$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/9ed88ef2-ca8f-3da9-9a8f-6ccca674a6e7.roa File: 9ed88ef2-ca8f-3da9-9a8f-6ccca674a6e7.roa (raw, json) Hash identifier: ZFOHt5fOJo100O1T/r+aWTIXsPSbk6yNCxIBV7V6MrU= Subject key identifier: 28:51:01:85:B1:3E:BF:2A:A3:FD:24:4D:D1:CD:1F:83:A9:BE:53:CF Certificate issuer: /CN=8d34ec60-03b0-4663-8748-fab291e36393 Certificate serial: 010D0C9F43285849BC74AA50CC9DB65744923C00 Authority key identifier: 3C:E1:AD:C4:6C:FF:FF:61:D2:6D:75:13:59:A5:F2:0A:4D:07:85:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/9ed88ef2-ca8f-3da9-9a8f-6ccca674a6e7.roa Signing time: Sun 04 May 2025 01:00:47 +0000 ROA not before: Sun 04 May 2025 01:00:47 +0000 ROA not after: Sat 02 Aug 2025 01:00:47 +0000 asID: 395807 IP address blocks: 199.60.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bc:74:aa:50:cc:9d:b6:57:44:92:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d34ec60-03b0-4663-8748-fab291e36393 Validity Not Before: May 4 01:00:47 2025 GMT Not After : Aug 2 01:00:47 2025 GMT Subject: CN=b3596e21-2551-4ea1-a907-4b2d38f6994e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:95:c3:31:b0:18:4d:22:cb:46:5f:19:09:1e: b1:6c:45:85:f2:90:6c:a1:fc:1a:93:ec:d9:62:53: d0:a9:06:66:81:d2:54:60:82:cf:fb:e0:13:73:02: 25:9c:37:73:09:0f:3d:28:a3:86:3f:53:02:1e:cb: 61:46:a0:ec:bd:a1:57:fa:1c:df:00:4d:a2:68:18: b4:fe:ef:ea:52:6b:d1:ba:79:76:6a:c8:2a:d4:5d: d9:21:fa:03:72:67:ad:10:87:08:7b:d5:b4:a1:e0: d8:4e:f6:51:53:60:31:b7:8b:dc:48:aa:f3:d5:82: 88:40:16:cf:2c:6c:fa:8d:7b:a1:ec:80:c6:39:d4: fe:07:6c:2b:fd:e7:7d:13:b2:cd:05:3c:ca:cb:1d: da:97:24:ff:ea:a2:60:af:f1:f3:bc:82:68:59:01: bb:1c:0b:f9:ba:79:0c:8b:a4:16:04:0f:60:14:3c: 2c:1f:8f:a4:cb:1e:6c:80:84:04:e0:6c:68:50:55: 9a:4b:56:28:13:61:92:4e:cc:9e:b4:3b:9b:c1:5e: b6:86:72:3c:79:37:cd:68:b1:3f:d2:b0:a4:36:16: 41:9a:88:3e:3a:35:1f:2b:37:d3:a5:9a:e6:49:78: 6a:5b:9d:ca:c0:ea:2c:14:1d:5a:50:60:68:46:10: 20:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:51:01:85:B1:3E:BF:2A:A3:FD:24:4D:D1:CD:1F:83:A9:BE:53:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/9ed88ef2-ca8f-3da9-9a8f-6ccca674a6e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.crl X509v3 Authority Key Identifier: keyid:3C:E1:AD:C4:6C:FF:FF:61:D2:6D:75:13:59:A5:F2:0A:4D:07:85:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer sbgp-ipAddrBlock: critical IPv4: 199.60.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:2a:57:18:66:d1:18:e8:49:4e:f3:53:d2:0a:69:5b:82:ec: 82:81:8a:79:60:1a:02:d1:35:6c:7a:60:f5:bf:50:8e:ec:bb: 77:1a:d1:36:2f:ea:66:74:64:07:45:03:bd:40:0d:09:79:42: c0:3b:05:a0:37:44:68:78:8e:46:17:24:5c:18:8f:91:1b:6f: 53:ce:9a:c6:64:d2:cf:cb:90:b4:f9:96:9a:f3:e7:d1:c3:5f: fe:4b:ab:b2:b6:15:02:df:a8:85:09:a0:3a:80:c9:a2:22:0b: 99:36:9c:3f:77:64:dd:22:d0:dd:6c:26:bd:6f:0e:e3:57:09: c7:1a:bc:36:14:29:a7:e8:f7:1e:ed:ea:17:8f:c7:c1:4d:0e: 30:8d:05:f0:90:e1:3e:e0:c5:c8:6e:ad:d9:89:cf:f9:e5:85: 41:1e:74:fd:cd:2b:ef:95:10:bc:ed:06:68:53:69:92:b9:69: 1e:e2:4c:f2:a3:0b:65:db:93:23:a1:f7:d1:dd:e6:98:53:94: db:5b:25:5a:a1:d7:87:8e:44:4b:45:93:f7:7f:b6:11:f0:1e: 40:a7:8d:5c:88:47:65:4d:cf:18:aa:c6:76:62:7a:6f:e1:33: 96:d0:ad:5f:57:f9:98:11:76:53:35:bc:0d:f1:f7:d3:0a:1a: b0:76:05:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm8dKpQzJ22V0SSPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQzNGVjNjAtMDNiMC00NjYzLTg3NDgtZmFiMjkxZTM2 MzkzMB4XDTI1MDUwNDAxMDA0N1oXDTI1MDgwMjAxMDA0N1owLzEtMCsGA1UEAxMk YjM1OTZlMjEtMjU1MS00ZWExLWE5MDctNGIyZDM4ZjY5OTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZXDMbAYTSLLRl8ZCR6xbEWF8pBsofwak+zZ YlPQqQZmgdJUYILP++ATcwIlnDdzCQ89KKOGP1MCHsthRqDsvaFX+hzfAE2iaBi0 /u/qUmvRunl2asgq1F3ZIfoDcmetEIcIe9W0oeDYTvZRU2Axt4vcSKrz1YKIQBbP LGz6jXuh7IDGOdT+B2wr/ed9E7LNBTzKyx3alyT/6qJgr/HzvIJoWQG7HAv5unkM i6QWBA9gFDwsH4+kyx5sgIQE4GxoUFWaS1YoE2GSTsyetDubwV62hnI8eTfNaLE/ 0rCkNhZBmog+OjUfKzfTpZrmSXhqW53KwOosFB1aUGBoRhAgIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFChRAYWxPr8qo/0kTdHNH4OpvlPPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDM0 ZWM2MC0wM2IwLTQ2NjMtODc0OC1mYWIyOTFlMzYzOTMvOWVkODhlZjItY2E4Zi0z ZGE5LTlhOGYtNmNjY2E2NzRhNmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGQzNGVjNjAtMDNiMC00NjYzLTg3 NDgtZmFiMjkxZTM2MzkzLzhkMzRlYzYwLTAzYjAtNDY2My04NzQ4LWZhYjI5MWUz NjM5My5jcmwwHwYDVR0jBBgwFoAUPOGtxGz//2HSbXUTWaXyCk0Hhd0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDM0ZWM2MC0wM2IwLTQ2NjMtODc0OC1mYWIy OTFlMzYzOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzySMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIoqVxhm0RjoSU7zU9IKaVuC7IKBinlgGgLRNWx6YPW/UI7su3ca0TYv 6mZ0ZAdFA71ADQl5QsA7BaA3RGh4jkYXJFwYj5Ebb1POmsZk0s/LkLT5lprz59HD X/5Lq7K2FQLfqIUJoDqAyaIiC5k2nD93ZN0i0N1sJr1vDuNXCccavDYUKafo9x7t 6hePx8FNDjCNBfCQ4T7gxchurdmJz/nlhUEedP3NK++VELztBmhTaZK5aR7iTPKj C2XbkyOh99Hd5phTlNtbJVqh14eOREtFk/d/thHwHkCnjVyIR2VNzxiqxnZiem/h M5bQrV9X+ZgRdlM1vA3x99MKGrB2BcY= -----END CERTIFICATE-----Generated at Tue May 13 13:28:10 2025 by rpki-client