$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/6efd3a08-acde-3bdd-85b5-4eba533e50f3.roa File: 6efd3a08-acde-3bdd-85b5-4eba533e50f3.roa (raw, json) Hash identifier: UZcHIZxlBU+fI0OY3h9N12sFHRYc1N7+AiLfHwGadSM= Subject key identifier: 41:B5:55:51:7D:76:20:69:E4:E8:44:F1:5D:72:8E:04:4B:39:C0:A8 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F432858491ED6D8FD4D81CA70305F1780 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/6efd3a08-acde-3bdd-85b5-4eba533e50f3.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 13414 IP address blocks: 199.59.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:d8:fd:4d:81:ca:70:30:5f:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=3e5102c8-4d62-4e1a-9a7e-2f3831fb6890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ce:a4:b9:eb:4c:96:8e:df:fb:94:ca:8a:f2: a2:63:48:f4:c0:ea:9d:e0:ba:03:3e:67:cd:93:5d: 5f:59:79:84:c6:80:22:be:44:44:76:ca:c9:38:64: 49:71:c7:31:00:2f:77:76:52:60:fd:b2:a5:09:72: bb:86:46:22:b2:a0:41:76:40:29:bb:e6:fa:24:f0: 62:f9:83:c3:d5:13:55:a7:6b:8d:3f:5c:fc:07:27: 45:3a:64:7b:cf:24:1f:48:56:3c:24:a0:85:03:e5: 0e:cb:ba:ae:2c:e0:76:0c:59:bd:40:09:0a:12:4f: 00:61:7c:62:58:38:c0:ee:d6:96:f8:26:ef:72:57: ba:be:37:4d:65:f3:14:18:f2:26:73:e0:83:9e:eb: a9:cd:72:36:36:1a:0f:03:af:c8:ab:64:ae:ee:e9: c3:64:a7:53:6e:d6:13:63:ad:1d:1a:c0:d9:19:86: 46:a7:fe:99:cb:76:5c:06:1a:ee:77:64:db:27:39: 9c:24:48:f5:05:65:36:62:3b:f3:86:ba:c3:75:f0: 8d:7a:dd:51:f3:16:2e:d3:7f:08:2c:34:10:82:2f: ef:34:e6:39:71:4a:74:09:05:3a:ae:e2:fe:fc:67: 5b:77:77:2f:a3:90:38:30:7a:9f:b0:c1:e9:84:5c: a7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:B5:55:51:7D:76:20:69:E4:E8:44:F1:5D:72:8E:04:4B:39:C0:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/6efd3a08-acde-3bdd-85b5-4eba533e50f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 199.59.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:1a:2a:c3:f9:f6:a4:be:e0:35:17:ae:02:2f:00:d5:7a:c4: 21:63:37:37:b2:f7:c2:0e:8f:d7:2d:d3:1d:08:a2:8a:76:c8: 92:a5:95:98:39:7e:98:91:d1:aa:1f:dc:73:ee:b2:21:d1:eb: 26:29:28:0e:29:86:ed:63:82:d3:fe:51:6c:5a:79:79:09:6e: 27:0a:07:3b:b1:4c:61:be:79:e8:df:83:cc:6f:b8:a0:17:a0: d9:4c:24:7f:97:81:df:fd:b2:0f:69:f3:53:4a:e3:3f:ae:30: d1:6e:39:4c:61:d7:b2:b8:81:62:c9:60:4e:94:d4:3f:d1:06: b0:19:b5:c4:3a:9a:19:a5:f3:1c:cb:b4:b5:48:48:b1:89:cf: 90:cc:26:54:21:40:ab:f2:37:ef:6e:9a:53:2c:cf:d3:d5:13: c5:7c:4e:a9:89:a5:68:1a:94:8f:d5:76:65:d8:4b:28:0f:e5: 14:f4:e3:e5:44:d7:91:d3:fc:6f:1e:54:b8:ce:7f:98:92:2e: f7:09:6e:c0:dc:41:88:dc:61:04:a2:96:81:2d:69:69:da:13: 2a:da:10:b7:1d:46:36:9c:1b:b7:8c:be:21:48:4b:98:21:6a: 5a:0b:a2:23:0b:48:1c:d7:8b:f6:b8:a6:f5:19:07:2e:09:29: 68:24:7e:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1tj9TYHKcDBfF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk M2U1MTAyYzgtNGQ2Mi00ZTFhLTlhN2UtMmYzODMxZmI2ODkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqM6kuetMlo7f+5TKivKiY0j0wOqd4LoDPmfN k11fWXmExoAivkREdsrJOGRJcccxAC93dlJg/bKlCXK7hkYisqBBdkApu+b6JPBi +YPD1RNVp2uNP1z8BydFOmR7zyQfSFY8JKCFA+UOy7quLOB2DFm9QAkKEk8AYXxi WDjA7taW+Cbvcle6vjdNZfMUGPImc+CDnuupzXI2NhoPA6/Iq2Su7unDZKdTbtYT Y60dGsDZGYZGp/6Zy3ZcBhrud2TbJzmcJEj1BWU2YjvzhrrDdfCNet1R8xYu038I LDQQgi/vNOY5cUp0CQU6ruL+/Gdbd3cvo5A4MHqfsMHphFynSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEG1VVF9diBp5OhE8V1yjgRLOcCoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvNmVmZDNhMDgtYWNkZS0z YmRkLTg1YjUtNGViYTUzM2U1MGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxzuUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACIaKsP59qS+4DUXrgIvANV6xCFjNzey98IOj9ct0x0Ioop2yJKllZg5 fpiR0aof3HPusiHR6yYpKA4phu1jgtP+UWxaeXkJbicKBzuxTGG+eejfg8xvuKAX oNlMJH+Xgd/9sg9p81NK4z+uMNFuOUxh17K4gWLJYE6U1D/RBrAZtcQ6mhml8xzL tLVISLGJz5DMJlQhQKvyN+9umlMsz9PVE8V8TqmJpWgalI/VdmXYSygP5RT04+VE 15HT/G8eVLjOf5iSLvcJbsDcQYjcYQSiloEtaWnaEyraELcdRjacG7eMviFIS5gh aloLoiMLSBzXi/a4pvUZBy4JKWgkfiA= -----END CERTIFICATE-----Generated at Tue Apr 29 08:35:17 2025 by rpki-client