$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/60c19186-4644-30b6-a66f-f2bc0cf4f01e.roa File: 60c19186-4644-30b6-a66f-f2bc0cf4f01e.roa (raw, json) Hash identifier: DFAk3BsxHx/AdqP/OqWJfJUAc1KmP0JKpVi4Ur08OxU= Subject key identifier: 84:AB:B9:95:69:DA:63:72:6D:D4:19:6D:29:30:6A:2B:2C:45:52:BE Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F43285849A61F3D736C4082D7537D5380 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/60c19186-4644-30b6-a66f-f2bc0cf4f01e.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 22885 IP address blocks: 199.0.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:3d:73:6c:40:82:d7:53:7d:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=dae08552-23d8-48a4-8487-4dad0bce218d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:06:d6:86:39:5c:63:b0:69:b5:7a:55:dc:20: 22:b9:9d:df:8a:17:8a:99:5d:62:1b:b1:61:69:53: 48:21:58:e3:c9:00:70:94:4f:81:cf:7b:11:02:70: ec:f6:aa:56:c4:b1:9a:c1:e9:fc:f7:18:d3:57:f7: 58:cb:bb:40:52:4d:b9:33:60:cb:a0:f5:83:60:20: e6:14:39:b1:ae:16:d6:7d:55:47:82:16:61:4c:3e: f7:07:5d:7c:25:1b:d7:31:69:e7:0f:60:eb:10:1f: c6:12:5e:43:f8:35:56:c7:84:a5:0a:71:f6:2b:b2: c9:24:0e:63:a5:20:9c:e9:63:8c:9e:a6:06:7f:da: 49:44:b3:70:c6:58:9d:b6:e6:70:b6:54:7f:c8:b3: b8:dd:86:5d:0e:79:5f:c1:6f:95:8c:f7:8f:72:a2: ee:e9:12:ee:b7:86:39:77:19:ec:cb:86:f8:b0:ef: 21:0a:35:35:52:f7:c3:0c:e0:ae:a7:2a:a8:2d:2e: 54:2d:49:65:a8:9f:5f:12:bc:d8:ca:69:76:ef:0f: fc:69:13:51:93:99:0d:2d:fd:1a:d8:6c:e6:0f:40: 62:c0:65:24:f3:bd:8b:9e:2f:b1:7d:93:68:f0:0f: 33:83:f6:5d:94:78:6c:34:cc:fc:c2:1e:aa:dd:fb: 2b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:AB:B9:95:69:DA:63:72:6D:D4:19:6D:29:30:6A:2B:2C:45:52:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/60c19186-4644-30b6-a66f-f2bc0cf4f01e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 199.0.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:a9:b5:d9:95:94:07:1f:70:80:20:7e:c2:6b:f3:19:eb:f7: a0:a6:dc:73:ec:06:2d:52:ff:fe:1a:ca:54:09:f4:2c:d0:d8: 07:87:e5:9b:89:d3:31:e0:0d:f4:2a:c5:15:d3:fa:f2:09:29: 05:58:b6:2d:7d:26:16:46:bf:73:ee:53:47:a2:bc:79:d7:48: d7:32:aa:ae:55:64:93:59:c1:a3:04:e3:46:fa:19:90:ad:2a: 46:61:93:23:69:a8:fa:8c:5d:93:74:f1:1e:a8:25:88:40:19: 85:1f:50:67:ae:82:e0:b9:39:1b:53:20:c3:c8:cf:23:59:f2: db:11:0b:67:a5:3b:e1:f2:40:06:9f:02:b5:9d:60:6a:06:12: 7e:2c:ea:45:84:43:14:b7:bc:70:0c:e4:18:4c:cb:6a:52:68: 78:1d:1d:2a:40:a0:01:61:a1:cc:07:2f:4c:9d:3d:8d:2a:27: 66:bd:31:1b:6c:4e:ad:47:d2:b5:39:e1:72:d3:45:e1:e1:a6: 44:1d:32:4a:53:3d:99:93:5f:1a:90:7e:35:a7:65:40:3c:f8: 8a:b8:86:c4:5e:ab:45:43:a4:74:4a:d2:44:aa:de:c3:4f:b5: ce:35:c2:80:0b:bc:a4:6e:61:2d:5c:ce:d9:ca:fd:b9:67:9e: ef:f9:a8:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmHz1zbECC11N9U4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk ZGFlMDg1NTItMjNkOC00OGE0LTg0ODctNGRhZDBiY2UyMThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwbWhjlcY7BptXpV3CAiuZ3fiheKmV1iG7Fh aVNIIVjjyQBwlE+Bz3sRAnDs9qpWxLGawen89xjTV/dYy7tAUk25M2DLoPWDYCDm FDmxrhbWfVVHghZhTD73B118JRvXMWnnD2DrEB/GEl5D+DVWx4SlCnH2K7LJJA5j pSCc6WOMnqYGf9pJRLNwxlidtuZwtlR/yLO43YZdDnlfwW+VjPePcqLu6RLut4Y5 dxnsy4b4sO8hCjU1UvfDDOCupyqoLS5ULUllqJ9fErzYyml27w/8aRNRk5kNLf0a 2GzmD0BiwGUk872Lni+xfZNo8A8zg/ZdlHhsNMz8wh6q3fsr4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFISruZVp2mNybdQZbSkwaissRVK+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvNjBjMTkxODYtNDY0NC0z MGI2LWE2NmYtZjJiYzBjZjRmMDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwC6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ+ptdmVlAcfcIAgfsJr8xnr96Cm3HPsBi1S//4aylQJ9CzQ2AeH5ZuJ 0zHgDfQqxRXT+vIJKQVYti19JhZGv3PuU0eivHnXSNcyqq5VZJNZwaME40b6GZCt KkZhkyNpqPqMXZN08R6oJYhAGYUfUGeuguC5ORtTIMPIzyNZ8tsRC2elO+HyQAaf ArWdYGoGEn4s6kWEQxS3vHAM5BhMy2pSaHgdHSpAoAFhocwHL0ydPY0qJ2a9MRts Tq1H0rU54XLTReHhpkQdMkpTPZmTXxqQfjWnZUA8+Iq4hsReq0VDpHRK0kSq3sNP tc41woALvKRuYS1cztnK/blnnu/5qK4= -----END CERTIFICATE-----Generated at Wed Apr 30 03:27:31 2025 by rpki-client