$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/d96ed0f1-f0cc-3243-91da-65a52051ee9c.roa File: d96ed0f1-f0cc-3243-91da-65a52051ee9c.roa (raw, json) Hash identifier: iFjPv73F+ED44SzeTZtoysOTOUrTW3ksQS2ThqT1lKQ= Subject key identifier: A0:CF:13:29:C0:C1:5C:AA:90:6E:90:C5:70:2A:2A:6E:F2:64:F0:CD Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F43285848E16BD4906E151EF5DA791080 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/d96ed0f1-f0cc-3243-91da-65a52051ee9c.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 3630 IP address blocks: 199.109.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:d4:90:6e:15:1e:f5:da:79:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=86a3b085-e4f0-4c3a-aec1-3604bffa455c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:29:fc:54:d5:d5:9e:2a:05:57:d8:dd:02:31: eb:e2:2b:7c:89:84:e7:03:ff:22:ca:43:5f:ea:20: f1:07:c2:95:14:6f:64:7d:53:3d:5e:81:b4:18:c1: 67:2e:42:de:cd:68:66:e8:df:75:f0:77:5d:46:b1: 84:4c:11:f4:dc:8c:61:c6:54:56:22:b0:10:f7:01: d9:73:46:87:1e:1d:c1:fa:2d:27:fc:c4:7f:fa:7f: 6d:43:66:17:46:9e:a7:c0:66:ad:09:74:21:12:c7: 6f:bf:b7:3a:90:84:ab:42:48:40:c8:57:98:ac:b6: 4b:f3:cd:ce:2d:46:cc:36:f8:09:47:77:6b:d8:10: ab:d1:8e:3e:bd:93:19:01:b5:42:5c:bd:8a:76:48: af:66:0d:04:13:89:f7:bc:07:2c:4f:3c:7d:a0:79: b0:40:d2:57:50:0d:fc:d4:b2:8a:75:0c:34:01:b8: 41:ea:20:39:bf:76:c9:0a:74:22:52:8f:10:ed:ed: d6:26:24:f0:31:df:37:6e:cf:51:b7:55:b5:8c:85: ba:bb:56:ad:db:65:57:e5:ed:c8:98:11:1c:ee:22: 37:92:2c:cf:90:15:d0:17:48:e4:8e:52:4f:24:58: 75:0c:56:cd:d6:d2:b7:91:74:0d:6f:40:32:5f:f5: be:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:CF:13:29:C0:C1:5C:AA:90:6E:90:C5:70:2A:2A:6E:F2:64:F0:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/d96ed0f1-f0cc-3243-91da-65a52051ee9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:30:8a:6a:b0:e5:00:46:6c:ef:9b:45:e1:8f:a6:bb:fd:7a: c9:f0:f4:31:9b:c6:3d:ba:60:2b:3e:e2:9c:65:31:06:77:32: c2:14:d9:aa:ef:a4:c5:05:7e:86:b6:c9:0a:c0:db:39:41:f3: b6:7d:1b:23:a5:c2:7d:b1:12:c8:ce:c8:9b:de:48:b6:1f:94: cc:50:eb:b2:18:7a:db:60:78:a2:b6:0f:fa:c2:3b:48:00:1a: 76:ca:59:bf:70:a1:6a:2b:17:92:b7:02:40:91:9e:4b:f1:91: 1a:6d:d1:e0:0f:cc:22:d2:b2:40:a4:09:39:5b:4a:99:6f:9b: 05:10:0a:a4:d5:cb:53:8a:36:e7:6f:06:d2:9f:14:ed:00:46: 10:88:c7:34:58:63:dc:89:9a:b0:56:c6:78:55:b1:85:12:6b: ec:88:85:98:ab:29:1c:3e:f8:d7:5b:3e:68:27:77:3a:9c:c2: ba:47:90:38:c5:df:cf:9d:07:9b:37:1b:10:8a:19:99:41:e2: 49:a1:d0:d5:1a:2d:ba:d8:ac:12:cf:0a:27:9f:f3:21:eb:fb: 9f:f8:0a:17:24:4f:4e:e5:eb:a2:9b:1d:a3:1c:4f:0f:fa:ff: 01:9d:ce:c6:e3:ca:b5:16:bd:5b:e5:54:31:03:ae:e4:4f:45: 8d:aa:0b:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjha9SQbhUe9dp5EIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk ODZhM2IwODUtZTRmMC00YzNhLWFlYzEtMzYwNGJmZmE0NTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyn8VNXVnioFV9jdAjHr4it8iYTnA/8iykNf 6iDxB8KVFG9kfVM9XoG0GMFnLkLezWhm6N918HddRrGETBH03IxhxlRWIrAQ9wHZ c0aHHh3B+i0n/MR/+n9tQ2YXRp6nwGatCXQhEsdvv7c6kISrQkhAyFeYrLZL883O LUbMNvgJR3dr2BCr0Y4+vZMZAbVCXL2KdkivZg0EE4n3vAcsTzx9oHmwQNJXUA38 1LKKdQw0AbhB6iA5v3bJCnQiUo8Q7e3WJiTwMd83bs9Rt1W1jIW6u1at22VX5e3I mBEc7iI3kizPkBXQF0jkjlJPJFh1DFbN1tK3kXQNb0AyX/W+jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKDPEynAwVyqkG6QxXAqKm7yZPDNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvZDk2ZWQwZjEtZjBjYy0z MjQzLTkxZGEtNjVhNTIwNTFlZTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx204MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJUwimqw5QBGbO+bReGPprv9esnw9DGbxj26YCs+4pxlMQZ3MsIU2arv pMUFfoa2yQrA2zlB87Z9GyOlwn2xEsjOyJveSLYflMxQ67IYettgeKK2D/rCO0gA GnbKWb9woWorF5K3AkCRnkvxkRpt0eAPzCLSskCkCTlbSplvmwUQCqTVy1OKNudv BtKfFO0ARhCIxzRYY9yJmrBWxnhVsYUSa+yIhZirKRw++NdbPmgndzqcwrpHkDjF 38+dB5s3GxCKGZlB4kmh0NUaLbrYrBLPCief8yHr+5/4ChckT07l66KbHaMcTw/6 /wGdzsbjyrUWvVvlVDEDruRPRY2qC4k= -----END CERTIFICATE-----Generated at Sat Apr 12 14:02:43 2025 by rpki-client