$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/34c1d0cf-b41a-3317-9c39-481cdefc7dfa.roa File: 34c1d0cf-b41a-3317-9c39-481cdefc7dfa.roa (raw, json) Hash identifier: VlqDFadU0BZ6LeoEPbBbmAMUb1FAsWtcKMdj0e3gNO4= Subject key identifier: 1D:0A:25:6E:03:54:C9:51:62:47:FE:40:A8:3D:8C:8E:53:C6:FB:33 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F43285849FE0FF02D34D01F6582386380 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/34c1d0cf-b41a-3317-9c39-481cdefc7dfa.roa Signing time: Tue 27 May 2025 13:01:05 +0000 ROA not before: Tue 27 May 2025 13:01:05 +0000 ROA not after: Mon 25 Aug 2025 13:01:05 +0000 asID: 13414 IP address blocks: 199.16.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:0f:f0:2d:34:d0:1f:65:82:38:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: May 27 13:01:05 2025 GMT Not After : Aug 25 13:01:05 2025 GMT Subject: CN=4f0e6e62-3d82-4c7f-b721-283755569652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:de:75:31:7c:b4:38:e3:82:9f:6f:df:d5:f8: b2:71:16:aa:9a:43:d2:e7:eb:27:41:6b:06:f3:a2: 15:ed:f0:9b:6d:15:d4:c6:67:ec:70:83:a6:1e:80: 52:11:a7:d4:f4:b5:64:b7:67:10:66:d5:18:58:9d: 76:62:4b:17:8f:8c:f6:34:09:da:79:33:22:14:0e: 95:21:ff:ad:0c:7c:c0:43:39:ff:19:c4:eb:c9:69: f7:af:4c:1c:31:2a:07:96:77:30:e4:69:a4:48:7e: 07:df:58:45:f5:85:63:08:be:90:66:5d:44:4b:4d: 5d:84:f2:33:b6:7e:66:f8:58:98:50:de:d4:d7:0c: a8:d6:cc:13:db:80:35:6f:b1:3d:5a:21:8d:db:b6: d4:16:fe:19:90:f0:54:17:74:77:60:12:d7:9a:1a: da:da:e7:ed:94:88:bf:13:16:f7:18:9b:fb:32:ee: 90:0a:76:ad:73:2d:40:0a:3e:8e:2e:d5:36:52:9c: 93:e3:c3:f2:33:54:dd:8b:6f:c5:b9:b0:d2:e8:0b: 56:18:3c:7b:1a:09:83:fa:44:97:b9:89:6f:78:8d: b2:79:52:37:ba:f6:b9:eb:fb:64:f4:1c:d5:25:aa: 23:17:46:15:7d:76:f1:d1:64:e1:a9:12:ad:f8:3d: ef:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:0A:25:6E:03:54:C9:51:62:47:FE:40:A8:3D:8C:8E:53:C6:FB:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/34c1d0cf-b41a-3317-9c39-481cdefc7dfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 199.16.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:8a:08:12:3f:9e:9b:a6:ba:cc:aa:f9:c0:41:ea:6a:0f:0c: d7:b9:b0:60:79:8b:c7:51:1a:23:dc:6a:62:88:33:c2:68:78: 31:2c:71:75:5e:ff:02:33:cf:21:78:d0:5d:36:26:dc:78:1f: 13:b4:e7:17:5c:20:6b:20:32:82:44:b9:00:ad:61:48:fe:54: 72:39:78:9c:e8:aa:4b:50:9f:7e:52:c3:c7:6c:6e:1f:87:1f: c2:53:1d:82:0e:d7:c7:1d:da:2b:bd:9d:b5:ca:d3:d5:29:91: 33:cc:eb:39:b7:90:89:53:95:8d:91:7b:37:a7:bf:7d:92:2c: 1c:8e:c4:48:24:f3:31:71:61:7d:a6:7a:9d:01:3d:31:83:4c: 1b:61:47:e3:2a:61:66:c6:25:a0:06:0c:f8:a3:7a:52:11:92: ee:67:c6:90:01:fb:b1:dc:89:cf:65:2e:f5:d5:4d:df:04:fa: 45:7c:58:fa:66:2b:11:38:2b:3f:5c:d9:e0:61:2c:24:20:aa: 07:45:ff:95:62:33:44:b0:82:0c:56:5d:4c:b3:1f:ea:45:b6: 12:6a:60:85:a9:17:58:0b:98:dc:d6:26:27:01:5c:3a:6a:3c: a7:97:15:2f:cb:39:d2:b1:01:a3:d1:72:18:f8:21:7b:1a:48: 41:a1:cc:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn+D/AtNNAfZYI4Y4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk NGYwZTZlNjItM2Q4Mi00YzdmLWI3MjEtMjgzNzU1NTY5NjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwN51MXy0OOOCn2/f1fiycRaqmkPS5+snQWsG 86IV7fCbbRXUxmfscIOmHoBSEafU9LVkt2cQZtUYWJ12YksXj4z2NAnaeTMiFA6V If+tDHzAQzn/GcTryWn3r0wcMSoHlncw5GmkSH4H31hF9YVjCL6QZl1ES01dhPIz tn5m+FiYUN7U1wyo1swT24A1b7E9WiGN27bUFv4ZkPBUF3R3YBLXmhra2uftlIi/ Exb3GJv7Mu6QCnatcy1ACj6OLtU2UpyT48PyM1Tdi2/FubDS6AtWGDx7GgmD+kSX uYlveI2yeVI3uva56/tk9BzVJaojF0YVfXbx0WThqRKt+D3vZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB0KJW4DVMlRYkf+QKg9jI5TxvszMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvMzRjMWQwY2YtYjQxYS0z MzE3LTljMzktNDgxY2RlZmM3ZGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxxCcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKKCBI/npumusyq+cBB6moPDNe5sGB5i8dRGiPcamKIM8JoeDEscXVe /wIzzyF40F02Jtx4HxO05xdcIGsgMoJEuQCtYUj+VHI5eJzoqktQn35Sw8dsbh+H H8JTHYIO18cd2iu9nbXK09UpkTPM6zm3kIlTlY2Rezenv32SLByOxEgk8zFxYX2m ep0BPTGDTBthR+MqYWbGJaAGDPijelIRku5nxpAB+7Hcic9lLvXVTd8E+kV8WPpm KxE4Kz9c2eBhLCQgqgdF/5ViM0SwggxWXUyzH+pFthJqYIWpF1gLmNzWJicBXDpq PKeXFS/LOdKxAaPRchj4IXsaSEGhzKQ= -----END CERTIFICATE-----Generated at Tue Jun 17 11:10:42 2025 by rpki-client