$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/e85c81f7-adca-367d-96d5-d5e2b070ff5e.roa File: e85c81f7-adca-367d-96d5-d5e2b070ff5e.roa (raw, json) Hash identifier: 5nRTcnClEUYofMSxUDhOnysn/fztLZpCSgCVS7TRDVM= Subject key identifier: 20:94:4F:CD:D4:76:94:D6:12:9D:7B:E7:C3:85:21:A7:F8:EB:54:5C Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F4328584964843CB30019511B8B900780 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/e85c81f7-adca-367d-96d5-d5e2b070ff5e.roa Signing time: Wed 02 Apr 2025 13:01:01 +0000 ROA not before: Wed 02 Apr 2025 13:01:01 +0000 ROA not after: Tue 01 Jul 2025 13:01:01 +0000 asID: 5719 IP address blocks: 199.109.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:64:84:3c:b3:00:19:51:1b:8b:90:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: Apr 2 13:01:01 2025 GMT Not After : Jul 1 13:01:01 2025 GMT Subject: CN=4056ae92-d642-41b9-a166-bc594d3c2890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7f:05:c6:35:17:15:e3:1f:ba:53:26:d6:b0: 73:f5:b3:4a:7d:a4:9b:30:5e:31:2c:8d:a5:95:4a: f2:73:84:ba:d0:0c:8b:e7:3f:c8:81:da:c4:54:2a: d5:7b:83:67:89:bb:a0:b1:db:32:9d:50:69:e0:4a: 77:5c:70:91:65:59:5d:22:22:73:df:fd:cb:b9:b5: c8:2b:99:79:81:8c:45:75:bf:19:ac:90:35:8b:36: 1a:69:db:97:49:49:0c:8b:b0:91:25:dc:47:0d:3a: 1d:b4:2e:4b:a9:76:df:b6:f1:b7:1c:e6:68:37:c0: 52:d6:53:a9:e2:30:6b:77:e0:0d:fb:b3:c1:4a:60: 27:4f:06:29:fd:50:84:07:06:28:03:c3:b9:cd:6e: ea:f3:3d:8d:63:09:6a:9e:06:a5:5b:5b:c0:a9:f2: 62:2e:a1:4e:11:a3:0f:24:cb:0c:34:8f:8f:c7:ab: d7:ca:a5:06:95:0f:a4:06:5d:62:2c:e9:9f:80:22: 6b:f2:44:5d:7f:cc:45:37:cd:b5:be:f5:47:b5:10: 57:90:5d:a9:9b:5d:da:1d:ad:5f:3b:1f:43:2f:b3: e2:6b:5d:d8:6b:19:4b:2f:b9:02:bb:fb:8c:32:e0: 0f:71:69:74:11:e3:02:d7:51:9d:85:bd:47:e1:19: f7:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:94:4F:CD:D4:76:94:D6:12:9D:7B:E7:C3:85:21:A7:F8:EB:54:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/e85c81f7-adca-367d-96d5-d5e2b070ff5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:21:a9:b9:2c:71:20:04:e9:ad:64:97:3b:d5:62:1f:d9:3c: 84:72:e1:49:3c:ce:19:08:5a:97:74:67:5a:24:83:d1:d3:7a: 70:3a:4f:bc:a6:38:11:a3:32:a6:da:90:fa:62:25:ad:5b:e0: 81:c6:0b:d2:36:39:76:63:c9:8e:df:62:d3:f3:d3:2e:8f:b6: 47:cf:c4:75:52:b2:78:2d:75:0d:66:fa:9a:4d:7c:3f:1a:16: b1:99:49:1f:c9:bc:3b:0b:c5:ee:cd:fd:86:63:61:1e:a7:0e: 79:b4:17:f7:a9:fb:26:6d:a8:b9:a8:cc:39:af:d8:84:fc:d5: 25:f4:a2:fe:2f:8a:90:7c:8b:24:1a:06:2c:ed:6b:b8:c3:f2: b6:d5:72:97:48:33:7a:06:36:af:4f:b1:ab:91:f7:61:a2:56: 09:d0:19:11:ce:16:8e:a1:f1:5b:76:ef:8a:c6:5b:91:83:74: 50:89:5c:08:c0:2a:cf:7d:b3:10:42:b9:46:77:1b:8a:bd:e1: b7:ed:7d:ae:0c:74:e9:28:03:b5:43:79:c1:e4:e6:e4:fb:f6: 7e:5e:02:5b:bc:52:11:af:11:86:9c:84:9a:3a:b5:e9:a9:4d: 12:aa:48:36:20:73:21:8f:96:c9:82:64:47:c3:04:a0:86:c2: 87:93:bf:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElkhDyzABlRG4uQB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk NDA1NmFlOTItZDY0Mi00MWI5LWExNjYtYmM1OTRkM2MyODkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsX8FxjUXFeMfulMm1rBz9bNKfaSbMF4xLI2l lUryc4S60AyL5z/IgdrEVCrVe4NnibugsdsynVBp4Ep3XHCRZVldIiJz3/3LubXI K5l5gYxFdb8ZrJA1izYaaduXSUkMi7CRJdxHDTodtC5LqXbftvG3HOZoN8BS1lOp 4jBrd+AN+7PBSmAnTwYp/VCEBwYoA8O5zW7q8z2NYwlqngalW1vAqfJiLqFOEaMP JMsMNI+Px6vXyqUGlQ+kBl1iLOmfgCJr8kRdf8xFN821vvVHtRBXkF2pm13aHa1f Ox9DL7Pia13YaxlLL7kCu/uMMuAPcWl0EeMC11Gdhb1H4Rn3NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCCUT83UdpTWEp1758OFIaf461RcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvZTg1YzgxZjctYWRjYS0z NjdkLTk2ZDUtZDVlMmIwNzBmZjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx20sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKshqbkscSAE6a1klzvVYh/ZPIRy4Uk8zhkIWpd0Z1okg9HTenA6T7ym OBGjMqbakPpiJa1b4IHGC9I2OXZjyY7fYtPz0y6PtkfPxHVSsngtdQ1m+ppNfD8a FrGZSR/JvDsLxe7N/YZjYR6nDnm0F/ep+yZtqLmozDmv2IT81SX0ov4vipB8iyQa Bizta7jD8rbVcpdIM3oGNq9PsauR92GiVgnQGRHOFo6h8Vt274rGW5GDdFCJXAjA Ks99sxBCuUZ3G4q94bftfa4MdOkoA7VDecHk5uT79n5eAlu8UhGvEYachJo6temp TRKqSDYgcyGPlsmCZEfDBKCGwoeTv+k= -----END CERTIFICATE-----Generated at Sat Apr 12 13:49:52 2025 by rpki-client