$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a2a7cbf6-8905-3efe-a97a-54c8980dcfa9.roa File: a2a7cbf6-8905-3efe-a97a-54c8980dcfa9.roa (raw, json) Hash identifier: GvDP5gYa8KojkF1jRZlTRI8m6NuT3+nFkIgDfW0Bv70= Subject key identifier: 5B:40:06:36:88:D8:29:D7:1B:81:53:0E:86:9A:0E:4F:62:28:A2:A0 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F43285849A8E9E11F35BD53583DC96F80 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a2a7cbf6-8905-3efe-a97a-54c8980dcfa9.roa Signing time: Sun 27 Apr 2025 01:00:46 +0000 ROA not before: Sun 27 Apr 2025 01:00:46 +0000 ROA not after: Sat 26 Jul 2025 01:00:46 +0000 asID: 31898 IP address blocks: 199.36.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a8:e9:e1:1f:35:bd:53:58:3d:c9:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Apr 27 01:00:46 2025 GMT Not After : Jul 26 01:00:46 2025 GMT Subject: CN=d7c18e93-7154-430d-8969-3a10a7b975e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8b:27:af:54:9e:b1:74:c2:14:4d:06:1e:12: 2d:e8:43:35:96:b9:2b:00:7f:49:a0:2c:b7:90:91: 9e:ee:e2:c0:6c:66:11:02:3c:79:03:49:91:3a:1d: ec:c9:5c:ec:45:14:1b:e0:4d:ea:2b:36:db:2f:ed: a7:84:df:08:14:9d:4f:03:2d:fb:48:77:de:f3:0e: e6:b9:10:bb:ae:ac:ff:b9:87:56:d2:45:68:4b:4a: 8f:0e:2a:5f:2f:ea:d5:21:2a:19:28:4a:c1:93:71: c9:47:87:bd:54:ff:e0:5c:a1:14:a3:eb:af:53:93: 73:40:12:56:67:f3:e1:e7:cf:ec:49:d7:61:a8:f2: 26:eb:62:fd:8d:b0:85:ce:82:5f:7f:c4:97:ad:79: cb:87:5c:14:4e:97:48:9d:87:1b:a3:69:9f:aa:87: 13:43:79:4d:78:57:06:ed:43:c8:e3:35:a0:00:36: 7a:59:15:0b:db:8c:e7:17:20:cf:af:5b:5c:61:4b: 59:49:c2:12:92:e8:fb:35:fb:f4:eb:87:ae:a1:a3: 6f:a1:b2:41:b9:14:ca:a7:4f:03:ae:30:94:c1:cc: 88:df:36:9d:02:04:9b:55:c2:f5:ce:c9:43:6d:8d: 9c:1b:94:e6:45:29:1d:76:6b:eb:0a:e0:7c:e0:42: d5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:40:06:36:88:D8:29:D7:1B:81:53:0E:86:9A:0E:4F:62:28:A2:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a2a7cbf6-8905-3efe-a97a-54c8980dcfa9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 199.36.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:d7:dc:04:52:1b:a7:c9:a0:4b:a9:96:ed:30:84:f3:83:26: c2:99:74:e4:52:e7:0f:1e:0f:50:32:f8:49:06:29:f3:de:97: 21:e5:53:ad:0f:19:7c:99:2e:e2:42:90:ab:a5:d4:ef:18:ec: 3f:d0:16:ed:83:f3:f3:d7:e9:fc:a0:03:5f:b4:1b:69:79:96: c8:d9:bf:88:cd:df:52:4b:ad:dd:05:3e:d3:a0:80:38:97:c1: 66:a2:9d:03:a4:19:05:06:4b:a3:9a:63:f7:e2:f8:a4:97:2d: eb:f3:1c:85:40:15:0d:3d:ec:8c:5b:6c:2c:5b:6b:f7:aa:77: 77:50:b0:a3:d8:db:72:f0:20:c2:c3:13:f8:d1:32:54:c5:7a: a7:0a:83:23:5a:dc:1b:cb:a2:84:3b:bf:1e:06:53:2c:d2:5c: 17:ef:f3:3f:e3:1b:9f:c2:aa:44:1e:d0:30:b4:fe:41:33:0d: e6:75:2d:a4:bd:af:0c:58:75:98:98:4c:cc:b8:7d:e8:82:c2: 20:d3:67:4f:1a:c1:04:46:4a:84:95:ca:a5:c5:82:42:b2:df: c2:ef:c1:91:3d:8f:93:eb:a7:81:71:53:3f:c9:d4:21:f2:28: c8:bf:80:09:cd:e7:6c:0d:d9:e0:84:f3:fd:b1:a1:ce:63:6b: bb:03:4e:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmo6eEfNb1TWD3Jb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDQyNzAxMDA0NloXDTI1MDcyNjAxMDA0NlowLzEtMCsGA1UEAxMk ZDdjMThlOTMtNzE1NC00MzBkLTg5NjktM2ExMGE3Yjk3NWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIsnr1SesXTCFE0GHhIt6EM1lrkrAH9JoCy3 kJGe7uLAbGYRAjx5A0mROh3syVzsRRQb4E3qKzbbL+2nhN8IFJ1PAy37SHfe8w7m uRC7rqz/uYdW0kVoS0qPDipfL+rVISoZKErBk3HJR4e9VP/gXKEUo+uvU5NzQBJW Z/Ph58/sSddhqPIm62L9jbCFzoJff8SXrXnLh1wUTpdInYcbo2mfqocTQ3lNeFcG 7UPI4zWgADZ6WRUL24znFyDPr1tcYUtZScISkuj7Nfv064euoaNvobJBuRTKp08D rjCUwcyI3zadAgSbVcL1zslDbY2cG5TmRSkddmvrCuB84ELVCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFtABjaI2CnXG4FTDoaaDk9iKKKgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvYTJhN2NiZjYtODkwNS0z ZWZlLWE5N2EtNTRjODk4MGRjZmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyT5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALPX3ARSG6fJoEuplu0whPODJsKZdORS5w8eD1Ay+EkGKfPelyHlU60P GXyZLuJCkKul1O8Y7D/QFu2D8/PX6fygA1+0G2l5lsjZv4jN31JLrd0FPtOggDiX wWainQOkGQUGS6OaY/fi+KSXLevzHIVAFQ097IxbbCxba/eqd3dQsKPY23LwIMLD E/jRMlTFeqcKgyNa3BvLooQ7vx4GUyzSXBfv8z/jG5/CqkQe0DC0/kEzDeZ1LaS9 rwxYdZiYTMy4feiCwiDTZ08awQRGSoSVyqXFgkKy38LvwZE9j5Prp4FxUz/J1CHy KMi/gAnN52wN2eCE8/2xoc5ja7sDTqI= -----END CERTIFICATE-----Generated at Mon May 12 02:31:48 2025 by rpki-client