$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/e4a3a58c-67a2-3fd5-866c-4f873cffd716.roa File: e4a3a58c-67a2-3fd5-866c-4f873cffd716.roa (raw, json) Hash identifier: jXJY8A6Q/G1giAxMt2Q6Sln66yC4TXGXxfVtIHTHB1U= Subject key identifier: 4C:EB:80:EE:6A:93:3B:52:74:6F:33:38:09:FB:F7:B2:AA:A8:1E:EC Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F432858496484422EFF8AE3A6759AF120 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/e4a3a58c-67a2-3fd5-866c-4f873cffd716.roa Signing time: Wed 02 Apr 2025 13:01:01 +0000 ROA not before: Wed 02 Apr 2025 13:01:01 +0000 ROA not after: Tue 01 Jul 2025 13:01:01 +0000 asID: 3756 IP address blocks: 199.109.18.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:64:84:42:2e:ff:8a:e3:a6:75:9a:f1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: Apr 2 13:01:01 2025 GMT Not After : Jul 1 13:01:01 2025 GMT Subject: CN=cbcc7d1a-d56e-444e-b932-5aac399ae51f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0c:8d:57:c0:58:d2:3a:44:97:98:5c:5a:81: 8f:08:b7:04:30:95:42:c6:26:19:01:a0:c9:48:c2: ee:8c:8a:ad:6d:c9:b9:92:6a:44:a3:1f:a4:de:15: c9:3e:b4:07:59:4b:c7:30:62:ee:b4:e3:a1:e1:25: f9:ac:70:04:b1:29:ed:71:0c:2b:39:37:13:51:2f: c0:65:54:7d:53:fc:9b:2e:4c:4e:d1:09:06:aa:46: 9e:52:0f:0c:58:e9:e2:df:83:2b:13:45:e9:20:52: 88:5b:46:19:e6:32:f9:13:31:ad:ce:4f:df:b1:0b: 13:d8:58:46:2a:bf:5f:a2:cc:29:19:13:eb:f9:63: f0:d4:15:16:b1:c4:7c:bd:3a:d7:90:a8:11:84:23: 19:fc:6f:ee:c9:9e:5f:f0:17:2a:b1:de:ce:3c:34: bb:52:6a:07:96:21:b9:9a:56:fe:c5:80:33:be:69: 49:00:7a:78:ae:0b:14:a5:af:be:54:42:31:80:71: 9d:08:65:3c:f6:9a:49:57:fa:b5:9d:7c:01:31:4c: 5a:bd:d2:42:f3:8c:ea:2a:59:17:f2:2e:42:85:6b: d8:12:86:a7:b0:51:96:3a:b0:8b:f4:c9:1b:ba:ab: f5:c6:54:95:24:10:03:ba:63:a6:c4:17:57:a4:8c: f5:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:EB:80:EE:6A:93:3B:52:74:6F:33:38:09:FB:F7:B2:AA:A8:1E:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/e4a3a58c-67a2-3fd5-866c-4f873cffd716.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.18.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:ef:78:ec:3a:44:4f:14:85:1c:b9:49:5c:90:03:53:ac:94: 7a:33:ae:94:a5:0e:9f:ed:d3:d2:ca:d4:f3:f6:db:35:99:5a: 7e:eb:0d:83:61:dd:04:a2:b0:94:a5:79:ba:ef:d5:ac:d8:ad: 27:58:8e:db:4d:e8:e0:33:af:50:26:4e:c7:56:a7:bd:3d:05: 08:4e:c1:5d:14:e1:b4:e7:da:a0:09:fc:4a:f9:16:56:49:6f: db:53:84:31:9d:08:28:f7:45:f5:8d:1a:f2:99:0b:49:84:72: 8e:9a:41:9b:15:cd:83:1f:db:64:ab:58:e4:3b:66:39:36:e9: f3:f6:51:90:46:b3:7d:66:0e:45:35:fb:ff:6a:d9:9b:94:52: 33:59:b2:a8:7a:cf:dd:86:e3:ec:95:f0:2c:03:d5:98:3b:5b: c2:01:59:87:09:7a:ea:db:a6:dd:9e:e2:3a:61:bc:55:99:83: a5:5c:cf:52:0d:29:50:0a:a0:55:40:ce:23:3c:d6:64:68:94: e3:28:7d:a4:f3:f4:60:4a:4c:d8:8a:98:97:f3:9c:6f:7b:1a: e5:b9:bb:33:83:18:89:ef:7e:8f:e1:fd:64:0b:c1:ef:89:84: 38:2e:9e:fe:0b:9d:64:a8:8b:ce:e8:5c:7a:02:30:b4:69:04: f8:69:83:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElkhEIu/4rjpnWa8SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk Y2JjYzdkMWEtZDU2ZS00NDRlLWI5MzItNWFhYzM5OWFlNTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngyNV8BY0jpEl5hcWoGPCLcEMJVCxiYZAaDJ SMLujIqtbcm5kmpEox+k3hXJPrQHWUvHMGLutOOh4SX5rHAEsSntcQwrOTcTUS/A ZVR9U/ybLkxO0QkGqkaeUg8MWOni34MrE0XpIFKIW0YZ5jL5EzGtzk/fsQsT2FhG Kr9foswpGRPr+WPw1BUWscR8vTrXkKgRhCMZ/G/uyZ5f8Bcqsd7OPDS7UmoHliG5 mlb+xYAzvmlJAHp4rgsUpa++VEIxgHGdCGU89ppJV/q1nXwBMUxavdJC84zqKlkX 8i5ChWvYEoansFGWOrCL9Mkbuqv1xlSVJBADumOmxBdXpIz1FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEzrgO5qkztSdG8zOAn797KqqB7sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvZTRhM2E1OGMtNjdhMi0z ZmQ1LTg2NmMtNGY4NzNjZmZkNzE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx20SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAInveOw6RE8UhRy5SVyQA1OslHozrpSlDp/t09LK1PP22zWZWn7rDYNh 3QSisJSlebrv1azYrSdYjttN6OAzr1AmTsdWp709BQhOwV0U4bTn2qAJ/Er5FlZJ b9tThDGdCCj3RfWNGvKZC0mEco6aQZsVzYMf22SrWOQ7Zjk26fP2UZBGs31mDkU1 +/9q2ZuUUjNZsqh6z92G4+yV8CwD1Zg7W8IBWYcJeurbpt2e4jphvFWZg6Vcz1IN KVAKoFVAziM81mRolOMofaTz9GBKTNiKmJfznG97GuW5uzODGInvfo/h/WQLwe+J hDgunv4LnWSoi87oXHoCMLRpBPhpg3k= -----END CERTIFICATE-----Generated at Sat Apr 12 13:37:35 2025 by rpki-client