$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/520bc7ed-25b1-3d9c-b3af-6a03e72a5019.roa File: 520bc7ed-25b1-3d9c-b3af-6a03e72a5019.roa (raw, json) Hash identifier: aL1tQfU2ykCjTr3dfK+7Elk+gRSYDwdeXvx7VLEZMmU= Subject key identifier: 21:4E:F9:9F:74:C4:9B:9E:9D:00:88:E8:93:EC:57:D0:7C:E3:B1:69 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F432858491ED6DF67D961E86964ECF9F0 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/520bc7ed-25b1-3d9c-b3af-6a03e72a5019.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 13414 IP address blocks: 199.16.156.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:df:67:d9:61:e8:69:64:ec:f9:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=2af77e08-0ece-46dc-9c89-139c27f19ec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ce:b3:ff:91:6c:7e:37:af:87:93:12:4f:7c: 08:6c:dc:d2:2e:a3:88:b2:a2:46:ce:ed:c7:5b:05: 48:b6:34:f6:55:d0:4e:80:3d:be:b1:32:d0:bd:07: fe:b3:da:0c:e7:e1:e0:b4:a7:e6:47:3d:69:75:74: b3:20:db:6e:11:77:f2:5a:8a:4a:a1:e4:21:2b:94: b4:81:41:f4:88:61:1c:c7:d6:07:78:d5:2d:c2:26: 9a:b7:ae:d0:b6:86:e2:72:0f:b0:9e:bf:58:2c:fe: 1a:c9:d7:68:62:83:d6:e2:8e:ed:ac:e4:5b:70:13: 35:b8:6e:95:8c:c3:6b:5b:18:55:8b:2b:62:b0:0c: 3d:c6:d9:ff:59:ed:2a:07:8b:40:7a:9a:a1:7c:4a: 1d:46:78:8f:05:c0:a0:79:3c:2f:c7:61:28:d5:79: e6:98:55:b2:92:07:b5:83:6f:70:e5:b3:43:2b:0c: 52:fa:3d:c1:8c:4b:9b:8a:ff:2e:4a:af:bf:6a:fa: 71:20:74:16:77:9e:01:64:1e:fa:1d:76:6d:54:a2: ff:52:b7:5a:c5:c2:de:db:84:18:bf:df:6b:71:bd: 97:8f:87:3f:a7:93:15:7c:ab:df:ff:e2:a0:88:2f: fe:20:43:5e:d3:3c:c2:6b:7b:e7:ef:4d:1a:91:59: fd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:4E:F9:9F:74:C4:9B:9E:9D:00:88:E8:93:EC:57:D0:7C:E3:B1:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/520bc7ed-25b1-3d9c-b3af-6a03e72a5019.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 199.16.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:7b:bb:73:ea:3c:46:48:85:4e:08:6e:d9:12:5f:a5:61:d0: 15:38:0d:f1:3d:70:15:eb:62:28:77:61:1a:80:6a:18:05:37: a2:dc:02:42:dd:63:0a:c6:26:40:a7:d0:58:18:25:bf:1f:5f: 0f:dc:d2:dd:9f:f8:51:2f:64:16:4d:a2:d0:21:5e:e4:51:e1: b1:1d:23:12:42:77:ba:42:e4:c7:f9:24:40:76:47:93:b2:55: 8b:e8:54:ef:97:68:d3:d4:dd:14:6b:15:ac:c2:ac:34:4a:e4: 49:89:af:f7:3a:25:4c:71:f4:fb:92:5a:a0:24:4e:7e:92:b6: 45:ff:f6:f7:31:ee:26:05:2f:ad:52:41:57:90:05:47:9b:36: b8:65:b3:64:87:d4:de:82:40:83:03:46:b4:b1:78:84:95:57: 16:57:6a:f7:f4:56:20:65:5b:02:23:85:86:04:e8:42:a6:d6: 57:38:01:ea:9e:3a:4c:c0:61:30:a3:7e:e9:5e:18:36:c4:9c: e9:35:2b:e9:05:65:e3:b9:5b:c6:57:94:fc:47:88:b1:da:99: a7:98:54:9f:b2:ea:51:5f:9b:49:88:61:d8:e9:3e:4c:8a:ff: 29:9e:a8:47:1e:00:ed:9c:54:92:13:19:fe:d5:e2:8a:96:1e: 5e:2e:79:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1t9n2WHoaWTs+fAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk MmFmNzdlMDgtMGVjZS00NmRjLTljODktMTM5YzI3ZjE5ZWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArM6z/5Fsfjevh5MST3wIbNzSLqOIsqJGzu3H WwVItjT2VdBOgD2+sTLQvQf+s9oM5+HgtKfmRz1pdXSzINtuEXfyWopKoeQhK5S0 gUH0iGEcx9YHeNUtwiaat67Qtobicg+wnr9YLP4ayddoYoPW4o7trORbcBM1uG6V jMNrWxhViytisAw9xtn/We0qB4tAepqhfEodRniPBcCgeTwvx2Eo1XnmmFWykge1 g29w5bNDKwxS+j3BjEubiv8uSq+/avpxIHQWd54BZB76HXZtVKL/UrdaxcLe24QY v99rcb2Xj4c/p5MVfKvf/+KgiC/+IENe0zzCa3vn700akVn9KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCFO+Z90xJuenQCI6JPsV9B847FpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvNTIwYmM3ZWQtMjViMS0z ZDljLWIzYWYtNmEwM2U3MmE1MDE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxxCcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALR7u3PqPEZIhU4IbtkSX6Vh0BU4DfE9cBXrYih3YRqAahgFN6LcAkLd YwrGJkCn0FgYJb8fXw/c0t2f+FEvZBZNotAhXuRR4bEdIxJCd7pC5Mf5JEB2R5Oy VYvoVO+XaNPU3RRrFazCrDRK5EmJr/c6JUxx9PuSWqAkTn6StkX/9vcx7iYFL61S QVeQBUebNrhls2SH1N6CQIMDRrSxeISVVxZXavf0ViBlWwIjhYYE6EKm1lc4Aeqe OkzAYTCjfuleGDbEnOk1K+kFZeO5W8ZXlPxHiLHamaeYVJ+y6lFfm0mIYdjpPkyK /ymeqEceAO2cVJITGf7V4oqWHl4uebo= -----END CERTIFICATE-----Generated at Tue Apr 29 07:13:49 2025 by rpki-client