$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/c51db7b0-d443-3350-bd1d-cc0d3d232304.roa File: c51db7b0-d443-3350-bd1d-cc0d3d232304.roa (raw, json) Hash identifier: +7YA0mu5DLHksrlR4sLzXKXJ8t9u1rrbG3RQZ/y4AE0= Subject key identifier: 94:E9:56:17:75:BC:02:B3:9A:72:C7:92:9C:76:07:61:04:1A:61:86 Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F4328584961B994203592F84E10104DC0 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/c51db7b0-d443-3350-bd1d-cc0d3d232304.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 3756 IP address blocks: 199.109.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:94:20:35:92:f8:4e:10:10:4d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=5f2100ef-5ef0-43db-8003-2ebf6c94570c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:07:9b:2e:c4:ce:27:fa:7a:50:a9:23:ac:7d: 84:6b:7f:f2:03:a8:37:eb:90:09:04:af:fc:82:ea: fa:b6:61:fb:67:53:ef:e2:ab:22:1a:68:4d:a5:29: 09:82:e4:12:0c:91:4d:99:f3:b7:2d:ad:58:a1:a6: 9b:6b:82:84:a0:eb:93:6d:ef:12:2e:f3:26:49:9e: 55:46:bd:5a:a3:a2:de:26:02:52:fa:84:b7:09:31: 3a:02:f2:ae:a4:ad:a9:3d:7a:61:30:a3:69:bf:7f: e3:ac:40:0c:4a:33:7a:a8:40:fc:c9:86:f5:44:e4: 86:c2:ed:d5:a2:9d:62:a4:79:62:21:27:dd:a1:fb: 08:38:ab:6b:79:78:81:7c:1a:90:72:c4:81:8b:b6: 27:a2:3d:13:8f:fe:f6:50:15:32:5e:8b:57:bb:15: 47:01:a6:68:40:69:96:3e:f1:e5:fb:85:fb:40:84: 4a:74:10:72:f0:fd:17:1f:e1:68:81:7f:b8:68:63: 6c:cb:23:e2:03:d4:e9:42:0e:3e:74:f1:65:b2:ff: 9c:3c:52:e5:f3:91:80:73:e9:4e:03:ae:9c:3c:76: 57:e8:ff:76:61:be:8f:a7:34:c8:b7:41:1d:af:13: 3d:b2:0f:0a:79:c3:33:d8:6b:31:3d:c9:61:08:68: 14:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:E9:56:17:75:BC:02:B3:9A:72:C7:92:9C:76:07:61:04:1A:61:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/c51db7b0-d443-3350-bd1d-cc0d3d232304.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:49:55:45:6f:fe:ae:da:52:21:de:9e:59:3c:de:32:b4:40: cc:2b:28:6c:ed:d7:cb:d4:36:46:02:59:fe:ba:05:73:53:59: 0a:3f:97:16:5f:b5:78:6c:cc:c4:f4:4d:aa:08:c7:5f:0f:b3: 03:84:69:f6:b1:0f:46:2f:51:13:86:c1:34:83:47:7e:0c:1e: 23:62:e8:3d:43:36:21:6a:14:f5:44:d9:55:69:2d:a5:03:db: 9e:da:5c:c9:aa:d9:74:28:98:65:cc:37:c3:3a:48:2e:cb:a1: c3:92:aa:93:c2:50:e8:f5:54:26:bf:07:59:f2:29:48:bf:18: 42:df:26:cf:3c:5a:b4:56:46:d1:6f:c7:25:51:98:4b:e9:81: 20:15:f4:00:37:f4:ef:df:03:64:bf:5f:f8:de:3e:48:37:97: 5d:66:1b:cc:29:b9:aa:a2:f0:ff:37:3d:cf:df:0c:bb:fa:4d: 1a:b0:c7:d3:36:a5:6a:3c:4d:98:9d:f2:a8:a2:48:82:85:0d: 14:c8:ae:03:4f:24:1a:9f:5d:fa:d7:5e:a0:b9:f0:88:44:f7: 36:43:95:f2:a3:54:9e:05:71:14:ed:45:81:14:00:55:a3:7d: ba:92:36:92:0e:6b:80:e1:11:6a:fe:af:15:00:00:78:65:90: cf:a3:7b:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElhuZQgNZL4ThAQTcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk NWYyMTAwZWYtNWVmMC00M2RiLTgwMDMtMmViZjZjOTQ1NzBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogebLsTOJ/p6UKkjrH2Ea3/yA6g365AJBK/8 gur6tmH7Z1Pv4qsiGmhNpSkJguQSDJFNmfO3La1Yoaaba4KEoOuTbe8SLvMmSZ5V Rr1ao6LeJgJS+oS3CTE6AvKupK2pPXphMKNpv3/jrEAMSjN6qED8yYb1ROSGwu3V op1ipHliISfdofsIOKtreXiBfBqQcsSBi7Ynoj0Tj/72UBUyXotXuxVHAaZoQGmW PvHl+4X7QIRKdBBy8P0XH+FogX+4aGNsyyPiA9TpQg4+dPFlsv+cPFLl85GAc+lO A66cPHZX6P92Yb6PpzTIt0EdrxM9sg8KecMz2GsxPclhCGgU3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJTpVhd1vAKzmnLHkpx2B2EEGmGGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvYzUxZGI3YjAtZDQ0My0z MzUwLWJkMWQtY2MwZDNkMjMyMzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx20QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIlJVUVv/q7aUiHenlk83jK0QMwrKGzt18vUNkYCWf66BXNTWQo/lxZf tXhszMT0TaoIx18PswOEafaxD0YvUROGwTSDR34MHiNi6D1DNiFqFPVE2VVpLaUD 257aXMmq2XQomGXMN8M6SC7LocOSqpPCUOj1VCa/B1nyKUi/GELfJs88WrRWRtFv xyVRmEvpgSAV9AA39O/fA2S/X/jePkg3l11mG8wpuaqi8P83Pc/fDLv6TRqwx9M2 pWo8TZid8qiiSIKFDRTIrgNPJBqfXfrXXqC58IhE9zZDlfKjVJ4FcRTtRYEUAFWj fbqSNpIOa4DhEWr+rxUAAHhlkM+je28= -----END CERTIFICATE-----Generated at Sat Apr 12 14:10:25 2025 by rpki-client