$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba34350e-8a32-444e-a9c3-3267735f96ea/a59b07bd-087c-3bd2-b8c2-4ce5bbd233f4.roa File: a59b07bd-087c-3bd2-b8c2-4ce5bbd233f4.roa (raw, json) Hash identifier: Zmv+PV8M/6V5N6RH1cYCiKioRKl/HJ29mvISci9V4ZU= Subject key identifier: 71:5D:00:BE:83:12:80:99:FD:0D:1F:4E:48:61:F3:1E:6E:D2:4F:99 Certificate issuer: /CN=ba34350e-8a32-444e-a9c3-3267735f96ea Certificate serial: 010D0C9F43285849E225359A20FD0C3CA66BE0E0 Authority key identifier: 95:CE:E8:CF:4D:E9:4C:D0:B3:22:3D:3C:68:D2:DD:A5:A0:52:B2:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba34350e-8a32-444e-a9c3-3267735f96ea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba34350e-8a32-444e-a9c3-3267735f96ea/a59b07bd-087c-3bd2-b8c2-4ce5bbd233f4.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 46179 IP address blocks: 199.91.152.0/21 maxlen: 21 205.196.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba34350e-8a32-444e-a9c3-3267735f96ea/ba34350e-8a32-444e-a9c3-3267735f96ea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba34350e-8a32-444e-a9c3-3267735f96ea/ba34350e-8a32-444e-a9c3-3267735f96ea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba34350e-8a32-444e-a9c3-3267735f96ea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:35:9a:20:fd:0c:3c:a6:6b:e0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba34350e-8a32-444e-a9c3-3267735f96ea Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=bc4c1ef6-b7d5-4ebd-b66c-7a2b571fd2ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:a8:53:43:7e:af:c9:50:ad:73:e2:96:79:d0: 3e:ff:2e:a3:e0:c4:96:58:53:1a:a2:d4:f9:c7:3e: 32:14:51:99:76:d3:5b:89:1b:63:c7:4a:d2:0b:9c: 04:33:ac:ee:44:de:10:07:1b:a4:0e:67:70:ca:40: 52:fb:73:e3:ca:c1:03:fc:67:3b:09:b5:57:9c:dc: fb:e4:68:7e:d3:96:69:50:63:76:29:2d:da:65:48: 37:55:87:ef:09:c5:b6:78:8c:83:67:2c:e4:22:1f: f1:e5:1f:d7:49:49:7c:14:82:ab:b1:8e:58:65:9d: 08:77:a9:7d:de:ec:78:d1:0f:2f:88:18:2b:2e:58: a6:04:2b:0e:3c:ec:19:59:83:3b:54:16:de:c1:7f: 69:99:ff:b1:12:2e:dd:32:c9:ad:07:25:fe:72:d4: 4e:7e:40:da:0f:f2:be:0f:57:0c:bb:d2:6f:22:92: 0e:8e:84:52:a0:75:0d:d1:8e:75:f5:09:fa:07:61: 7d:4d:e6:04:3a:60:27:9e:17:64:a9:2c:cf:eb:6d: 33:78:76:c1:b9:0f:ea:4a:60:09:37:34:f4:93:bb: 79:71:8c:1b:ae:7c:fe:38:8e:d6:91:81:e3:f5:56: ee:5d:23:19:00:29:1e:bc:fb:a4:cd:0b:48:26:1d: 8a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:5D:00:BE:83:12:80:99:FD:0D:1F:4E:48:61:F3:1E:6E:D2:4F:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba34350e-8a32-444e-a9c3-3267735f96ea/a59b07bd-087c-3bd2-b8c2-4ce5bbd233f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba34350e-8a32-444e-a9c3-3267735f96ea/ba34350e-8a32-444e-a9c3-3267735f96ea.crl X509v3 Authority Key Identifier: keyid:95:CE:E8:CF:4D:E9:4C:D0:B3:22:3D:3C:68:D2:DD:A5:A0:52:B2:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba34350e-8a32-444e-a9c3-3267735f96ea.cer sbgp-ipAddrBlock: critical IPv4: 199.91.152.0/21 205.196.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption df:e2:f1:7a:0a:dd:e4:76:e5:39:c5:e6:a4:5e:19:e2:55:74: 73:f8:a2:3c:16:fd:b2:f9:98:1e:7c:0d:70:f9:f2:1b:b7:fa: 38:f4:46:21:78:c6:7e:a9:11:86:8c:13:6d:26:74:5d:42:fa: a0:5c:c8:c4:11:3a:7b:70:c6:3f:bf:2e:57:c7:6e:45:4e:c6: 9a:55:13:22:e8:18:1c:79:a3:ce:78:dd:76:fb:54:40:cb:ee: ca:8e:c6:5d:44:97:09:55:00:ca:10:36:c5:f1:6f:b1:f1:03: 9f:86:30:f4:fe:a9:a6:b6:b8:7e:9d:39:26:8a:39:84:b5:8b: 6c:ee:fd:5e:a7:04:e9:a6:08:1f:5a:86:03:eb:33:22:7b:d1: 16:f9:77:88:c3:ea:d8:f5:cc:a9:4a:0d:dd:49:3a:ce:d7:75: b5:68:14:f9:81:03:37:e5:2c:38:d5:b6:c7:a5:85:dd:41:cb: 35:18:b9:eb:10:c2:34:53:fc:67:af:1e:e8:37:8b:50:e0:1d: 60:4d:11:ea:88:2a:a4:66:6e:40:a9:b0:3d:da:2d:fb:3f:0c: cf:39:9d:aa:71:7e:52:32:98:bc:28:58:ff:04:59:c8:62:f3: e4:86:38:06:d3:45:76:1b:0d:e9:05:6f:cd:6a:fd:55:5c:86: 21:a3:53:94 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEniJTWaIP0MPKZr4OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEzNDM1MGUtOGEzMi00NDRlLWE5YzMtMzI2NzczNWY5 NmVhMB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk YmM0YzFlZjYtYjdkNS00ZWJkLWI2NmMtN2EyYjU3MWZkMmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqhTQ36vyVCtc+KWedA+/y6j4MSWWFMaotT5 xz4yFFGZdtNbiRtjx0rSC5wEM6zuRN4QBxukDmdwykBS+3PjysED/Gc7CbVXnNz7 5Gh+05ZpUGN2KS3aZUg3VYfvCcW2eIyDZyzkIh/x5R/XSUl8FIKrsY5YZZ0Id6l9 3ux40Q8viBgrLlimBCsOPOwZWYM7VBbewX9pmf+xEi7dMsmtByX+ctROfkDaD/K+ D1cMu9JvIpIOjoRSoHUN0Y519Qn6B2F9TeYEOmAnnhdkqSzP620zeHbBuQ/qSmAJ NzT0k7t5cYwbrnz+OI7WkYHj9VbuXSMZACkevPukzQtIJh2KnQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFHFdAL6DEoCZ/Q0fTkhh8x5u0k+ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iYTM0 MzUwZS04YTMyLTQ0NGUtYTljMy0zMjY3NzM1Zjk2ZWEvYTU5YjA3YmQtMDg3Yy0z YmQyLWI4YzItNGNlNWJiZDIzM2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmEzNDM1MGUtOGEzMi00NDRlLWE5 YzMtMzI2NzczNWY5NmVhL2JhMzQzNTBlLThhMzItNDQ0ZS1hOWMzLTMyNjc3MzVm OTZlYS5jcmwwHwYDVR0jBBgwFoAUlc7oz03pTNCzIj08aNLdpaBSst8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iYTM0MzUwZS04YTMyLTQ0NGUtYTljMy0zMjY3 NzM1Zjk2ZWEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDx1uYAwQC zcR4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAN/i8XoK3eR25TnF5qReGeJVdHP4ojwW/bL5mB58DXD58hu3 +jj0RiF4xn6pEYaME20mdF1C+qBcyMQROntwxj+/LlfHbkVOxppVEyLoGBx5o854 3Xb7VEDL7sqOxl1ElwlVAMoQNsXxb7HxA5+GMPT+qaa2uH6dOSaKOYS1i2zu/V6n BOmmCB9ahgPrMyJ70Rb5d4jD6tj1zKlKDd1JOs7XdbVoFPmBAzflLDjVtselhd1B yzUYuesQwjRT/GevHug3i1DgHWBNEeqIKqRmbkCpsD3aLfs/DM85napxflIymLwo WP8EWchi8+SGOAbTRXYbDekFb81q/VVchiGjU5Q= -----END CERTIFICATE-----Generated at Wed Jun 18 17:44:27 2025 by rpki-client