$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/da80a88c-e41c-3b72-a88e-1692bc3fc8e3.roa File: da80a88c-e41c-3b72-a88e-1692bc3fc8e3.roa (raw, json) Hash identifier: gNVaHIpABZEMHF4AdpR2dI+jfzUfI5XhcmirDr2iSxM= Subject key identifier: 94:D7:4C:13:A0:5E:D5:6A:60:66:BA:5A:76:EE:53:DD:4C:96:10:D5 Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F432858491246C3A905C44E6DD92BD5A0 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/da80a88c-e41c-3b72-a88e-1692bc3fc8e3.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 3754 IP address blocks: 199.109.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:c3:a9:05:c4:4e:6d:d9:2b:d5:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=1080aebb-7c8b-4920-8304-b52bc068c567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:6b:08:d9:11:bd:a0:b1:00:c4:32:70:27:29: 81:05:5c:13:34:8d:48:97:46:1c:fc:69:d4:fa:31: 0a:d3:aa:be:0e:92:ff:b8:f2:99:25:b3:9a:d5:66: 26:05:8c:2c:b6:de:a2:3b:c0:c0:e6:11:a2:35:b7: 1c:14:a6:44:dc:ed:5d:be:ef:ad:16:67:9e:9a:d2: c9:e2:79:40:70:a7:b7:f4:ae:20:fe:1f:d1:86:dc: 12:52:8c:b9:05:ff:ef:5e:2c:f5:fe:40:75:09:0a: c6:4f:38:5b:4d:0c:cb:e0:86:ee:c3:4e:95:2e:0f: 60:05:16:9b:dc:bd:31:85:4f:46:c1:a8:87:6b:d5: 4a:15:9d:eb:5f:e9:ad:4e:d3:40:eb:69:c9:c1:80: e5:8a:29:fa:bf:83:eb:05:7b:6b:c5:86:d5:84:a0: e0:cd:bc:32:3f:86:09:8c:07:7a:4a:82:3c:6f:7b: a2:1a:bd:6f:30:ea:c9:2d:0c:64:c7:32:15:1e:1b: 76:48:9f:e3:9d:8b:7c:69:4a:8b:20:a7:ff:bb:04: 49:aa:64:fc:ae:e4:21:b2:03:0a:09:df:a0:67:1d: 0d:db:ee:74:9e:df:6d:93:e7:5a:b5:cd:c8:aa:15: 02:5d:10:c3:c9:da:60:9d:3a:e7:25:b6:0d:e5:6c: f0:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:D7:4C:13:A0:5E:D5:6A:60:66:BA:5A:76:EE:53:DD:4C:96:10:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/da80a88c-e41c-3b72-a88e-1692bc3fc8e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:74:23:0c:13:99:b7:df:c8:90:e8:c8:2a:49:45:7b:90:85: 5f:97:bf:35:82:56:40:a7:77:24:35:a1:64:2e:59:3a:bf:fc: 39:89:6e:16:13:d8:6b:43:f5:c2:77:57:c1:a0:e9:7a:7c:6c: 08:28:4b:16:29:4d:f6:77:6f:9b:a4:a7:d7:ae:7f:32:50:b6: 49:ba:a7:de:d3:41:d2:dc:f4:20:07:ff:62:86:9a:19:43:c3: ea:95:21:2d:74:0e:53:8e:02:ab:ae:37:30:2a:04:d2:7a:d7: 75:e3:85:ce:ac:44:c0:4d:38:61:2d:68:77:90:6f:23:62:f3: 2d:e2:b0:b0:fb:2b:e9:34:34:e6:83:59:e0:0d:0a:22:e1:fd: bc:91:e7:ea:8d:16:4a:25:e9:eb:5f:56:33:93:fd:ac:9b:bc: 4d:08:66:e4:01:19:a9:ab:54:60:25:39:be:55:6e:80:6f:80: 63:88:5e:23:28:50:a5:3d:1b:52:7a:e8:40:07:0a:43:ab:e7: de:fa:d6:f0:70:cf:b3:fa:c7:be:92:ec:c5:9f:7a:63:51:10: 4d:cb:a2:8a:2d:29:37:42:23:12:ff:5e:a7:d8:1e:6d:a4:63: 2a:b9:49:2a:07:8a:e1:64:0f:96:99:d1:dd:3e:8b:4e:f8:b1: 7f:60:e8:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRsOpBcRObdkr1aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk MTA4MGFlYmItN2M4Yi00OTIwLTgzMDQtYjUyYmMwNjhjNTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGsI2RG9oLEAxDJwJymBBVwTNI1Il0Yc/GnU +jEK06q+DpL/uPKZJbOa1WYmBYwstt6iO8DA5hGiNbccFKZE3O1dvu+tFmeemtLJ 4nlAcKe39K4g/h/RhtwSUoy5Bf/vXiz1/kB1CQrGTzhbTQzL4Ibuw06VLg9gBRab 3L0xhU9GwaiHa9VKFZ3rX+mtTtNA62nJwYDliin6v4PrBXtrxYbVhKDgzbwyP4YJ jAd6SoI8b3uiGr1vMOrJLQxkxzIVHht2SJ/jnYt8aUqLIKf/uwRJqmT8ruQhsgMK Cd+gZx0N2+50nt9tk+datc3IqhUCXRDDydpgnTrnJbYN5WzwuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJTXTBOgXtVqYGa6WnbuU91MlhDVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvZGE4MGE4OGMtZTQxYy0z YjcyLWE4OGUtMTY5MmJjM2ZjOGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx21UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIR0IwwTmbffyJDoyCpJRXuQhV+XvzWCVkCndyQ1oWQuWTq//DmJbhYT 2GtD9cJ3V8Gg6Xp8bAgoSxYpTfZ3b5ukp9eufzJQtkm6p97TQdLc9CAH/2KGmhlD w+qVIS10DlOOAquuNzAqBNJ613Xjhc6sRMBNOGEtaHeQbyNi8y3isLD7K+k0NOaD WeANCiLh/byR5+qNFkol6etfVjOT/aybvE0IZuQBGamrVGAlOb5VboBvgGOIXiMo UKU9G1J66EAHCkOr59761vBwz7P6x76S7MWfemNREE3LoootKTdCIxL/XqfYHm2k Yyq5SSoHiuFkD5aZ0d0+i074sX9g6CA= -----END CERTIFICATE-----Generated at Sat Apr 12 13:29:37 2025 by rpki-client