$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5bab7542-1747-4199-9e18-f75a006e302e/90cd6e4f-014a-3df3-87ff-754e127ae5c1.roa File: 90cd6e4f-014a-3df3-87ff-754e127ae5c1.roa (raw, json) Hash identifier: Juga+tsX1HONMzCrywXADdjaYotMJJrLD85BBOWV1Hw= Subject key identifier: 20:32:AF:74:5D:C1:92:E5:AB:2D:2A:92:7E:C5:7A:20:7E:A6:64:24 Certificate issuer: /CN=5bab7542-1747-4199-9e18-f75a006e302e Certificate serial: 010D0C9F43285849E225396A73E5006DF15F76C0 Authority key identifier: 51:79:4D:4F:C2:A9:14:50:50:03:18:22:69:6E:5B:19:AE:36:CB:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5bab7542-1747-4199-9e18-f75a006e302e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5bab7542-1747-4199-9e18-f75a006e302e/90cd6e4f-014a-3df3-87ff-754e127ae5c1.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 33268 IP address blocks: 199.83.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5bab7542-1747-4199-9e18-f75a006e302e/5bab7542-1747-4199-9e18-f75a006e302e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5bab7542-1747-4199-9e18-f75a006e302e/5bab7542-1747-4199-9e18-f75a006e302e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5bab7542-1747-4199-9e18-f75a006e302e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Jun 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:39:6a:73:e5:00:6d:f1:5f:76:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bab7542-1747-4199-9e18-f75a006e302e Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=46f63e6f-4637-41c3-91f9-5a27746a3309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d8:bc:93:15:02:8c:9c:e4:21:c1:91:15:74: c9:68:c0:9a:4d:20:77:b7:08:9b:6a:75:58:b1:f7: b7:b7:aa:63:68:09:c9:8a:64:de:66:51:4c:c8:67: f2:ac:2d:00:df:99:66:ad:d8:ff:8e:8e:06:f8:9f: 75:f7:22:78:08:89:94:d0:b6:27:c0:55:72:bb:09: 03:41:c8:d9:2c:df:79:3c:2d:a1:48:d1:8c:b1:e0: 7e:88:af:9d:1b:6e:96:7e:06:0a:fe:cc:1c:11:c0: 95:25:09:ed:f4:36:2a:f3:6d:af:b0:4d:dd:ad:c2: 27:12:50:1d:9b:75:99:7a:70:e0:9e:3a:87:bc:7e: 3d:f2:5e:d9:5b:5b:6f:92:b7:5d:40:bb:40:6f:f0: c4:2a:a0:14:e4:0c:d2:bd:0c:c2:73:2c:16:8f:52: c4:b5:5e:bb:e3:e8:de:7b:8a:3a:73:c0:9b:81:6b: 22:d9:af:e7:9c:53:67:a6:c1:dd:5b:9f:9c:2c:82: 8a:28:a1:a8:56:27:11:ea:d9:e4:6c:ee:05:a1:c8: 3b:e0:9b:a3:f6:f4:cc:0e:f9:65:26:71:94:80:ae: 59:0f:dd:24:09:3e:07:48:e3:d9:c5:dc:2d:3e:af: 77:55:a8:b2:88:44:65:8a:28:12:dc:31:cf:66:62: 55:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:32:AF:74:5D:C1:92:E5:AB:2D:2A:92:7E:C5:7A:20:7E:A6:64:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5bab7542-1747-4199-9e18-f75a006e302e/90cd6e4f-014a-3df3-87ff-754e127ae5c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5bab7542-1747-4199-9e18-f75a006e302e/5bab7542-1747-4199-9e18-f75a006e302e.crl X509v3 Authority Key Identifier: keyid:51:79:4D:4F:C2:A9:14:50:50:03:18:22:69:6E:5B:19:AE:36:CB:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5bab7542-1747-4199-9e18-f75a006e302e.cer sbgp-ipAddrBlock: critical IPv4: 199.83.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:3e:c0:de:2a:61:1e:92:d8:78:ad:8e:26:28:9d:1a:59:52: 47:3e:78:d2:d0:91:fe:c8:66:88:e8:2b:e6:f0:65:8a:a6:0a: 01:06:98:c4:56:92:b8:fe:18:ef:34:ba:d0:86:1a:9a:5f:e6: 1f:21:7c:69:86:d6:f8:f6:86:88:80:60:28:aa:41:ac:b6:7b: 63:86:35:2d:0f:1e:90:d4:3e:44:35:ed:88:04:6c:a7:30:3d: 8b:57:c3:d6:31:56:48:62:98:a5:92:68:09:70:78:30:d3:f4: 81:45:ad:5c:0b:78:01:26:68:29:e9:d5:06:10:09:a2:50:81: 2d:58:c8:78:23:af:05:28:0b:19:7a:6f:e9:7c:e0:43:c0:6e: c1:6d:5a:a7:ef:7e:27:cc:6a:68:5f:54:7b:af:d1:fd:48:66: 4d:e1:e7:a5:99:29:99:4e:77:26:17:73:d1:38:81:43:11:e1: 35:c2:e6:74:ee:b7:e7:f6:42:39:48:bc:53:1d:52:63:e2:6d: 9d:5a:67:91:a9:30:b1:82:9e:18:1f:9f:3a:76:79:e2:42:e4: 2d:d5:56:56:5f:90:96:b6:46:e0:b0:08:df:c6:96:ce:ec:53: e6:f6:62:81:11:e3:31:17:89:13:70:8d:b8:fc:46:25:7d:28: d9:17:b2:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEniJTlqc+UAbfFfdsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWJhYjc1NDItMTc0Ny00MTk5LTllMTgtZjc1YTAwNmUz MDJlMB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk NDZmNjNlNmYtNDYzNy00MWMzLTkxZjktNWEyNzc0NmEzMzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9i8kxUCjJzkIcGRFXTJaMCaTSB3twibanVY sfe3t6pjaAnJimTeZlFMyGfyrC0A35lmrdj/jo4G+J919yJ4CImU0LYnwFVyuwkD QcjZLN95PC2hSNGMseB+iK+dG26WfgYK/swcEcCVJQnt9DYq822vsE3drcInElAd m3WZenDgnjqHvH498l7ZW1tvkrddQLtAb/DEKqAU5AzSvQzCcywWj1LEtV674+je e4o6c8CbgWsi2a/nnFNnpsHdW5+cLIKKKKGoVicR6tnkbO4Focg74Juj9vTMDvll JnGUgK5ZD90kCT4HSOPZxdwtPq93VaiyiERliigS3DHPZmJVNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCAyr3RdwZLlqy0qkn7FeiB+pmQkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YmFi NzU0Mi0xNzQ3LTQxOTktOWUxOC1mNzVhMDA2ZTMwMmUvOTBjZDZlNGYtMDE0YS0z ZGYzLTg3ZmYtNzU0ZTEyN2FlNWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWJhYjc1NDItMTc0Ny00MTk5LTll MTgtZjc1YTAwNmUzMDJlLzViYWI3NTQyLTE3NDctNDE5OS05ZTE4LWY3NWEwMDZl MzAyZS5jcmwwHwYDVR0jBBgwFoAUUXlNT8KpFFBQAxgiaW5bGa42yxwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YmFiNzU0Mi0xNzQ3LTQxOTktOWUxOC1mNzVh MDA2ZTMwMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx1OwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIo+wN4qYR6S2HitjiYonRpZUkc+eNLQkf7IZojoK+bwZYqmCgEGmMRW krj+GO80utCGGppf5h8hfGmG1vj2hoiAYCiqQay2e2OGNS0PHpDUPkQ17YgEbKcw PYtXw9YxVkhimKWSaAlweDDT9IFFrVwLeAEmaCnp1QYQCaJQgS1YyHgjrwUoCxl6 b+l84EPAbsFtWqfvfifMamhfVHuv0f1IZk3h56WZKZlOdyYXc9E4gUMR4TXC5nTu t+f2QjlIvFMdUmPibZ1aZ5GpMLGCnhgfnzp2eeJC5C3VVlZfkJa2RuCwCN/Gls7s U+b2YoER4zEXiRNwjbj8RiV9KNkXsjY= -----END CERTIFICATE-----Generated at Mon Jun 9 16:26:51 2025 by rpki-client