$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/5d321907-381d-32af-ad76-b3fd1b984280.roa File: 5d321907-381d-32af-ad76-b3fd1b984280.roa (raw, json) Hash identifier: 0HVqKEtATb6AFmVSWZxM+wNUyaR7BZyMyfO9n0R6mug= Subject key identifier: B8:B6:B1:DC:35:68:20:B7:99:8D:A1:ED:9B:95:E3:2D:95:E5:FB:87 Certificate issuer: /CN=a110574b-b0a8-4116-8fba-63e69eba9d92 Certificate serial: 010D0C9F43285849781443337FE0F2B2609AD0C0 Authority key identifier: 85:72:27:D8:27:19:93:73:40:DF:B9:BA:BC:3F:68:C5:A8:19:E3:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/5d321907-381d-32af-ad76-b3fd1b984280.roa Signing time: Wed 09 Apr 2025 13:11:39 +0000 ROA not before: Wed 09 Apr 2025 13:11:39 +0000 ROA not after: Tue 08 Jul 2025 13:11:39 +0000 asID: 31942 IP address blocks: 199.102.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/a110574b-b0a8-4116-8fba-63e69eba9d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/a110574b-b0a8-4116-8fba-63e69eba9d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:78:14:43:33:7f:e0:f2:b2:60:9a:d0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a110574b-b0a8-4116-8fba-63e69eba9d92 Validity Not Before: Apr 9 13:11:39 2025 GMT Not After : Jul 8 13:11:39 2025 GMT Subject: CN=8161cc27-41c9-4ac0-9b3c-e5629a63559a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:59:aa:ed:2e:65:3a:04:dc:07:f4:1a:ad:ba: 35:a8:a8:8a:74:4f:89:57:f0:f4:4c:cc:d1:52:bf: d3:24:0c:f1:05:38:1c:03:4b:6b:bc:d5:1a:8d:fc: 26:ac:56:58:78:cd:40:06:81:29:b4:f8:e6:86:be: bf:fc:18:cb:44:0e:10:2b:cc:1e:45:5b:61:52:bd: 44:81:2a:ee:a6:6e:35:5e:53:19:65:ed:ff:af:ef: ce:0a:c1:e5:69:ae:07:58:e2:7c:1d:62:ca:29:e2: b8:e1:4c:06:35:e7:e1:ca:9d:7c:fa:9c:a4:48:1d: 92:96:a5:7f:ad:ab:56:8c:92:bf:21:3d:e6:c4:b4: e4:dd:30:bf:f8:84:3a:3d:ef:57:f2:7f:5b:ea:87: 21:90:7b:08:19:a4:99:74:06:a0:b7:5d:cc:3c:7c: 98:9e:26:c9:52:c4:54:94:2a:9e:42:ab:2e:f7:82: 1f:d1:64:a7:52:8d:d5:57:e5:84:56:cb:43:21:74: 71:6e:0c:ac:82:ef:17:39:55:3f:be:b6:10:3c:4e: d0:62:de:89:c5:6c:61:e7:47:3e:77:19:01:ba:e4: 7d:69:3b:91:11:5e:a6:4d:04:18:ca:a2:f7:fe:87: 8d:63:19:85:51:68:0c:80:b2:a2:ce:02:db:a3:92: 57:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:B6:B1:DC:35:68:20:B7:99:8D:A1:ED:9B:95:E3:2D:95:E5:FB:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/5d321907-381d-32af-ad76-b3fd1b984280.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/a110574b-b0a8-4116-8fba-63e69eba9d92.crl X509v3 Authority Key Identifier: keyid:85:72:27:D8:27:19:93:73:40:DF:B9:BA:BC:3F:68:C5:A8:19:E3:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92.cer sbgp-ipAddrBlock: critical IPv4: 199.102.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:e7:65:83:3d:fe:8c:b3:dc:10:4a:cd:22:91:a0:eb:79:bb: 26:ad:98:f9:94:54:a3:aa:71:8e:29:c6:21:65:36:69:ce:ac: eb:32:0e:f3:7b:c5:88:06:17:f1:8d:a3:df:3d:19:7c:de:73: c5:24:4f:90:15:dd:b3:7e:85:82:f2:d6:f7:09:dc:e4:8d:4e: 3e:bb:ca:09:23:e7:24:2b:42:f6:06:84:43:11:ba:19:96:e2: 25:f9:9c:78:b6:89:9f:ad:5e:bc:20:95:93:b5:6f:51:68:81: 7c:88:bb:55:66:77:03:44:45:05:da:5e:a6:31:0b:0a:90:32: e4:56:13:53:fe:60:58:57:d0:b5:23:91:c5:1d:38:03:bb:92: 01:bd:b9:19:d0:b5:ae:84:3c:35:7c:c2:79:7b:69:6a:7a:54: a0:25:b2:b4:cb:71:41:0a:0c:fa:2c:ab:4c:8a:8d:c8:81:88: 34:82:21:a3:6e:57:79:49:b4:6e:d2:df:89:5c:f1:2d:42:e1: 73:6d:06:d9:c0:5a:29:24:bc:d2:e9:05:17:ea:21:69:07:94: fa:28:df:13:e8:0e:b3:d3:b2:5b:8a:a9:dc:34:50:a0:9f:1e: 2b:3b:3a:50:13:78:cd:c2:07:79:c6:b2:6d:5a:63:4d:fd:44: 2f:70:be:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl4FEMzf+DysmCa0MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTExMDU3NGItYjBhOC00MTE2LThmYmEtNjNlNjllYmE5 ZDkyMB4XDTI1MDQwOTEzMTEzOVoXDTI1MDcwODEzMTEzOVowLzEtMCsGA1UEAxMk ODE2MWNjMjctNDFjOS00YWMwLTliM2MtZTU2MjlhNjM1NTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFmq7S5lOgTcB/Qarbo1qKiKdE+JV/D0TMzR Ur/TJAzxBTgcA0trvNUajfwmrFZYeM1ABoEptPjmhr6//BjLRA4QK8weRVthUr1E gSrupm41XlMZZe3/r+/OCsHlaa4HWOJ8HWLKKeK44UwGNefhyp18+pykSB2SlqV/ ratWjJK/IT3mxLTk3TC/+IQ6Pe9X8n9b6ochkHsIGaSZdAagt13MPHyYnibJUsRU lCqeQqsu94If0WSnUo3VV+WEVstDIXRxbgysgu8XOVU/vrYQPE7QYt6JxWxh50c+ dxkBuuR9aTuREV6mTQQYyqL3/oeNYxmFUWgMgLKizgLbo5JXwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLi2sdw1aCC3mY2h7ZuV4y2V5fuHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMTEw NTc0Yi1iMGE4LTQxMTYtOGZiYS02M2U2OWViYTlkOTIvNWQzMjE5MDctMzgxZC0z MmFmLWFkNzYtYjNmZDFiOTg0MjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTExMDU3NGItYjBhOC00MTE2LThm YmEtNjNlNjllYmE5ZDkyL2ExMTA1NzRiLWIwYTgtNDExNi04ZmJhLTYzZTY5ZWJh OWQ5Mi5jcmwwHwYDVR0jBBgwFoAUhXIn2CcZk3NA37m6vD9oxagZ474wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hMTEwNTc0Yi1iMGE4LTQxMTYtOGZiYS02M2U2 OWViYTlkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx2Z4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfnZYM9/oyz3BBKzSKRoOt5uyatmPmUVKOqcY4pxiFlNmnOrOsyDvN7 xYgGF/GNo989GXzec8UkT5AV3bN+hYLy1vcJ3OSNTj67ygkj5yQrQvYGhEMRuhmW 4iX5nHi2iZ+tXrwglZO1b1FogXyIu1VmdwNERQXaXqYxCwqQMuRWE1P+YFhX0LUj kcUdOAO7kgG9uRnQta6EPDV8wnl7aWp6VKAlsrTLcUEKDPosq0yKjciBiDSCIaNu V3lJtG7S34lc8S1C4XNtBtnAWikkvNLpBRfqIWkHlPoo3xPoDrPTsluKqdw0UKCf His7OlATeM3CB3nGsm1aY039RC9wvjE= -----END CERTIFICATE-----Generated at Fri May 9 13:06:39 2025 by rpki-client