$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/6b35030e-e68b-3af6-b71f-5f5eda5cc648.roa File: 6b35030e-e68b-3af6-b71f-5f5eda5cc648.roa (raw, json) Hash identifier: NjFSIgtZZit0Lfh9SbX5dCOL6dlQtzo2XJhdgsXsTXI= Subject key identifier: 97:F8:69:49:7F:34:5D:37:FD:B1:E3:4F:EE:FF:42:95:99:54:93:53 Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F43285849A61F4293D51A34DCD7070180 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/6b35030e-e68b-3af6-b71f-5f5eda5cc648.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 22885 IP address blocks: 199.0.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:42:93:d5:1a:34:dc:d7:07:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=f112c90b-f219-4b81-84e9-7d058c51a06e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:05:53:11:9f:e6:36:30:28:68:2c:b4:3b:e9: 73:6e:a3:bb:9e:26:a6:a3:c6:9b:c9:b2:7e:2a:b4: 34:24:2c:8d:74:43:05:c5:39:73:d8:c5:ba:c9:38: 23:17:db:44:74:95:31:b8:1b:e8:85:b3:e6:1b:2c: 8f:1f:0d:41:3a:20:dc:49:c9:75:8f:61:b1:ca:5f: 68:bb:99:3e:f6:50:bc:78:3b:88:47:15:fc:42:b4: 1b:82:43:1c:1b:01:dc:5e:db:cc:00:14:39:7c:03: 65:de:d4:1b:77:44:2f:59:85:b4:6d:c1:a5:57:bf: 9d:19:c4:09:d3:0e:0c:38:8c:ca:c2:e4:b7:80:95: c1:c8:a0:92:18:1b:3c:e0:55:d0:e5:ec:43:e7:74: 40:43:46:63:77:b4:ab:b1:18:40:96:62:48:cb:63: 66:9a:12:db:f6:ac:95:72:36:0a:f2:c0:4c:c9:02: 88:8a:b9:6a:b0:98:d0:f3:cf:d8:f4:09:e3:1b:ec: bb:3e:75:ee:30:6f:b6:c0:b9:04:cb:2a:9b:11:20: fc:b3:b2:ad:c8:da:1d:cf:c8:8e:c5:e7:c1:72:1b: 1f:68:0e:21:36:8d:02:1a:29:2c:7e:ee:25:cb:f0: be:81:aa:2f:ff:09:7d:d2:87:6c:41:05:1e:b0:72: d0:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:F8:69:49:7F:34:5D:37:FD:B1:E3:4F:EE:FF:42:95:99:54:93:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/6b35030e-e68b-3af6-b71f-5f5eda5cc648.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 199.0.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:81:2c:e8:af:66:d5:a0:95:6d:9b:79:c5:d8:d1:34:f4:bf: 18:e6:e9:d6:5b:25:3f:a7:92:5c:ee:1e:de:76:4f:75:e7:3e: 97:f5:1b:29:8f:fd:c6:e5:b5:51:65:38:76:1d:5f:23:87:fa: b2:d8:03:d0:93:df:a7:a9:4b:b0:3a:39:e0:02:56:e9:94:13: 3a:bb:7e:46:71:e9:66:ba:32:5f:d5:50:4f:60:1c:89:27:e2: 6d:f1:6a:ae:ad:1b:7d:89:c0:0e:20:3c:a3:ca:05:23:88:81: 88:ce:76:77:1a:39:9f:0f:7c:ac:77:c4:fc:bf:c0:44:cd:5a: e0:ab:1c:6b:48:36:04:12:b9:cb:41:81:a7:b2:d8:d6:52:ee: 14:32:70:97:60:69:7c:ee:2d:f5:17:c5:04:3d:f3:35:60:db: 66:21:5e:a5:00:ce:5c:fc:b7:c4:67:1e:f3:03:74:f7:77:6c: ec:4f:74:07:4a:52:b9:57:cf:e3:9a:bf:90:36:31:d1:18:c5: 92:42:42:9f:70:3c:e8:4e:32:e3:76:e9:83:30:e9:d7:6f:7c: 86:fe:36:3b:fe:f3:61:88:bf:c1:59:36:14:00:01:3e:11:3f: fc:32:ac:7c:8b:76:82:43:ac:9c:69:a7:cf:05:71:78:70:b1: eb:3c:33:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmH0KT1Ro03NcHAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk ZjExMmM5MGItZjIxOS00YjgxLTg0ZTktN2QwNThjNTFhMDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4AVTEZ/mNjAoaCy0O+lzbqO7niamo8abybJ+ KrQ0JCyNdEMFxTlz2MW6yTgjF9tEdJUxuBvohbPmGyyPHw1BOiDcScl1j2Gxyl9o u5k+9lC8eDuIRxX8QrQbgkMcGwHcXtvMABQ5fANl3tQbd0QvWYW0bcGlV7+dGcQJ 0w4MOIzKwuS3gJXByKCSGBs84FXQ5exD53RAQ0Zjd7SrsRhAlmJIy2NmmhLb9qyV cjYK8sBMyQKIirlqsJjQ88/Y9AnjG+y7PnXuMG+2wLkEyyqbESD8s7KtyNodz8iO xefBchsfaA4hNo0CGiksfu4ly/C+gaov/wl90odsQQUesHLQJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJf4aUl/NF03/bHjT+7/QpWZVJNTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvNmIzNTAzMGUtZTY4Yi0z YWY2LWI3MWYtNWY1ZWRhNWNjNjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwC4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJmBLOivZtWglW2becXY0TT0vxjm6dZbJT+nklzuHt52T3XnPpf1GymP /cbltVFlOHYdXyOH+rLYA9CT36epS7A6OeACVumUEzq7fkZx6Wa6Ml/VUE9gHIkn 4m3xaq6tG32JwA4gPKPKBSOIgYjOdncaOZ8PfKx3xPy/wETNWuCrHGtINgQSuctB gaey2NZS7hQycJdgaXzuLfUXxQQ98zVg22YhXqUAzlz8t8RnHvMDdPd3bOxPdAdK UrlXz+Oav5A2MdEYxZJCQp9wPOhOMuN26YMw6ddvfIb+Njv+82GIv8FZNhQAAT4R P/wyrHyLdoJDrJxpp88FcXhwses8M+Q= -----END CERTIFICATE-----Generated at Wed Apr 30 03:28:26 2025 by rpki-client