$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e268af9f-122d-49b0-8f39-22b20b9bb857/5aa2fad9-41fe-3693-a5de-6ac0deb39991.roa File: 5aa2fad9-41fe-3693-a5de-6ac0deb39991.roa (raw, json) Hash identifier: kuXU8k2BNNCRPOFhnzuJamNwoXVQQ05FCXFwIIt4l0Q= Subject key identifier: 3B:13:EB:88:32:9A:35:A9:0F:D7:06:3F:65:52:C7:B9:F9:B5:51:27 Certificate issuer: /CN=e268af9f-122d-49b0-8f39-22b20b9bb857 Certificate serial: 010D0C9F43285849AE7F41D8F85EE1980414E200 Authority key identifier: 9F:5B:48:75:C6:2B:82:8A:BA:1E:57:CE:2D:6C:D9:E6:99:13:F5:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e268af9f-122d-49b0-8f39-22b20b9bb857.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e268af9f-122d-49b0-8f39-22b20b9bb857/5aa2fad9-41fe-3693-a5de-6ac0deb39991.roa Signing time: Tue 29 Apr 2025 01:00:47 +0000 ROA not before: Tue 29 Apr 2025 01:00:47 +0000 ROA not after: Mon 28 Jul 2025 01:00:47 +0000 asID: 54975 IP address blocks: 199.66.222.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e268af9f-122d-49b0-8f39-22b20b9bb857/e268af9f-122d-49b0-8f39-22b20b9bb857.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e268af9f-122d-49b0-8f39-22b20b9bb857/e268af9f-122d-49b0-8f39-22b20b9bb857.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e268af9f-122d-49b0-8f39-22b20b9bb857.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ae:7f:41:d8:f8:5e:e1:98:04:14:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e268af9f-122d-49b0-8f39-22b20b9bb857 Validity Not Before: Apr 29 01:00:47 2025 GMT Not After : Jul 28 01:00:47 2025 GMT Subject: CN=b40b49b1-8bb2-4c49-b118-79ecf92e63f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:6b:1b:c4:d6:5c:5e:b5:34:db:79:25:f7:fd: ef:1f:3c:df:c6:96:dc:19:67:b8:9f:c8:96:f1:c7: 13:80:33:5b:9e:9a:2a:09:6e:85:a4:f9:ee:cc:2c: f3:85:17:79:58:3a:93:d6:a6:e0:ba:51:b1:23:68: 8d:c1:cb:22:8b:35:5b:66:c0:84:25:6d:f6:d7:98: 1c:bd:a9:e1:e6:a8:c4:82:41:82:1c:8f:c5:12:2e: ba:f4:9c:47:23:00:d3:d4:96:00:d3:cc:61:70:53: a2:f0:fc:b1:0b:4f:5b:e3:8f:da:54:d7:d1:28:20: 96:a8:a3:3d:2e:7b:c6:87:69:45:2a:58:3c:a9:c4: 7e:0b:ca:9c:13:d1:4e:3a:64:20:3c:3b:47:4b:64: 9d:69:f3:29:ec:1f:94:9c:0f:d7:35:d7:41:4c:bc: d0:e0:9e:13:8d:60:90:de:6a:59:2f:8d:47:a7:49: d6:fe:e0:97:ed:2f:5e:5e:44:e8:54:96:48:27:59: e8:c3:af:f8:5a:07:1b:aa:88:48:0a:ea:c9:b8:4f: e1:2d:c3:78:2c:d0:10:14:f6:ab:75:94:66:55:1a: ff:53:54:fe:24:8d:b4:d9:84:26:6e:9b:56:17:34: 63:de:06:11:b1:f4:59:b8:68:a8:67:00:5f:c7:32: ae:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:13:EB:88:32:9A:35:A9:0F:D7:06:3F:65:52:C7:B9:F9:B5:51:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e268af9f-122d-49b0-8f39-22b20b9bb857/5aa2fad9-41fe-3693-a5de-6ac0deb39991.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e268af9f-122d-49b0-8f39-22b20b9bb857/e268af9f-122d-49b0-8f39-22b20b9bb857.crl X509v3 Authority Key Identifier: keyid:9F:5B:48:75:C6:2B:82:8A:BA:1E:57:CE:2D:6C:D9:E6:99:13:F5:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e268af9f-122d-49b0-8f39-22b20b9bb857.cer sbgp-ipAddrBlock: critical IPv4: 199.66.222.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:57:ad:0c:68:8d:b3:fe:ce:01:b4:2e:da:eb:10:76:bb:74: c5:24:f0:28:94:b8:86:c4:08:89:ca:c6:16:d8:94:af:64:cd: 33:3c:d9:bc:44:98:ea:27:26:4e:85:c5:20:0f:6c:bd:15:d8: ea:ac:99:fa:ff:ae:8a:60:7a:43:26:79:fe:36:2b:d8:fe:1d: 74:75:75:29:75:de:82:f0:4b:d9:37:0a:34:db:52:05:c8:43: ed:9b:26:08:43:6a:e7:b9:51:d7:53:b6:e6:11:0f:e6:c3:54: 99:62:34:c3:0f:a6:ea:0c:6d:88:bf:d4:0b:eb:52:84:72:b3: 49:00:f9:fc:cc:43:7e:a3:1d:6a:c0:89:29:e8:7e:e9:3a:8f: a5:4c:19:3d:a6:41:00:20:02:bf:f9:41:e5:db:38:8b:59:35: bb:c5:ae:14:d8:98:3f:34:ab:c1:23:c9:5b:f9:18:96:ef:9b: 5a:53:e4:24:f8:c7:55:d1:37:f9:4c:be:f4:e8:95:96:5c:d5: 84:71:93:0f:51:10:bb:d6:b5:e7:22:a6:fe:19:3d:fc:95:27: 9f:a5:bf:ec:56:b4:8d:c8:d1:a6:52:7a:e2:52:b4:90:e5:4e: cd:ec:d0:b1:4c:99:c3:ca:22:73:3e:4f:7b:c2:5c:4c:20:a9: e9:c5:8b:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmuf0HY+F7hmAQU4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTI2OGFmOWYtMTIyZC00OWIwLThmMzktMjJiMjBiOWJi ODU3MB4XDTI1MDQyOTAxMDA0N1oXDTI1MDcyODAxMDA0N1owLzEtMCsGA1UEAxMk YjQwYjQ5YjEtOGJiMi00YzQ5LWIxMTgtNzllY2Y5MmU2M2YyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmsbxNZcXrU023kl9/3vHzzfxpbcGWe4n8iW 8ccTgDNbnpoqCW6FpPnuzCzzhRd5WDqT1qbgulGxI2iNwcsiizVbZsCEJW3215gc vanh5qjEgkGCHI/FEi669JxHIwDT1JYA08xhcFOi8PyxC09b44/aVNfRKCCWqKM9 LnvGh2lFKlg8qcR+C8qcE9FOOmQgPDtHS2SdafMp7B+UnA/XNddBTLzQ4J4TjWCQ 3mpZL41Hp0nW/uCX7S9eXkToVJZIJ1now6/4WgcbqohICurJuE/hLcN4LNAQFPar dZRmVRr/U1T+JI202YQmbptWFzRj3gYRsfRZuGioZwBfxzKuBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDsT64gymjWpD9cGP2VSx7n5tVEnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lMjY4 YWY5Zi0xMjJkLTQ5YjAtOGYzOS0yMmIyMGI5YmI4NTcvNWFhMmZhZDktNDFmZS0z NjkzLWE1ZGUtNmFjMGRlYjM5OTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZTI2OGFmOWYtMTIyZC00OWIwLThm MzktMjJiMjBiOWJiODU3L2UyNjhhZjlmLTEyMmQtNDliMC04ZjM5LTIyYjIwYjli Yjg1Ny5jcmwwHwYDVR0jBBgwFoAUn1tIdcYrgoq6HlfOLWzZ5pkT9VowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lMjY4YWY5Zi0xMjJkLTQ5YjAtOGYzOS0yMmIy MGI5YmI4NTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx0LeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdXrQxojbP+zgG0LtrrEHa7dMUk8CiUuIbECInKxhbYlK9kzTM82bxE mOonJk6FxSAPbL0V2Oqsmfr/ropgekMmef42K9j+HXR1dSl13oLwS9k3CjTbUgXI Q+2bJghDaue5UddTtuYRD+bDVJliNMMPpuoMbYi/1AvrUoRys0kA+fzMQ36jHWrA iSnofuk6j6VMGT2mQQAgAr/5QeXbOItZNbvFrhTYmD80q8EjyVv5GJbvm1pT5CT4 x1XRN/lMvvTolZZc1YRxkw9RELvWtecipv4ZPfyVJ5+lv+xWtI3I0aZSeuJStJDl Ts3s0LFMmcPKInM+T3vCXEwgqenFi3w= -----END CERTIFICATE-----Generated at Wed May 14 06:00:55 2025 by rpki-client