$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/3ccc2b69-3869-30a1-8033-735bd84893f6.roa File: 3ccc2b69-3869-30a1-8033-735bd84893f6.roa (raw, json) Hash identifier: 0DXu/LgES/prnHcbDxAeIqBjetEf0u0ngmx1/X7v85o= Subject key identifier: 77:37:E6:01:F1:0F:82:97:F3:2F:7B:47:56:C6:F0:0B:1C:A5:8F:9E Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285849FE1000D2203B9E4BA86B4700 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/3ccc2b69-3869-30a1-8033-735bd84893f6.roa Signing time: Tue 27 May 2025 13:01:05 +0000 ROA not before: Tue 27 May 2025 13:01:05 +0000 ROA not after: Mon 25 Aug 2025 13:01:05 +0000 asID: 16839 IP address blocks: 199.91.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:10:00:d2:20:3b:9e:4b:a8:6b:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: May 27 13:01:05 2025 GMT Not After : Aug 25 13:01:05 2025 GMT Subject: CN=aff2a68a-7798-441e-b5fb-caa2e658bb3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4e:1d:4e:2b:e3:e0:36:f8:a1:49:45:0b:e1: 43:d5:ab:a9:81:e9:6c:00:8c:47:4e:ab:3e:cf:d1: ec:5a:b5:91:fa:fb:b9:a3:e4:16:1f:25:ab:95:04: 4b:b0:37:26:2d:8f:4e:c7:4a:86:db:c9:7d:2c:83: f0:8e:32:68:86:15:07:d0:e7:dd:5b:54:47:36:06: 2f:42:91:dc:e9:4d:9f:93:fa:9b:29:34:69:9d:34: 92:b5:e2:bb:8c:51:bb:17:46:4b:05:53:8d:22:49: c5:42:20:7b:94:81:d1:8d:98:3b:46:c9:b2:fd:f7: 1e:3f:d2:46:bf:dd:89:b7:6f:b4:91:63:2e:04:a8: 32:71:ae:3b:54:04:83:8e:96:ff:e3:69:23:23:a2: 9e:62:33:99:7a:94:61:64:35:9f:dc:e9:f0:93:b4: d5:99:fa:14:73:12:52:ec:db:83:d5:e3:6a:10:fb: 25:2b:f8:70:f3:81:68:e4:a6:72:d8:ac:bd:b2:3b: 1b:79:c9:5f:e0:ec:f0:c6:95:ab:46:e4:74:9d:93: a1:75:fa:4b:2c:a2:ad:d0:7f:d9:c3:60:8b:c1:1e: 42:4c:36:12:cd:bd:f9:b4:58:dd:2f:fc:36:9d:62: 50:06:b7:b0:ed:8f:1d:9d:06:d9:6d:ee:1a:34:39: 88:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:37:E6:01:F1:0F:82:97:F3:2F:7B:47:56:C6:F0:0B:1C:A5:8F:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/3ccc2b69-3869-30a1-8033-735bd84893f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 199.91.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:b1:69:30:78:3a:bb:72:de:18:a8:f6:48:93:42:50:8f:d5: 5b:94:a0:35:25:0d:e4:32:7d:8b:6c:02:ee:98:47:19:71:f3: 17:20:97:c4:ef:b5:a8:dd:0a:e6:9d:6a:27:85:d2:44:8c:9a: fa:a3:b3:de:51:cd:1d:90:59:9a:c7:e1:53:17:d7:7a:4f:60: 17:df:77:41:3f:04:f5:43:f5:9b:6f:50:03:0a:51:7f:53:99: 9a:8d:13:4e:dd:65:aa:76:52:40:db:fb:34:d0:e2:f2:89:2c: c4:17:df:03:e8:3a:37:6d:35:1f:e9:99:76:fa:22:c9:35:d8: 47:b8:de:0e:ae:6a:a1:28:52:78:11:62:7d:ef:07:d0:d0:d8: fc:af:c6:0e:26:46:4e:70:67:c0:74:f2:35:72:33:00:ce:b5: 5e:7f:df:5d:e4:6c:ee:5c:bc:be:88:aa:fd:60:40:b1:28:c0: c1:d0:e1:13:80:2d:24:87:24:1d:96:f5:5d:82:c1:e9:2f:09: 66:e5:fe:16:03:cc:9f:f6:c5:38:2d:37:20:ef:f2:77:3a:57: 99:b2:8e:32:30:ef:5b:e0:fd:f9:be:3e:69:75:8b:d8:b7:f0: a8:2d:63:de:7a:b5:f7:3c:37:74:5c:cb:60:1c:5c:f9:87:c5: b9:43:4e:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn+EADSIDueS6hrRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk YWZmMmE2OGEtNzc5OC00NDFlLWI1ZmItY2FhMmU2NThiYjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsE4dTivj4Db4oUlFC+FD1aupgelsAIxHTqs+ z9HsWrWR+vu5o+QWHyWrlQRLsDcmLY9Ox0qG28l9LIPwjjJohhUH0OfdW1RHNgYv QpHc6U2fk/qbKTRpnTSSteK7jFG7F0ZLBVONIknFQiB7lIHRjZg7Rsmy/fceP9JG v92Jt2+0kWMuBKgyca47VASDjpb/42kjI6KeYjOZepRhZDWf3Onwk7TVmfoUcxJS 7NuD1eNqEPslK/hw84Fo5KZy2Ky9sjsbeclf4OzwxpWrRuR0nZOhdfpLLKKt0H/Z w2CLwR5CTDYSzb35tFjdL/w2nWJQBrew7Y8dnQbZbe4aNDmIqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHc35gHxD4KX8y97R1bG8AscpY+eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvM2NjYzJiNjktMzg2OS0z MGExLTgwMzMtNzM1YmQ4NDg5M2Y2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1uPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAWxaTB4Orty3hio9kiTQlCP1VuUoDUlDeQyfYtsAu6YRxlx8xcgl8Tv tajdCuadaieF0kSMmvqjs95RzR2QWZrH4VMX13pPYBffd0E/BPVD9ZtvUAMKUX9T mZqNE07dZap2UkDb+zTQ4vKJLMQX3wPoOjdtNR/pmXb6Isk12Ee43g6uaqEoUngR Yn3vB9DQ2Pyvxg4mRk5wZ8B08jVyMwDOtV5/313kbO5cvL6Iqv1gQLEowMHQ4ROA LSSHJB2W9V2CwekvCWbl/hYDzJ/2xTgtNyDv8nc6V5myjjIw71vg/fm+Pml1i9i3 8KgtY956tfc8N3Rcy2AcXPmHxblDTl4= -----END CERTIFICATE-----Generated at Sun Jun 15 17:32:30 2025 by rpki-client