$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/76186077-714c-39b7-b3e0-22e19d063d7c.roa File: 76186077-714c-39b7-b3e0-22e19d063d7c.roa (raw, json) Hash identifier: z6TD0/s8IrCqz+YCck7DnJJf0gARNT+T3dXSBUIHst4= Subject key identifier: 80:CE:85:CA:65:EB:FF:5D:91:66:B0:F4:64:92:80:49:4F:17:EC:62 Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F432858496484424D5EC34792B3AFF940 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/76186077-714c-39b7-b3e0-22e19d063d7c.roa Signing time: Wed 02 Apr 2025 13:01:01 +0000 ROA not before: Wed 02 Apr 2025 13:01:01 +0000 ROA not after: Tue 01 Jul 2025 13:01:01 +0000 asID: 3755 IP address blocks: 199.109.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:64:84:42:4d:5e:c3:47:92:b3:af:f9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: Apr 2 13:01:01 2025 GMT Not After : Jul 1 13:01:01 2025 GMT Subject: CN=7d0751a2-332a-4b39-81bf-15d7079897aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:22:27:3e:ba:b7:2c:78:19:86:1e:47:fb:92: 63:02:b4:ff:16:20:47:97:a9:51:42:41:5b:29:72: 24:b6:1e:eb:59:b1:58:38:ae:e3:d4:c0:3a:05:11: 9d:b8:15:d3:fa:7d:36:7f:8e:52:71:01:16:8c:5e: 5c:7b:d6:68:7d:30:90:91:84:94:8e:d6:ab:d1:7e: 01:6f:09:c2:cd:38:4f:ad:a6:fd:55:84:67:57:ef: 79:2b:e7:fd:e0:13:7a:af:3c:47:71:1c:54:27:61: 60:57:b2:5f:7f:1d:a6:8e:17:f1:a0:07:81:14:50: 11:4c:42:af:9d:d8:63:af:ce:9f:59:17:a7:38:fe: 96:76:04:ab:80:18:6b:a7:05:eb:61:79:da:a6:f2: 01:8c:b8:f4:fa:56:2b:8e:3c:06:4c:2f:38:f4:13: 94:a9:c6:ce:0a:eb:e8:b6:99:ed:7d:71:99:b4:f7: a4:5e:b8:f6:7d:3d:d4:35:7d:49:d7:1b:f3:99:c1: 11:83:5b:63:61:2f:80:9b:21:8d:b5:3d:b2:56:48: 9b:69:55:18:f0:f8:d6:ed:b9:d8:f3:ee:6a:0f:8d: b3:f1:bd:7f:45:13:bc:c4:ce:0a:f3:4b:39:d3:f6: 3c:03:ed:fd:6c:23:4d:74:76:af:eb:74:20:4e:19: 47:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:CE:85:CA:65:EB:FF:5D:91:66:B0:F4:64:92:80:49:4F:17:EC:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/76186077-714c-39b7-b3e0-22e19d063d7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:64:a4:1f:24:6a:14:a7:78:94:9e:48:4a:85:d9:70:a5:e8: c0:2c:c3:93:2f:ad:d8:66:1a:3c:0b:a5:8f:88:71:9e:8d:e1: 7e:da:e3:4d:75:79:16:57:f3:df:43:93:f0:74:b3:7f:6f:94: 79:64:8a:da:46:b0:ee:c4:24:c2:9b:ed:c4:21:91:ba:8f:c6: f8:bd:91:29:8e:28:f9:8f:97:86:fb:c9:99:15:e3:df:14:22: 00:0d:bb:b3:76:a9:f7:47:01:9b:ea:76:6e:7b:03:ed:6a:1f: 8e:1d:14:20:9a:00:4a:ba:85:70:9d:2a:92:a1:06:91:d1:e5: db:16:af:30:f3:12:67:e3:6c:16:86:49:d5:50:f7:06:82:16: d9:27:76:23:9e:d4:96:56:eb:d0:8e:58:3e:d2:fc:1c:2f:ff: 59:a0:cc:e7:43:b9:66:9e:40:a9:41:8f:a0:c5:cc:5e:73:36: 5b:89:23:ec:54:c8:bc:0e:2d:9d:a3:bb:cb:ae:1f:c9:ab:42: 0c:de:27:0a:6d:bf:74:8d:36:a9:26:12:4a:f5:58:12:b0:8d: da:13:dd:26:47:4d:92:fa:99:89:07:51:bc:04:fd:15:a0:21: 1f:4e:c3:a3:af:f5:97:5d:ba:a9:9d:70:49:3c:cd:8d:6e:c3: dc:0b:23:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElkhEJNXsNHkrOv+UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk N2QwNzUxYTItMzMyYS00YjM5LTgxYmYtMTVkNzA3OTg5N2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3iInPrq3LHgZhh5H+5JjArT/FiBHl6lRQkFb KXIkth7rWbFYOK7j1MA6BRGduBXT+n02f45ScQEWjF5ce9ZofTCQkYSUjtar0X4B bwnCzThPrab9VYRnV+95K+f94BN6rzxHcRxUJ2FgV7Jffx2mjhfxoAeBFFARTEKv ndhjr86fWRenOP6WdgSrgBhrpwXrYXnapvIBjLj0+lYrjjwGTC849BOUqcbOCuvo tpntfXGZtPekXrj2fT3UNX1J1xvzmcERg1tjYS+AmyGNtT2yVkibaVUY8PjW7bnY 8+5qD42z8b1/RRO8xM4K80s50/Y8A+39bCNNdHav63QgThlHgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIDOhcpl6/9dkWaw9GSSgElPF+xiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvNzYxODYwNzctNzE0Yy0z OWI3LWIzZTAtMjJlMTlkMDYzZDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx21AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9kpB8kahSneJSeSEqF2XCl6MAsw5MvrdhmGjwLpY+IcZ6N4X7a4011 eRZX899Dk/B0s39vlHlkitpGsO7EJMKb7cQhkbqPxvi9kSmOKPmPl4b7yZkV498U IgANu7N2qfdHAZvqdm57A+1qH44dFCCaAEq6hXCdKpKhBpHR5dsWrzDzEmfjbBaG SdVQ9waCFtkndiOe1JZW69COWD7S/Bwv/1mgzOdDuWaeQKlBj6DFzF5zNluJI+xU yLwOLZ2ju8uuH8mrQgzeJwptv3SNNqkmEkr1WBKwjdoT3SZHTZL6mYkHUbwE/RWg IR9Ow6Ov9ZdduqmdcEk8zY1uw9wLI5M= -----END CERTIFICATE-----Generated at Sat Apr 12 13:56:59 2025 by rpki-client