$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/f1c559fd-c240-3620-885a-002951ebf9d3.roa File: f1c559fd-c240-3620-885a-002951ebf9d3.roa (raw, json) Hash identifier: QtZQ7T8rTTlLokfYLVQmPfBxGVlCTUwJdi03GHOmcMQ= Subject key identifier: F9:DC:2F:34:3B:21:B5:04:EC:63:20:4D:61:3A:B8:42:02:00:F8:16 Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F432858496A199C06ECAFB3E26B8FC300 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/f1c559fd-c240-3620-885a-002951ebf9d3.roa Signing time: Fri 04 Apr 2025 13:00:59 +0000 ROA not before: Fri 04 Apr 2025 13:00:59 +0000 ROA not after: Thu 03 Jul 2025 13:00:59 +0000 asID: 3754 IP address blocks: 199.109.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:19:9c:06:ec:af:b3:e2:6b:8f:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: Apr 4 13:00:59 2025 GMT Not After : Jul 3 13:00:59 2025 GMT Subject: CN=38f74691-c33d-408d-876d-fedac4f74b88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:88:eb:e1:a2:16:23:37:20:15:c3:a3:88:d0: 73:ef:95:bb:d4:3a:d2:cf:4a:52:fd:d6:9b:f5:a7: 61:94:da:5e:28:29:13:37:bc:59:70:66:07:c1:33: af:8a:dc:4e:66:a1:f0:7a:f0:a1:af:73:20:cd:5d: 8c:26:e1:97:c0:72:3b:84:72:81:f4:32:40:fe:d9: 77:2d:db:fd:e3:76:bd:a6:25:c8:be:8c:52:41:cc: 25:a1:f5:84:5a:57:6b:41:17:33:44:c1:26:ef:39: ef:28:88:09:e3:bd:89:dc:cb:fc:db:a4:4e:0b:6e: 30:fb:4b:00:48:12:a1:0c:09:f7:75:46:e6:6e:15: 20:ad:ee:85:e5:94:99:fc:c0:45:37:28:50:30:6c: 51:2f:50:27:1c:da:00:b2:dd:b1:33:11:5a:20:dc: 3f:53:a4:c4:a0:88:85:e2:55:af:93:cb:4e:f7:83: 00:e3:ab:79:d9:23:79:89:27:a1:bf:e8:2f:d4:bf: da:71:2b:b4:71:11:75:91:3e:38:71:fa:7f:b3:83: 68:4d:13:fe:4a:e5:80:ef:39:e5:16:49:0d:53:73: 9c:d0:66:f5:2b:c8:07:5e:00:30:c5:c5:d2:ff:c6: 9f:c6:f7:15:e4:f7:a3:dd:0e:0a:3e:be:02:39:69: 53:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:DC:2F:34:3B:21:B5:04:EC:63:20:4D:61:3A:B8:42:02:00:F8:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/f1c559fd-c240-3620-885a-002951ebf9d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:26:ea:b8:10:8e:f5:19:c5:d7:66:67:50:e1:4b:a6:11:12: 89:2e:fd:87:48:ab:e7:28:3f:61:c0:88:16:8a:09:06:ad:e9: cf:71:33:43:cc:8d:81:b2:8d:2a:ee:fe:d8:eb:1b:90:5d:77: 0d:07:b6:22:e5:e2:d9:a1:00:b2:67:37:70:b4:a5:f8:c5:53: a8:67:40:45:cd:c1:56:19:d5:4c:27:88:ca:b3:9d:05:38:7f: 9a:37:0e:52:82:9a:f7:a5:67:33:65:6d:e4:a2:a3:d4:3d:7e: bf:19:5a:cb:4a:b0:4f:4e:4b:03:86:c7:05:83:9e:5c:4a:f0: 0c:f2:0e:53:1f:6d:22:b9:47:34:ab:fd:ce:bc:34:1d:7c:8e: 73:47:2f:85:3c:1b:4c:30:1b:ff:42:ce:eb:60:7e:56:a1:8d: b3:19:e7:00:c5:88:d8:db:57:07:58:0d:8e:9f:18:c3:1d:aa: 7f:29:05:07:8e:78:4f:9a:0b:cb:96:a5:5a:7c:77:7a:4b:87: cc:d9:f8:8d:70:c1:51:6f:b2:a3:95:b5:1d:54:b8:54:ed:a1: a6:2b:b8:59:f6:b6:58:1f:c4:61:16:99:3d:b0:57:d4:84:54: 52:76:00:e7:16:49:f1:f7:5e:77:6e:cf:af:7b:ee:36:ae:46: 56:1c:68:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElqGZwG7K+z4muPwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk MzhmNzQ2OTEtYzMzZC00MDhkLTg3NmQtZmVkYWM0Zjc0Yjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYjr4aIWIzcgFcOjiNBz75W71DrSz0pS/dab 9adhlNpeKCkTN7xZcGYHwTOvitxOZqHwevChr3MgzV2MJuGXwHI7hHKB9DJA/tl3 Ldv943a9piXIvoxSQcwlofWEWldrQRczRMEm7znvKIgJ472J3Mv826ROC24w+0sA SBKhDAn3dUbmbhUgre6F5ZSZ/MBFNyhQMGxRL1AnHNoAst2xMxFaINw/U6TEoIiF 4lWvk8tO94MA46t52SN5iSehv+gv1L/acSu0cRF1kT44cfp/s4NoTRP+SuWA7znl FkkNU3Oc0Gb1K8gHXgAwxcXS/8afxvcV5Pej3Q4KPr4COWlTDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPncLzQ7IbUE7GMgTWE6uEICAPgWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvZjFjNTU5ZmQtYzI0MC0z NjIwLTg4NWEtMDAyOTUxZWJmOWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx20JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwm6rgQjvUZxddmZ1DhS6YREoku/YdIq+coP2HAiBaKCQat6c9xM0PM jYGyjSru/tjrG5Bddw0HtiLl4tmhALJnN3C0pfjFU6hnQEXNwVYZ1UwniMqznQU4 f5o3DlKCmvelZzNlbeSio9Q9fr8ZWstKsE9OSwOGxwWDnlxK8AzyDlMfbSK5RzSr /c68NB18jnNHL4U8G0wwG/9CzutgflahjbMZ5wDFiNjbVwdYDY6fGMMdqn8pBQeO eE+aC8uWpVp8d3pLh8zZ+I1wwVFvsqOVtR1UuFTtoaYruFn2tlgfxGEWmT2wV9SE VFJ2AOcWSfH3Xnduz6977jauRlYcaIk= -----END CERTIFICATE-----Generated at Sat Apr 12 14:21:35 2025 by rpki-client