$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/b72371d5-0193-3c24-ba87-0c8deffa2219.roa File: b72371d5-0193-3c24-ba87-0c8deffa2219.roa (raw, json) Hash identifier: YVE2rNFsY9uRKBJS4k5TW650AP2cPkNGFEEKex811Ok= Subject key identifier: D1:68:4A:5A:AE:BB:BA:AE:A7:DE:D7:50:B6:CB:28:C0:34:B5:92:D1 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F432858491ED6DF9A4620A104DD5F7D40 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/b72371d5-0193-3c24-ba87-0c8deffa2219.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 13414 IP address blocks: 199.16.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:df:9a:46:20:a1:04:dd:5f:7d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=253f6bb6-d65f-4c50-a8f7-ff10a0ec8255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:36:c8:08:91:98:91:f6:bc:1c:20:e2:b7:94: be:a5:11:b2:64:c9:4f:6f:b0:86:b9:84:30:5f:e8: 4a:7c:05:e3:ef:7e:d0:ff:05:08:14:0b:02:0e:0d: 8b:5d:9f:a4:b5:9a:28:e9:97:66:41:b7:d9:a2:89: 4e:1c:39:29:c2:4c:9d:c7:36:98:ed:a8:da:cc:0f: b2:f1:b0:e5:d8:7c:a8:9e:85:f5:c8:03:9e:c9:ce: a4:c1:ce:e4:2c:69:db:e9:c2:87:04:e3:70:4e:53: 0a:8c:98:42:87:6e:f6:af:de:bc:2a:04:d5:e7:04: 65:6f:26:31:5d:0c:8e:d7:6f:4b:ba:ca:53:51:9e: 97:02:ff:44:1e:14:6c:fe:9b:31:fd:d8:24:ea:ed: 2f:87:25:bb:b5:08:db:68:48:90:d9:e6:3c:3d:5b: 94:aa:ae:0d:ca:2c:0b:36:49:d3:ce:fc:b1:42:f0: ca:2d:58:82:72:b6:02:d0:e7:a2:75:0e:5e:d2:d1: 1d:0d:4c:1b:47:26:8a:d1:4a:58:ab:e6:68:e3:7d: df:8e:0e:44:ae:43:39:96:c7:e5:26:bd:27:65:e7: 0c:89:a8:54:23:dd:2c:e2:ef:73:93:71:8a:66:e6: 38:df:22:e4:df:39:ed:5d:8d:f1:36:9d:b0:74:73: a8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:68:4A:5A:AE:BB:BA:AE:A7:DE:D7:50:B6:CB:28:C0:34:B5:92:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/b72371d5-0193-3c24-ba87-0c8deffa2219.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 199.16.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:aa:ef:bf:a8:c6:6d:e5:db:40:89:c9:b4:13:48:fe:c3:8d: 75:2b:28:b4:c8:aa:d6:3c:ac:b8:a7:bf:51:74:16:cc:9b:67: 3c:36:98:dc:bd:a8:fd:f2:5a:d0:78:ee:04:43:42:0e:be:8b: 1d:4c:7d:e7:56:89:87:f9:15:7e:c1:08:18:bd:3d:7c:db:fd: 10:12:a2:32:a9:40:53:fe:76:a8:96:86:5b:04:f9:f3:d1:b6: fd:34:bb:a4:a7:7d:de:ee:73:13:6e:c7:65:9f:94:58:fa:32: d9:93:9e:68:3c:e3:3a:b4:39:3d:18:5f:75:ff:d5:5f:32:cb: 0f:9c:13:e0:23:05:aa:01:c4:d1:6d:d0:bc:23:ee:e5:d5:74: 14:46:c6:35:64:a5:85:28:9d:27:1b:cd:85:6c:f7:3a:69:41: d7:73:27:87:58:43:e3:4d:6e:40:9a:15:2f:1a:ed:40:b0:df: 17:14:9b:fd:dd:e9:8a:fa:a1:25:8d:81:15:50:30:66:0d:ab: ac:6f:65:45:d7:fb:12:0f:d1:3d:42:f4:5a:e3:c2:4e:c9:2f: 41:12:fe:7d:7d:65:82:28:66:4d:55:a7:18:4d:f6:b9:e1:0c: 70:26:c4:e2:3a:05:94:64:4e:65:6f:64:6a:f5:57:47:51:ab: 66:40:13:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1t+aRiChBN1ffUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk MjUzZjZiYjYtZDY1Zi00YzUwLWE4ZjctZmYxMGEwZWM4MjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTbICJGYkfa8HCDit5S+pRGyZMlPb7CGuYQw X+hKfAXj737Q/wUIFAsCDg2LXZ+ktZoo6ZdmQbfZoolOHDkpwkydxzaY7ajazA+y 8bDl2HyonoX1yAOeyc6kwc7kLGnb6cKHBONwTlMKjJhCh272r968KgTV5wRlbyYx XQyO129LuspTUZ6XAv9EHhRs/psx/dgk6u0vhyW7tQjbaEiQ2eY8PVuUqq4NyiwL NknTzvyxQvDKLViCcrYC0OeidQ5e0tEdDUwbRyaK0UpYq+Zo433fjg5ErkM5lsfl Jr0nZecMiahUI90s4u9zk3GKZuY43yLk3zntXY3xNp2wdHOoswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNFoSlquu7qup97XULbLKMA0tZLRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvYjcyMzcxZDUtMDE5My0z YzI0LWJhODctMGM4ZGVmZmEyMjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxxCeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKGq77+oxm3l20CJybQTSP7DjXUrKLTIqtY8rLinv1F0FsybZzw2mNy9 qP3yWtB47gRDQg6+ix1MfedWiYf5FX7BCBi9PXzb/RASojKpQFP+dqiWhlsE+fPR tv00u6Snfd7ucxNux2WflFj6MtmTnmg84zq0OT0YX3X/1V8yyw+cE+AjBaoBxNFt 0Lwj7uXVdBRGxjVkpYUonScbzYVs9zppQddzJ4dYQ+NNbkCaFS8a7UCw3xcUm/3d 6Yr6oSWNgRVQMGYNq6xvZUXX+xIP0T1C9Frjwk7JL0ES/n19ZYIoZk1VpxhN9rnh DHAmxOI6BZRkTmVvZGr1V0dRq2ZAE1Q= -----END CERTIFICATE-----Generated at Sat Apr 5 05:37:57 2025 by rpki-client