$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/da80a88c-e41c-3b72-a88e-1692bc3fc8e3.roa File: da80a88c-e41c-3b72-a88e-1692bc3fc8e3.roa (raw, json) Hash identifier: YtDiYXyPpFytQLNRn9RIzM6MT3yW4T0RG/R9PK3+O7s= Subject key identifier: 69:15:04:1D:62:27:AE:6D:3A:D5:32:90:59:09:DB:03:DB:DA:42:DC Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F43285849F17FCE3F7146012CDCCCAE00 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/da80a88c-e41c-3b72-a88e-1692bc3fc8e3.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 3754 IP address blocks: 199.109.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:ce:3f:71:46:01:2c:dc:cc:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=e73df908-9870-40d0-85f2-bb5900423e29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:53:6f:02:02:62:18:68:c2:ff:83:3e:a7:6e: 68:3c:94:a9:44:84:be:f2:51:8c:c2:77:be:4e:9f: 04:d4:2e:dd:1a:81:ab:3a:2e:d4:39:37:8f:25:1e: 0a:ad:5e:d5:9f:f2:59:60:8a:cc:08:01:d3:56:11: bc:0b:29:b4:1b:10:b9:b1:6b:3d:fe:5a:af:82:a6: f8:46:43:31:85:d8:9a:9f:df:d9:43:89:4c:4d:ae: e8:f5:33:3d:12:b6:6c:f6:5c:93:13:34:15:d3:3f: 53:48:5a:63:f7:f7:a1:a7:e0:29:44:19:85:40:17: 71:d9:c8:73:76:94:5b:03:f0:ec:90:f1:27:d4:3d: 8d:e9:14:d0:95:8f:93:a8:20:a4:9e:2e:37:ec:b2: 66:f2:00:17:9a:15:1c:68:77:83:0a:6a:44:b0:2a: 03:b3:07:a2:93:01:c4:cd:e8:f5:c3:3e:38:44:1d: 5d:ec:a5:10:7c:c4:2e:e7:eb:08:f6:8d:10:af:40: f4:66:d8:e2:dd:8a:4b:45:0a:44:c4:19:e6:d4:35: f6:65:99:90:76:8e:78:2d:79:ca:95:8c:a7:90:3f: 56:c2:c2:6a:d2:1b:7d:ab:31:ea:de:7e:c1:50:31: 4c:bc:05:fa:fe:da:5e:27:64:f9:94:04:7d:82:aa: fc:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:15:04:1D:62:27:AE:6D:3A:D5:32:90:59:09:DB:03:DB:DA:42:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/da80a88c-e41c-3b72-a88e-1692bc3fc8e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:03:27:0a:3d:29:b3:ee:3e:53:5d:cc:a0:71:c8:2b:1d:e3: ad:0a:e6:5c:24:bb:aa:c1:53:86:98:b3:86:1f:2d:82:d4:18: 1a:af:1f:8b:13:f2:86:73:62:68:57:91:23:00:4f:3e:42:95: 67:fa:01:2f:d5:bf:3d:25:92:28:97:43:8f:2c:b2:4f:ca:b7: 52:1e:c1:a5:40:57:01:8c:7a:e9:f7:12:99:b1:e1:17:14:fb: 21:45:e2:03:8f:e9:d7:77:ff:06:35:70:82:23:b3:f1:47:1b: fd:43:cc:ac:36:53:78:59:48:be:6b:48:90:9c:7c:25:8d:bb: 62:ef:69:13:60:fe:83:39:52:7f:4f:97:57:ea:19:a8:ed:a5: 21:0e:f7:cd:f5:1d:1d:6a:5a:89:74:96:28:09:6d:5f:ca:7c: aa:6f:82:90:4f:82:8f:73:20:8d:19:62:a7:b5:28:0b:a1:1a: e5:0d:25:61:dd:ce:d8:ae:fb:d0:8c:6a:21:de:3a:30:d2:72: d4:1c:04:58:6d:9e:ec:a1:87:c3:56:76:4c:0c:e0:d3:32:4c: c1:6d:02:52:77:c1:9f:16:ab:c0:14:79:38:9c:b6:a9:78:e6: 48:18:5a:b5:73:ef:5b:73:5a:53:37:e0:b0:2b:26:61:7b:7f: 3b:43:c9:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf84/cUYBLNzMrgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk ZTczZGY5MDgtOTg3MC00MGQwLTg1ZjItYmI1OTAwNDIzZTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVNvAgJiGGjC/4M+p25oPJSpRIS+8lGMwne+ Tp8E1C7dGoGrOi7UOTePJR4KrV7Vn/JZYIrMCAHTVhG8Cym0GxC5sWs9/lqvgqb4 RkMxhdian9/ZQ4lMTa7o9TM9ErZs9lyTEzQV0z9TSFpj9/ehp+ApRBmFQBdx2chz dpRbA/DskPEn1D2N6RTQlY+TqCCkni437LJm8gAXmhUcaHeDCmpEsCoDsweikwHE zej1wz44RB1d7KUQfMQu5+sI9o0Qr0D0Ztji3YpLRQpExBnm1DX2ZZmQdo54LXnK lYynkD9WwsJq0ht9qzHq3n7BUDFMvAX6/tpeJ2T5lAR9gqr8PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGkVBB1iJ65tOtUykFkJ2wPb2kLcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvZGE4MGE4OGMtZTQxYy0z YjcyLWE4OGUtMTY5MmJjM2ZjOGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx21UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKEDJwo9KbPuPlNdzKBxyCsd460K5lwku6rBU4aYs4YfLYLUGBqvH4sT 8oZzYmhXkSMATz5ClWf6AS/Vvz0lkiiXQ48ssk/Kt1IewaVAVwGMeun3Epmx4RcU +yFF4gOP6dd3/wY1cIIjs/FHG/1DzKw2U3hZSL5rSJCcfCWNu2LvaRNg/oM5Un9P l1fqGajtpSEO9831HR1qWol0ligJbV/KfKpvgpBPgo9zII0ZYqe1KAuhGuUNJWHd ztiu+9CMaiHeOjDSctQcBFhtnuyhh8NWdkwM4NMyTMFtAlJ3wZ8Wq8AUeTictql4 5kgYWrVz71tzWlM34LArJmF7fztDyVc= -----END CERTIFICATE-----Generated at Sat Jun 7 04:00:06 2025 by rpki-client