$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/5aa2b6e2-03f3-3bfb-be2b-de257658ed9d.roa File: 5aa2b6e2-03f3-3bfb-be2b-de257658ed9d.roa (raw, json) Hash identifier: FVRpadjmSZOTHjspTNrvNVq9JJ6sy2/6BYUM8xtBx/s= Subject key identifier: 39:BE:53:BF:99:11:6A:22:33:2B:D5:F9:5D:93:72:69:55:0B:75:EE Certificate issuer: /CN=ee74c799-7d4c-4df3-b711-296c34338ef5 Certificate serial: 010D0C9F43285849998F330070DF1A840DD6AA80 Authority key identifier: 6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/5aa2b6e2-03f3-3bfb-be2b-de257658ed9d.roa Signing time: Mon 21 Apr 2025 13:00:59 +0000 ROA not before: Mon 21 Apr 2025 13:00:59 +0000 ROA not after: Sun 20 Jul 2025 13:00:59 +0000 asID: 845 IP address blocks: 199.96.86.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:99:8f:33:00:70:df:1a:84:0d:d6:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee74c799-7d4c-4df3-b711-296c34338ef5 Validity Not Before: Apr 21 13:00:59 2025 GMT Not After : Jul 20 13:00:59 2025 GMT Subject: CN=ccdd67da-d993-496a-a8f4-19bfbc1f2078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7d:72:f1:df:e3:a4:ae:cb:24:ac:14:95:57: a4:d0:c7:e9:e8:78:ad:9d:3a:a7:cf:5e:70:97:f9: b9:0f:41:0e:3f:ea:8f:e1:f4:2a:74:f8:45:91:e3: 02:65:b7:c2:87:48:16:17:7d:34:77:6a:f5:e1:bf: 60:be:b5:aa:20:a4:8e:89:0f:5e:92:aa:7a:fc:de: e9:91:5b:64:94:24:46:c9:57:fb:ac:5b:20:1c:7a: 3f:cc:5a:c9:aa:ff:1c:77:0a:5a:6e:20:7e:0e:87: 1f:f4:cd:4f:86:41:c5:71:dd:18:74:1e:0e:41:89: e7:1b:79:77:f8:95:e4:d3:70:91:c0:27:7f:1e:35: db:b2:41:6b:b1:a4:7e:3f:8d:96:ae:72:77:54:a5: 65:01:ce:bd:30:c4:53:52:12:26:02:68:d0:59:34: 85:5e:60:50:26:b0:e1:3d:f7:11:de:0e:13:a8:43: 65:4a:7d:e8:4a:61:30:2d:94:af:1c:e3:79:b0:cb: f0:d4:f7:db:14:8b:d3:62:c4:9c:d0:7f:84:60:41: 67:af:c6:6e:02:ae:28:a1:86:2e:bd:7e:03:0a:d6: 74:57:1d:2b:41:6d:e6:6d:b6:5e:24:94:1d:ad:b8: bf:41:c7:5c:9a:18:9b:92:7c:e0:e6:f8:21:9e:fd: 27:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:BE:53:BF:99:11:6A:22:33:2B:D5:F9:5D:93:72:69:55:0B:75:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/5aa2b6e2-03f3-3bfb-be2b-de257658ed9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl X509v3 Authority Key Identifier: keyid:6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer sbgp-ipAddrBlock: critical IPv4: 199.96.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:b7:42:30:ee:80:2e:3a:c7:7b:a9:51:18:88:fb:c8:6c:32: 18:22:0e:dd:30:d0:d9:83:93:2b:8d:d4:d3:07:ff:b3:f7:17: dc:9d:d1:df:64:3f:bf:b9:8c:3c:6e:1c:e9:e8:b8:b0:0b:f6: 93:98:f5:bb:2e:6f:5e:6e:9a:b3:b3:cb:a8:97:39:66:ed:92: fd:0e:23:dc:47:eb:c5:72:25:68:eb:7b:21:27:77:3f:24:2e: 55:46:f4:b5:94:96:48:ec:f8:d6:ec:e4:38:f8:5e:91:8d:80: 63:14:d3:c4:8f:1c:ae:db:e0:8f:f6:56:51:b2:b5:48:ff:4d: 73:ed:97:4a:91:a8:e8:85:49:a0:9f:b5:5c:ad:cc:86:7c:90: e4:60:4c:62:34:a6:cb:a0:0a:47:df:98:9c:0b:51:72:d9:8c: 49:18:03:e1:a2:a1:86:1a:56:7b:f9:d2:3d:07:62:68:ff:02: d2:95:9a:fc:3d:1f:af:b1:b0:ef:88:d1:e1:3f:26:a4:66:65: 4d:68:01:66:ba:9b:f2:79:fb:37:05:d9:48:f4:c5:7a:1e:f5: 47:64:cd:11:82:a1:ab:f9:40:67:06:db:8e:3e:f6:e2:01:77: e8:b9:5f:09:9d:92:5b:cd:53:db:66:1e:4d:0a:7a:7c:07:ce: 07:a7:86:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmZjzMAcN8ahA3WqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWU3NGM3OTktN2Q0Yy00ZGYzLWI3MTEtMjk2YzM0MzM4 ZWY1MB4XDTI1MDQyMTEzMDA1OVoXDTI1MDcyMDEzMDA1OVowLzEtMCsGA1UEAxMk Y2NkZDY3ZGEtZDk5My00OTZhLWE4ZjQtMTliZmJjMWYyMDc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoX1y8d/jpK7LJKwUlVek0Mfp6HitnTqnz15w l/m5D0EOP+qP4fQqdPhFkeMCZbfCh0gWF300d2r14b9gvrWqIKSOiQ9ekqp6/N7p kVtklCRGyVf7rFsgHHo/zFrJqv8cdwpabiB+Docf9M1PhkHFcd0YdB4OQYnnG3l3 +JXk03CRwCd/HjXbskFrsaR+P42WrnJ3VKVlAc69MMRTUhImAmjQWTSFXmBQJrDh PfcR3g4TqENlSn3oSmEwLZSvHON5sMvw1PfbFIvTYsSc0H+EYEFnr8ZuAq4ooYYu vX4DCtZ0Vx0rQW3mbbZeJJQdrbi/Qcdcmhibknzg5vghnv0nCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDm+U7+ZEWoiMyvV+V2TcmlVC3XuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lZTc0 Yzc5OS03ZDRjLTRkZjMtYjcxMS0yOTZjMzQzMzhlZjUvNWFhMmI2ZTItMDNmMy0z YmZiLWJlMmItZGUyNTc2NThlZDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZWU3NGM3OTktN2Q0Yy00ZGYzLWI3 MTEtMjk2YzM0MzM4ZWY1L2VlNzRjNzk5LTdkNGMtNGRmMy1iNzExLTI5NmMzNDMz OGVmNS5jcmwwHwYDVR0jBBgwFoAUbNfgDzg2OujJMgu3w5YFtxms98QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lZTc0Yzc5OS03ZDRjLTRkZjMtYjcxMS0yOTZj MzQzMzhlZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx2BWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ23QjDugC46x3upURiI+8hsMhgiDt0w0NmDkyuN1NMH/7P3F9yd0d9k P7+5jDxuHOnouLAL9pOY9bsub15umrOzy6iXOWbtkv0OI9xH68VyJWjreyEndz8k LlVG9LWUlkjs+Nbs5Dj4XpGNgGMU08SPHK7b4I/2VlGytUj/TXPtl0qRqOiFSaCf tVytzIZ8kORgTGI0psugCkffmJwLUXLZjEkYA+GioYYaVnv50j0HYmj/AtKVmvw9 H6+xsO+I0eE/JqRmZU1oAWa6m/J5+zcF2Uj0xXoe9UdkzRGCoav5QGcG244+9uIB d+i5XwmdklvNU9tmHk0KenwHzgenhtg= -----END CERTIFICATE-----Generated at Tue Apr 29 19:57:44 2025 by rpki-client