$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/1148204d-0c51-3060-80e2-cfaa96ea1e5f.roa File: 1148204d-0c51-3060-80e2-cfaa96ea1e5f.roa (raw, json) Hash identifier: d/lSEbQFgxMu3bNsTBkG1gSMjuwhtHaadyqVwKPOK9A= Subject key identifier: 10:2C:F8:CC:C6:FD:E1:AD:6A:4E:20:64:F1:F3:2B:CB:3F:67:2E:2E Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F4328584964843B50F63D4F3CBABD4E40 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/1148204d-0c51-3060-80e2-cfaa96ea1e5f.roa Signing time: Wed 02 Apr 2025 13:01:01 +0000 ROA not before: Wed 02 Apr 2025 13:01:01 +0000 ROA not after: Tue 01 Jul 2025 13:01:01 +0000 asID: 3756 IP address blocks: 199.109.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:64:84:3b:50:f6:3d:4f:3c:ba:bd:4e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: Apr 2 13:01:01 2025 GMT Not After : Jul 1 13:01:01 2025 GMT Subject: CN=e3959224-2ff8-4b83-a304-8e784e18ebf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:85:96:b5:11:fa:06:51:3f:dd:0a:71:56:dd: 5b:e4:da:5c:a3:4d:d1:d1:c7:7e:31:05:87:80:22: 3f:b5:21:68:aa:90:bb:ce:18:fc:b1:a7:90:41:60: e9:43:7a:b1:e3:74:88:fc:a2:19:71:dd:4c:21:52: bb:38:fa:6c:3a:02:6a:75:95:4e:f3:e1:98:b2:90: b7:5e:72:5a:eb:2a:bd:02:df:9e:d1:84:09:5a:73: a6:0a:a3:4a:72:9c:59:5a:cb:8a:d5:a9:9d:63:88: 88:6f:b4:c6:6a:8b:13:f7:78:8d:8b:7f:7d:d7:3d: ea:52:73:7c:3f:8a:40:17:8a:f4:60:2b:53:8a:06: 13:7f:32:20:65:18:a9:68:8d:02:a6:c1:d0:15:0d: da:a7:08:19:62:59:cd:1c:7a:cc:13:d2:c2:46:63: c9:e0:e8:87:4a:75:6b:56:d8:ef:fb:78:48:01:b7: 3e:8e:7e:82:9a:28:e9:04:2e:8a:1f:8d:cd:05:0b: f5:46:2e:57:9a:66:57:ab:1f:ad:5b:bf:f4:de:63: 53:9d:a3:22:eb:57:a6:00:75:50:05:da:88:07:44: 21:02:1d:cf:5f:64:09:7c:00:d6:7c:09:62:e2:f6: 0f:96:f7:39:61:fa:e1:f4:32:b5:ed:4f:68:c4:6f: 2c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:2C:F8:CC:C6:FD:E1:AD:6A:4E:20:64:F1:F3:2B:CB:3F:67:2E:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/1148204d-0c51-3060-80e2-cfaa96ea1e5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:a8:e9:7e:cc:f9:04:db:b4:2c:59:2c:dc:4c:10:bf:b5:16: 51:0f:33:d7:7b:e0:f5:0e:68:f6:1b:1d:3a:a9:d9:32:23:dd: eb:d1:c4:05:0c:7e:bf:60:b2:f8:3f:4f:1d:5a:13:eb:66:8c: b1:f7:89:e8:26:03:b0:a2:9d:e2:66:e8:87:f4:8f:8e:4f:68: 1c:97:4c:f9:fe:09:26:11:39:b1:8a:66:7a:e3:47:ae:4b:a5: c2:ee:33:71:ac:f5:c0:d4:f5:f0:36:f3:c1:6f:ee:90:b8:8d: ca:65:c5:f8:9a:fe:fe:b0:fc:9c:4a:5f:c7:d6:f7:fb:5c:72: e9:d5:b1:dc:6a:2f:c8:cb:6c:4d:fc:14:3b:a9:46:04:fe:1a: 68:47:b2:7c:e9:c7:27:b3:f7:15:4b:d6:b6:c9:8f:64:ab:fa: 03:cb:16:ce:68:9c:44:23:32:37:c3:32:60:20:e9:da:77:73: af:5f:a1:11:f1:5c:af:94:99:f6:0f:7b:11:12:c3:d3:20:e7: a8:da:d4:8a:71:ac:73:b9:59:13:f8:33:dd:32:29:ed:0a:d9: b9:6d:e5:14:2f:6c:2b:5b:d1:92:ed:8f:30:01:3b:eb:d5:1d: 83:7a:a3:b9:5b:27:bf:44:58:ca:11:d7:2f:3c:24:3e:62:ee: ef:90:46:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElkhDtQ9j1PPLq9TkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk ZTM5NTkyMjQtMmZmOC00YjgzLWEzMDQtOGU3ODRlMThlYmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIWWtRH6BlE/3QpxVt1b5Npco03R0cd+MQWH gCI/tSFoqpC7zhj8saeQQWDpQ3qx43SI/KIZcd1MIVK7OPpsOgJqdZVO8+GYspC3 XnJa6yq9At+e0YQJWnOmCqNKcpxZWsuK1amdY4iIb7TGaosT93iNi3991z3qUnN8 P4pAF4r0YCtTigYTfzIgZRipaI0CpsHQFQ3apwgZYlnNHHrME9LCRmPJ4OiHSnVr Vtjv+3hIAbc+jn6CmijpBC6KH43NBQv1Ri5XmmZXqx+tW7/03mNTnaMi61emAHVQ BdqIB0QhAh3PX2QJfADWfAli4vYPlvc5Yfrh9DK17U9oxG8sDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBAs+MzG/eGtak4gZPHzK8s/Zy4uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvMTE0ODIwNGQtMGM1MS0z MDYwLTgwZTItY2ZhYTk2ZWExZTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx20gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOo6X7M+QTbtCxZLNxMEL+1FlEPM9d74PUOaPYbHTqp2TIj3evRxAUM fr9gsvg/Tx1aE+tmjLH3iegmA7CineJm6If0j45PaByXTPn+CSYRObGKZnrjR65L pcLuM3Gs9cDU9fA288Fv7pC4jcplxfia/v6w/JxKX8fW9/tccunVsdxqL8jLbE38 FDupRgT+GmhHsnzpxyez9xVL1rbJj2Sr+gPLFs5onEQjMjfDMmAg6dp3c69foRHx XK+UmfYPexESw9Mg56ja1IpxrHO5WRP4M90yKe0K2blt5RQvbCtb0ZLtjzABO+vV HYN6o7lbJ79EWMoR1y88JD5i7u+QRtE= -----END CERTIFICATE-----Generated at Sat Apr 12 14:02:43 2025 by rpki-client