$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92/7a3ac42f-b8f2-37ec-8544-541f5fe42523.roa File: 7a3ac42f-b8f2-37ec-8544-541f5fe42523.roa (raw, json) Hash identifier: OL366+ids/VE7Ubngp62lNmnjGWnT2KSmp7fP3EK1QQ= Subject key identifier: 3B:13:FF:66:57:C0:26:81:43:D5:DE:0A:25:81:2D:64:90:8D:99:3A Certificate issuer: /CN=56b96151-8a90-41ad-aefc-1091ab214a92 Certificate serial: 010D0C9F43285848F22C67F0422F87452EB45600 Authority key identifier: DC:FC:BD:81:79:AC:17:F1:5F:B1:DD:0D:72:15:FA:F6:4F:1B:95:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92/7a3ac42f-b8f2-37ec-8544-541f5fe42523.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 395096 IP address blocks: 199.91.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92/56b96151-8a90-41ad-aefc-1091ab214a92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92/56b96151-8a90-41ad-aefc-1091ab214a92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:67:f0:42:2f:87:45:2e:b4:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56b96151-8a90-41ad-aefc-1091ab214a92 Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=373e5e42-80ac-4113-aa5e-c85b061e25fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b8:c2:b4:00:5f:69:52:d1:00:bf:b1:aa:7e: 5f:d0:72:58:af:7f:ab:ed:2a:fb:d8:81:aa:e9:33: 33:6a:52:3b:c9:94:71:c6:7a:f7:b0:ef:e2:ce:27: f7:0d:4c:e5:49:3f:6b:35:9b:80:a4:cd:bb:4f:ee: 2e:41:fc:1b:fa:91:29:20:d8:28:10:04:c5:e2:47: d0:7d:fa:6a:d7:c1:c3:58:d2:04:e6:f7:d9:3e:e1: 4b:49:71:59:98:ec:d9:41:23:b4:5b:2d:b1:b3:9c: 16:52:19:5a:0c:ce:1b:2c:88:56:ab:3b:cc:45:5e: b0:a4:cc:8f:94:8e:9f:14:6e:32:88:d6:d2:c9:7a: 57:da:25:bb:c3:13:1f:1a:c5:dd:08:3d:2e:d2:84: e4:56:3f:a3:f7:8a:02:4a:64:4d:b5:f2:02:08:dc: 50:d5:94:1e:9e:0d:c6:95:5f:61:16:4f:5a:e9:ba: 91:f6:f9:8f:dd:de:d4:3b:c7:54:c7:db:2f:a8:37: 85:45:83:b1:ba:a0:f1:b1:78:e2:42:cb:ec:e8:e6: 2e:ea:02:1c:d5:78:a6:af:b2:ba:bb:5a:58:3b:42: a0:04:a7:07:fd:74:fb:71:2c:d5:82:c0:2a:ca:4e: c0:11:bd:88:fc:47:ca:66:fe:e0:57:8d:7b:b8:d0: ce:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:13:FF:66:57:C0:26:81:43:D5:DE:0A:25:81:2D:64:90:8D:99:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92/7a3ac42f-b8f2-37ec-8544-541f5fe42523.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92/56b96151-8a90-41ad-aefc-1091ab214a92.crl X509v3 Authority Key Identifier: keyid:DC:FC:BD:81:79:AC:17:F1:5F:B1:DD:0D:72:15:FA:F6:4F:1B:95:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92.cer sbgp-ipAddrBlock: critical IPv4: 199.91.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:da:fb:fa:c4:8c:5e:88:98:4e:ab:4b:a0:99:66:fb:50:e4: 5d:01:4a:35:70:95:0d:d9:11:65:64:94:65:e3:f8:86:46:69: 79:51:35:5a:62:80:71:ef:88:27:f7:b4:a2:91:07:eb:fc:9b: 98:24:30:cb:bc:0a:14:61:69:91:30:d3:33:53:8f:93:2e:0e: 75:88:16:e2:78:39:0c:23:20:43:d6:39:01:bf:ac:55:bd:20: 1e:54:5d:0c:fa:97:11:9f:3a:a3:bd:74:26:d2:22:39:16:5f: e8:67:fe:3d:7b:cf:f2:70:c4:f8:0c:fd:22:c4:d8:55:fc:c6: 9a:7e:75:47:0a:70:86:41:d0:1c:55:75:79:f3:3f:3b:fb:bc: 53:ba:5e:4d:1d:53:51:fb:c4:1b:7d:bc:4a:d0:60:85:54:d0: 24:3b:de:ec:35:ab:bd:2f:dd:bb:03:84:d9:68:11:e7:8e:f2: ec:7a:45:f8:17:60:a8:f8:ed:66:0e:e1:8f:a4:4d:8e:02:7f: cd:47:57:96:9a:a2:64:45:bb:4e:f3:85:2b:2b:86:90:97:fd: ab:06:8c:ca:07:60:f7:8d:b3:2a:d9:d3:9d:bf:ef:21:10:bd: f3:a4:c3:3e:8e:26:47:db:82:7d:52:a6:f1:12:79:f5:01:6f: e7:b4:10:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLGfwQi+HRS60VgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTZiOTYxNTEtOGE5MC00MWFkLWFlZmMtMTA5MWFiMjE0 YTkyMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk MzczZTVlNDItODBhYy00MTEzLWFhNWUtYzg1YjA2MWUyNWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLjCtABfaVLRAL+xqn5f0HJYr3+r7Sr72IGq 6TMzalI7yZRxxnr3sO/izif3DUzlST9rNZuApM27T+4uQfwb+pEpINgoEATF4kfQ ffpq18HDWNIE5vfZPuFLSXFZmOzZQSO0Wy2xs5wWUhlaDM4bLIhWqzvMRV6wpMyP lI6fFG4yiNbSyXpX2iW7wxMfGsXdCD0u0oTkVj+j94oCSmRNtfICCNxQ1ZQeng3G lV9hFk9a6bqR9vmP3d7UO8dUx9svqDeFRYOxuqDxsXjiQsvs6OYu6gIc1Ximr7K6 u1pYO0KgBKcH/XT7cSzVgsAqyk7AEb2I/EfKZv7gV417uNDOLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDsT/2ZXwCaBQ9XeCiWBLWSQjZk6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81NmI5 NjE1MS04YTkwLTQxYWQtYWVmYy0xMDkxYWIyMTRhOTIvN2EzYWM0MmYtYjhmMi0z N2VjLTg1NDQtNTQxZjVmZTQyNTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTZiOTYxNTEtOGE5MC00MWFkLWFl ZmMtMTA5MWFiMjE0YTkyLzU2Yjk2MTUxLThhOTAtNDFhZC1hZWZjLTEwOTFhYjIx NGE5Mi5jcmwwHwYDVR0jBBgwFoAU3Py9gXmsF/Ffsd0NchX69k8bld8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81NmI5NjE1MS04YTkwLTQxYWQtYWVmYy0xMDkx YWIyMTRhOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx1u8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALTa+/rEjF6ImE6rS6CZZvtQ5F0BSjVwlQ3ZEWVklGXj+IZGaXlRNVpi gHHviCf3tKKRB+v8m5gkMMu8ChRhaZEw0zNTj5MuDnWIFuJ4OQwjIEPWOQG/rFW9 IB5UXQz6lxGfOqO9dCbSIjkWX+hn/j17z/JwxPgM/SLE2FX8xpp+dUcKcIZB0BxV dXnzPzv7vFO6Xk0dU1H7xBt9vErQYIVU0CQ73uw1q70v3bsDhNloEeeO8ux6RfgX YKj47WYO4Y+kTY4Cf81HV5aaomRFu07zhSsrhpCX/asGjMoHYPeNsyrZ052/7yEQ vfOkwz6OJkfbgn1SpvESefUBb+e0EMQ= -----END CERTIFICATE-----Generated at Sun May 11 00:49:32 2025 by rpki-client