$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/705b82bb-d57d-3c94-b6aa-fe680f59a86d.roa File: 705b82bb-d57d-3c94-b6aa-fe680f59a86d.roa (raw, json) Hash identifier: JpKdiMCQeGj6MEtysEy6OV10m1MadNhdn8PWVBtJRdU= Subject key identifier: 60:22:38:6A:B2:20:A0:F7:4D:5C:3C:ED:35:30:12:08:D1:1F:7A:07 Certificate issuer: /CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c Certificate serial: 010D0C9F43285848EF6165172AB391FFA0724C80 Authority key identifier: 27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/705b82bb-d57d-3c94-b6aa-fe680f59a86d.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 125 IP address blocks: 199.62.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:65:17:2a:b3:91:ff:a0:72:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=b147e81c-79d4-4c13-8028-7edd8778b3d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:82:a6:00:00:61:b5:8d:97:de:e1:44:e6:11: 76:aa:fd:45:ad:3a:8f:ae:b0:07:9a:9f:f6:06:09: 30:4a:e6:a0:4e:6d:81:09:ff:61:3a:23:9a:a2:dc: 44:43:27:a1:77:e8:9c:c9:84:e3:6c:fa:d2:9b:ce: 18:7b:4a:51:5b:45:9c:2c:98:15:93:f4:c5:91:0d: b0:b5:f5:04:a8:3a:d5:89:67:c4:5b:3e:48:ee:06: ea:d4:fa:12:0f:12:32:eb:9b:88:e8:8f:b4:f4:bc: 7d:6c:9a:17:76:21:d6:3e:07:8b:6e:0c:df:be:ad: 34:d6:47:0b:4a:bd:a0:38:bb:cf:01:ab:95:62:76: d6:c7:de:ff:4b:46:e8:1b:3d:63:b7:78:eb:a6:2e: 64:99:e9:c9:05:1a:da:6c:b3:fa:d0:da:4b:c8:8f: 55:4b:8d:38:07:3f:aa:24:a2:4c:ea:2c:51:c3:6f: 0e:22:37:c1:ca:53:91:24:1f:03:7e:d0:95:1d:1e: a9:72:b2:0b:9f:18:64:66:95:4f:39:b0:c2:3c:a5: 7a:e6:4a:f1:82:cc:fb:30:09:04:3c:6c:7e:5b:10: 2a:e3:50:4c:59:dd:c7:b7:3e:47:9c:c6:34:a5:cd: 5d:15:7c:2b:9b:b4:7a:96:33:f2:6f:90:7a:eb:9e: 8f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:22:38:6A:B2:20:A0:F7:4D:5C:3C:ED:35:30:12:08:D1:1F:7A:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/705b82bb-d57d-3c94-b6aa-fe680f59a86d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl X509v3 Authority Key Identifier: keyid:27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer sbgp-ipAddrBlock: critical IPv4: 199.62.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:16:31:46:7c:9e:0b:4a:c5:d1:2c:4b:ac:2d:42:d6:94:32: e3:8e:dd:46:0b:d2:55:80:e4:23:4d:9b:bf:fa:10:e2:cf:a0: 0a:bf:aa:d3:59:db:4d:21:08:ea:1f:62:cd:51:ac:23:81:24: 7b:7b:47:99:80:00:c8:30:a8:88:92:fb:1e:c8:ce:31:98:49: 3d:56:36:51:76:a2:15:7d:ef:a9:ee:0d:5e:88:d8:da:60:bb: d7:84:b5:f4:56:aa:35:79:71:41:06:1a:e1:ee:74:df:3d:3d: 89:dc:41:ad:63:f9:33:06:5b:34:72:91:82:25:a7:2c:5a:db: be:4b:86:f8:b3:c4:23:de:80:f1:c8:2f:a6:a8:44:4c:c3:61: fb:41:0c:58:c7:dc:88:e6:d2:c0:23:9e:f5:82:43:44:e1:57: 49:32:35:71:15:52:a4:00:28:cc:cc:0f:1a:cd:19:ed:75:b5: f4:28:15:4b:3c:aa:86:ce:9a:04:c7:a7:c0:1c:0c:85:1b:de: 51:b1:f9:85:1b:5c:57:4f:1e:dc:c5:46:df:34:6a:85:23:0d: 40:fa:84:64:2e:ae:06:4d:cc:e2:ef:17:a7:f8:1c:a7:ce:27: 3b:5e:24:74:0e:dd:0d:41:fa:31:f0:87:17:7f:6b:b9:ee:67: e4:3f:53:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYWUXKrOR/6ByTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIzMTA3N2QtMDU1OS00ZTdhLTljZGYtZmUwMGE1MTJh YjVjMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk YjE0N2U4MWMtNzlkNC00YzEzLTgwMjgtN2VkZDg3NzhiM2Q4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIKmAABhtY2X3uFE5hF2qv1FrTqPrrAHmp/2 BgkwSuagTm2BCf9hOiOaotxEQyehd+icyYTjbPrSm84Ye0pRW0WcLJgVk/TFkQ2w tfUEqDrViWfEWz5I7gbq1PoSDxIy65uI6I+09Lx9bJoXdiHWPgeLbgzfvq001kcL Sr2gOLvPAauVYnbWx97/S0boGz1jt3jrpi5kmenJBRrabLP60NpLyI9VS404Bz+q JKJM6ixRw28OIjfBylORJB8DftCVHR6pcrILnxhkZpVPObDCPKV65krxgsz7MAkE PGx+WxAq41BMWd3Htz5HnMY0pc1dFXwrm7R6ljPyb5B6656PewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGAiOGqyIKD3TVw87TUwEgjRH3oHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MjMx MDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAwYTUxMmFiNWMvNzA1YjgyYmItZDU3ZC0z Yzk0LWI2YWEtZmU2ODBmNTlhODZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODIzMTA3N2QtMDU1OS00ZTdhLTlj ZGYtZmUwMGE1MTJhYjVjLzgyMzEwNzdkLTA1NTktNGU3YS05Y2RmLWZlMDBhNTEy YWI1Yy5jcmwwHwYDVR0jBBgwFoAUJ1dCrsqoI+3BIFyf8CNlXQVl+3YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MjMxMDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAw YTUxMmFiNWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxz48MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMWMUZ8ngtKxdEsS6wtQtaUMuOO3UYL0lWA5CNNm7/6EOLPoAq/qtNZ 200hCOofYs1RrCOBJHt7R5mAAMgwqIiS+x7IzjGYST1WNlF2ohV976nuDV6I2Npg u9eEtfRWqjV5cUEGGuHudN89PYncQa1j+TMGWzRykYIlpyxa275LhvizxCPegPHI L6aoREzDYftBDFjH3Ijm0sAjnvWCQ0ThV0kyNXEVUqQAKMzMDxrNGe11tfQoFUs8 qobOmgTHp8AcDIUb3lGx+YUbXFdPHtzFRt80aoUjDUD6hGQurgZNzOLvF6f4HKfO JzteJHQO3Q1B+jHwhxd/a7nuZ+Q/U8I= -----END CERTIFICATE-----Generated at Fri Apr 11 23:05:53 2025 by rpki-client