$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee/77ef8160-1b57-36f9-9b66-e7115d91c659.roa File: 77ef8160-1b57-36f9-9b66-e7115d91c659.roa (raw, json) Hash identifier: NvLL2TjvZSPIl82Qu+HWRqj0Lsv5+xfcPS7s2eX8GT4= Subject key identifier: 38:8E:4C:A4:5D:AE:3E:F6:87:D3:89:CB:31:43:C3:D0:70:C3:33:CF Certificate issuer: /CN=4dfb879f-7966-496a-b35e-d766981846ee Certificate serial: 010D0C9F432858496FAF114EDFA7F7E841F9A4C0 Authority key identifier: 47:A0:89:91:6C:7F:47:53:FB:B8:28:FF:43:4D:96:C5:0F:02:A5:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee/77ef8160-1b57-36f9-9b66-e7115d91c659.roa Signing time: Sun 06 Apr 2025 13:01:01 +0000 ROA not before: Sun 06 Apr 2025 13:01:01 +0000 ROA not after: Sat 05 Jul 2025 13:01:01 +0000 asID: 271 IP address blocks: 199.60.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee/4dfb879f-7966-496a-b35e-d766981846ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee/4dfb879f-7966-496a-b35e-d766981846ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6f:af:11:4e:df:a7:f7:e8:41:f9:a4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dfb879f-7966-496a-b35e-d766981846ee Validity Not Before: Apr 6 13:01:01 2025 GMT Not After : Jul 5 13:01:01 2025 GMT Subject: CN=253e08c6-e8b8-49f7-8550-925963dfc6d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:71:22:6b:df:ac:6d:9a:ed:06:6c:b7:17:19: 5c:18:d7:0f:92:10:34:7f:bc:29:e2:50:71:be:26: 31:e6:62:6e:3d:fa:a5:f8:f4:7a:6f:f5:72:ee:17: d1:67:42:8b:67:5d:0c:a4:dc:5d:1a:c7:0b:99:2b: 0c:2f:eb:c0:29:1a:85:e7:5e:46:a7:0b:e1:19:eb: 2e:46:10:3b:0e:5a:f2:a7:48:50:31:5f:8e:81:fe: a8:ff:06:0e:25:9c:44:02:ba:e2:6f:77:b5:d3:81: e9:78:da:a6:79:84:d0:f6:5f:85:f0:65:f1:6d:57: a6:3f:af:a8:bb:7a:d3:b2:35:66:60:b6:03:fd:6a: 47:6d:06:5e:2c:03:8a:ed:bb:d2:42:ab:a3:10:20: 05:98:b9:55:0d:b7:4d:34:03:c8:2b:04:56:38:47: a4:c7:b8:0f:f7:7c:0b:90:b4:5f:21:53:10:84:d3: e4:b1:fa:36:4f:d6:e8:0c:ca:42:69:cf:cc:17:79: 2c:b8:3a:98:a4:24:c1:f7:6c:04:20:6b:dc:b4:c5: 97:59:40:f9:9d:90:53:d1:dc:27:dd:17:7e:59:fd: 5f:db:34:01:4c:07:43:97:57:e8:61:98:de:80:fc: 5d:db:35:8d:e5:2c:ac:50:aa:04:25:82:a1:f6:8f: 1c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:8E:4C:A4:5D:AE:3E:F6:87:D3:89:CB:31:43:C3:D0:70:C3:33:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee/77ef8160-1b57-36f9-9b66-e7115d91c659.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee/4dfb879f-7966-496a-b35e-d766981846ee.crl X509v3 Authority Key Identifier: keyid:47:A0:89:91:6C:7F:47:53:FB:B8:28:FF:43:4D:96:C5:0F:02:A5:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee.cer sbgp-ipAddrBlock: critical IPv4: 199.60.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:a8:0f:eb:dc:0f:23:0c:ea:72:60:0e:18:63:28:92:17:cb: e2:c2:93:c0:b0:17:27:97:f5:93:68:cd:6d:96:1f:e3:4c:3b: 90:b4:1f:d7:f1:d8:c9:0c:25:91:be:ec:74:cc:f4:81:c5:0c: 7e:95:fa:e7:48:36:4f:f8:4a:4a:cd:7c:33:1b:27:90:25:ef: 0a:f5:5c:c0:4b:86:0c:6e:e1:4c:2c:88:3c:25:28:ed:15:1c: 82:d0:8a:79:c9:07:99:1f:5c:7c:40:56:f5:99:48:fa:13:4a: 81:56:81:cc:53:a7:84:29:d4:42:f0:6b:0c:49:30:ba:c8:fa: af:d1:64:8a:a8:0e:f8:94:87:34:eb:ea:b9:79:0f:3a:09:42: 3d:59:d9:96:0c:81:71:f5:49:2c:f9:81:70:c1:26:fe:02:f0: d9:21:c5:41:53:c9:b1:d3:d0:93:7c:91:fb:c8:e5:a3:d5:95: 0b:f5:6e:53:d1:6a:f1:bd:a3:51:32:fc:d5:02:c7:0b:03:27: 95:47:e1:14:de:5a:ca:bd:d7:8e:8f:4b:1b:81:57:b4:f9:da: 82:95:69:2d:e2:46:5a:c9:07:3e:33:8d:95:08:0c:16:6f:d0: 05:b8:74:33:9e:6c:fb:01:36:bb:82:36:3f:6d:a6:87:21:36: 2e:55:b7:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElvrxFO36f36EH5pMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGRmYjg3OWYtNzk2Ni00OTZhLWIzNWUtZDc2Njk4MTg0 NmVlMB4XDTI1MDQwNjEzMDEwMVoXDTI1MDcwNTEzMDEwMVowLzEtMCsGA1UEAxMk MjUzZTA4YzYtZThiOC00OWY3LTg1NTAtOTI1OTYzZGZjNmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXEia9+sbZrtBmy3FxlcGNcPkhA0f7wp4lBx viYx5mJuPfql+PR6b/Vy7hfRZ0KLZ10MpNxdGscLmSsML+vAKRqF515GpwvhGesu RhA7Dlryp0hQMV+Ogf6o/wYOJZxEArrib3e104HpeNqmeYTQ9l+F8GXxbVemP6+o u3rTsjVmYLYD/WpHbQZeLAOK7bvSQqujECAFmLlVDbdNNAPIKwRWOEekx7gP93wL kLRfIVMQhNPksfo2T9boDMpCac/MF3ksuDqYpCTB92wEIGvctMWXWUD5nZBT0dwn 3Rd+Wf1f2zQBTAdDl1foYZjegPxd2zWN5SysUKoEJYKh9o8cPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDiOTKRdrj72h9OJyzFDw9BwwzPPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80ZGZi ODc5Zi03OTY2LTQ5NmEtYjM1ZS1kNzY2OTgxODQ2ZWUvNzdlZjgxNjAtMWI1Ny0z NmY5LTliNjYtZTcxMTVkOTFjNjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNGRmYjg3OWYtNzk2Ni00OTZhLWIz NWUtZDc2Njk4MTg0NmVlLzRkZmI4NzlmLTc5NjYtNDk2YS1iMzVlLWQ3NjY5ODE4 NDZlZS5jcmwwHwYDVR0jBBgwFoAUR6CJkWx/R1P7uCj/Q02WxQ8CpR0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80ZGZiODc5Zi03OTY2LTQ5NmEtYjM1ZS1kNzY2 OTgxODQ2ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzx4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALuoD+vcDyMM6nJgDhhjKJIXy+LCk8CwFyeX9ZNozW2WH+NMO5C0H9fx 2MkMJZG+7HTM9IHFDH6V+udINk/4SkrNfDMbJ5Al7wr1XMBLhgxu4UwsiDwlKO0V HILQinnJB5kfXHxAVvWZSPoTSoFWgcxTp4Qp1ELwawxJMLrI+q/RZIqoDviUhzTr 6rl5DzoJQj1Z2ZYMgXH1SSz5gXDBJv4C8NkhxUFTybHT0JN8kfvI5aPVlQv1blPR avG9o1Ey/NUCxwsDJ5VH4RTeWsq9146PSxuBV7T52oKVaS3iRlrJBz4zjZUIDBZv 0AW4dDOebPsBNruCNj9tpochNi5Vt1k= -----END CERTIFICATE-----Generated at Fri Apr 11 21:41:10 2025 by rpki-client