$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/007dc9f3-4575-3a4f-9785-9e7a87082c9c.roa File: 007dc9f3-4575-3a4f-9785-9e7a87082c9c.roa (raw, json) Hash identifier: 7M+0Jl8Iw0GWzwwZ7J1wB6EbOsKeGpBBrUDHmy8Nza4= Subject key identifier: 86:9C:6E:21:D3:ED:1A:79:5B:B7:F9:A1:30:D3:A2:4D:A9:17:67:49 Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F432858496484425C05EBE3AD0F4B5200 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/007dc9f3-4575-3a4f-9785-9e7a87082c9c.roa Signing time: Wed 02 Apr 2025 13:01:01 +0000 ROA not before: Wed 02 Apr 2025 13:01:01 +0000 ROA not after: Tue 01 Jul 2025 13:01:01 +0000 asID: 3629 IP address blocks: 199.109.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:64:84:42:5c:05:eb:e3:ad:0f:4b:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: Apr 2 13:01:01 2025 GMT Not After : Jul 1 13:01:01 2025 GMT Subject: CN=4028c80b-e62f-426b-ac95-9fb10868dbc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:03:ca:d3:82:6e:0f:9e:55:99:94:f3:f4:f9: b4:00:36:7f:1e:8b:b3:8f:59:73:3a:b5:89:8c:33: 46:13:44:dd:c5:8f:dc:42:e8:95:5d:17:04:de:98: 7a:37:1e:e1:32:b4:ae:70:4f:2e:01:ed:f5:1b:79: a0:73:ac:92:cb:a0:f8:46:71:0b:5c:35:20:07:1b: e8:73:cd:be:b8:f5:9c:3a:00:72:1b:01:5a:37:5b: 80:5d:df:f9:49:8f:97:9f:3a:a3:63:94:2d:92:ff: 23:4a:a7:2a:39:fb:82:61:21:55:60:61:5f:cc:0d: f5:af:21:10:fa:73:ce:1c:b8:67:d4:16:4d:31:95: eb:7a:da:5e:44:26:ed:e9:f1:17:10:2f:33:bb:63: f8:9f:79:d3:19:d4:e7:cf:f3:49:89:11:5e:ce:3c: 40:5b:23:ab:88:6e:f4:c5:13:0a:e5:d0:ed:09:24: 6b:78:ac:4d:90:9f:6b:ed:85:20:9d:8b:d9:fd:94: d0:ef:9c:5e:49:8e:f2:50:60:6d:77:11:ca:1a:19: 2f:e8:9a:31:dc:8b:0b:e9:0b:05:b9:c9:d9:08:e0: 91:76:40:9d:66:2f:a8:fc:e8:88:f1:ce:5f:46:ea: b7:85:d3:9e:fb:fe:f9:20:92:13:c5:99:10:c4:b2: 6f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:9C:6E:21:D3:ED:1A:79:5B:B7:F9:A1:30:D3:A2:4D:A9:17:67:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/007dc9f3-4575-3a4f-9785-9e7a87082c9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.80.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:da:11:1c:68:47:4e:4e:c2:66:2a:f5:a8:fb:28:1e:88:8d: 0b:79:5a:1f:7e:e3:13:9d:31:d2:82:a5:19:6c:d9:2e:9a:b4: 56:44:f8:65:72:1d:22:9f:40:35:67:2f:17:ae:08:21:f3:00: c7:b2:a6:4e:db:79:5f:2d:c2:5b:2b:a1:14:7a:67:6a:ae:04: e7:40:40:8e:57:15:5c:25:43:7f:e6:a3:33:e8:8c:80:dd:16: 0f:11:96:a9:c9:63:98:f4:01:f8:f5:33:8f:81:61:7b:3d:5d: b4:6a:dd:b2:39:73:6e:82:eb:5b:97:b9:4c:cc:e8:de:28:c9: 5b:88:9b:2a:6e:13:1f:32:dc:82:b9:ec:f1:ba:2c:8c:d9:91: 92:71:d9:67:97:16:84:e4:8e:10:4d:49:1a:f7:a8:d2:a4:82: cd:91:63:61:57:6d:07:6c:6b:ef:98:0f:d3:99:67:1b:1b:92: e8:7f:83:69:8b:40:86:94:8b:d3:c7:1c:37:f0:d5:c9:81:99: e6:4d:4f:a9:78:6d:34:1a:5a:1b:e7:ef:0d:0a:fd:f0:7b:5d: a0:a5:4d:c7:ee:db:fb:40:59:14:e3:46:3d:8b:e9:bb:05:1b: ee:dd:b6:d4:a4:0c:64:49:a2:6c:f9:8c:ca:38:88:7a:70:3a: 38:9d:fe:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElkhEJcBevjrQ9LUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk NDAyOGM4MGItZTYyZi00MjZiLWFjOTUtOWZiMTA4NjhkYmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQPK04JuD55VmZTz9Pm0ADZ/Houzj1lzOrWJ jDNGE0TdxY/cQuiVXRcE3ph6Nx7hMrSucE8uAe31G3mgc6ySy6D4RnELXDUgBxvo c82+uPWcOgByGwFaN1uAXd/5SY+XnzqjY5Qtkv8jSqcqOfuCYSFVYGFfzA31ryEQ +nPOHLhn1BZNMZXretpeRCbt6fEXEC8zu2P4n3nTGdTnz/NJiRFezjxAWyOriG70 xRMK5dDtCSRreKxNkJ9r7YUgnYvZ/ZTQ75xeSY7yUGBtdxHKGhkv6Jox3IsL6QsF ucnZCOCRdkCdZi+o/OiI8c5fRuq3hdOe+/75IJITxZkQxLJvnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIacbiHT7Rp5W7f5oTDTok2pF2dJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvMDA3ZGM5ZjMtNDU3NS0z YTRmLTk3ODUtOWU3YTg3MDgyYzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx21QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDaERxoR05OwmYq9aj7KB6IjQt5Wh9+4xOdMdKCpRls2S6atFZE+GVy HSKfQDVnLxeuCCHzAMeypk7beV8twlsroRR6Z2quBOdAQI5XFVwlQ3/mozPojIDd Fg8RlqnJY5j0Afj1M4+BYXs9XbRq3bI5c26C61uXuUzM6N4oyVuImypuEx8y3IK5 7PG6LIzZkZJx2WeXFoTkjhBNSRr3qNKkgs2RY2FXbQdsa++YD9OZZxsbkuh/g2mL QIaUi9PHHDfw1cmBmeZNT6l4bTQaWhvn7w0K/fB7XaClTcfu2/tAWRTjRj2L6bsF G+7dttSkDGRJomz5jMo4iHpwOjid/to= -----END CERTIFICATE-----Generated at Sat Apr 12 13:45:07 2025 by rpki-client