$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/2817e773-8303-342f-9a40-2e654502699d.roa File: 2817e773-8303-342f-9a40-2e654502699d.roa (raw, json) Hash identifier: q0pOBzhwtGpVc+H6eqtfg+S/xUn23ymd8+aMMm+EJAo= Subject key identifier: D0:49:AF:D9:60:54:7F:0F:A6:61:98:19:3B:1B:68:89:F6:B6:B9:F2 Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F4328584964843B83ED6F96FA94F25D00 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/2817e773-8303-342f-9a40-2e654502699d.roa Signing time: Wed 02 Apr 2025 13:01:01 +0000 ROA not before: Wed 02 Apr 2025 13:01:01 +0000 ROA not after: Tue 01 Jul 2025 13:01:01 +0000 asID: 3630 IP address blocks: 199.109.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:64:84:3b:83:ed:6f:96:fa:94:f2:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: Apr 2 13:01:01 2025 GMT Not After : Jul 1 13:01:01 2025 GMT Subject: CN=90358333-44e3-404f-bede-7c9bf487847a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1f:48:38:5c:68:f1:24:e1:2c:95:de:3b:f7: 98:44:4f:b8:23:75:79:d1:4c:61:ae:47:4a:dc:b8: ad:27:f1:40:c1:df:f5:1d:95:4d:75:33:3e:ce:9c: 8a:7e:15:e8:a4:78:ad:3a:47:d8:d7:fb:11:55:f1: 6f:87:d0:e7:de:5c:9b:48:24:14:90:b6:50:ee:8b: 54:31:a1:85:ad:10:1f:25:9f:1b:24:4f:9a:b5:88: 87:09:33:f4:e7:47:1e:f9:f4:7c:72:97:91:9b:96: 12:90:8e:45:85:1b:0a:4a:33:8e:38:0c:21:97:d2: 2d:f3:30:0f:11:e8:57:5c:04:fa:b0:e8:99:1e:32: 32:0c:22:9a:df:ba:05:cd:42:47:b5:53:b6:b0:e9: 88:17:e6:44:dd:7f:2e:5f:6b:39:44:9b:ad:bb:c4: 39:fe:93:15:48:9f:13:69:23:26:97:7b:9d:8d:a3: 7d:62:7c:84:a4:9e:01:bc:f6:13:1a:61:d7:79:b9: 30:d5:67:a4:fd:90:fa:bc:9c:9f:96:95:25:5e:05: 7e:f3:6a:c2:f5:06:1f:1f:28:28:e1:0c:f6:72:f5: 8f:cb:14:b1:69:01:5b:71:36:e3:f1:f9:12:3c:f0: a6:d9:29:8b:b3:36:bf:39:fc:d2:be:ab:db:4c:14: 37:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:49:AF:D9:60:54:7F:0F:A6:61:98:19:3B:1B:68:89:F6:B6:B9:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/2817e773-8303-342f-9a40-2e654502699d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:94:2f:85:8e:1d:1d:3f:c0:5c:ba:b7:90:af:68:f6:5f:49: f8:73:42:1d:5b:5c:9d:b0:4b:b3:b4:e1:e9:8b:e4:3f:d9:c0: 25:c6:6b:b2:9b:bc:68:31:0c:e9:c8:84:cf:70:62:1b:b8:d3: eb:9d:67:8a:75:66:b2:92:c5:cd:f2:26:fd:74:73:d7:03:75: f7:04:a8:4f:0d:c8:13:4f:82:08:42:c8:af:55:6f:41:fa:45: c3:a2:4f:8f:d1:3c:13:9b:80:88:6d:ea:63:04:5c:a1:77:be: 14:36:99:79:f5:73:86:fd:d9:01:63:ab:ee:50:a5:c2:60:6e: 20:6a:c9:3c:0e:74:af:65:49:27:3f:73:46:c2:ee:89:7f:56: 13:76:fe:b9:f3:ff:2f:5d:fb:79:e4:f3:bc:61:42:f0:14:ce: df:5c:69:56:88:87:ed:53:a4:80:86:55:3f:9c:ff:f1:52:83: dd:2c:9b:70:5d:76:02:b2:fd:e3:25:26:9c:e9:3a:9c:1b:88: fe:df:df:6f:6e:18:5f:a2:fc:f5:a5:ba:00:07:3e:7d:50:7c: 8a:40:97:0f:76:76:a2:13:2f:18:7a:44:27:19:6a:80:f1:61: ad:df:0f:51:f4:0e:27:a1:e0:e8:82:03:47:fe:a5:19:ed:22: f4:5c:df:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElkhDuD7W+W+pTyXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk OTAzNTgzMzMtNDRlMy00MDRmLWJlZGUtN2M5YmY0ODc4NDdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsB9IOFxo8SThLJXeO/eYRE+4I3V50UxhrkdK 3LitJ/FAwd/1HZVNdTM+zpyKfhXopHitOkfY1/sRVfFvh9Dn3lybSCQUkLZQ7otU MaGFrRAfJZ8bJE+atYiHCTP050ce+fR8cpeRm5YSkI5FhRsKSjOOOAwhl9It8zAP EehXXAT6sOiZHjIyDCKa37oFzUJHtVO2sOmIF+ZE3X8uX2s5RJutu8Q5/pMVSJ8T aSMml3udjaN9YnyEpJ4BvPYTGmHXebkw1Wek/ZD6vJyflpUlXgV+82rC9QYfHygo 4Qz2cvWPyxSxaQFbcTbj8fkSPPCm2SmLsza/OfzSvqvbTBQ3fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNBJr9lgVH8PpmGYGTsbaIn2trnyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvMjgxN2U3NzMtODMwMy0z NDJmLTlhNDAtMmU2NTQ1MDI2OTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx21jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJaUL4WOHR0/wFy6t5CvaPZfSfhzQh1bXJ2wS7O04emL5D/ZwCXGa7Kb vGgxDOnIhM9wYhu40+udZ4p1ZrKSxc3yJv10c9cDdfcEqE8NyBNPgghCyK9Vb0H6 RcOiT4/RPBObgIht6mMEXKF3vhQ2mXn1c4b92QFjq+5QpcJgbiBqyTwOdK9lSSc/ c0bC7ol/VhN2/rnz/y9d+3nk87xhQvAUzt9caVaIh+1TpICGVT+c//FSg90sm3Bd dgKy/eMlJpzpOpwbiP7f329uGF+i/PWlugAHPn1QfIpAlw92dqITLxh6RCcZaoDx Ya3fD1H0Dieh4OiCA0f+pRntIvRc348= -----END CERTIFICATE-----Generated at Sat Apr 12 14:18:25 2025 by rpki-client