$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/c4d7f5be-73c8-302a-991e-a5952ac26f26.roa File: c4d7f5be-73c8-302a-991e-a5952ac26f26.roa (raw, json) Hash identifier: JyymzIZ4BUmJh7kn0wy9cvo5Mj5XEnlzWpFrvqfc2PM= Subject key identifier: EC:55:44:FF:5E:82:C5:66:42:AD:63:BB:9C:E0:CA:77:AE:B6:48:C2 Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F4328584964843B6DB665F9953AA88640 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/c4d7f5be-73c8-302a-991e-a5952ac26f26.roa Signing time: Wed 02 Apr 2025 13:01:01 +0000 ROA not before: Wed 02 Apr 2025 13:01:01 +0000 ROA not after: Tue 01 Jul 2025 13:01:01 +0000 asID: 3754 IP address blocks: 199.109.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:64:84:3b:6d:b6:65:f9:95:3a:a8:86:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: Apr 2 13:01:01 2025 GMT Not After : Jul 1 13:01:01 2025 GMT Subject: CN=41890ade-753b-4362-b5a0-70d43c133bda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3c:99:b0:99:ee:6f:b6:42:e2:3f:f8:65:40: ee:5f:d1:55:cb:c8:af:af:b3:30:f7:ec:06:3d:43: 77:cd:c8:eb:76:4f:e9:1d:fc:44:ed:3f:28:33:eb: c8:29:14:ed:05:bd:24:8b:27:ba:1c:3e:e6:bd:9a: d8:7e:17:13:74:e8:29:6a:22:2c:69:da:49:0f:03: 50:63:1e:4b:6f:86:5f:f4:b5:10:e3:68:54:de:7c: 1e:37:2b:c2:cc:3e:89:73:9d:20:96:bb:dc:07:ff: 53:c0:60:2a:2d:e3:49:c8:85:cd:79:1b:a9:37:2b: 48:5c:c8:3c:d3:15:80:1c:17:7c:d6:0d:9a:55:ae: b6:de:0a:45:0a:d9:d2:ba:73:6f:d5:9f:cb:99:40: 20:58:ba:49:10:d4:01:d7:e9:b1:e1:92:05:40:02: 25:1a:4b:34:0c:b8:b1:e8:c8:82:0d:04:09:e7:07: 6b:a7:ec:82:21:48:3b:c8:78:75:3f:32:ca:96:76: eb:e2:9a:b1:36:9d:63:f6:d1:d8:9c:57:b4:b8:9d: 28:0a:e6:a8:8f:cf:31:c5:88:71:0f:36:f3:f0:45: 1d:ab:01:57:ea:7f:06:5c:94:f4:c1:a3:84:3c:38: 1e:c8:53:32:71:fe:09:7c:3c:7f:79:41:ee:36:f7: f6:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:55:44:FF:5E:82:C5:66:42:AD:63:BB:9C:E0:CA:77:AE:B6:48:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/c4d7f5be-73c8-302a-991e-a5952ac26f26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:d4:e3:6b:4b:5e:92:8a:1b:95:8c:a8:6d:58:ad:da:47:70: 02:1c:30:f9:8f:3d:9b:ef:89:69:ca:42:ed:e5:98:be:8e:aa: ae:be:20:92:05:c5:19:ed:67:ee:ac:e3:39:7c:fb:49:92:2f: fe:e4:8e:b1:a8:54:1d:d0:c7:29:d5:2b:83:e0:a6:58:9d:9a: e8:70:39:40:d1:a9:ee:f5:6b:c1:3c:76:3f:85:d0:a5:18:92: 6f:d8:99:e7:0a:d6:21:4b:e4:a6:13:6d:17:9c:c5:c9:f7:f5: a0:6c:0c:2b:94:16:c0:dc:f0:60:ed:82:17:f2:d8:1c:66:77: 54:f7:e2:b3:be:8b:bb:4e:05:63:44:05:54:b7:25:3a:c8:e7: 5b:eb:89:68:f2:7d:68:7e:46:65:eb:ae:54:94:2b:1f:80:ca: 66:ec:85:2f:1f:97:59:6b:8c:ba:31:3c:00:36:1d:5a:73:6d: 75:54:ef:31:7d:0a:61:77:66:de:71:32:34:98:39:64:46:99: 65:97:2f:bf:bd:a5:f7:5a:48:09:de:34:d7:0b:f0:f6:c9:63: 7f:6b:41:7d:e1:35:4b:b3:2b:ce:b3:99:4a:11:dd:8e:1b:88: e2:30:dd:2b:3b:55:a4:18:29:13:b5:38:fc:d3:6d:3a:80:41: 95:ed:24:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElkhDtttmX5lTqohkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk NDE4OTBhZGUtNzUzYi00MzYyLWI1YTAtNzBkNDNjMTMzYmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzyZsJnub7ZC4j/4ZUDuX9FVy8ivr7Mw9+wG PUN3zcjrdk/pHfxE7T8oM+vIKRTtBb0kiye6HD7mvZrYfhcTdOgpaiIsadpJDwNQ Yx5Lb4Zf9LUQ42hU3nweNyvCzD6Jc50glrvcB/9TwGAqLeNJyIXNeRupNytIXMg8 0xWAHBd81g2aVa623gpFCtnSunNv1Z/LmUAgWLpJENQB1+mx4ZIFQAIlGks0DLix 6MiCDQQJ5wdrp+yCIUg7yHh1PzLKlnbr4pqxNp1j9tHYnFe0uJ0oCuaoj88xxYhx Dzbz8EUdqwFX6n8GXJT0waOEPDgeyFMycf4JfDx/eUHuNvf2OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOxVRP9egsVmQq1ju5zgyneutkjCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvYzRkN2Y1YmUtNzNjOC0z MDJhLTk5MWUtYTU5NTJhYzI2ZjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx21CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABXU42tLXpKKG5WMqG1YrdpHcAIcMPmPPZvviWnKQu3lmL6Oqq6+IJIF xRntZ+6s4zl8+0mSL/7kjrGoVB3QxynVK4PgplidmuhwOUDRqe71a8E8dj+F0KUY km/YmecK1iFL5KYTbRecxcn39aBsDCuUFsDc8GDtghfy2Bxmd1T34rO+i7tOBWNE BVS3JTrI51vriWjyfWh+RmXrrlSUKx+AymbshS8fl1lrjLoxPAA2HVpzbXVU7zF9 CmF3Zt5xMjSYOWRGmWWXL7+9pfdaSAneNNcL8PbJY39rQX3hNUuzK86zmUoR3Y4b iOIw3Ss7VaQYKRO1OPzTbTqAQZXtJMM= -----END CERTIFICATE-----Generated at Sat Apr 12 13:47:25 2025 by rpki-client