$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/4f3323a0-d75d-37c4-b2ea-2f666d66e885.roa File: 4f3323a0-d75d-37c4-b2ea-2f666d66e885.roa (raw, json) Hash identifier: 5sa5N7ppUBGD5a7o9SPRlQRa2a+GVfK77+UDOP+R+cU= Subject key identifier: 99:E9:B2:2D:04:0C:53:D6:95:AA:C3:84:FA:C9:33:D1:87:E7:3B:C7 Certificate issuer: /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Certificate serial: 010D0C9F43285849AA4F6C1145726DE318A119C0 Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/4f3323a0-d75d-37c4-b2ea-2f666d66e885.roa Signing time: Sun 27 Apr 2025 13:01:01 +0000 ROA not before: Sun 27 Apr 2025 13:01:01 +0000 ROA not after: Sat 26 Jul 2025 13:01:01 +0000 asID: 55293 IP address blocks: 199.195.116.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:4f:6c:11:45:72:6d:e3:18:a1:19:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Validity Not Before: Apr 27 13:01:01 2025 GMT Not After : Jul 26 13:01:01 2025 GMT Subject: CN=5c0e3abf-7663-429e-a7d7-3c82d63cb408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:41:11:8a:28:b7:7d:c9:b2:15:6b:2b:ae:4f: 08:b6:18:ab:bc:25:4b:db:07:90:4d:ca:a5:67:a8: 25:4a:fb:f9:0e:6d:d1:95:e9:82:ef:1e:8e:73:b6: 2c:3b:9a:8a:55:36:75:ef:0e:89:18:9f:a1:82:e0: c2:f0:b9:e3:6c:e6:d7:b4:b0:0a:cd:3c:22:64:1c: 17:a2:de:b8:09:48:50:15:c7:44:a8:42:a5:d6:31: c7:78:fc:9c:ea:cc:9f:32:d7:7c:36:47:e4:52:d0: 15:11:c3:91:a6:e5:13:fb:13:54:a5:4a:54:de:97: 96:36:b6:d1:85:18:d2:8f:e0:aa:0f:95:f4:e5:f9: 13:d5:41:d9:d3:9b:f0:b6:7b:9c:8b:6f:d8:2a:df: 98:45:0d:5e:25:13:9b:2a:25:c7:62:16:49:65:e6: ca:65:0b:c8:0a:95:fe:df:32:c7:f2:a8:61:3f:fd: 4b:82:00:65:cd:c4:ce:f5:2a:3f:c3:d6:72:e9:69: 28:24:7b:06:90:5f:cc:99:8d:25:14:4e:67:30:81: 1b:e6:5e:6a:f8:a6:f7:38:dd:9f:f4:39:94:ed:ac: e4:93:23:5c:bf:6f:cb:b1:27:15:d3:d8:c3:1b:d3: a7:19:ca:03:bd:1f:09:a8:13:87:94:da:af:48:22: 28:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:E9:B2:2D:04:0C:53:D6:95:AA:C3:84:FA:C9:33:D1:87:E7:3B:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/4f3323a0-d75d-37c4-b2ea-2f666d66e885.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl X509v3 Authority Key Identifier: keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer sbgp-ipAddrBlock: critical IPv4: 199.195.116.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:b9:a3:44:05:7f:8f:56:0f:31:83:74:88:17:90:de:d6:2e: e1:4c:ea:78:a8:ec:93:fc:78:0a:2f:f4:3c:2f:da:c0:9b:a6: 5c:7a:d3:41:a5:1a:85:4c:43:dd:76:d1:3c:3f:a8:30:d6:ba: 2e:93:fe:1d:8e:fb:4a:78:c4:a0:f3:90:04:0c:20:37:d7:05: a0:39:da:19:5b:20:b4:cb:0b:ad:df:37:91:31:30:0e:20:46: 51:7d:bf:46:90:9f:d5:25:66:48:a8:e1:09:c4:7d:9e:02:e5: 94:ca:8c:e9:4b:1f:c3:65:76:40:64:5e:5c:12:89:25:b2:86: c1:11:67:a1:e4:01:51:56:23:7b:25:bd:6b:db:15:9a:ea:8a: 2e:35:d4:d7:15:c1:c3:63:51:1f:de:f9:b4:e0:15:d3:c6:05: 24:e8:b6:4a:bf:7e:ab:42:5e:83:0c:80:af:71:fc:4e:23:94: a2:8f:2e:e9:70:99:9b:12:0c:b8:9e:c5:49:06:3e:55:db:27: 68:82:7a:fb:91:22:99:43:83:e4:48:e5:1c:f2:32:aa:88:0b: 84:9d:5a:23:b3:16:a7:38:69:ad:92:86:c0:3d:eb:b1:12:81: eb:e9:2c:69:63:6c:b3:24:1c:9d:27:57:ef:a1:bc:a3:55:78: 1d:05:49:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmqT2wRRXJt4xihGcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2M5MzgzZTQtMmM1MS00ZmZkLWJmZTktNjllOWZkNmM1 YjU4MB4XDTI1MDQyNzEzMDEwMVoXDTI1MDcyNjEzMDEwMVowLzEtMCsGA1UEAxMk NWMwZTNhYmYtNzY2My00MjllLWE3ZDctM2M4MmQ2M2NiNDA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kERiii3fcmyFWsrrk8IthirvCVL2weQTcql Z6glSvv5Dm3RlemC7x6Oc7YsO5qKVTZ17w6JGJ+hguDC8LnjbObXtLAKzTwiZBwX ot64CUhQFcdEqEKl1jHHePyc6syfMtd8NkfkUtAVEcORpuUT+xNUpUpU3peWNrbR hRjSj+CqD5X05fkT1UHZ05vwtnuci2/YKt+YRQ1eJRObKiXHYhZJZebKZQvICpX+ 3zLH8qhhP/1LggBlzcTO9So/w9Zy6WkoJHsGkF/MmY0lFE5nMIEb5l5q+Kb3ON2f 9DmU7azkkyNcv2/LsScV09jDG9OnGcoDvR8JqBOHlNqvSCIoUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJnpsi0EDFPWlarDhPrJM9GH5zvHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkz ODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5ZmQ2YzViNTgvNGYzMzIzYTAtZDc1ZC0z N2M0LWIyZWEtMmY2NjZkNjZlODg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2M5MzgzZTQtMmM1MS00ZmZkLWJm ZTktNjllOWZkNmM1YjU4L2NjOTM4M2U0LTJjNTEtNGZmZC1iZmU5LTY5ZTlmZDZj NWI1OC5jcmwwHwYDVR0jBBgwFoAUJtGbtQL9y3VNYKC7ao9HB+JMFzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkzODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5 ZmQ2YzViNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx8N0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADG5o0QFf49WDzGDdIgXkN7WLuFM6nio7JP8eAov9Dwv2sCbplx600Gl GoVMQ9120Tw/qDDWui6T/h2O+0p4xKDzkAQMIDfXBaA52hlbILTLC63fN5ExMA4g RlF9v0aQn9UlZkio4QnEfZ4C5ZTKjOlLH8NldkBkXlwSiSWyhsERZ6HkAVFWI3sl vWvbFZrqii411NcVwcNjUR/e+bTgFdPGBSTotkq/fqtCXoMMgK9x/E4jlKKPLulw mZsSDLiexUkGPlXbJ2iCevuRIplDg+RI5RzyMqqIC4SdWiOzFqc4aa2ShsA967ES gevpLGljbLMkHJ0nV++hvKNVeB0FSWE= -----END CERTIFICATE-----Generated at Wed May 7 09:01:18 2025 by rpki-client