$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/1ba5d9dc-1a6b-3803-a368-2f3a824bcfd4.roa File: 1ba5d9dc-1a6b-3803-a368-2f3a824bcfd4.roa (raw, json) Hash identifier: Khxj+W4x0dz6XkCmP125ZA6uKvszXea6hRRzEuX2HaE= Subject key identifier: 3E:CC:02:C4:BF:66:0B:B1:76:E6:47:FB:A0:16:39:BA:9D:9C:FA:FE Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F432858491ED6D97A850AC8FCC0A62100 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/1ba5d9dc-1a6b-3803-a368-2f3a824bcfd4.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 13414 IP address blocks: 199.16.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:d9:7a:85:0a:c8:fc:c0:a6:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=08560907-2dc4-48e5-a211-88a8cb618064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:75:41:1d:b6:cf:f2:f1:1b:20:13:cc:c6:0a: 5e:46:08:ba:1f:d0:02:42:33:db:39:5b:5f:ad:c2: d3:28:17:33:d0:18:c6:c6:7e:ec:66:31:4a:51:fd: 1c:43:e6:30:ed:e2:19:4c:fb:73:46:e0:bf:9e:3e: 99:a0:a7:4b:33:ac:56:08:01:1e:4e:fa:dc:30:22: 1e:56:0e:c5:56:f5:57:40:78:e7:17:41:23:b4:e8: eb:71:c9:81:f0:bc:6c:82:db:78:d1:36:15:06:fc: 62:96:49:12:c3:e6:70:95:81:36:84:e4:cd:93:f8: 44:96:b8:a0:dd:5e:8d:48:23:3f:1e:a1:5c:60:80: c1:b0:4a:e7:b7:15:fe:27:fb:68:dc:71:b3:bc:c6: 95:64:85:4c:d1:d9:b2:5d:96:35:6f:78:8c:bd:70: ba:04:09:19:2a:67:19:dd:e9:4e:55:6a:4b:e0:33: 2d:52:f2:d2:ad:07:0d:fe:eb:71:e0:6a:ae:3d:35: c7:5a:b9:e9:3b:eb:a2:5f:2b:8f:5f:f3:12:fb:7d: 03:b8:0a:88:f6:ef:74:4d:95:0e:4e:47:5a:0f:ba: 51:21:cd:62:be:c6:c7:b4:d4:0b:2f:7e:87:af:1b: ea:9d:fd:a5:77:58:95:d0:a4:4f:35:c8:5f:bb:65: 0d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:CC:02:C4:BF:66:0B:B1:76:E6:47:FB:A0:16:39:BA:9D:9C:FA:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/1ba5d9dc-1a6b-3803-a368-2f3a824bcfd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 199.16.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:28:b4:dd:e5:c9:25:50:a4:7b:e8:80:26:47:3e:a4:1a:91: db:b4:92:91:84:fc:df:67:21:77:14:4b:cd:f5:0f:94:00:23: de:92:b4:b6:07:85:a7:f3:c5:1b:e7:b3:15:b4:48:0c:8d:f7: f9:c8:75:fe:1f:e4:b2:b8:21:96:ef:8c:f8:4a:bd:c0:1c:ee: 48:d6:d4:1c:00:15:db:4a:3b:8a:1c:29:bc:b4:bd:29:9b:f3: 0e:f5:28:46:df:0e:54:49:9a:fd:32:c8:1a:0b:eb:bb:07:8c: ca:40:4f:85:82:6a:12:19:a1:ff:cb:76:9d:52:66:01:1c:92: 5e:de:aa:5c:d9:c5:05:71:ee:c9:35:4f:33:b7:9e:b2:cf:af: 13:33:2a:f8:c8:be:62:6a:89:3c:92:08:f4:04:63:bd:1d:d6: 6f:85:58:7d:c9:52:86:29:ed:23:32:41:23:19:2b:77:30:5f: d6:14:0b:bd:06:68:39:50:01:d7:d7:6a:23:04:39:b6:3e:b8: ea:d7:2e:5b:26:f1:26:1e:eb:1c:6f:af:63:bd:22:60:47:d2: 37:ec:4d:3f:22:cc:aa:93:3e:3e:ea:58:e0:0b:31:69:7f:bc: d5:6c:e4:df:bf:a0:4c:f7:dd:00:20:be:d4:70:d8:7c:5f:8e: 9e:ed:30:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1tl6hQrI/MCmIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk MDg1NjA5MDctMmRjNC00OGU1LWEyMTEtODhhOGNiNjE4MDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXVBHbbP8vEbIBPMxgpeRgi6H9ACQjPbOVtf rcLTKBcz0BjGxn7sZjFKUf0cQ+Yw7eIZTPtzRuC/nj6ZoKdLM6xWCAEeTvrcMCIe Vg7FVvVXQHjnF0EjtOjrccmB8Lxsgtt40TYVBvxilkkSw+ZwlYE2hOTNk/hElrig 3V6NSCM/HqFcYIDBsErntxX+J/to3HGzvMaVZIVM0dmyXZY1b3iMvXC6BAkZKmcZ 3elOVWpL4DMtUvLSrQcN/utx4GquPTXHWrnpO+uiXyuPX/MS+30DuAqI9u90TZUO TkdaD7pRIc1ivsbHtNQLL36Hrxvqnf2ld1iV0KRPNchfu2UNTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD7MAsS/ZguxduZH+6AWObqdnPr+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvMWJhNWQ5ZGMtMWE2Yi0z ODAzLWEzNjgtMmYzYTgyNGJjZmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxxCfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAUotN3lySVQpHvogCZHPqQakdu0kpGE/N9nIXcUS831D5QAI96StLYH hafzxRvnsxW0SAyN9/nIdf4f5LK4IZbvjPhKvcAc7kjW1BwAFdtKO4ocKby0vSmb 8w71KEbfDlRJmv0yyBoL67sHjMpAT4WCahIZof/Ldp1SZgEckl7eqlzZxQVx7sk1 TzO3nrLPrxMzKvjIvmJqiTySCPQEY70d1m+FWH3JUoYp7SMyQSMZK3cwX9YUC70G aDlQAdfXaiMEObY+uOrXLlsm8SYe6xxvr2O9ImBH0jfsTT8izKqTPj7qWOALMWl/ vNVs5N+/oEz33QAgvtRw2Hxfjp7tMGs= -----END CERTIFICATE-----Generated at Sat Apr 5 05:17:26 2025 by rpki-client