$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/baf35b03-5e28-3070-83c6-669f5294e617.roa File: baf35b03-5e28-3070-83c6-669f5294e617.roa (raw, json) Hash identifier: uDdsg2+s2DTxy0BkCj+Bi1nUGoc7ORoNw554oLEpdTg= Subject key identifier: 6A:DE:51:E4:C8:1F:78:1C:A9:13:D8:3C:B3:93:1B:DF:F4:F8:BD:CC Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858499AF47B7D37B27FE4ACBA9A40 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/baf35b03-5e28-3070-83c6-669f5294e617.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 852 IP address blocks: 99.199.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:7b:7d:37:b2:7f:e4:ac:ba:9a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=ddbe4f87-d327-4b4b-a7b6-690aca6eb6ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:01:34:9d:da:b8:09:49:20:1c:f5:4f:0a:ef: 87:8e:f0:6b:bd:27:5f:6d:ec:15:80:fb:05:1b:c1: a9:0e:1f:a5:30:2e:22:19:b5:a0:39:cc:7b:82:bc: 21:9d:21:ad:a1:53:c2:fd:bb:9c:bc:35:2e:a0:d1: 1b:4f:fc:e8:9b:ab:69:19:18:bb:3d:8d:c6:f5:29: 80:24:8c:a6:3a:e9:b9:ed:d7:95:2f:97:a8:60:47: 77:c6:b4:bb:a8:a6:84:38:99:36:f8:90:85:0f:6c: 93:fc:5b:ab:fa:a1:69:69:eb:3a:ef:89:96:e7:fc: ea:3d:89:c0:7d:5d:b8:c3:c7:b5:fb:0f:33:92:38: 26:d0:1c:73:d6:11:a8:1a:13:cd:68:1c:7d:e2:52: 6a:c0:be:26:81:6a:01:19:c8:e1:71:9a:07:21:1c: 4d:53:29:ec:ee:7f:fb:eb:2f:2c:36:28:66:36:73: 0a:a6:29:25:44:4c:1c:1e:74:da:e5:6e:ea:36:21: 56:93:76:5e:99:b2:27:57:29:65:73:ca:e0:56:25: b3:c9:77:96:76:ba:9f:6d:25:c0:65:5e:57:e2:bb: 05:71:29:c2:b6:0a:6c:af:dc:84:25:63:e4:be:66: d0:a9:6f:d2:69:b8:46:4a:d1:4e:18:4e:f9:ac:e4: db:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:DE:51:E4:C8:1F:78:1C:A9:13:D8:3C:B3:93:1B:DF:F4:F8:BD:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/baf35b03-5e28-3070-83c6-669f5294e617.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 99.199.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:db:94:61:59:b6:85:11:d7:09:fd:ac:47:93:4e:c2:7c:ee: 7e:76:e0:ba:b3:4e:ed:66:10:76:89:fe:d9:20:cc:2c:a2:99: 91:ea:36:6a:7a:16:70:57:8e:06:b3:e9:dc:12:35:9e:1c:69: 19:a1:33:26:60:76:aa:af:6b:61:b0:af:f8:52:82:fb:4c:94: 0b:be:f6:11:9a:77:6f:f1:46:2e:f8:9b:31:6e:47:46:1a:16: 29:31:3c:ea:0e:64:08:e1:e5:1b:3e:2e:8c:46:47:94:14:31: 96:55:1f:68:66:fa:74:67:c8:be:eb:2a:10:26:89:d1:e2:98: 67:e9:62:29:8b:5a:79:33:bf:09:0e:36:a6:5b:b7:aa:84:82: db:27:d5:04:29:48:54:60:93:bb:ae:72:e0:68:8b:dc:bc:87: f6:3e:5f:79:fc:be:61:83:00:8d:b7:a1:b0:5c:a5:9e:86:d5: 1f:09:4c:59:cd:6c:eb:ec:a2:ad:7b:a7:94:64:37:b8:80:7b: 1f:68:3f:5b:0e:21:1a:cf:db:1c:5c:f5:90:09:57:53:db:cb: 57:48:a6:4b:36:51:7c:36:ad:0e:49:87:a9:96:bd:9b:f9:96: dc:f2:7e:f7:97:86:94:ae:c7:fc:3d:57:76:00:9a:89:07:19: b8:cd:4d:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9Ht9N7J/5Ky6mkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk ZGRiZTRmODctZDMyNy00YjRiLWE3YjYtNjkwYWNhNmViNmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4QE0ndq4CUkgHPVPCu+HjvBrvSdfbewVgPsF G8GpDh+lMC4iGbWgOcx7grwhnSGtoVPC/bucvDUuoNEbT/zom6tpGRi7PY3G9SmA JIymOum57deVL5eoYEd3xrS7qKaEOJk2+JCFD2yT/Fur+qFpaes674mW5/zqPYnA fV24w8e1+w8zkjgm0Bxz1hGoGhPNaBx94lJqwL4mgWoBGcjhcZoHIRxNUyns7n/7 6y8sNihmNnMKpiklREwcHnTa5W7qNiFWk3ZembInVyllc8rgViWzyXeWdrqfbSXA ZV5X4rsFcSnCtgpsr9yEJWPkvmbQqW/SabhGStFOGE75rOTb7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGreUeTIH3gcqRPYPLOTG9/0+L3MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYmFmMzViMDMtNWUyOC0z MDcwLTgzYzYtNjY5ZjUyOTRlNjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEY8fAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALblGFZtoUR1wn9rEeTTsJ87n524LqzTu1mEHaJ/tkgzCyimZHqNmp6 FnBXjgaz6dwSNZ4caRmhMyZgdqqva2Gwr/hSgvtMlAu+9hGad2/xRi74mzFuR0Ya FikxPOoOZAjh5Rs+LoxGR5QUMZZVH2hm+nRnyL7rKhAmidHimGfpYimLWnkzvwkO NqZbt6qEgtsn1QQpSFRgk7uucuBoi9y8h/Y+X3n8vmGDAI23obBcpZ6G1R8JTFnN bOvsoq17p5RkN7iAex9oP1sOIRrP2xxc9ZAJV1Pby1dIpks2UXw2rQ5Jh6mWvZv5 ltzyfveXhpSux/w9V3YAmokHGbjNTSI= -----END CERTIFICATE-----Generated at Mon Apr 28 02:35:53 2025 by rpki-client