$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/bd3ed880-a887-3cf6-9c1f-4e4a54376ed6.roa File: bd3ed880-a887-3cf6-9c1f-4e4a54376ed6.roa (raw, json) Hash identifier: iTulMChcTEt0/vQnuQpl7f2hUWmbACMQjJcGtP6JsoA= Subject key identifier: 66:F4:34:50:92:88:DA:98:DC:A1:0A:A1:84:41:FD:CF:47:26:DB:A2 Certificate issuer: /CN=5ddde1fe-7525-49e3-9718-412c13cd42ca Certificate serial: 010D0C9F43285849C20A06ED3CF393DA7114A280 Authority key identifier: 3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/bd3ed880-a887-3cf6-9c1f-4e4a54376ed6.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 14618 IP address blocks: 199.101.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:06:ed:3c:f3:93:da:71:14:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ddde1fe-7525-49e3-9718-412c13cd42ca Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=c641384d-8dfb-4d9f-ac6b-60f24c649028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:81:0d:1d:fd:b5:6d:01:94:64:3b:e3:4d:6c: 9c:42:1e:68:2f:ea:08:a5:c8:57:ac:e2:e2:4e:96: 0c:ef:11:8e:6c:c5:75:94:b1:01:69:ea:30:c9:c2: 82:96:af:57:05:95:66:0a:ab:29:55:b2:e7:a2:70: be:e8:fc:61:41:6b:22:35:66:1b:9b:6b:2b:d7:de: 5f:7d:7d:89:e2:ee:c2:23:d1:70:57:a1:47:d9:e7: 82:40:20:19:6e:1d:92:05:ca:49:77:ad:0a:0e:8e: a3:d2:28:46:c2:58:41:89:33:aa:7a:4f:09:dd:4e: c3:0c:c8:21:8a:42:b5:c0:1a:8c:2f:05:27:eb:9d: 15:2c:6d:83:8e:2b:43:04:61:e2:34:4f:77:77:2c: c6:66:d2:16:d8:af:4e:73:d4:ec:23:55:c8:be:a2: 84:6a:4d:87:dc:e1:cf:f3:38:a1:25:38:79:28:70: 07:a1:29:b6:da:76:7e:6c:97:fe:e3:54:05:12:ae: a4:76:91:8d:cb:18:a7:2c:3c:4b:45:be:a3:43:32: 36:8e:d7:69:e2:a8:9a:8b:8e:a3:d6:1d:3d:6f:5b: de:53:dd:00:8b:75:fc:f5:7e:e2:0b:e4:a7:93:66: 64:50:f4:51:ed:e8:ea:a3:9c:cf:6d:85:cd:d0:05: f6:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:F4:34:50:92:88:DA:98:DC:A1:0A:A1:84:41:FD:CF:47:26:DB:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/bd3ed880-a887-3cf6-9c1f-4e4a54376ed6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.crl X509v3 Authority Key Identifier: keyid:3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer sbgp-ipAddrBlock: critical IPv4: 199.101.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:9d:b3:e6:72:1e:48:aa:b5:cb:ef:ee:04:fc:c6:d4:1d:40: a7:0c:81:8c:3b:95:73:57:3a:29:7d:0d:33:12:01:50:f2:f0: 2b:f9:16:c5:2d:7e:d4:18:d7:ec:03:d3:f6:47:c4:51:1a:69: df:eb:f6:db:d8:f5:4b:d1:3d:90:4a:69:9c:e0:b1:30:88:1e: 9e:dc:e3:b3:17:39:99:ef:9d:af:66:1a:a1:9f:75:69:bd:6a: e9:e3:28:77:03:e5:89:7d:48:59:d5:c7:89:67:f5:50:ad:b8: 6c:ed:3c:4b:6c:01:5b:e5:bc:17:15:7c:0c:c4:70:e0:db:a7: 55:a5:0a:6d:c7:0b:f8:49:49:2b:ac:0d:08:ad:14:61:c5:be: b0:cf:ad:8e:f7:00:2a:d7:fb:37:5c:f8:2e:cd:9c:b0:e3:cb: 52:0c:be:08:28:ff:fd:b9:96:a7:e7:80:99:8b:92:73:b8:cf: 95:82:a8:2f:f7:3f:ab:23:a5:07:67:01:7c:f2:eb:f4:74:6f: 91:e8:78:cc:80:5f:81:d4:5a:84:e8:1e:08:52:95:ab:34:12: 3c:bc:bc:0e:6c:9a:5f:f7:f6:53:87:17:4b:61:55:24:47:e6: c2:94:85:86:53:2b:b3:18:ba:6a:d7:35:6e:86:af:09:7f:a1: a9:4e:0f:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCgbtPPOT2nEUooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRkZGUxZmUtNzUyNS00OWUzLTk3MTgtNDEyYzEzY2Q0 MmNhMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk YzY0MTM4NGQtOGRmYi00ZDlmLWFjNmItNjBmMjRjNjQ5MDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoENHf21bQGUZDvjTWycQh5oL+oIpchXrOLi TpYM7xGObMV1lLEBaeowycKClq9XBZVmCqspVbLnonC+6PxhQWsiNWYbm2sr195f fX2J4u7CI9FwV6FH2eeCQCAZbh2SBcpJd60KDo6j0ihGwlhBiTOqek8J3U7DDMgh ikK1wBqMLwUn650VLG2DjitDBGHiNE93dyzGZtIW2K9Oc9TsI1XIvqKEak2H3OHP 8zihJTh5KHAHoSm22nZ+bJf+41QFEq6kdpGNyxinLDxLRb6jQzI2jtdp4qiai46j 1h09b1veU90Ai3X89X7iC+Snk2ZkUPRR7ejqo5zPbYXN0AX2WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGb0NFCSiNqY3KEKoYRB/c9HJtuiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZGRk ZTFmZS03NTI1LTQ5ZTMtOTcxOC00MTJjMTNjZDQyY2EvYmQzZWQ4ODAtYTg4Ny0z Y2Y2LTljMWYtNGU0YTU0Mzc2ZWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWRkZGUxZmUtNzUyNS00OWUzLTk3 MTgtNDEyYzEzY2Q0MmNhLzVkZGRlMWZlLTc1MjUtNDllMy05NzE4LTQxMmMxM2Nk NDJjYS5jcmwwHwYDVR0jBBgwFoAUPyEX+C90LrvdwcZoG6YcjoqBYSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZGRkZTFmZS03NTI1LTQ5ZTMtOTcxOC00MTJj MTNjZDQyY2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx2XGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+ds+ZyHkiqtcvv7gT8xtQdQKcMgYw7lXNXOil9DTMSAVDy8Cv5FsUt ftQY1+wD0/ZHxFEaad/r9tvY9UvRPZBKaZzgsTCIHp7c47MXOZnvna9mGqGfdWm9 aunjKHcD5Yl9SFnVx4ln9VCtuGztPEtsAVvlvBcVfAzEcODbp1WlCm3HC/hJSSus DQitFGHFvrDPrY73ACrX+zdc+C7NnLDjy1IMvggo//25lqfngJmLknO4z5WCqC/3 P6sjpQdnAXzy6/R0b5HoeMyAX4HUWoToHghSlas0Ejy8vA5sml/39lOHF0thVSRH 5sKUhYZTK7MYumrXNW6Grwl/oalOD9k= -----END CERTIFICATE-----Generated at Sun May 11 12:50:18 2025 by rpki-client