$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/e0720977-0260-38d5-86ad-f94b116bc32a.roa File: e0720977-0260-38d5-86ad-f94b116bc32a.roa (raw, json) Hash identifier: QOEDLiUphvhEQO/Yw0/dmkq5tBvtYqPBX401Xps/rOc= Subject key identifier: 13:E1:28:A7:6E:E0:B4:95:7E:B6:21:C2:2C:45:B3:BA:1D:50:15:5C Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F43285849FE0FE816F134BF2C037B1300 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/e0720977-0260-38d5-86ad-f94b116bc32a.roa Signing time: Tue 27 May 2025 13:01:05 +0000 ROA not before: Tue 27 May 2025 13:01:05 +0000 ROA not after: Mon 25 Aug 2025 13:01:05 +0000 asID: 13414 IP address blocks: 199.59.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:0f:e8:16:f1:34:bf:2c:03:7b:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: May 27 13:01:05 2025 GMT Not After : Aug 25 13:01:05 2025 GMT Subject: CN=9b6addfe-4ff7-49a3-a363-ebd0ca2f82f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c2:2a:ab:40:6f:b0:b8:82:0d:72:d9:fb:ed: 6e:3e:0d:5f:da:26:2e:c1:63:ab:cb:00:fe:42:b8: 46:73:4e:4f:7a:f0:2b:3d:e5:95:bf:77:db:95:a4: 91:9b:2c:8f:b9:e1:19:85:3a:48:54:ec:04:a2:f2: 3d:53:d4:29:1b:68:0a:7b:3e:78:c9:62:71:c1:37: e3:9f:14:cd:30:a0:cb:89:35:45:31:e5:d2:ae:11: e4:5c:3e:7d:35:9d:f6:a7:ec:37:9d:78:2d:53:31: 7a:e6:64:21:8e:74:24:18:d9:32:2e:3f:d3:ba:6e: 73:62:1e:a6:7d:5e:c6:49:8c:25:49:fe:93:73:a6: a3:69:fc:00:ea:90:65:c3:2f:9d:6c:4b:8e:f3:7d: 69:75:d1:d1:de:ee:1d:34:6b:07:8f:0b:10:8e:ea: d0:f1:85:bc:80:6e:cf:3a:c6:da:81:38:18:7f:81: 95:19:88:e1:8b:c0:f2:0e:aa:0f:b6:68:d9:ee:3a: 7e:b1:7f:ba:38:01:e0:6d:4c:8a:79:c7:f0:a0:99: cb:c5:d1:22:95:5c:bb:04:aa:7d:7a:77:26:b5:0e: ba:13:fd:4a:55:13:68:26:ed:76:cf:e9:ac:68:48: be:a8:79:52:71:d2:9a:6a:ad:d9:8a:9f:aa:90:ca: 55:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:E1:28:A7:6E:E0:B4:95:7E:B6:21:C2:2C:45:B3:BA:1D:50:15:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/e0720977-0260-38d5-86ad-f94b116bc32a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 199.59.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:15:d5:1f:f5:45:fc:59:a7:d9:a3:86:73:10:b7:3f:1a:f8: 1a:69:cb:80:2e:20:f6:48:90:ae:6f:57:21:df:c3:56:81:85: 15:c4:1e:40:33:48:dd:75:48:0c:d2:e2:28:a2:14:96:40:1e: ba:fd:b8:84:44:43:34:df:38:4c:5d:6c:9a:51:68:87:b3:0f: 9f:3d:03:55:5c:a1:47:60:c7:6b:6e:d7:9b:1d:90:f0:c7:f9: 9a:b9:9f:ec:50:fd:72:37:7c:ee:14:b9:a5:ef:fe:d8:35:a1: 46:94:8a:91:02:ef:14:39:12:cd:81:bf:38:aa:ac:b8:5f:1b: 46:74:b4:a1:e2:58:15:48:21:b3:9e:f3:79:cd:b2:b9:2e:14: e3:5c:cc:ec:1e:1c:10:1d:43:70:a9:ed:58:0a:74:af:71:3f: da:05:e0:94:14:cf:fc:9f:1d:fe:3e:83:e1:be:bd:3a:25:7e: 71:46:b3:fe:42:2c:ac:62:1d:9e:61:4c:80:0d:f6:45:39:a7: 56:d2:3e:78:c2:35:65:51:08:bc:4c:3b:c0:2d:3f:70:e8:27: aa:e6:66:a9:ba:3f:cb:1c:a4:54:56:d6:d2:0b:d2:55:4b:66: c0:0b:1b:ec:4e:a2:68:c3:40:35:a8:40:ad:06:94:f5:20:f3: 2d:63:e9:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn+D+gW8TS/LAN7EwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk OWI2YWRkZmUtNGZmNy00OWEzLWEzNjMtZWJkMGNhMmY4MmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8Iqq0BvsLiCDXLZ++1uPg1f2iYuwWOrywD+ QrhGc05PevArPeWVv3fblaSRmyyPueEZhTpIVOwEovI9U9QpG2gKez54yWJxwTfj nxTNMKDLiTVFMeXSrhHkXD59NZ32p+w3nXgtUzF65mQhjnQkGNkyLj/Tum5zYh6m fV7GSYwlSf6Tc6ajafwA6pBlwy+dbEuO831pddHR3u4dNGsHjwsQjurQ8YW8gG7P OsbagTgYf4GVGYjhi8DyDqoPtmjZ7jp+sX+6OAHgbUyKecfwoJnLxdEilVy7BKp9 encmtQ66E/1KVRNoJu12z+msaEi+qHlScdKaaq3Zip+qkMpVewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBPhKKdu4LSVfrYhwixFs7odUBVcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvZTA3MjA5NzctMDI2MC0z OGQ1LTg2YWQtZjk0YjExNmJjMzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzuVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMV1R/1RfxZp9mjhnMQtz8a+Bppy4AuIPZIkK5vVyHfw1aBhRXEHkAz SN11SAzS4iiiFJZAHrr9uIREQzTfOExdbJpRaIezD589A1VcoUdgx2tu15sdkPDH +Zq5n+xQ/XI3fO4UuaXv/tg1oUaUipEC7xQ5Es2BvziqrLhfG0Z0tKHiWBVIIbOe 83nNsrkuFONczOweHBAdQ3Cp7VgKdK9xP9oF4JQUz/yfHf4+g+G+vTolfnFGs/5C LKxiHZ5hTIAN9kU5p1bSPnjCNWVRCLxMO8AtP3DoJ6rmZqm6P8scpFRW1tIL0lVL ZsALG+xOomjDQDWoQK0GlPUg8y1j6SU= -----END CERTIFICATE-----Generated at Tue Jun 17 14:38:12 2025 by rpki-client