$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/114c23eb-d2f7-3a43-8266-464e81836fee.roa File: 114c23eb-d2f7-3a43-8266-464e81836fee.roa (raw, json) Hash identifier: hAVnrN1oBHEXaitS6lG87Eip7dxqBeJzC0wSgr2Us98= Subject key identifier: 69:B5:92:F6:C2:1F:74:FD:E9:CE:1B:99:6B:D9:1E:D7:AC:36:F8:69 Certificate issuer: /CN=4fba2fa2-fadc-4c1b-911f-6f41164e9695 Certificate serial: 010D0C9F43285849B14A09BF036F88232ED14280 Authority key identifier: 13:0D:DE:8E:42:17:FB:20:DA:68:87:7B:22:CE:74:B9:6A:8D:F5:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/114c23eb-d2f7-3a43-8266-464e81836fee.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 26459 IP address blocks: 199.250.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/4fba2fa2-fadc-4c1b-911f-6f41164e9695.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/4fba2fa2-fadc-4c1b-911f-6f41164e9695.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:09:bf:03:6f:88:23:2e:d1:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fba2fa2-fadc-4c1b-911f-6f41164e9695 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=2909738c-56cd-4db3-8877-04f138b52a88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:90:57:34:ea:96:0e:c6:71:0a:08:b5:7c:49: 28:2b:0c:35:29:d2:c9:f7:a3:45:ab:ff:c9:c5:ad: 6d:c5:af:79:88:7c:8d:29:52:49:96:21:c2:5f:7b: 36:d1:15:4a:74:63:18:fb:32:d0:6e:68:cd:3b:0d: 2a:8f:2f:de:e3:56:61:3e:a6:20:65:d6:2d:c5:f5: f3:6a:4b:40:db:4b:d4:d1:6d:b6:70:c5:ac:bd:6e: 66:52:d2:c6:92:b4:ae:18:65:d0:e3:28:b3:0e:1e: 82:4c:a9:a1:6c:79:75:97:b8:1c:a8:6b:77:88:5d: 7a:96:8a:69:26:12:98:e5:e7:3c:a4:91:25:9b:9b: 33:5d:c3:94:50:a0:d8:91:84:2a:85:01:01:f4:ae: 91:f0:7e:22:ad:40:b7:c8:da:ff:77:1e:3d:95:ac: 10:c8:9e:e2:c7:ea:e1:b2:6d:42:b6:db:db:ae:7d: 5d:02:86:b6:4f:8e:3a:9b:41:4c:54:c9:5c:66:13: b8:95:0f:35:22:dc:1c:00:f5:ab:40:8a:0b:b9:26: 7c:27:78:d5:54:a7:d4:8c:8a:ff:44:9c:ab:da:a4: 46:cd:9a:c9:17:4f:3e:9d:04:1a:8a:d0:ce:3e:f3: 08:93:a2:f8:d4:42:8f:42:e3:be:22:05:32:d5:42: 94:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:B5:92:F6:C2:1F:74:FD:E9:CE:1B:99:6B:D9:1E:D7:AC:36:F8:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/114c23eb-d2f7-3a43-8266-464e81836fee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/4fba2fa2-fadc-4c1b-911f-6f41164e9695.crl X509v3 Authority Key Identifier: keyid:13:0D:DE:8E:42:17:FB:20:DA:68:87:7B:22:CE:74:B9:6A:8D:F5:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695.cer sbgp-ipAddrBlock: critical IPv4: 199.250.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:f4:e0:87:9d:d2:8d:e3:d7:b9:2a:12:d1:49:9e:fd:6b:ff: 41:25:ed:b2:1c:22:9a:b5:25:1a:50:1b:23:0c:df:ea:b6:83: f8:f1:56:d3:f6:2b:1d:b8:9d:f3:d6:2c:ac:25:a0:b2:3a:38: 45:b8:cf:64:50:02:fb:8c:3a:f9:97:e2:b3:ff:50:89:a5:61: 65:4f:f5:8f:2a:04:0e:20:1a:05:c4:3e:65:0c:cb:f0:97:fb: ea:6b:e5:77:2a:fc:ba:94:c2:4b:52:20:77:e0:c8:7b:c4:b6: 13:8e:f7:1d:e1:77:66:06:3d:b5:e0:37:71:90:9c:30:43:9f: 13:19:a6:e8:46:d1:76:18:5a:a5:a3:ee:9f:bb:ae:da:3a:5e: 1e:38:64:70:fb:41:01:71:3d:30:e9:86:ef:6e:a1:cf:68:c9: f4:be:e0:7f:a1:72:05:23:55:a0:a5:64:3d:73:e6:e5:ab:5a: 84:0e:62:b8:b2:ce:35:7e:0e:40:13:04:24:94:41:d7:71:d1: 15:94:62:c7:67:ac:3c:f5:03:39:88:6a:20:9d:3f:c9:95:40: 27:59:2f:0e:8c:41:ce:48:5b:04:e2:73:a8:e5:51:70:cc:a6: 29:42:33:05:c7:2b:52:a5:fe:02:32:92:a6:c3:b1:37:0d:ee: 0b:48:a1:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSgm/A2+IIy7RQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGZiYTJmYTItZmFkYy00YzFiLTkxMWYtNmY0MTE2NGU5 Njk1MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MjkwOTczOGMtNTZjZC00ZGIzLTg4NzctMDRmMTM4YjUyYTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypBXNOqWDsZxCgi1fEkoKww1KdLJ96NFq//J xa1txa95iHyNKVJJliHCX3s20RVKdGMY+zLQbmjNOw0qjy/e41ZhPqYgZdYtxfXz aktA20vU0W22cMWsvW5mUtLGkrSuGGXQ4yizDh6CTKmhbHl1l7gcqGt3iF16lopp JhKY5ec8pJElm5szXcOUUKDYkYQqhQEB9K6R8H4irUC3yNr/dx49lawQyJ7ix+rh sm1Cttvbrn1dAoa2T446m0FMVMlcZhO4lQ81ItwcAPWrQIoLuSZ8J3jVVKfUjIr/ RJyr2qRGzZrJF08+nQQaitDOPvMIk6L41EKPQuO+IgUy1UKU+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGm1kvbCH3T96c4bmWvZHtesNvhpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80ZmJh MmZhMi1mYWRjLTRjMWItOTExZi02ZjQxMTY0ZTk2OTUvMTE0YzIzZWItZDJmNy0z YTQzLTgyNjYtNDY0ZTgxODM2ZmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGZiYTJmYTItZmFkYy00YzFiLTkx MWYtNmY0MTE2NGU5Njk1LzRmYmEyZmEyLWZhZGMtNGMxYi05MTFmLTZmNDExNjRl OTY5NS5jcmwwHwYDVR0jBBgwFoAUEw3ejkIX+yDaaId7Is50uWqN9V8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80ZmJhMmZhMi1mYWRjLTRjMWItOTExZi02ZjQx MTY0ZTk2OTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEx/qgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKj04Ied0o3j17kqEtFJnv1r/0El7bIcIpq1JRpQGyMM3+q2g/jxVtP2 Kx24nfPWLKwloLI6OEW4z2RQAvuMOvmX4rP/UImlYWVP9Y8qBA4gGgXEPmUMy/CX ++pr5Xcq/LqUwktSIHfgyHvEthOO9x3hd2YGPbXgN3GQnDBDnxMZpuhG0XYYWqWj 7p+7rto6Xh44ZHD7QQFxPTDphu9uoc9oyfS+4H+hcgUjVaClZD1z5uWrWoQOYriy zjV+DkATBCSUQddx0RWUYsdnrDz1AzmIaiCdP8mVQCdZLw6MQc5IWwTic6jlUXDM pilCMwXHK1Kl/gIykqbDsTcN7gtIoVs= -----END CERTIFICATE-----Generated at Fri May 9 19:23:11 2025 by rpki-client