$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/2899a7f7-27c2-3cf6-bbbf-8b0e833ae209.roa File: 2899a7f7-27c2-3cf6-bbbf-8b0e833ae209.roa (raw, json) Hash identifier: gGtkSigxZFN6nOWfQkJFpd02Bpbzn3TixFOQNqDN4IE= Subject key identifier: 59:04:7B:2C:FF:27:8B:B8:A4:B0:3A:96:CC:26:DD:0F:1B:57:3F:92 Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F43285849DF5A780E68A8D5914464AC80 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/2899a7f7-27c2-3cf6-bbbf-8b0e833ae209.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 13536 IP address blocks: 216.179.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:78:0e:68:a8:d5:91:44:64:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=4ae2449b-db6a-42c4-a6d1-b6dcdc229941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:82:58:d3:a5:1e:bd:f5:82:41:cf:d7:60:b3: 8b:9d:aa:06:42:72:00:c5:44:c4:fd:63:c7:1c:33: 83:99:bf:45:e2:3c:36:bb:21:b6:07:3d:3c:a3:08: ac:a1:3b:50:46:56:7d:ea:3a:4d:7c:7e:d0:04:43: 5d:5c:1f:47:37:86:b4:23:5b:a5:2c:4a:c3:cc:e6: c2:ef:2b:9d:07:e1:89:25:df:ac:01:e2:10:8e:1d: 34:85:3f:42:a6:fd:d8:17:2c:8d:2f:aa:5d:14:f2: 83:cd:fa:82:fd:98:97:ed:6f:38:8b:21:a4:8c:11: 7f:24:b0:d8:30:d1:b8:b5:45:e0:ee:45:cb:d5:47: 11:d0:f9:ab:1f:b5:26:2c:8c:6d:75:07:f1:9d:00: 65:5b:42:e5:db:0f:28:2b:7a:cf:62:08:0a:6c:cb: fd:67:c3:71:ba:60:5c:f2:16:aa:d8:41:8d:61:54: 8f:f4:e5:78:f0:e7:95:31:8b:d0:8b:99:d4:ff:0c: 9e:02:3e:3e:13:27:52:20:92:82:4e:c4:3c:c1:09: bd:e4:fa:84:c6:51:ef:c8:fe:7b:d1:ba:28:b0:b8: 52:1e:55:fa:de:03:67:42:f1:2a:3e:d0:3d:c0:9b: 98:5b:b7:f0:03:66:c6:7c:db:c4:ec:68:0e:31:e4: 4a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:04:7B:2C:FF:27:8B:B8:A4:B0:3A:96:CC:26:DD:0F:1B:57:3F:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/2899a7f7-27c2-3cf6-bbbf-8b0e833ae209.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 216.179.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:f1:55:ce:1a:5f:c4:13:b0:1f:6e:70:90:6f:72:da:70:eb: f0:77:06:70:af:87:33:7b:a7:d9:07:65:a6:ec:e7:83:f7:59: e5:c0:b2:a6:0d:f6:f1:7f:a3:2e:3d:5a:36:4e:7d:a6:eb:65: 5e:37:e6:52:22:b5:bc:7b:4d:b6:11:dc:46:b7:5e:44:5f:37: 85:16:16:1b:33:8c:1c:fb:66:68:17:20:20:0d:52:a9:99:30: d1:62:1a:14:ce:b5:f2:7c:a7:08:38:76:55:9b:c8:9b:b3:35: a4:ab:1c:08:21:b3:20:fe:d0:88:06:c1:57:e6:1d:8b:70:0e: 67:e7:1f:98:9e:45:1b:3d:08:ae:13:98:2d:01:a3:f1:d1:74: e4:1b:08:8a:19:d9:7c:06:91:18:b7:55:47:6c:a5:d9:6f:61: ba:b6:44:4c:22:68:3c:be:7d:fc:c5:c4:92:15:b3:16:ad:1b: d7:fa:34:6b:fd:fc:98:f0:ff:f7:4f:72:49:3d:e3:78:bc:83: 87:d5:12:7a:e3:b5:33:b6:46:a4:82:b5:8b:ec:dc:a5:28:a9: e2:d7:ef:3a:a6:01:07:8f:b3:83:db:b8:70:db:b4:68:7b:b8: 4d:3a:4d:8d:2d:09:ad:f0:90:d4:85:24:57:eb:23:72:78:47: 4c:5d:48:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfWngOaKjVkURkrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk NGFlMjQ0OWItZGI2YS00MmM0LWE2ZDEtYjZkY2RjMjI5OTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoJY06UevfWCQc/XYLOLnaoGQnIAxUTE/WPH HDODmb9F4jw2uyG2Bz08owisoTtQRlZ96jpNfH7QBENdXB9HN4a0I1ulLErDzObC 7yudB+GJJd+sAeIQjh00hT9Cpv3YFyyNL6pdFPKDzfqC/ZiX7W84iyGkjBF/JLDY MNG4tUXg7kXL1UcR0PmrH7UmLIxtdQfxnQBlW0Ll2w8oK3rPYggKbMv9Z8NxumBc 8haq2EGNYVSP9OV48OeVMYvQi5nU/wyeAj4+EydSIJKCTsQ8wQm95PqExlHvyP57 0boosLhSHlX63gNnQvEqPtA9wJuYW7fwA2bGfNvE7GgOMeRKWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFkEeyz/J4u4pLA6lswm3Q8bVz+SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvMjg5OWE3ZjctMjdjMi0z Y2Y2LWJiYmYtOGIwZTgzM2FlMjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH2LMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADxVc4aX8QTsB9ucJBvctpw6/B3BnCvhzN7p9kHZabs54P3WeXAsqYN 9vF/oy49WjZOfabrZV435lIitbx7TbYR3Ea3XkRfN4UWFhszjBz7ZmgXICANUqmZ MNFiGhTOtfJ8pwg4dlWbyJuzNaSrHAghsyD+0IgGwVfmHYtwDmfnH5ieRRs9CK4T mC0Bo/HRdOQbCIoZ2XwGkRi3VUdspdlvYbq2REwiaDy+ffzFxJIVsxatG9f6NGv9 /Jjw//dPckk943i8g4fVEnrjtTO2RqSCtYvs3KUoqeLX7zqmAQePs4PbuHDbtGh7 uE06TY0tCa3wkNSFJFfrI3J4R0xdSPc= -----END CERTIFICATE-----Generated at Mon Jun 16 05:24:23 2025 by rpki-client