$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/8ac03529-fe7a-30a8-aa88-b3809f13d75a.roa File: 8ac03529-fe7a-30a8-aa88-b3809f13d75a.roa (raw, json) Hash identifier: X7rYcGaRA6rM6Hyp5SDvMFJ0BnPlVlGIWOyG5coYOLA= Subject key identifier: 5D:21:CF:FF:C4:2D:B5:B4:D3:7F:6C:1E:D3:4E:E3:58:8A:66:1B:38 Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F43285849F17FCF2F9B9E98E929911300 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/8ac03529-fe7a-30a8-aa88-b3809f13d75a.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 3630 IP address blocks: 199.109.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:cf:2f:9b:9e:98:e9:29:91:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=ad959b27-81ef-454b-8e50-f71fc73fdbd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:cc:b6:9b:78:9c:00:ec:3d:70:a2:65:b9:66: d4:7e:20:06:0b:55:ec:c1:24:a7:99:11:d3:7c:94: 9d:e3:9b:66:12:a6:de:5e:0f:99:dd:7d:a3:79:44: ac:46:16:72:d3:6d:06:ab:5f:b0:ac:e0:58:42:5b: 61:bc:02:26:5a:4b:86:80:b1:5f:5f:c0:a5:b1:da: 22:df:b8:a8:44:1c:84:73:da:3e:3d:73:2a:83:95: fb:f5:8f:8b:19:cb:66:d3:51:89:52:4e:b6:b4:92: 57:2e:8b:7e:59:28:f0:a3:1d:54:76:81:d1:f5:99: 79:7b:e6:0d:bf:e8:3d:5d:78:bc:d4:bc:b4:cd:28: 48:50:e2:3f:4e:fa:bc:ed:20:97:c3:87:0b:ce:d7: 10:97:59:cd:b6:ee:35:4d:d3:dd:b5:28:51:2b:5b: ba:ff:94:e9:8e:e0:22:e4:3e:2d:19:a2:2a:16:bc: 82:9d:07:da:ab:f5:7e:c3:37:34:42:b9:49:ee:d6: 60:6b:6c:e4:7c:a8:e7:df:02:94:f5:7a:58:53:c7: 0e:7e:89:08:22:03:6f:1a:b8:f4:73:fb:86:48:6c: 42:e7:4a:61:8f:10:e4:b0:43:6e:9b:c7:74:53:a9: c6:10:d0:1d:28:79:42:ed:e5:a3:49:97:e6:23:3b: fa:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:21:CF:FF:C4:2D:B5:B4:D3:7F:6C:1E:D3:4E:E3:58:8A:66:1B:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/8ac03529-fe7a-30a8-aa88-b3809f13d75a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:25:80:04:19:e3:1e:c8:0f:97:4c:88:f4:19:17:53:28:d2: 65:df:34:b5:37:db:b5:7f:f2:a2:87:da:e0:9a:e0:be:fa:ab: 87:a8:7d:11:c9:76:77:f5:af:63:50:29:cb:8b:a0:73:ed:b1: 97:9d:ba:ff:ba:a9:fa:32:44:52:4c:10:47:6c:db:ff:b3:6d: 79:ab:c6:8f:a3:d6:ee:38:aa:44:9b:2a:04:66:cc:8d:01:6c: 31:ac:85:6b:ec:fc:fd:5c:ba:9a:46:f9:9f:1e:79:e4:87:96: ce:13:75:36:67:1c:50:34:b4:96:df:dd:3c:9d:30:f8:76:6b: 89:79:ed:34:e1:b7:34:df:9f:3d:b5:cc:0e:24:d1:31:92:f9: 8a:51:a8:e3:66:34:18:d3:bf:1b:12:2e:4f:b0:66:f3:59:d0: e4:b7:01:78:01:ed:2c:56:32:cf:16:7c:59:f3:7d:b6:2b:8d: db:1e:26:45:3c:c9:d2:6e:ad:30:b1:72:cc:8b:44:be:b4:0f: ad:ad:21:f7:10:d2:f2:53:42:af:81:ca:3a:89:06:81:ed:75: b3:eb:53:ed:4b:1e:12:b9:f5:4b:34:38:92:93:f4:e0:f9:27: f4:7e:d4:2a:f3:c8:72:8a:dc:53:af:ad:ba:6a:c6:82:34:8f: 4b:83:3a:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf88vm56Y6SmREwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk YWQ5NTliMjctODFlZi00NTRiLThlNTAtZjcxZmM3M2ZkYmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMy2m3icAOw9cKJluWbUfiAGC1XswSSnmRHT fJSd45tmEqbeXg+Z3X2jeUSsRhZy020Gq1+wrOBYQlthvAImWkuGgLFfX8Clsdoi 37ioRByEc9o+PXMqg5X79Y+LGctm01GJUk62tJJXLot+WSjwox1UdoHR9Zl5e+YN v+g9XXi81Ly0zShIUOI/Tvq87SCXw4cLztcQl1nNtu41TdPdtShRK1u6/5TpjuAi 5D4tGaIqFryCnQfaq/V+wzc0QrlJ7tZga2zkfKjn3wKU9XpYU8cOfokIIgNvGrj0 c/uGSGxC50phjxDksENum8d0U6nGENAdKHlC7eWjSZfmIzv6CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF0hz//ELbW0039sHtNO41iKZhs4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvOGFjMDM1MjktZmU3YS0z MGE4LWFhODgtYjM4MDlmMTNkNzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx21UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8lgAQZ4x7ID5dMiPQZF1Mo0mXfNLU327V/8qKH2uCa4L76q4eofRHJ dnf1r2NQKcuLoHPtsZeduv+6qfoyRFJMEEds2/+zbXmrxo+j1u44qkSbKgRmzI0B bDGshWvs/P1cuppG+Z8eeeSHls4TdTZnHFA0tJbf3TydMPh2a4l57TThtzTfnz21 zA4k0TGS+YpRqONmNBjTvxsSLk+wZvNZ0OS3AXgB7SxWMs8WfFnzfbYrjdseJkU8 ydJurTCxcsyLRL60D62tIfcQ0vJTQq+ByjqJBoHtdbPrU+1LHhK59Us0OJKT9OD5 J/R+1CrzyHKK3FOvrbpqxoI0j0uDOtc= -----END CERTIFICATE-----Generated at Fri Jun 6 19:35:40 2025 by rpki-client