$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/8ac03529-fe7a-30a8-aa88-b3809f13d75a.roa File: 8ac03529-fe7a-30a8-aa88-b3809f13d75a.roa (raw, json) Hash identifier: VmNhfddSZIoWsHmHXTUzTNbHE/XtzUhQ53t6HTdas8M= Subject key identifier: 73:D6:90:3B:26:38:AC:75:81:D5:5E:C8:FD:29:1B:A1:F5:4C:66:23 Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F432858491246C48EE64DFC29F5F2A380 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/8ac03529-fe7a-30a8-aa88-b3809f13d75a.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 3630 IP address blocks: 199.109.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:c4:8e:e6:4d:fc:29:f5:f2:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=9b915938-fbf0-4ee1-9afd-70b1a6ec2959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0e:73:31:4d:94:70:da:2e:bc:41:3d:46:de: c6:0f:64:e7:29:a1:51:6f:58:7c:53:4c:90:5f:68: 0f:8d:69:35:9d:bf:5c:e6:83:3b:12:a5:7e:f6:9c: bf:37:ac:44:c3:a4:b0:6a:a0:93:a6:05:9f:97:a4: e6:2b:f0:01:09:0f:f6:43:7a:ce:94:09:e6:2a:a3: a9:9d:9e:61:0a:33:09:04:11:b0:81:4f:b0:3d:68: 40:3a:d4:fb:26:f8:89:3c:69:41:22:30:dc:6c:57: c5:7f:c6:de:08:f5:e9:21:4b:de:e4:d3:0c:04:b5: 27:43:44:76:fb:16:fb:e5:71:54:47:d9:13:a3:27: bd:3f:e0:fe:f0:d3:e9:03:ad:fc:a3:e6:b1:4f:30: 48:09:22:01:7e:b8:08:1b:ae:88:31:ed:0c:7a:58: 4f:51:3f:5b:2f:2f:38:b1:72:ca:37:9e:49:b6:a7: 2f:47:ff:5a:81:bb:f2:d7:2d:3a:5d:44:0a:19:c3: 81:21:28:70:6e:fb:8e:13:56:3a:d9:62:58:3d:2b: c3:9a:d6:c6:a3:97:41:a1:07:e5:82:03:f8:64:d0: 7f:ba:07:10:70:fe:3a:4e:b1:2e:98:21:18:ef:b7: 41:3c:cd:0c:f2:d1:4f:cc:7e:03:4c:e0:c3:9f:98: 02:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:D6:90:3B:26:38:AC:75:81:D5:5E:C8:FD:29:1B:A1:F5:4C:66:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/8ac03529-fe7a-30a8-aa88-b3809f13d75a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:ea:0a:6a:81:fc:99:82:90:a9:24:50:d1:6b:d7:c3:6e:ce: ca:6d:c7:18:64:ac:76:bd:32:78:2c:b0:85:62:17:69:cd:d3: 2c:c2:f4:01:dd:26:61:0e:fe:cf:bd:23:8a:42:9a:a9:5e:54: f9:fd:50:ee:cd:1e:7a:9c:30:bd:7e:f9:96:79:04:58:98:7b: 59:e3:27:b2:19:fd:4c:c7:7f:ee:4d:bc:ed:4f:e7:03:40:72: 09:5a:2d:9f:c6:1a:69:cd:16:73:53:fc:ac:a3:57:65:0c:e6: 27:bd:e5:b1:b8:31:56:20:e7:fd:d8:ee:bb:91:fb:7e:ea:55: fc:80:c4:9b:2f:4b:2c:b3:da:9d:d4:88:38:3e:aa:e4:78:e4: 63:ef:56:82:e6:1c:28:d5:6c:7c:2f:96:8f:b4:e2:47:0f:6e: fc:cd:c4:8f:25:28:4e:01:35:51:6d:06:d6:04:bd:d5:11:b2: 37:44:08:f2:fe:86:16:a7:1c:88:f3:27:17:f7:27:08:46:13: 71:96:f3:1e:21:a0:8a:81:04:3d:7a:f2:b2:eb:e7:ab:02:ea: 94:80:90:9a:d9:bf:6e:2a:e2:01:34:ef:04:4e:36:aa:da:d0: 45:c2:b8:69:f7:56:fb:ad:f7:af:1c:71:f3:0b:9b:41:80:aa: e9:5f:a4:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRsSO5k38KfXyo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk OWI5MTU5MzgtZmJmMC00ZWUxLTlhZmQtNzBiMWE2ZWMyOTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQ5zMU2UcNouvEE9Rt7GD2TnKaFRb1h8U0yQ X2gPjWk1nb9c5oM7EqV+9py/N6xEw6SwaqCTpgWfl6TmK/ABCQ/2Q3rOlAnmKqOp nZ5hCjMJBBGwgU+wPWhAOtT7JviJPGlBIjDcbFfFf8beCPXpIUve5NMMBLUnQ0R2 +xb75XFUR9kToye9P+D+8NPpA638o+axTzBICSIBfrgIG66IMe0MelhPUT9bLy84 sXLKN55JtqcvR/9agbvy1y06XUQKGcOBIShwbvuOE1Y62WJYPSvDmtbGo5dBoQfl ggP4ZNB/ugcQcP46TrEumCEY77dBPM0M8tFPzH4DTODDn5gCfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHPWkDsmOKx1gdVeyP0pG6H1TGYjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvOGFjMDM1MjktZmU3YS0z MGE4LWFhODgtYjM4MDlmMTNkNzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx21UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACfqCmqB/JmCkKkkUNFr18NuzsptxxhkrHa9MngssIViF2nN0yzC9AHd JmEO/s+9I4pCmqleVPn9UO7NHnqcML1++ZZ5BFiYe1njJ7IZ/UzHf+5NvO1P5wNA cglaLZ/GGmnNFnNT/KyjV2UM5ie95bG4MVYg5/3Y7ruR+37qVfyAxJsvSyyz2p3U iDg+quR45GPvVoLmHCjVbHwvlo+04kcPbvzNxI8lKE4BNVFtBtYEvdURsjdECPL+ hhanHIjzJxf3JwhGE3GW8x4hoIqBBD168rLr56sC6pSAkJrZv24q4gE07wRONqra 0EXCuGn3Vvut968ccfMLm0GAqulfpM4= -----END CERTIFICATE-----Generated at Sat Apr 12 14:07:48 2025 by rpki-client