM8cvNivXUEumBwAeX6zmRyhnu3 TL0W/nsMg2L/XCUF7zjoLZR4q6viOd8xqQV0yFerMJo+S+ziQt3olIg2kW3WG5qD VpYmDdwLAolI/v3x7F7lKNKi9pLq/P2dJ24t/tw9rooPZ2oBv7r+1JIav1MrlMa6 XaxdqBEDYeUeMjRnd1U/LjQd2GtHYKy85HDiKEzlPC81AGZ56iBmbeB6tqwx1XhT 0/o1oRXoVaxxIl4LFKm+mPDZgd7PiYmqg/mqE4gcYFddV9yshQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM16xaay6y0dm6473G0AsGl0g2txMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvY2FlOTI2MDMtMzQxZS0z ZDU0LTlmZGEtMGNmMWU1NzI0ODRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx/fAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJJhnmlmZeBdeG8CzZFNe0kak69OUuhXUGFKKgMHctmzRAEsyR1x+aN COOrg2ZcKcesqDM0mdRormKJanq0/bsVta8ETqMIxseOl+ZK2mKlfp8Or0zoYu5p uDwUFdmSLqc3h3R3kNkl79mI5hFXEujwcqNDWrdYXVrB4mmqrEjDrRRRtKk2Hj9h Hc8uRO0PGtdaHcfQl9fv/ycHy8Bl71H9cicxEZtR90DKzqDp0bUAd4mDq8bKDhqU FyU3AMHuY1NQZVQbg5eLLIGLsPwGOmoE2+YlWnP7vV2X/Z5cTSdhBR79wS8prFvq V0jMozwQZjvssh5/wMbOg278Rlj1Mkc= -----END CERTIFICATE-----Generated at Sun May 11 01:50:06 2025 by rpki-client