$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/92644b99-55ad-3d17-a93f-570da3f56b87.roa File: 92644b99-55ad-3d17-a93f-570da3f56b87.roa (raw, json) Hash identifier: lRYMHKHQqC0t+ZlUbRTmjCFuwvPktPD4rw9oBopny+w= Subject key identifier: 61:11:77:43:70:BA:E6:FA:B7:A0:83:2A:47:C6:8D:E4:3E:FD:66:45 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A1EF7419568226B75049D780 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/92644b99-55ad-3d17-a93f-570da3f56b87.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 54113 IP address blocks: 199.36.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:74:19:56:82:26:b7:50:49:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=c5c1d495-2164-4a5a-9b4f-f0b52f3d7a09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f8:3d:01:e8:95:b5:be:0b:2a:fe:c3:67:9c: 56:5b:3d:b7:fd:b3:e8:58:92:62:6e:b4:8b:9f:16: 5c:dc:6c:10:d3:6b:dd:d6:17:ed:20:b1:ac:d1:bb: 45:b2:f0:af:ef:06:e3:8b:88:82:24:0f:b2:3d:7f: 84:c6:f2:21:29:98:4e:da:58:2e:b5:2f:71:6f:2c: 52:4c:9a:ce:61:7c:0b:ba:49:6f:64:36:28:d4:46: 04:ab:2e:1d:cb:d2:dc:37:bd:cf:e1:3f:55:35:ba: f5:b8:46:0d:31:5c:f9:3d:e4:57:58:e1:72:8f:d6: 15:14:ba:e4:6c:57:a0:4b:43:f4:ad:28:1b:5b:57: 39:7f:e7:d0:05:4e:f0:21:fa:70:56:6d:a0:37:b2: ba:e7:0f:4f:71:d2:54:ac:d3:e8:1c:90:9d:0d:b9: d6:a6:aa:a3:30:58:10:ba:d0:b9:51:87:61:97:33: b3:52:72:a7:a0:19:41:0c:8b:c6:2e:da:81:c3:f7: d8:01:bd:a0:38:0b:bb:11:92:25:c7:93:46:52:9d: 83:e3:29:22:5b:6a:38:bf:73:51:ab:50:33:3d:80: 4d:e2:83:5b:a6:de:1c:ac:a8:eb:0e:a1:55:29:52: 17:9b:a9:56:58:bb:1d:47:4e:bb:0c:36:b5:69:4a: 3c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:11:77:43:70:BA:E6:FA:B7:A0:83:2A:47:C6:8D:E4:3E:FD:66:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/92644b99-55ad-3d17-a93f-570da3f56b87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 199.36.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:46:7e:33:31:d3:fb:29:09:2a:02:bd:fa:9b:ee:47:72:af: d5:51:d1:96:67:94:6a:70:1e:a3:dc:f6:63:a1:89:a5:18:00: 2c:c4:be:0a:f5:55:b6:d2:22:8a:cb:ff:d1:4e:46:20:86:37: 0a:99:06:9e:7f:78:03:2b:ea:87:59:84:cd:97:0b:7f:17:53: 5f:30:87:f2:85:8a:f6:c7:10:54:b9:02:f6:db:7c:68:4a:bc: 08:c4:50:86:c9:82:85:cd:bb:11:29:1d:9c:67:71:e8:1b:23: 2c:c7:b8:4b:0e:8e:c0:c4:35:2e:c9:a1:95:e7:c2:d8:ba:32: 8c:84:81:f0:ea:b8:2e:b4:be:9c:77:1f:bc:00:c8:cd:dc:22: 2c:a8:52:91:02:e6:8c:91:c3:21:8a:96:dd:6f:ee:c8:13:5c: e2:8e:7b:7b:d5:24:8a:4c:38:14:7e:75:b3:bb:2f:3f:15:e2: 49:c8:ee:91:95:26:08:bc:93:ba:9c:72:0e:d1:ea:00:54:8c: fb:f9:19:b2:40:f7:19:3c:00:8b:8f:73:91:c8:80:1d:49:a2: b7:64:a7:a1:3b:f7:ce:95:db:54:1a:89:df:87:77:1f:17:9a: a4:37:fb:2c:1d:ec:3f:57:25:92:a9:ad:8c:ff:cb:e0:7b:31: aa:7c:9a:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh73QZVoImt1BJ14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk YzVjMWQ0OTUtMjE2NC00YTVhLTliNGYtZjBiNTJmM2Q3YTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/g9AeiVtb4LKv7DZ5xWWz23/bPoWJJibrSL nxZc3GwQ02vd1hftILGs0btFsvCv7wbji4iCJA+yPX+ExvIhKZhO2lgutS9xbyxS TJrOYXwLuklvZDYo1EYEqy4dy9LcN73P4T9VNbr1uEYNMVz5PeRXWOFyj9YVFLrk bFegS0P0rSgbW1c5f+fQBU7wIfpwVm2gN7K65w9PcdJUrNPoHJCdDbnWpqqjMFgQ utC5UYdhlzOzUnKnoBlBDIvGLtqBw/fYAb2gOAu7EZIlx5NGUp2D4ykiW2o4v3NR q1AzPYBN4oNbpt4crKjrDqFVKVIXm6lWWLsdR067DDa1aUo8cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGERd0Nwuub6t6CDKkfGjeQ+/WZFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOTI2NDRiOTktNTVhZC0z ZDE3LWE5M2YtNTcwZGEzZjU2Yjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxySeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALBGfjMx0/spCSoCvfqb7kdyr9VR0ZZnlGpwHqPc9mOhiaUYACzEvgr1 VbbSIorL/9FORiCGNwqZBp5/eAMr6odZhM2XC38XU18wh/KFivbHEFS5AvbbfGhK vAjEUIbJgoXNuxEpHZxncegbIyzHuEsOjsDENS7JoZXnwti6MoyEgfDquC60vpx3 H7wAyM3cIiyoUpEC5oyRwyGKlt1v7sgTXOKOe3vVJIpMOBR+dbO7Lz8V4knI7pGV Jgi8k7qccg7R6gBUjPv5GbJA9xk8AIuPc5HIgB1Jordkp6E7986V21Qaid+Hdx8X mqQ3+ywd7D9XJZKprYz/y+B7Map8mm0= -----END CERTIFICATE-----Generated at Sun May 4 18:29:48 2025 by rpki-client