$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b8a7f7f-f857-4ca7-814b-452e6da3c835/3edc617e-d4ef-36f4-bf5f-b1b19be514b2.roa File: 3edc617e-d4ef-36f4-bf5f-b1b19be514b2.roa (raw, json) Hash identifier: IqBHDMBFs2rSj7RPvrBL+jedjFOxYs0N17ixa5pt/eY= Subject key identifier: 68:B8:7F:16:A0:0B:8C:94:9E:66:4A:59:7B:F2:2F:A6:DA:7E:EF:97 Certificate issuer: /CN=6b8a7f7f-f857-4ca7-814b-452e6da3c835 Certificate serial: 010D0C9F432858497279A559F87BD3A35208EC00 Authority key identifier: 6B:85:C0:FF:65:B6:47:21:7A:90:D2:4C:37:9F:2B:17:B7:1D:13:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b8a7f7f-f857-4ca7-814b-452e6da3c835.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b8a7f7f-f857-4ca7-814b-452e6da3c835/3edc617e-d4ef-36f4-bf5f-b1b19be514b2.roa Signing time: Mon 07 Apr 2025 13:00:59 +0000 ROA not before: Mon 07 Apr 2025 13:00:59 +0000 ROA not after: Sun 06 Jul 2025 13:00:59 +0000 asID: 19755 IP address blocks: 199.73.124.0/24 maxlen: 24 199.73.125.0/24 maxlen: 24 199.73.126.0/24 maxlen: 24 199.73.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b8a7f7f-f857-4ca7-814b-452e6da3c835/6b8a7f7f-f857-4ca7-814b-452e6da3c835.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b8a7f7f-f857-4ca7-814b-452e6da3c835/6b8a7f7f-f857-4ca7-814b-452e6da3c835.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b8a7f7f-f857-4ca7-814b-452e6da3c835.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:72:79:a5:59:f8:7b:d3:a3:52:08:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b8a7f7f-f857-4ca7-814b-452e6da3c835 Validity Not Before: Apr 7 13:00:59 2025 GMT Not After : Jul 6 13:00:59 2025 GMT Subject: CN=ba7334e4-faea-4ed0-85c8-41b5cdfe6796 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:96:0d:68:37:bb:06:60:d8:20:81:21:98:e8: da:d9:d7:c3:3c:b3:98:bd:72:2e:f0:38:e4:57:21: 59:67:46:d5:89:93:f9:77:d2:fb:81:51:89:ca:2b: 30:ad:99:7f:15:04:6a:75:52:21:10:8f:c9:12:b4: 1c:3e:3e:5b:13:44:b0:4c:95:ff:35:4d:8d:9b:ec: 1e:6e:93:db:6c:99:11:5a:a0:f8:3f:a9:53:42:98: dc:1a:ea:5f:5d:49:23:3e:8b:b7:66:c3:8b:82:fd: 98:b2:6a:8a:ac:86:95:bd:dd:e4:e6:85:29:77:da: 3e:92:98:b3:91:f8:57:fd:06:71:22:fd:c2:d4:2c: 16:2f:84:0e:26:b5:59:5c:19:05:cb:80:48:3d:85: a1:e0:5b:18:ae:f7:da:5f:dd:29:48:fc:a2:a4:a9: ee:60:1b:50:97:eb:34:f2:97:94:9c:22:92:73:cc: 80:f8:ec:35:9e:50:65:22:67:c8:39:88:e0:9d:c2: cd:fe:fd:11:3c:24:d4:1f:19:ef:24:c5:20:eb:21: 0d:d5:16:8a:72:30:2e:52:71:4a:22:c2:43:a3:23: ce:2e:2d:ae:7a:cb:36:9f:59:22:26:a0:01:60:f0: 2a:26:d3:6a:7c:5b:df:0f:04:25:57:57:77:c8:8c: 69:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:B8:7F:16:A0:0B:8C:94:9E:66:4A:59:7B:F2:2F:A6:DA:7E:EF:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b8a7f7f-f857-4ca7-814b-452e6da3c835/3edc617e-d4ef-36f4-bf5f-b1b19be514b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b8a7f7f-f857-4ca7-814b-452e6da3c835/6b8a7f7f-f857-4ca7-814b-452e6da3c835.crl X509v3 Authority Key Identifier: keyid:6B:85:C0:FF:65:B6:47:21:7A:90:D2:4C:37:9F:2B:17:B7:1D:13:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b8a7f7f-f857-4ca7-814b-452e6da3c835.cer sbgp-ipAddrBlock: critical IPv4: 199.73.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:84:54:fe:54:63:6f:6c:f3:06:2e:89:97:d1:bd:4a:34:0a: 5b:18:fa:7b:2d:86:b4:7c:68:1b:9a:39:36:b8:2a:d6:e9:09: 04:3a:e9:95:4e:ef:ec:63:39:82:0c:ce:e2:75:63:5a:ed:c0: 57:c3:e5:20:6a:35:5c:de:02:25:5d:f9:f9:ee:fd:2b:3d:8a: f8:23:bd:79:68:93:8a:47:e0:c8:87:cd:b6:28:3c:ac:44:ac: 7e:23:9d:41:3c:38:f9:47:d3:d2:30:69:4e:4c:d5:8f:52:60: 34:7c:1c:bf:54:eb:f5:28:40:2e:81:9b:67:40:0b:19:6f:46: f7:a6:e8:4f:e8:b2:67:35:4f:57:30:34:e0:0c:09:10:3f:b5: b4:97:e0:94:31:36:c0:d7:f0:dd:e9:d1:ac:70:cd:d2:a5:98: 67:2c:ed:e5:e9:71:9b:95:12:e3:b0:f0:77:1e:7f:be:20:eb: b2:c4:ae:cd:43:24:7a:31:ed:fd:a4:88:3c:eb:d4:bc:c4:8e: 30:c2:4e:8c:2b:f4:ee:d3:bd:23:75:76:b7:e6:19:44:59:5d: 26:21:b7:96:74:3a:30:f7:4f:79:6c:e5:2d:0b:54:1e:67:3d: 86:bf:2f:30:b1:48:83:7b:79:f7:a8:cd:d0:33:b5:42:be:4b: 53:4a:a3:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElyeaVZ+HvTo1II7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmI4YTdmN2YtZjg1Ny00Y2E3LTgxNGItNDUyZTZkYTNj ODM1MB4XDTI1MDQwNzEzMDA1OVoXDTI1MDcwNjEzMDA1OVowLzEtMCsGA1UEAxMk YmE3MzM0ZTQtZmFlYS00ZWQwLTg1YzgtNDFiNWNkZmU2Nzk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZYNaDe7BmDYIIEhmOja2dfDPLOYvXIu8Djk VyFZZ0bViZP5d9L7gVGJyiswrZl/FQRqdVIhEI/JErQcPj5bE0SwTJX/NU2Nm+we bpPbbJkRWqD4P6lTQpjcGupfXUkjPou3ZsOLgv2YsmqKrIaVvd3k5oUpd9o+kpiz kfhX/QZxIv3C1CwWL4QOJrVZXBkFy4BIPYWh4FsYrvfaX90pSPyipKnuYBtQl+s0 8peUnCKSc8yA+Ow1nlBlImfIOYjgncLN/v0RPCTUHxnvJMUg6yEN1RaKcjAuUnFK IsJDoyPOLi2uess2n1kiJqABYPAqJtNqfFvfDwQlV1d3yIxpMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGi4fxagC4yUnmZKWXvyL6bafu+XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82Yjhh N2Y3Zi1mODU3LTRjYTctODE0Yi00NTJlNmRhM2M4MzUvM2VkYzYxN2UtZDRlZi0z NmY0LWJmNWYtYjFiMTliZTUxNGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNmI4YTdmN2YtZjg1Ny00Y2E3LTgx NGItNDUyZTZkYTNjODM1LzZiOGE3ZjdmLWY4NTctNGNhNy04MTRiLTQ1MmU2ZGEz YzgzNS5jcmwwHwYDVR0jBBgwFoAUa4XA/2W2RyF6kNJMN58rF7cdE4YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82YjhhN2Y3Zi1mODU3LTRjYTctODE0Yi00NTJl NmRhM2M4MzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx0l8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2EVP5UY29s8wYuiZfRvUo0ClsY+nsthrR8aBuaOTa4KtbpCQQ66ZVO 7+xjOYIMzuJ1Y1rtwFfD5SBqNVzeAiVd+fnu/Ss9ivgjvXlok4pH4MiHzbYoPKxE rH4jnUE8OPlH09IwaU5M1Y9SYDR8HL9U6/UoQC6Bm2dACxlvRvem6E/osmc1T1cw NOAMCRA/tbSX4JQxNsDX8N3p0axwzdKlmGcs7eXpcZuVEuOw8Hcef74g67LErs1D JHox7f2kiDzr1LzEjjDCTowr9O7TvSN1drfmGURZXSYht5Z0OjD3T3ls5S0LVB5n PYa/LzCxSIN7efeozdAztUK+S1NKo8E= -----END CERTIFICATE-----Generated at Sun Apr 27 19:03:11 2025 by rpki-client