$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/a6c73c7a-1d9c-319f-a05d-b106338c766b.roa File: a6c73c7a-1d9c-319f-a05d-b106338c766b.roa (raw, json) Hash identifier: 5QoZBvdOdJxOHe1RhA+VgD9rquqH4YgQEpi3453ZiJo= Subject key identifier: FA:4C:2C:38:30:49:9A:E8:77:86:9C:4F:F6:1B:E5:44:91:31:09:30 Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F432858499487BCD736321E37EA99FE00 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/a6c73c7a-1d9c-319f-a05d-b106338c766b.roa Signing time: Sat 19 Apr 2025 17:46:57 +0000 ROA not before: Sat 19 Apr 2025 17:46:57 +0000 ROA not after: Fri 18 Jul 2025 17:46:57 +0000 asID: 11404 IP address blocks: 199.102.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:94:87:bc:d7:36:32:1e:37:ea:99:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Apr 19 17:46:57 2025 GMT Not After : Jul 18 17:46:57 2025 GMT Subject: CN=b862d0fd-0c69-44d1-811c-2f522702462f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:36:4c:c3:2e:13:ca:ce:6e:cc:9a:63:f4:5f: 53:b0:c2:ad:13:b6:16:50:fa:46:38:c9:ba:8b:0f: b0:9e:43:70:d1:fe:11:df:a7:bc:d5:c0:77:f2:f0: a3:21:0c:02:89:32:b6:5f:42:09:7d:9a:30:8a:33: 15:59:bb:d6:eb:a6:04:e5:14:90:75:41:d1:4e:36: 67:8c:9c:4e:1f:44:49:12:08:63:d9:7f:a8:a4:db: 83:5e:ce:81:86:67:0d:98:14:14:ba:da:ab:cb:86: 07:71:37:af:9d:a9:9d:1a:99:67:12:23:f2:90:72: ba:f0:04:3a:8c:84:f8:f1:bd:5c:a9:a3:3b:b8:12: 6b:8b:fe:cc:26:6c:91:aa:72:59:73:a9:b8:03:f7: ba:d7:5c:5b:be:fc:28:d8:26:95:5d:33:79:18:1a: 51:d7:05:60:42:23:7e:e6:89:84:7d:6d:6f:a2:74: 16:dc:2e:0a:6f:e0:bb:f0:65:b2:e5:cb:d1:36:97: c7:c3:a7:43:aa:1a:9f:dd:bd:03:29:4a:0f:9d:b0: 63:78:3b:47:34:bd:11:d9:b5:0f:91:0a:65:d4:48: cf:3e:88:7a:6c:48:c7:7f:63:07:aa:a6:95:b8:a0: 81:ed:01:82:74:08:ed:87:e8:7b:73:6a:80:96:80: 92:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:4C:2C:38:30:49:9A:E8:77:86:9C:4F:F6:1B:E5:44:91:31:09:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/a6c73c7a-1d9c-319f-a05d-b106338c766b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 199.102.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:7e:f2:0b:d6:89:61:f2:25:dc:5e:82:b7:e8:03:ba:c4:d9: 66:1c:f4:db:33:da:e7:9f:db:1e:ff:3c:6e:17:93:da:5f:32: e9:72:9e:e2:be:f6:1d:ee:59:cc:ff:ae:80:cf:bb:b3:9b:d9: 15:ab:4a:e8:41:cd:df:2d:a2:c8:0e:93:45:cb:7b:47:54:93: e5:d9:2f:63:f1:2b:10:24:9d:f0:0b:6c:89:cb:5b:f8:93:8e: b4:6f:2f:5c:1f:9f:68:13:83:b9:ad:c5:69:b5:dc:2e:e2:10: 73:ed:27:b3:47:8e:45:20:68:5d:da:63:c4:20:1d:18:c0:79: 00:1b:05:9d:bb:e0:f6:40:fb:25:b1:e3:e2:f6:34:e0:16:d3: 80:c2:c0:1b:8c:5c:a8:ed:a6:0b:c0:47:3d:f0:e7:8d:04:57: 8d:d2:bd:12:de:9e:5b:45:8e:a1:3f:2c:28:e6:ac:05:e7:cc: fe:06:9a:81:b0:da:b0:64:a2:bf:8a:68:a2:fc:66:7c:bd:61: 39:7b:06:cb:76:17:43:92:3e:73:0d:50:a3:b4:84:f1:82:fa: d6:4e:3a:8e:cc:96:17:49:db:31:6b:60:27:31:8e:06:cf:3a: 24:cb:62:ab:64:84:d9:34:ff:fa:ec:46:f9:bb:b6:a8:dd:f0: 69:60:de:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmUh7zXNjIeN+qZ/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI1MDQxOTE3NDY1N1oXDTI1MDcxODE3NDY1N1owLzEtMCsGA1UEAxMk Yjg2MmQwZmQtMGM2OS00NGQxLTgxMWMtMmY1MjI3MDI0NjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTZMwy4Tys5uzJpj9F9TsMKtE7YWUPpGOMm6 iw+wnkNw0f4R36e81cB38vCjIQwCiTK2X0IJfZowijMVWbvW66YE5RSQdUHRTjZn jJxOH0RJEghj2X+opNuDXs6BhmcNmBQUutqry4YHcTevnamdGplnEiPykHK68AQ6 jIT48b1cqaM7uBJri/7MJmyRqnJZc6m4A/e611xbvvwo2CaVXTN5GBpR1wVgQiN+ 5omEfW1vonQW3C4Kb+C78GWy5cvRNpfHw6dDqhqf3b0DKUoPnbBjeDtHNL0R2bUP kQpl1EjPPoh6bEjHf2MHqqaVuKCB7QGCdAjth+h7c2qAloCSmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPpMLDgwSZrod4acT/Yb5USRMQkwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvYTZjNzNjN2EtMWQ5Yy0z MTlmLWEwNWQtYjEwNjMzOGM3NjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx2bHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1+8gvWiWHyJdxegrfoA7rE2WYc9Nsz2uef2x7/PG4Xk9pfMulynuK+ 9h3uWcz/roDPu7Ob2RWrSuhBzd8tosgOk0XLe0dUk+XZL2PxKxAknfALbInLW/iT jrRvL1wfn2gTg7mtxWm13C7iEHPtJ7NHjkUgaF3aY8QgHRjAeQAbBZ274PZA+yWx 4+L2NOAW04DCwBuMXKjtpgvARz3w540EV43SvRLenltFjqE/LCjmrAXnzP4GmoGw 2rBkor+KaKL8Zny9YTl7Bst2F0OSPnMNUKO0hPGC+tZOOo7MlhdJ2zFrYCcxjgbP OiTLYqtkhNk0//rsRvm7tqjd8Glg3tU= -----END CERTIFICATE-----Generated at Sun Apr 27 12:54:34 2025 by rpki-client