$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/cc87da93-3255-3602-b613-e525c61d041b.roa File: cc87da93-3255-3602-b613-e525c61d041b.roa (raw, json) Hash identifier: Q0Oub24Z6iHugqc2JZVka8yyYIW22RjF0t6hEPsomm8= Subject key identifier: 46:BF:ED:74:C9:85:25:01:7A:D7:68:20:3A:0F:43:66:B8:3B:4F:22 Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F4328584964843AFCEFF644FC636DF5C0 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/cc87da93-3255-3602-b613-e525c61d041b.roa Signing time: Wed 02 Apr 2025 13:01:01 +0000 ROA not before: Wed 02 Apr 2025 13:01:01 +0000 ROA not after: Tue 01 Jul 2025 13:01:01 +0000 asID: 3756 IP address blocks: 199.109.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:64:84:3a:fc:ef:f6:44:fc:63:6d:f5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: Apr 2 13:01:01 2025 GMT Not After : Jul 1 13:01:01 2025 GMT Subject: CN=e6378a9c-35de-41a0-97dc-4a951bb5260d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:54:63:f1:07:6f:0c:ee:2c:5a:75:f1:e8:d8: 19:74:a9:bc:95:d7:82:9a:d6:ba:1b:bd:ac:48:ee: ae:d8:bb:e0:61:6d:5e:7e:dc:b1:da:bd:4c:83:d4: 14:6a:fc:1a:1f:0f:80:47:de:c9:d5:2c:1c:3b:dd: 3a:ed:26:fa:98:d6:15:23:e7:ae:e0:a6:9f:c5:04: b0:6c:0d:ec:46:21:9f:91:a7:d6:2c:1a:be:5e:80: f4:bd:3a:70:4a:f1:de:44:7f:a7:54:f4:54:5a:54: 27:9a:a6:eb:9e:88:49:bd:2f:92:cb:4a:08:dc:7c: 13:3e:9a:03:fb:02:99:bd:03:6c:6a:90:95:9c:5a: cb:f3:5a:6b:36:40:9c:26:f3:a6:4f:54:74:5a:71: 18:be:d5:bb:a2:fc:d7:5e:63:87:b5:0b:cc:7c:d0: b4:f2:3b:32:e2:40:88:a4:c7:f4:5f:36:b3:cf:ae: 0e:3c:b4:e7:a7:10:d7:df:6d:24:69:67:df:77:7c: 2f:69:53:32:d0:37:e0:54:65:99:b8:e8:cc:88:75: ec:84:ca:25:a3:a6:a2:3e:49:66:7a:da:6b:9f:c5: 51:5a:d7:a1:ad:7a:48:8a:8b:dc:3d:a8:68:e6:95: 06:2d:a8:8f:75:f1:04:cd:b0:6b:5c:42:fa:6d:eb: a1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:BF:ED:74:C9:85:25:01:7A:D7:68:20:3A:0F:43:66:B8:3B:4F:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/cc87da93-3255-3602-b613-e525c61d041b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:d5:dd:73:bb:76:f6:a0:f1:4a:be:f4:44:02:f8:ab:2e:8d: 90:bd:1b:fd:60:35:39:b0:5b:1d:ca:f2:6e:c4:57:0e:50:a7: 54:a5:78:e0:a8:c0:01:70:fb:77:fb:03:4c:1c:aa:0e:5e:6a: e3:dc:5f:ee:a6:33:59:e2:26:4e:78:fe:5e:85:c6:d6:a7:16: 19:d1:10:41:f2:d9:bf:1d:9e:b3:47:ce:11:93:c4:d4:ac:43: 91:2e:19:b3:c6:f6:11:17:29:70:6a:39:94:82:78:f7:d5:b4: 89:92:86:5c:91:2a:a9:33:57:67:a8:e4:a9:5d:7c:33:8e:62: 6a:1b:52:9c:49:57:4d:ea:01:3a:26:d8:10:90:d3:67:7c:da: 83:34:d2:98:37:f3:88:43:c7:7b:b5:f4:7d:96:ae:7b:fc:3c: 83:59:6b:c4:11:f2:6d:ce:f0:cd:8b:f4:a2:a1:32:b7:ab:a5: 94:f3:eb:18:0f:39:fe:3e:a5:7d:0b:be:a6:d5:be:ac:8d:60: 45:e5:77:17:02:0c:d7:fc:e7:62:ba:b3:4b:3a:79:47:ea:29: 80:13:7e:4a:14:2c:1c:37:ee:84:8f:22:8b:0a:30:41:1a:7c: 85:0c:ab:d4:b8:68:e0:bf:ba:2e:74:14:a5:19:26:c1:7a:6a: 9e:f3:b3:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElkhDr87/ZE/GNt9cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk ZTYzNzhhOWMtMzVkZS00MWEwLTk3ZGMtNGE5NTFiYjUyNjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA91Rj8QdvDO4sWnXx6NgZdKm8ldeCmta6G72s SO6u2LvgYW1eftyx2r1Mg9QUavwaHw+AR97J1SwcO9067Sb6mNYVI+eu4KafxQSw bA3sRiGfkafWLBq+XoD0vTpwSvHeRH+nVPRUWlQnmqbrnohJvS+Sy0oI3HwTPpoD +wKZvQNsapCVnFrL81prNkCcJvOmT1R0WnEYvtW7ovzXXmOHtQvMfNC08jsy4kCI pMf0Xzazz64OPLTnpxDX320kaWffd3wvaVMy0DfgVGWZuOjMiHXshMolo6aiPklm etprn8VRWtehrXpIiovcPaho5pUGLaiPdfEEzbBrXEL6beuh4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEa/7XTJhSUBetdoIDoPQ2a4O08iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvY2M4N2RhOTMtMzI1NS0z NjAyLWI2MTMtZTUyNWM2MWQwNDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx20TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbV3XO7dvag8Uq+9EQC+KsujZC9G/1gNTmwWx3K8m7EVw5Qp1SleOCo wAFw+3f7A0wcqg5eauPcX+6mM1niJk54/l6FxtanFhnREEHy2b8dnrNHzhGTxNSs Q5EuGbPG9hEXKXBqOZSCePfVtImShlyRKqkzV2eo5KldfDOOYmobUpxJV03qATom 2BCQ02d82oM00pg384hDx3u19H2Wrnv8PINZa8QR8m3O8M2L9KKhMrerpZTz6xgP Of4+pX0LvqbVvqyNYEXldxcCDNf852K6s0s6eUfqKYATfkoULBw37oSPIosKMEEa fIUMq9S4aOC/ui50FKUZJsF6ap7zs64= -----END CERTIFICATE-----Generated at Sat Apr 12 14:10:27 2025 by rpki-client