$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/c1b8872b-1a15-34f9-9440-873b89151612.roa File: c1b8872b-1a15-34f9-9440-873b89151612.roa (raw, json) Hash identifier: nuoJAGRANWWxq1YnpeG06hkQDqRSkfBdAI8wBz9LugQ= Subject key identifier: D8:E9:B6:BC:46:C4:95:5E:0F:01:26:65:21:F6:11:06:20:D5:3A:CD Certificate issuer: /CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c Certificate serial: 010D0C9F43285849B0D6A78CA3FD623AC5FC63A0 Authority key identifier: 27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/c1b8872b-1a15-34f9-9440-873b89151612.roa Signing time: Tue 29 Apr 2025 21:08:36 +0000 ROA not before: Tue 29 Apr 2025 21:08:36 +0000 ROA not after: Mon 28 Jul 2025 21:08:36 +0000 asID: 125 IP address blocks: 199.64.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b0:d6:a7:8c:a3:fd:62:3a:c5:fc:63:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c Validity Not Before: Apr 29 21:08:36 2025 GMT Not After : Jul 28 21:08:36 2025 GMT Subject: CN=d3293d26-aaf2-4fc7-833f-5f9e9a1ada34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d9:17:53:1a:ac:fa:4c:71:f2:ab:5d:4f:c6: 17:84:f6:b2:23:78:94:4a:11:30:32:79:c5:48:a9: bc:04:0f:09:8c:c0:1e:c0:97:9d:51:74:6f:b7:ff: 16:59:63:ec:98:15:e7:41:16:c8:f8:04:73:6f:b1: 28:04:c9:e7:4f:3e:17:bd:e8:0d:f4:96:89:58:c2: a1:e3:72:29:1a:6d:f1:da:04:85:b2:5f:53:f9:32: 4b:91:33:63:c1:52:53:14:7a:1c:e0:d1:69:2b:0a: da:bd:8f:ad:4f:99:69:9c:23:33:1f:95:21:ea:a3: 0a:1a:10:c4:35:a0:f3:ca:d4:5e:2a:99:f3:0a:84: ed:cb:1d:14:e2:4c:94:1a:c7:c4:bf:0e:79:0e:dd: fe:88:1f:d0:10:34:e3:86:1a:bc:9d:4f:b9:d1:7f: 92:76:77:90:fa:c1:33:9d:11:e7:ee:8e:90:3d:db: b9:fe:c6:50:cd:d5:dc:ea:94:38:0e:b9:b1:50:eb: 54:32:79:6d:6b:48:ed:b5:e6:06:f0:cb:ec:3a:7b: 2e:92:72:50:bf:f0:c3:a4:2a:df:ad:2d:7b:c7:aa: a9:d4:a7:c0:f6:c8:b7:6d:e0:4d:4a:b6:bf:28:de: 86:ce:26:3c:3b:5a:e4:f7:3b:a5:3e:fa:16:4e:8f: b5:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:E9:B6:BC:46:C4:95:5E:0F:01:26:65:21:F6:11:06:20:D5:3A:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/c1b8872b-1a15-34f9-9440-873b89151612.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl X509v3 Authority Key Identifier: keyid:27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer sbgp-ipAddrBlock: critical IPv4: 199.64.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:38:62:f7:95:91:44:55:2c:8b:03:85:56:ad:a1:13:16:86: 89:7d:77:17:53:b9:51:62:5f:43:14:2e:98:24:1f:9e:55:04: 60:88:82:9f:87:89:9b:68:6d:0e:78:a1:27:60:3f:a6:a6:d5: 32:27:82:42:ad:5d:5a:93:5e:fb:d2:f6:93:1c:55:5b:0c:27: 96:39:c7:b6:98:0f:44:92:ad:f5:87:c2:63:c9:10:bf:38:2e: 9c:dc:92:50:96:e2:71:a9:77:a6:94:cd:36:d9:b0:d7:59:7d: 4f:48:8e:f3:d4:a3:b8:6e:62:86:26:e6:fe:1e:6a:7d:1b:41: 9c:32:2e:04:43:52:e5:62:e1:ad:d9:9c:94:a4:03:60:88:1c: 36:9d:1f:a9:79:14:e8:56:df:bd:85:1c:5c:9a:08:8d:ed:fa: c3:07:80:62:b4:92:16:60:44:e1:46:f1:7d:9e:3d:06:1b:af: 31:b5:5b:28:84:93:57:0a:d8:fa:e0:01:1c:d7:e3:a2:df:55: d0:1c:b7:22:24:a5:74:4e:77:11:6b:23:fb:3c:60:70:6d:ed: 77:a2:c5:c6:ee:fa:07:4f:09:d0:e4:03:64:01:b8:74:7b:51: c1:d0:60:99:b9:01:54:2c:92:e7:77:74:4f:1b:ba:87:51:8e: fe:3f:9d:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmw1qeMo/1iOsX8Y6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIzMTA3N2QtMDU1OS00ZTdhLTljZGYtZmUwMGE1MTJh YjVjMB4XDTI1MDQyOTIxMDgzNloXDTI1MDcyODIxMDgzNlowLzEtMCsGA1UEAxMk ZDMyOTNkMjYtYWFmMi00ZmM3LTgzM2YtNWY5ZTlhMWFkYTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNkXUxqs+kxx8qtdT8YXhPayI3iUShEwMnnF SKm8BA8JjMAewJedUXRvt/8WWWPsmBXnQRbI+ARzb7EoBMnnTz4XvegN9JaJWMKh 43IpGm3x2gSFsl9T+TJLkTNjwVJTFHoc4NFpKwravY+tT5lpnCMzH5Uh6qMKGhDE NaDzytReKpnzCoTtyx0U4kyUGsfEvw55Dt3+iB/QEDTjhhq8nU+50X+SdneQ+sEz nRHn7o6QPdu5/sZQzdXc6pQ4DrmxUOtUMnlta0jtteYG8MvsOnsuknJQv/DDpCrf rS17x6qp1KfA9si3beBNSra/KN6GziY8O1rk9zulPvoWTo+1OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNjptrxGxJVeDwEmZSH2EQYg1TrNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MjMx MDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAwYTUxMmFiNWMvYzFiODg3MmItMWExNS0z NGY5LTk0NDAtODczYjg5MTUxNjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODIzMTA3N2QtMDU1OS00ZTdhLTlj ZGYtZmUwMGE1MTJhYjVjLzgyMzEwNzdkLTA1NTktNGU3YS05Y2RmLWZlMDBhNTEy YWI1Yy5jcmwwHwYDVR0jBBgwFoAUJ1dCrsqoI+3BIFyf8CNlXQVl+3YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MjMxMDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAw YTUxMmFiNWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx0DAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE04YveVkURVLIsDhVatoRMWhol9dxdTuVFiX0MULpgkH55VBGCIgp+H iZtobQ54oSdgP6am1TIngkKtXVqTXvvS9pMcVVsMJ5Y5x7aYD0SSrfWHwmPJEL84 LpzcklCW4nGpd6aUzTbZsNdZfU9IjvPUo7huYoYm5v4ean0bQZwyLgRDUuVi4a3Z nJSkA2CIHDadH6l5FOhW372FHFyaCI3t+sMHgGK0khZgROFG8X2ePQYbrzG1WyiE k1cK2PrgARzX46LfVdActyIkpXROdxFrI/s8YHBt7Xeixcbu+gdPCdDkA2QBuHR7 UcHQYJm5AVQskud3dE8buodRjv4/nZE= -----END CERTIFICATE-----Generated at Sun May 11 15:25:36 2025 by rpki-client