$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/c9b0e5a9-82aa-3d96-8d85-80d2f2aa5931.roa File: c9b0e5a9-82aa-3d96-8d85-80d2f2aa5931.roa (raw, json) Hash identifier: kuW6GNGQlt/FxkyUyn8LjXGTCrwhgRWt69EXyWQ+8cs= Subject key identifier: FE:F6:41:51:47:9B:C8:12:03:1A:B3:93:3C:31:C4:F8:68:E3:5D:01 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F432858491ED6D9233F03DCADB6564740 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/c9b0e5a9-82aa-3d96-8d85-80d2f2aa5931.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 13414 IP address blocks: 199.59.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:d9:23:3f:03:dc:ad:b6:56:47:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=c7378ed6-1206-4b09-89b2-2a0a80c970b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:06:2a:a3:c3:63:f1:af:57:9e:6c:d7:57:82: ea:dd:d6:06:91:49:1b:b5:39:05:38:39:3d:95:a7: a8:8b:71:f8:d0:bf:b7:0a:8a:ab:86:10:0f:14:e0: 15:88:38:e2:33:a1:c5:b3:3f:3f:34:03:8c:3a:f7: ef:cb:ee:a3:92:db:69:92:01:2a:70:1b:ce:4b:b6: cd:4d:69:cd:04:5a:53:fc:54:a7:2f:35:4d:f4:c4: 57:31:a7:68:25:05:70:0f:c6:41:a8:94:13:f7:e4: f8:47:9f:86:b6:47:e9:24:f6:c0:9a:b3:74:62:69: ec:41:4f:29:ed:ff:2e:e8:bc:3d:99:d9:80:af:ac: ab:36:53:b4:74:81:96:85:f0:1d:67:41:38:b0:45: bb:1c:20:8e:e5:bd:4f:7c:88:ce:98:6b:32:03:22: 13:04:3d:b6:66:49:a2:09:f2:78:df:2e:2b:94:bd: 81:8b:af:e6:55:fd:b0:19:1f:f6:3d:0a:f7:b3:a4: 09:b4:a7:05:b0:f5:00:ff:b5:bb:3c:df:0e:2b:be: bd:06:ce:90:b3:12:80:41:84:fa:0b:9a:d9:21:56: 46:10:b8:48:4e:60:6c:4b:f9:ce:6b:a8:a4:0d:b1: fd:56:95:88:8f:c3:cd:67:e3:8d:ca:e7:79:d4:88: d8:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:F6:41:51:47:9B:C8:12:03:1A:B3:93:3C:31:C4:F8:68:E3:5D:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/c9b0e5a9-82aa-3d96-8d85-80d2f2aa5931.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 199.59.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:81:c1:2a:b8:75:1c:be:e5:56:d5:84:16:a4:83:61:5f:47: 3e:c8:0c:2b:0e:02:72:ce:aa:47:11:3e:f9:f8:89:44:65:78: 67:a0:1c:b0:0f:3b:79:6a:44:55:4d:f1:fe:42:d1:03:f9:f3: f6:eb:eb:46:4a:53:34:c7:8d:fb:ba:f4:c8:c1:f2:74:d2:03: 4f:14:22:c2:97:fc:2a:e7:5a:79:ff:d7:66:44:80:a0:c6:03: 77:46:65:48:30:96:bf:f7:93:1d:16:f3:67:5a:af:29:85:7f: d9:43:e1:49:c5:29:d0:8e:e1:7e:29:cd:b9:00:df:49:b3:ed: 7c:c2:1e:96:b3:87:24:4c:7f:90:13:a6:5e:44:b1:15:97:4b: 52:90:90:73:1c:da:dd:2e:d3:4c:0f:07:d7:eb:19:84:14:0c: 33:16:9f:80:76:f1:44:ac:ca:4d:09:0b:35:e1:53:0d:cc:74: 9d:6e:70:55:82:4b:56:f1:7f:92:26:62:5b:58:a1:ff:da:6a: 1c:b4:20:8c:35:ff:ab:ca:f5:01:79:ff:1a:88:46:0c:f0:96: d3:94:b7:ba:9d:6f:c4:d9:b2:49:bd:b3:82:c7:61:2c:b7:11: 41:47:88:6c:5c:ec:e2:d6:76:9c:54:16:01:93:37:fd:a6:55: 67:ac:f3:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1tkjPwPcrbZWR0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk YzczNzhlZDYtMTIwNi00YjA5LTg5YjItMmEwYTgwYzk3MGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAYqo8Nj8a9XnmzXV4Lq3dYGkUkbtTkFODk9 laeoi3H40L+3CoqrhhAPFOAViDjiM6HFsz8/NAOMOvfvy+6jkttpkgEqcBvOS7bN TWnNBFpT/FSnLzVN9MRXMadoJQVwD8ZBqJQT9+T4R5+GtkfpJPbAmrN0YmnsQU8p 7f8u6Lw9mdmAr6yrNlO0dIGWhfAdZ0E4sEW7HCCO5b1PfIjOmGsyAyITBD22Zkmi CfJ43y4rlL2Bi6/mVf2wGR/2PQr3s6QJtKcFsPUA/7W7PN8OK769Bs6QsxKAQYT6 C5rZIVZGELhITmBsS/nOa6ikDbH9VpWIj8PNZ+ONyud51IjY2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP72QVFHm8gSAxqzkzwxxPho410BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvYzliMGU1YTktODJhYS0z ZDk2LThkODUtODBkMmYyYWE1OTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzuXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCBwSq4dRy+5VbVhBakg2FfRz7IDCsOAnLOqkcRPvn4iURleGegHLAP O3lqRFVN8f5C0QP58/br60ZKUzTHjfu69MjB8nTSA08UIsKX/CrnWnn/12ZEgKDG A3dGZUgwlr/3kx0W82darymFf9lD4UnFKdCO4X4pzbkA30mz7XzCHpazhyRMf5AT pl5EsRWXS1KQkHMc2t0u00wPB9frGYQUDDMWn4B28USsyk0JCzXhUw3MdJ1ucFWC S1bxf5ImYltYof/aahy0IIw1/6vK9QF5/xqIRgzwltOUt7qdb8TZskm9s4LHYSy3 EUFHiGxc7OLWdpxUFgGTN/2mVWes8/M= -----END CERTIFICATE-----Generated at Sat Apr 5 05:22:15 2025 by rpki-client