$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/e0720977-0260-38d5-86ad-f94b116bc32a.roa File: e0720977-0260-38d5-86ad-f94b116bc32a.roa (raw, json) Hash identifier: 3IZQGCc+j5Tk+VaEvWssM0r295rMB4OHoPr8ksCnKXw= Subject key identifier: 37:A9:6A:56:22:96:B6:82:C0:97:B5:8A:02:B0:5F:CC:67:3A:69:21 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F432858491ED6D911E8FE453EA0AFE400 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/e0720977-0260-38d5-86ad-f94b116bc32a.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 13414 IP address blocks: 199.59.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:d9:11:e8:fe:45:3e:a0:af:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=b674b01d-12d5-458a-946c-abbf19e01a98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:73:9f:fb:35:9c:ff:cf:9b:9b:04:99:e3:ba: e9:1e:66:40:e5:64:c4:b8:89:60:df:b2:cb:bf:10: 06:56:b2:3f:4d:f2:35:d0:12:71:ee:80:f6:ad:ce: 98:ff:01:88:6b:dd:fe:64:4b:90:84:a4:b8:51:ad: 0c:ad:70:33:18:f3:67:3e:ce:9d:f7:18:fd:ea:44: 4b:50:b1:73:b6:99:23:db:27:95:8f:5a:4b:1a:fb: 7b:0c:d0:6b:6b:39:e8:74:63:1d:a0:b7:bc:ec:7d: dc:6e:56:13:91:75:d6:af:b1:eb:42:ce:be:12:7b: e0:21:38:cb:39:ef:5f:57:bc:17:24:48:4b:d1:df: 8b:3f:eb:cc:2b:b5:45:cf:22:ed:e1:49:b8:15:43: 96:a8:c1:7c:18:b7:c6:91:f6:60:37:c7:f6:e8:c7: af:53:da:f9:4b:1b:9a:21:9c:45:5f:79:29:b4:57: 50:68:2d:89:8a:46:7c:72:6c:8e:5d:56:32:fd:84: e8:89:bc:b3:1e:34:e6:d0:ba:75:1a:40:7b:b1:ca: f5:73:bc:e2:fc:84:d9:bf:8e:cd:76:03:07:97:77: 7c:fe:f9:97:51:a1:6c:54:ef:d5:34:5b:21:e0:15: f9:61:f6:df:92:44:cf:ee:f8:e5:4e:01:65:06:8d: 80:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:A9:6A:56:22:96:B6:82:C0:97:B5:8A:02:B0:5F:CC:67:3A:69:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/e0720977-0260-38d5-86ad-f94b116bc32a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 199.59.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:05:70:b5:73:5d:e0:f7:97:9a:51:07:0c:f5:52:bd:70:e4: 1c:d5:51:4a:35:89:be:bb:90:c0:3a:e1:37:d1:2c:fc:0e:5c: 7f:96:b8:5a:7c:e7:8b:ef:06:41:3e:4c:d5:dd:89:f8:60:48: 47:14:00:f2:3a:8e:5d:9b:81:dc:84:22:79:44:84:34:be:34: e8:37:97:9e:ca:7d:99:9c:bf:18:69:a0:8b:ed:d9:03:44:91: 3a:8d:48:8b:09:87:40:f4:66:67:02:e3:5b:2a:d3:4c:3f:78: f5:d7:b9:af:7d:9b:96:04:da:02:60:c3:cd:d9:3d:1b:15:5f: 37:62:27:57:1e:a1:d1:01:5b:d3:4a:bd:ac:7b:67:65:42:49: 7e:cf:1e:96:66:11:8e:62:c2:c1:33:b2:d7:7a:ba:b5:7f:d0: a4:b9:c7:2e:96:93:bf:1a:1a:b8:3a:d4:28:a8:7e:fa:7c:ea: 2c:93:0c:51:0d:9d:82:8f:ce:f5:b3:98:ac:98:33:3b:6f:22: 30:59:7a:f5:96:8b:c3:79:99:b1:73:8c:b3:2d:39:6b:94:07: 0e:f1:57:71:d8:32:96:1a:7a:5c:6a:85:96:6a:27:d5:c5:d7: fe:61:ed:b0:7b:f9:c9:b4:15:1f:0a:d1:8b:ac:c0:8c:d7:ed: 9b:f8:88:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1tkR6P5FPqCv5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk YjY3NGIwMWQtMTJkNS00NThhLTk0NmMtYWJiZjE5ZTAxYTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXOf+zWc/8+bmwSZ47rpHmZA5WTEuIlg37LL vxAGVrI/TfI10BJx7oD2rc6Y/wGIa93+ZEuQhKS4Ua0MrXAzGPNnPs6d9xj96kRL ULFztpkj2yeVj1pLGvt7DNBraznodGMdoLe87H3cblYTkXXWr7HrQs6+EnvgITjL Oe9fV7wXJEhL0d+LP+vMK7VFzyLt4Um4FUOWqMF8GLfGkfZgN8f26MevU9r5Sxua IZxFX3kptFdQaC2JikZ8cmyOXVYy/YToibyzHjTm0Lp1GkB7scr1c7zi/ITZv47N dgMHl3d8/vmXUaFsVO/VNFsh4BX5YfbfkkTP7vjlTgFlBo2AmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDepalYilraCwJe1igKwX8xnOmkhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvZTA3MjA5NzctMDI2MC0z OGQ1LTg2YWQtZjk0YjExNmJjMzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzuVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwFcLVzXeD3l5pRBwz1Ur1w5BzVUUo1ib67kMA64TfRLPwOXH+WuFp8 54vvBkE+TNXdifhgSEcUAPI6jl2bgdyEInlEhDS+NOg3l57KfZmcvxhpoIvt2QNE kTqNSIsJh0D0ZmcC41sq00w/ePXXua99m5YE2gJgw83ZPRsVXzdiJ1ceodEBW9NK vax7Z2VCSX7PHpZmEY5iwsEzstd6urV/0KS5xy6Wk78aGrg61Ciofvp86iyTDFEN nYKPzvWzmKyYMztvIjBZevWWi8N5mbFzjLMtOWuUBw7xV3HYMpYaelxqhZZqJ9XF 1/5h7bB7+cm0FR8K0YuswIzX7Zv4iNo= -----END CERTIFICATE-----Generated at Sat Apr 5 05:29:55 2025 by rpki-client