$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/0fa850de-079b-3985-8c4e-c1c41937a99b.roa File: 0fa850de-079b-3985-8c4e-c1c41937a99b.roa (raw, json) Hash identifier: 8n//xB2pHUIbgDoTRfwtN++DPY39lJWeA5T7Mu5bKEU= Subject key identifier: 30:4D:5B:4E:42:4C:D7:75:EA:DA:7D:46:12:42:ED:23:97:F1:82:F4 Certificate issuer: /CN=5ddde1fe-7525-49e3-9718-412c13cd42ca Certificate serial: 010D0C9F43285849C20A06D67507389A18B6DB80 Authority key identifier: 3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/0fa850de-079b-3985-8c4e-c1c41937a99b.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 16509 IP address blocks: 199.101.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:06:d6:75:07:38:9a:18:b6:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ddde1fe-7525-49e3-9718-412c13cd42ca Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=0cb7119d-6330-4346-a04a-b66dfc6b747b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ca:dd:c2:ec:6b:30:16:72:97:2c:15:e8:53: 89:d7:49:f1:07:f8:0d:d8:bf:f2:f1:dc:ae:11:1f: 5f:1f:b8:be:06:19:27:13:d6:21:ea:5a:c9:3a:b3: ba:bc:b6:f5:fc:bb:52:29:5d:c6:6d:c7:24:8c:2f: 78:bc:4b:0f:d8:25:ff:29:93:80:37:2b:05:3d:3b: ca:12:db:9d:ef:ed:df:4a:63:94:02:27:16:59:36: 9b:df:c7:0f:5b:eb:67:2c:84:7d:e0:f2:f3:3b:ca: 6b:b5:7f:6b:bb:88:04:77:62:e2:d1:83:c7:6d:c2: a5:ad:a2:33:0d:36:5f:5c:1f:9f:3c:2d:2a:08:58: 81:03:9f:68:ce:d9:07:44:28:89:7f:56:8d:3e:4c: 37:66:00:c4:19:b3:69:3c:88:7c:26:8b:33:98:e8: b2:38:d0:1a:ee:aa:90:65:82:f5:dd:ea:e9:1d:c0: e5:63:e7:72:de:6b:59:5d:06:a3:35:2d:be:39:73: 69:8d:79:a7:9e:0f:fd:1f:97:f5:9b:d9:15:93:85: fc:0a:4c:a3:94:f7:c8:6b:2b:ad:05:b2:0d:f7:f1: 93:25:c7:85:2f:fc:ff:87:28:41:e3:d3:ad:39:71: eb:ed:2c:2b:07:43:6f:c7:62:f1:f4:4b:08:40:0e: 00:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:4D:5B:4E:42:4C:D7:75:EA:DA:7D:46:12:42:ED:23:97:F1:82:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/0fa850de-079b-3985-8c4e-c1c41937a99b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.crl X509v3 Authority Key Identifier: keyid:3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer sbgp-ipAddrBlock: critical IPv4: 199.101.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:15:ca:3d:fb:43:4e:bc:d2:37:fc:b9:18:fe:05:55:6d:b3: fd:95:18:03:05:f3:11:cc:b1:6f:25:ab:49:3b:dc:1f:00:2c: 20:bd:31:5d:15:84:b3:7a:c4:01:9b:ec:aa:de:e1:f9:83:e5: a4:6e:29:9b:13:7e:21:77:ca:5b:9f:7c:d4:dc:7c:45:70:85: 1d:f2:21:af:fa:2e:a3:11:d8:23:87:b1:35:af:8b:b0:b3:9a: 69:2f:ab:ae:44:51:de:75:42:f4:56:1a:1d:3e:08:d6:8f:26: 09:55:40:1c:6a:cf:ec:c1:67:ab:3b:e1:37:8d:75:15:d9:2f: 0a:12:71:77:82:fb:b5:52:3b:75:2b:44:cf:7b:73:db:22:0f: a3:a0:ab:f4:c3:e1:d5:1d:fe:60:fb:11:b2:2a:ec:84:38:2a: f6:57:b5:7a:38:a7:9f:40:08:63:dd:bc:ef:04:b6:1c:fd:f2: ba:39:a3:43:35:91:bc:7b:67:b8:d0:db:fe:65:ba:57:f9:30: 7a:c4:42:2b:4e:12:8a:39:9f:27:0a:01:7a:21:4b:36:10:29: e5:1c:4b:ce:59:3d:00:c4:e0:ed:82:04:c4:2f:08:45:4d:9f: 5f:01:2a:57:e2:21:e0:8f:39:74:74:f7:51:50:78:59:cc:c5: 03:dd:f3:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCgbWdQc4mhi224AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRkZGUxZmUtNzUyNS00OWUzLTk3MTgtNDEyYzEzY2Q0 MmNhMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk MGNiNzExOWQtNjMzMC00MzQ2LWEwNGEtYjY2ZGZjNmI3NDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8rdwuxrMBZylywV6FOJ10nxB/gN2L/y8dyu ER9fH7i+BhknE9Yh6lrJOrO6vLb1/LtSKV3GbcckjC94vEsP2CX/KZOANysFPTvK Etud7+3fSmOUAicWWTab38cPW+tnLIR94PLzO8prtX9ru4gEd2Li0YPHbcKlraIz DTZfXB+fPC0qCFiBA59oztkHRCiJf1aNPkw3ZgDEGbNpPIh8JoszmOiyONAa7qqQ ZYL13erpHcDlY+dy3mtZXQajNS2+OXNpjXmnng/9H5f1m9kVk4X8CkyjlPfIayut BbIN9/GTJceFL/z/hyhB49OtOXHr7SwrB0Nvx2Lx9EsIQA4AZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDBNW05CTNd16tp9RhJC7SOX8YL0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZGRk ZTFmZS03NTI1LTQ5ZTMtOTcxOC00MTJjMTNjZDQyY2EvMGZhODUwZGUtMDc5Yi0z OTg1LThjNGUtYzFjNDE5MzdhOTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWRkZGUxZmUtNzUyNS00OWUzLTk3 MTgtNDEyYzEzY2Q0MmNhLzVkZGRlMWZlLTc1MjUtNDllMy05NzE4LTQxMmMxM2Nk NDJjYS5jcmwwHwYDVR0jBBgwFoAUPyEX+C90LrvdwcZoG6YcjoqBYSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZGRkZTFmZS03NTI1LTQ5ZTMtOTcxOC00MTJj MTNjZDQyY2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx2XGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEVyj37Q0680jf8uRj+BVVts/2VGAMF8xHMsW8lq0k73B8ALCC9MV0V hLN6xAGb7Kre4fmD5aRuKZsTfiF3yluffNTcfEVwhR3yIa/6LqMR2COHsTWvi7Cz mmkvq65EUd51QvRWGh0+CNaPJglVQBxqz+zBZ6s74TeNdRXZLwoScXeC+7VSO3Ur RM97c9siD6Ogq/TD4dUd/mD7EbIq7IQ4KvZXtXo4p59ACGPdvO8Ethz98ro5o0M1 kbx7Z7jQ2/5lulf5MHrEQitOEoo5nycKAXohSzYQKeUcS85ZPQDE4O2CBMQvCEVN n18BKlfiIeCPOXR091FQeFnMxQPd8x0= -----END CERTIFICATE-----Generated at Sun May 11 18:53:13 2025 by rpki-client