$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a/599a4abf-0151-3767-b925-760ecad0dd92.roa File: 599a4abf-0151-3767-b925-760ecad0dd92.roa (raw, json) Hash identifier: /cAPgA6Fr/gY2VR4I0r6rd+Q3g9lgwO0NRY/OGAjGj0= Subject key identifier: 73:06:11:11:58:46:2F:FB:15:10:C1:ED:D8:C5:2C:5F:0B:DD:E2:A8 Certificate issuer: /CN=900d3223-79ad-4ee2-af23-163d305bdd0a Certificate serial: 010D0C9F43285849C20A230B383E9A5AEC7168EC Authority key identifier: 7D:D6:33:9D:D2:D7:AE:48:75:4D:EE:25:DD:4E:7E:D5:65:C5:3A:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a/599a4abf-0151-3767-b925-760ecad0dd92.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 16509 IP address blocks: 208.64.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a/900d3223-79ad-4ee2-af23-163d305bdd0a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a/900d3223-79ad-4ee2-af23-163d305bdd0a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:23:0b:38:3e:9a:5a:ec:71:68:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=900d3223-79ad-4ee2-af23-163d305bdd0a Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=e8ca1047-e274-4738-a739-e5369e6784a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:8c:ea:5b:97:ea:26:97:1f:23:3a:8f:f2:c6: 6e:d5:b9:82:bd:b1:0d:1e:6c:0f:99:4f:03:59:06: 51:df:6d:cb:fb:b8:4c:7b:5f:cd:08:3e:ca:09:a8: 30:17:2b:2f:41:66:a3:c2:d3:ec:e9:12:a5:d6:10: 16:5a:82:41:59:d9:84:7c:7c:a0:f5:3f:5f:8e:34: 74:18:94:46:8d:be:92:fa:04:e4:34:07:c0:76:37: c1:f5:5a:5f:52:18:52:2b:32:42:a6:c1:f3:e4:19: ca:72:a2:74:f8:b8:f1:74:99:c4:41:4a:1a:f0:dc: 4f:fd:d8:86:cc:7a:7a:6d:df:68:35:88:26:36:e7: cc:03:cb:92:0f:23:55:84:40:69:29:92:5d:18:b5: 9a:a1:ba:fc:c0:fc:e6:e0:08:4d:e2:99:9f:5a:13: bd:fa:1f:f6:aa:e9:09:b0:c1:b4:3a:74:75:17:77: 9e:b4:19:d1:82:8c:7d:d5:e5:d2:64:18:5c:69:14: 26:01:2b:df:81:33:33:85:68:80:38:90:59:6d:85: 58:71:90:3a:36:33:0d:f1:2c:6f:d7:9d:ba:c4:7f: 72:c7:dc:42:f5:e3:ad:88:55:9f:00:7f:85:89:ea: d3:2f:5c:74:7d:37:0d:73:75:de:e0:ab:31:78:37: 7c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:06:11:11:58:46:2F:FB:15:10:C1:ED:D8:C5:2C:5F:0B:DD:E2:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a/599a4abf-0151-3767-b925-760ecad0dd92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a/900d3223-79ad-4ee2-af23-163d305bdd0a.crl X509v3 Authority Key Identifier: keyid:7D:D6:33:9D:D2:D7:AE:48:75:4D:EE:25:DD:4E:7E:D5:65:C5:3A:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a.cer sbgp-ipAddrBlock: critical IPv4: 208.64.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:1f:d2:cb:c8:43:b5:3c:00:f7:cf:58:15:f8:4e:6d:e0:81: 51:95:5b:ab:c8:15:18:03:32:40:54:de:01:4a:91:f2:36:df: b0:e7:44:ee:f6:d6:ae:b4:42:1d:61:21:16:a5:b5:73:cc:81: b5:4c:66:9e:73:cc:83:54:50:89:e2:14:e5:35:58:51:ee:ff: 09:9a:e7:93:54:a8:1e:4a:62:c4:ac:30:d5:dc:0b:15:87:35: 6b:b2:19:8a:37:d2:48:ca:da:f8:6f:14:a1:7c:64:45:97:fd: 5f:18:90:22:20:54:a3:5a:d4:a0:5a:c8:c1:5a:9c:b6:78:17: 22:e5:71:62:63:57:6c:1d:c9:7e:f1:4c:5e:03:b4:e9:51:4f: 4c:44:e1:26:6d:2d:72:b9:8c:99:95:57:7d:60:ae:68:cc:5a: 49:a7:c3:00:1a:6e:ba:f8:5a:4f:8c:fc:5e:87:54:94:c9:79: 56:53:69:67:6f:6e:2d:2c:d5:7b:26:0b:36:6c:bf:b6:8a:20: e6:b1:8b:5e:0e:89:2f:e1:2f:9d:08:f7:cb:85:4a:73:c3:7f: ed:ef:04:4f:8f:05:38:50:c9:af:f8:c9:2e:b0:ab:f3:26:b2: ba:7e:87:43:68:97:69:a5:92:41:bb:70:33:3d:d2:8c:8e:86: 7e:6b:bf:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCiMLOD6aWuxxaOwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTAwZDMyMjMtNzlhZC00ZWUyLWFmMjMtMTYzZDMwNWJk ZDBhMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk ZThjYTEwNDctZTI3NC00NzM4LWE3MzktZTUzNjllNjc4NGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYzqW5fqJpcfIzqP8sZu1bmCvbENHmwPmU8D WQZR323L+7hMe1/NCD7KCagwFysvQWajwtPs6RKl1hAWWoJBWdmEfHyg9T9fjjR0 GJRGjb6S+gTkNAfAdjfB9VpfUhhSKzJCpsHz5BnKcqJ0+LjxdJnEQUoa8NxP/diG zHp6bd9oNYgmNufMA8uSDyNVhEBpKZJdGLWaobr8wPzm4AhN4pmfWhO9+h/2qukJ sMG0OnR1F3eetBnRgox91eXSZBhcaRQmASvfgTMzhWiAOJBZbYVYcZA6NjMN8Sxv 1526xH9yx9xC9eOtiFWfAH+FierTL1x0fTcNc3Xe4KsxeDd8qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHMGERFYRi/7FRDB7djFLF8L3eKoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85MDBk MzIyMy03OWFkLTRlZTItYWYyMy0xNjNkMzA1YmRkMGEvNTk5YTRhYmYtMDE1MS0z NzY3LWI5MjUtNzYwZWNhZDBkZDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOTAwZDMyMjMtNzlhZC00ZWUyLWFm MjMtMTYzZDMwNWJkZDBhLzkwMGQzMjIzLTc5YWQtNGVlMi1hZjIzLTE2M2QzMDVi ZGQwYS5jcmwwHwYDVR0jBBgwFoAUfdYzndLXrkh1Te4l3U5+1WXFOrwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS85MDBkMzIyMy03OWFkLTRlZTItYWYyMy0xNjNk MzA1YmRkMGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EAoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK8f0svIQ7U8APfPWBX4Tm3ggVGVW6vIFRgDMkBU3gFKkfI237DnRO72 1q60Qh1hIRaltXPMgbVMZp5zzINUUIniFOU1WFHu/wma55NUqB5KYsSsMNXcCxWH NWuyGYo30kjK2vhvFKF8ZEWX/V8YkCIgVKNa1KBayMFanLZ4FyLlcWJjV2wdyX7x TF4DtOlRT0xE4SZtLXK5jJmVV31grmjMWkmnwwAabrr4Wk+M/F6HVJTJeVZTaWdv bi0s1XsmCzZsv7aKIOaxi14OiS/hL50I98uFSnPDf+3vBE+PBThQya/4yS6wq/Mm srp+h0Nol2mlkkG7cDM90oyOhn5rv3c= -----END CERTIFICATE-----Generated at Sun May 11 15:56:49 2025 by rpki-client