$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/a9a02da3-1044-35f4-9095-e40aa350a168.roa File: a9a02da3-1044-35f4-9095-e40aa350a168.roa (raw, json) Hash identifier: gc9kZFkvxZcVudWFjY6mTOAvxwAOmL4amiK5oH9qNIQ= Subject key identifier: E7:B9:69:A3:F8:6A:F1:6D:2B:68:F4:5E:58:38:28:6A:FB:99:0F:56 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F43285849A1EF712E4E810ED9C2BD14C0 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/a9a02da3-1044-35f4-9095-e40aa350a168.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 11404 IP address blocks: 199.91.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:71:2e:4e:81:0e:d9:c2:bd:14:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=373863ea-ce57-43ec-9cc6-b41799d42ecb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:10:de:3e:c0:1e:28:b6:a9:ac:0d:55:ad:bd: b5:46:49:2a:75:07:16:f5:b9:1d:e8:40:a7:82:71: 28:d0:18:ba:01:54:9b:3e:bb:f2:c1:e5:27:cd:48: d0:61:06:90:dc:00:c3:f6:06:77:05:97:e8:09:bf: 0d:f5:d4:4c:c7:dc:e5:fa:7e:3e:cc:0f:99:a0:f6: 27:e8:a9:47:a9:85:4a:d1:5f:f1:39:50:3d:c0:9b: 75:4d:72:23:47:77:bd:b7:a1:fe:13:d5:3b:39:6b: 6b:00:5d:09:cc:1d:b3:8d:34:6d:ab:6f:4e:65:84: 7c:6a:02:55:90:08:92:3f:36:58:2c:d6:35:03:f0: 8d:7a:0d:60:bc:81:dd:3f:5b:3d:4f:fa:7b:58:95: 34:ad:a7:55:1d:bf:51:c7:b4:ac:c3:d7:5a:0f:88: 58:af:66:15:c9:a9:1f:ad:05:6d:7d:4f:7a:3a:07: 7c:5c:a5:ba:fd:a9:40:f9:77:b0:1f:9b:91:ec:2f: 50:03:09:84:f4:21:00:72:1f:a3:5d:92:88:d3:d3: 2b:db:fd:56:83:e1:62:6c:d2:0e:7a:8c:1c:e5:91: 0c:eb:54:60:d7:74:c3:e5:ba:40:6f:52:c6:d4:f1: 36:56:d8:0d:d9:34:32:e9:4a:93:54:9c:d3:4d:e3: 97:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:B9:69:A3:F8:6A:F1:6D:2B:68:F4:5E:58:38:28:6A:FB:99:0F:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/a9a02da3-1044-35f4-9095-e40aa350a168.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 199.91.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:04:0d:0c:e4:4d:f7:f9:b6:74:b4:5b:46:fd:36:bd:cb:a4: 51:14:8b:74:44:c2:35:c8:14:9e:8a:3d:53:ba:18:d7:39:ff: 83:dc:d8:b1:fc:d1:d7:00:a8:45:0c:4e:f7:fa:c5:56:48:a0: 4d:67:00:5a:b0:2a:c3:65:3f:99:53:e0:45:f5:0d:cd:a6:ae: d1:b8:6c:75:d7:ea:4f:65:7a:fa:81:c3:f4:be:71:d0:bd:54: 34:62:e2:68:c4:d4:86:04:3d:18:4c:48:9e:0d:19:26:90:c0: e3:e8:b1:11:bc:b6:86:9c:3e:03:63:aa:ce:50:68:86:3e:fd: 46:be:2d:e2:ec:37:9b:36:96:a9:3c:0a:29:38:1a:82:06:57: 7f:e1:be:e7:b7:e2:2e:d1:89:5d:8c:d5:83:74:46:61:b1:ef: 67:78:bb:30:03:3e:c1:e1:5f:51:24:7c:81:db:e5:00:91:4f: b4:4a:68:b5:89:6e:e5:8f:61:ef:98:93:04:6d:c0:c5:0c:83: 24:5e:33:0b:23:8b:12:a4:04:14:28:4c:10:1f:c2:c8:9b:15: f7:7e:b4:03:ab:d0:73:ad:d4:29:ae:d4:50:c7:10:90:f0:d6: eb:ae:02:cc:6d:cc:24:ee:66:68:61:0d:bc:e4:bb:53:0b:24: 86:d4:7a:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh73EuToEO2cK9FMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk MzczODYzZWEtY2U1Ny00M2VjLTljYzYtYjQxNzk5ZDQyZWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBDePsAeKLaprA1Vrb21RkkqdQcW9bkd6ECn gnEo0Bi6AVSbPrvyweUnzUjQYQaQ3ADD9gZ3BZfoCb8N9dRMx9zl+n4+zA+ZoPYn 6KlHqYVK0V/xOVA9wJt1TXIjR3e9t6H+E9U7OWtrAF0JzB2zjTRtq29OZYR8agJV kAiSPzZYLNY1A/CNeg1gvIHdP1s9T/p7WJU0radVHb9Rx7Ssw9daD4hYr2YVyakf rQVtfU96Ogd8XKW6/alA+XewH5uR7C9QAwmE9CEAch+jXZKI09Mr2/1Wg+FibNIO eowc5ZEM61Rg13TD5bpAb1LG1PE2VtgN2TQy6UqTVJzTTeOXIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOe5aaP4avFtK2j0Xlg4KGr7mQ9WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvYTlhMDJkYTMtMTA0NC0z NWY0LTkwOTUtZTQwYWEzNTBhMTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1vlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcEDQzkTff5tnS0W0b9Nr3LpFEUi3REwjXIFJ6KPVO6GNc5/4Pc2LH8 0dcAqEUMTvf6xVZIoE1nAFqwKsNlP5lT4EX1Dc2mrtG4bHXX6k9levqBw/S+cdC9 VDRi4mjE1IYEPRhMSJ4NGSaQwOPosRG8toacPgNjqs5QaIY+/Ua+LeLsN5s2lqk8 Cik4GoIGV3/hvue34i7RiV2M1YN0RmGx72d4uzADPsHhX1EkfIHb5QCRT7RKaLWJ buWPYe+YkwRtwMUMgyReMwsjixKkBBQoTBAfwsibFfd+tAOr0HOt1Cmu1FDHEJDw 1uuuAsxtzCTuZmhhDbzku1MLJIbUepc= -----END CERTIFICATE-----Generated at Thu May 8 16:30:22 2025 by rpki-client