$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cbc0a369-0df8-3330-b8d1-efa2b0d7819a.roa File: cbc0a369-0df8-3330-b8d1-efa2b0d7819a.roa (raw, json) Hash identifier: awO+/9fsGjbRCYRuVI5/BfiMA0F+7G3JCBG3JzOAPP4= Subject key identifier: 56:62:39:43:E0:17:9E:23:1A:7C:E8:54:0D:9F:AC:5D:CB:5E:57:DA Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A4BAC9FBCFB5EA8D8052D780 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cbc0a369-0df8-3330-b8d1-efa2b0d7819a.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 19527 IP address blocks: 199.223.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:c9:fb:cf:b5:ea:8d:80:52:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=e6d69ad0-4acc-4ee8-8579-0f69d7d82f79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6a:3e:0b:ef:82:59:c9:8c:95:6a:4c:df:cc: 02:8b:77:f9:12:6b:5b:ed:62:1d:ae:29:7b:7b:d6: da:be:47:50:3a:86:c4:cc:38:04:c0:82:5e:1b:fa: 7a:78:e2:eb:a0:a0:36:b9:be:e5:db:1f:00:e5:b5: ee:84:46:bc:c0:9b:2a:6a:69:4c:51:a9:64:0c:1a: e4:55:fb:c5:e8:de:6d:25:ce:c1:27:77:d0:79:0f: 52:54:14:67:b3:4b:00:44:86:b6:e4:27:3d:5d:0d: 6a:e6:82:e7:91:21:80:70:c4:e7:ca:49:28:c3:76: 8a:63:21:11:9f:04:73:53:1d:8c:e1:e3:0d:3f:23: 1b:00:9e:f0:0b:50:47:ab:a3:d8:d1:f1:e6:4a:4f: dd:b1:a5:0e:7a:0a:d3:a3:26:e2:41:7a:55:2e:32: 74:21:d4:5b:93:36:98:29:c2:bb:d6:a9:03:e5:cf: 1d:1a:10:04:1c:55:ae:52:b4:4a:a1:35:74:5c:9d: 9c:bf:71:2d:e2:8a:58:84:8e:47:1c:97:3c:e0:09: 8f:fa:0e:7c:18:a6:84:47:d9:1d:ec:63:a3:9f:64: 78:ee:8c:c0:79:19:9a:5b:37:4f:61:56:0c:19:6e: aa:14:e9:c9:75:2f:be:94:b3:f1:fa:5f:60:75:76: 39:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:62:39:43:E0:17:9E:23:1A:7C:E8:54:0D:9F:AC:5D:CB:5E:57:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cbc0a369-0df8-3330-b8d1-efa2b0d7819a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 199.223.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:e9:34:9b:0b:8e:57:dc:ed:62:01:52:3d:2a:e8:68:9b:94: ec:ed:16:62:98:98:ec:3f:b4:83:20:07:a7:fe:a2:f9:94:23: 29:ac:cf:ee:f9:86:43:1d:35:5f:71:8f:79:44:73:08:d3:99: 36:18:39:6c:65:52:2e:16:bb:76:04:38:b2:4f:de:a6:f7:10: 3f:61:c1:2c:66:81:dd:29:4c:00:52:86:cc:f6:41:57:01:24: ca:0e:58:6b:ed:ea:46:08:7e:85:02:13:9e:eb:47:38:4f:0c: b6:ef:3c:c5:75:86:ce:10:a8:1e:8d:4b:12:17:3c:c2:78:a7: 0a:46:3a:93:c4:c7:95:68:c8:52:28:fa:10:e9:be:f5:10:7e: 92:4d:62:a1:46:58:a8:27:fc:06:78:02:2b:f9:00:eb:d5:ef: e7:b9:46:aa:3f:b9:28:3b:b6:59:2a:f3:a2:a4:4f:81:fe:83: be:53:d4:35:0b:03:f7:61:24:3a:23:2b:f0:ff:7e:2c:48:8a: 5d:b3:98:5d:b1:40:dd:ed:55:32:20:1c:9d:13:7f:57:a6:dc: ab:12:e2:64:b2:5d:33:50:24:ae:89:bf:62:99:2b:53:24:74: 7f:ee:72:15:e4:93:7d:3d:87:31:19:62:cf:f4:f2:3a:a0:e9: 2c:4a:8c:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkusn7z7XqjYBS14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZTZkNjlhZDAtNGFjYy00ZWU4LTg1NzktMGY2OWQ3ZDgyZjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmo+C++CWcmMlWpM38wCi3f5Emtb7WIdril7 e9bavkdQOobEzDgEwIJeG/p6eOLroKA2ub7l2x8A5bXuhEa8wJsqamlMUalkDBrk VfvF6N5tJc7BJ3fQeQ9SVBRns0sARIa25Cc9XQ1q5oLnkSGAcMTnykkow3aKYyER nwRzUx2M4eMNPyMbAJ7wC1BHq6PY0fHmSk/dsaUOegrToybiQXpVLjJ0IdRbkzaY KcK71qkD5c8dGhAEHFWuUrRKoTV0XJ2cv3Et4opYhI5HHJc84AmP+g58GKaER9kd 7GOjn2R47ozAeRmaWzdPYVYMGW6qFOnJdS++lLPx+l9gdXY5RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZiOUPgF54jGnzoVA2frF3LXlfaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2JjMGEzNjktMGRmOC0z MzMwLWI4ZDEtZWZhMmIwZDc4MTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx9/uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKjpNJsLjlfc7WIBUj0q6GiblOztFmKYmOw/tIMgB6f+ovmUIymsz+75 hkMdNV9xj3lEcwjTmTYYOWxlUi4Wu3YEOLJP3qb3ED9hwSxmgd0pTABShsz2QVcB JMoOWGvt6kYIfoUCE57rRzhPDLbvPMV1hs4QqB6NSxIXPMJ4pwpGOpPEx5VoyFIo +hDpvvUQfpJNYqFGWKgn/AZ4Aiv5AOvV7+e5Rqo/uSg7tlkq86KkT4H+g75T1DUL A/dhJDojK/D/fixIil2zmF2xQN3tVTIgHJ0Tf1em3KsS4mSyXTNQJK6Jv2KZK1Mk dH/uchXkk309hzEZYs/08jqg6SxKjDU= -----END CERTIFICATE-----Generated at Sun May 4 19:51:51 2025 by rpki-client