$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/256f5a60-acd7-370b-a839-372a2dc4749d.roa File: 256f5a60-acd7-370b-a839-372a2dc4749d.roa (raw, json) Hash identifier: XRLxfnRFLZ7FEmPXnEADUeiXrRPxZN9OcdPam+mMR+8= Subject key identifier: 4D:23:02:34:36:65:B2:F6:A0:7F:95:43:08:38:53:7C:7D:27:25:A1 Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F43285848DF0823617BBCBD2BD58D2CC0 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/256f5a60-acd7-370b-a839-372a2dc4749d.roa Signing time: Thu 13 Feb 2025 17:28:33 +0000 ROA not before: Thu 13 Feb 2025 17:28:33 +0000 ROA not after: Wed 14 May 2025 16:28:33 +0000 asID: 3756 IP address blocks: 199.109.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:df:08:23:61:7b:bc:bd:2b:d5:8d:2c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: Feb 13 17:28:33 2025 GMT Not After : May 14 16:28:33 2025 GMT Subject: CN=f5984d66-e852-4458-89ae-3ab56b5a00bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:b8:10:f7:8a:53:7e:84:5c:b7:92:3a:4d:36: f8:4b:e4:1d:7a:8d:04:cb:c4:e9:64:95:dd:af:fe: 0e:b2:f8:c3:f6:b8:ef:da:b7:4c:90:ce:1f:3a:0d: 95:5e:b0:6c:79:38:be:63:6d:e0:f0:37:d2:b9:82: 6e:20:5b:e6:67:6f:27:4e:79:3a:7f:8d:d4:f4:d3: 71:c8:80:9b:87:40:59:d8:04:28:dc:17:fa:f8:46: 08:be:f9:72:c4:95:76:90:d3:fb:48:67:cf:c2:dc: b1:d5:09:8e:e5:85:c7:56:5a:e0:98:8a:52:e5:60: 8a:de:7b:74:42:48:30:b9:38:16:53:1b:ec:84:8c: 49:c1:41:7a:cf:48:a4:6c:f6:83:cd:f6:48:b7:70: ae:ac:ed:9a:10:cb:0c:df:d9:02:d6:1c:fa:f0:16: 92:46:2a:b7:63:d6:c8:47:a7:43:5b:d5:28:01:8b: a4:c2:40:b8:ac:41:f2:6c:5c:03:ff:ac:b1:d8:a1: ef:78:1c:74:51:8d:25:68:95:44:65:c2:9b:aa:77: db:71:89:18:c8:b9:44:ac:a2:e4:52:9e:00:80:45: 23:8e:7c:58:7f:50:56:f1:4d:5e:99:a5:6b:43:00: ed:12:43:0c:29:28:d0:60:98:06:f9:03:d2:4f:21: e3:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:23:02:34:36:65:B2:F6:A0:7F:95:43:08:38:53:7C:7D:27:25:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/256f5a60-acd7-370b-a839-372a2dc4749d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:37:e5:c9:89:5e:98:3a:da:92:e4:97:31:13:f6:96:e0:5b: f9:12:fd:8f:f7:75:8c:0b:7d:e4:67:62:c3:f7:69:df:b4:00: 8f:82:1b:9b:35:48:9b:b0:dd:f5:65:14:ed:0e:c1:96:cb:11: b1:01:a0:e7:ad:47:9b:30:f4:b5:db:57:21:01:3e:72:91:cd: 0f:e8:bf:63:b1:80:c6:f4:75:3d:5e:52:e1:be:60:82:29:93: d5:91:b1:9e:40:3b:97:a9:09:30:37:b0:ff:07:31:d1:e0:66: 2c:1f:a5:ed:d7:e7:56:af:9c:7d:b9:ef:37:c0:a5:92:e0:33: e8:dd:22:b3:0d:89:45:9c:c9:46:37:d3:49:11:75:6e:bb:b1: 80:04:7b:b7:09:b0:e5:cc:4a:2e:39:e2:21:08:d1:66:f7:12: 7f:2b:99:dc:e4:65:91:29:8f:7c:5c:b1:7d:d1:32:92:34:99: 3d:dd:3b:c3:10:bd:e7:7a:64:d2:da:d4:4f:79:65:a1:be:3d: 2f:71:e6:3b:66:58:ac:be:1c:68:aa:71:7b:cd:12:c9:a0:2f: 15:42:87:46:6c:69:e0:66:f8:dc:fd:ea:f8:f0:c3:90:bc:b8: 6e:72:11:d9:f2:ad:b3:bc:ee:1d:fc:af:63:55:b1:47:1c:e6: f3:74:7b:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjfCCNhe7y9K9WNLMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI1MDIxMzE3MjgzM1oXDTI1MDUxNDE2MjgzM1owLzEtMCsGA1UEAxMk ZjU5ODRkNjYtZTg1Mi00NDU4LTg5YWUtM2FiNTZiNWEwMGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLgQ94pTfoRct5I6TTb4S+Qdeo0Ey8TpZJXd r/4OsvjD9rjv2rdMkM4fOg2VXrBseTi+Y23g8DfSuYJuIFvmZ28nTnk6f43U9NNx yICbh0BZ2AQo3Bf6+EYIvvlyxJV2kNP7SGfPwtyx1QmO5YXHVlrgmIpS5WCK3nt0 QkgwuTgWUxvshIxJwUF6z0ikbPaDzfZIt3CurO2aEMsM39kC1hz68BaSRiq3Y9bI R6dDW9UoAYukwkC4rEHybFwD/6yx2KHveBx0UY0laJVEZcKbqnfbcYkYyLlErKLk Up4AgEUjjnxYf1BW8U1emaVrQwDtEkMMKSjQYJgG+QPSTyHjKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE0jAjQ2ZbL2oH+VQwg4U3x9JyWhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvMjU2ZjVhNjAtYWNkNy0z NzBiLWE4MzktMzcyYTJkYzQ3NDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEx23gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQ35cmJXpg62pLklzET9pbgW/kS/Y/3dYwLfeRnYsP3ad+0AI+CG5s1 SJuw3fVlFO0OwZbLEbEBoOetR5sw9LXbVyEBPnKRzQ/ov2OxgMb0dT1eUuG+YIIp k9WRsZ5AO5epCTA3sP8HMdHgZiwfpe3X51avnH257zfApZLgM+jdIrMNiUWcyUY3 00kRdW67sYAEe7cJsOXMSi454iEI0Wb3En8rmdzkZZEpj3xcsX3RMpI0mT3dO8MQ ved6ZNLa1E95ZaG+PS9x5jtmWKy+HGiqcXvNEsmgLxVCh0ZsaeBm+Nz96vjww5C8 uG5yEdnyrbO87h38r2NVsUcc5vN0e8U= -----END CERTIFICATE-----Generated at Sat Apr 12 14:07:48 2025 by rpki-client