$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/564dab34-32c7-3d2a-89a2-0f3e970ee2e5.roa File: 564dab34-32c7-3d2a-89a2-0f3e970ee2e5.roa (raw, json) Hash identifier: A2n5fdmekIq8t7Pbj6u2smNaFLBl0c/UIOo9jqGxTyQ= Subject key identifier: 2A:AC:E5:66:84:27:EB:84:89:69:6E:24:65:78:F0:DE:1D:0B:9A:FE Certificate issuer: /CN=1380a44d-7851-4eb6-8887-413917dcdc12 Certificate serial: 010D0C9F432858496CE45966C55781B498F7FF80 Authority key identifier: 6C:37:E1:61:68:B4:CF:88:64:11:CB:68:E9:4A:65:72:4A:96:54:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/564dab34-32c7-3d2a-89a2-0f3e970ee2e5.roa Signing time: Sat 05 Apr 2025 13:01:01 +0000 ROA not before: Sat 05 Apr 2025 13:01:01 +0000 ROA not after: Fri 04 Jul 2025 13:01:01 +0000 asID: 132369 IP address blocks: 199.101.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/1380a44d-7851-4eb6-8887-413917dcdc12.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/1380a44d-7851-4eb6-8887-413917dcdc12.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6c:e4:59:66:c5:57:81:b4:98:f7:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1380a44d-7851-4eb6-8887-413917dcdc12 Validity Not Before: Apr 5 13:01:01 2025 GMT Not After : Jul 4 13:01:01 2025 GMT Subject: CN=488e8a6b-1e94-42b1-acd7-425a07db5008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:dc:a2:bd:85:53:2d:4e:d5:ab:c8:7a:44:fe: af:cd:b6:c1:13:72:a3:b9:d9:50:79:4f:1f:55:53: d9:75:0b:98:07:85:00:e8:cd:30:3b:f3:eb:a3:52: 56:0b:2f:8f:ad:c3:2e:8f:b4:3a:8f:4b:04:4c:cb: b4:d1:2d:e7:43:b1:1e:c2:8d:76:c3:a6:03:ee:60: 15:b2:6d:5b:6c:48:1f:4d:d4:fe:47:17:a8:73:3b: f2:0b:c8:1d:71:e5:98:58:5d:a6:bd:26:8c:37:b1: 2e:09:b1:c0:0b:f5:fa:d5:1b:66:ba:87:fa:b5:32: d7:aa:b9:e7:c4:c8:ab:e3:c3:45:10:34:6a:fb:6a: 79:cc:1b:6a:bb:97:fc:0c:b2:81:76:d9:51:28:99: 22:f3:1d:5d:a3:3e:e2:fa:21:35:bc:89:ca:cf:0a: ef:2f:65:3f:4f:a2:30:8f:63:fe:cf:dc:e8:71:fa: e4:00:28:72:fd:aa:0d:4f:fd:a6:77:32:d1:07:2b: e4:bf:ac:19:b8:20:60:1f:f5:7f:08:05:a6:67:8b: 96:0d:f7:c6:e1:c2:2e:7a:81:73:0b:d8:12:07:71: 9c:30:95:11:de:ae:45:82:1e:87:f8:f3:57:fb:13: 2a:d3:6a:4d:46:cf:db:49:e7:5a:ff:38:dc:b1:d1: b9:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:AC:E5:66:84:27:EB:84:89:69:6E:24:65:78:F0:DE:1D:0B:9A:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/564dab34-32c7-3d2a-89a2-0f3e970ee2e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/1380a44d-7851-4eb6-8887-413917dcdc12.crl X509v3 Authority Key Identifier: keyid:6C:37:E1:61:68:B4:CF:88:64:11:CB:68:E9:4A:65:72:4A:96:54:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12.cer sbgp-ipAddrBlock: critical IPv4: 199.101.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:a3:f7:e4:30:a4:db:7a:e4:48:61:d7:78:fe:bb:d9:c8:0a: 17:97:2b:f7:07:13:c8:b3:ea:e1:c7:25:ee:87:d3:fe:13:ba: 5f:43:40:29:ca:d2:4b:09:97:30:98:bb:09:10:85:8b:57:a9: 66:5a:0e:84:ca:ea:11:ad:fd:8a:ef:cd:c3:7a:e3:b3:23:53: e7:73:87:16:56:fa:d9:d3:83:05:03:9e:87:43:55:ea:07:ac: 11:ad:7f:a4:4e:d2:ef:da:84:a3:e7:ed:13:64:72:2c:70:0b: cf:32:fd:69:b3:ac:aa:bf:6f:10:26:f6:26:33:37:0f:55:23: 7c:5a:13:05:e8:75:4b:a7:90:00:bf:0c:2e:04:09:47:b0:0a: b7:4f:dc:6a:be:fa:4b:af:a6:e9:e7:2a:6c:1f:74:00:6f:bb: d8:24:c3:ba:a4:e1:e5:32:51:85:70:d4:c7:e8:40:ba:ec:e6: 4a:24:80:e7:27:06:61:fe:e4:44:7b:1c:0b:95:93:83:5a:fc: 87:09:a3:53:e2:c3:3f:48:4b:13:8d:03:d6:0e:4a:94:5f:f1: 21:3b:d8:ae:bd:cb:bd:07:54:6a:e8:fb:8a:f5:4a:a1:97:a7: 98:c7:49:57:2a:1e:51:08:09:4b:4b:0f:9c:bd:c4:50:1c:09: ec:1a:69:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEls5FlmxVeBtJj3/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTM4MGE0NGQtNzg1MS00ZWI2LTg4ODctNDEzOTE3ZGNk YzEyMB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk NDg4ZThhNmItMWU5NC00MmIxLWFjZDctNDI1YTA3ZGI1MDA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dyivYVTLU7Vq8h6RP6vzbbBE3KjudlQeU8f VVPZdQuYB4UA6M0wO/Pro1JWCy+PrcMuj7Q6j0sETMu00S3nQ7Eewo12w6YD7mAV sm1bbEgfTdT+RxeoczvyC8gdceWYWF2mvSaMN7EuCbHAC/X61Rtmuof6tTLXqrnn xMir48NFEDRq+2p5zBtqu5f8DLKBdtlRKJki8x1doz7i+iE1vInKzwrvL2U/T6Iw j2P+z9zocfrkAChy/aoNT/2mdzLRByvkv6wZuCBgH/V/CAWmZ4uWDffG4cIueoFz C9gSB3GcMJUR3q5Fgh6H+PNX+xMq02pNRs/bSeda/zjcsdG5mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCqs5WaEJ+uEiWluJGV48N4dC5r+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xMzgw YTQ0ZC03ODUxLTRlYjYtODg4Ny00MTM5MTdkY2RjMTIvNTY0ZGFiMzQtMzJjNy0z ZDJhLTg5YTItMGYzZTk3MGVlMmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMTM4MGE0NGQtNzg1MS00ZWI2LTg4 ODctNDEzOTE3ZGNkYzEyLzEzODBhNDRkLTc4NTEtNGViNi04ODg3LTQxMzkxN2Rj ZGMxMi5jcmwwHwYDVR0jBBgwFoAUbDfhYWi0z4hkEcto6UplckqWVJMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xMzgwYTQ0ZC03ODUxLTRlYjYtODg4Ny00MTM5 MTdkY2RjMTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx2V0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ2j9+QwpNt65Ehh13j+u9nICheXK/cHE8iz6uHHJe6H0/4Tul9DQCnK 0ksJlzCYuwkQhYtXqWZaDoTK6hGt/YrvzcN647MjU+dzhxZW+tnTgwUDnodDVeoH rBGtf6RO0u/ahKPn7RNkcixwC88y/WmzrKq/bxAm9iYzNw9VI3xaEwXodUunkAC/ DC4ECUewCrdP3Gq++kuvpunnKmwfdABvu9gkw7qk4eUyUYVw1MfoQLrs5kokgOcn BmH+5ER7HAuVk4Na/IcJo1Piwz9ISxONA9YOSpRf8SE72K69y70HVGro+4r1SqGX p5jHSVcqHlEICUtLD5y9xFAcCewaafw= -----END CERTIFICATE-----Generated at Sat Apr 5 18:24:12 2025 by rpki-client