$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/5e1f88d7-bee0-3195-bd82-daf1df8d8e0d.roa File: 5e1f88d7-bee0-3195-bd82-daf1df8d8e0d.roa (raw, json) Hash identifier: pGIf1dxcZydRBK1TL6Rd0m09CNuvAeRse97CESJ7akc= Subject key identifier: 57:3A:EB:AF:E0:73:50:AE:86:AD:D5:9B:FC:D5:00:32:72:85:1C:34 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858494B642E967D0BBC2CAE54B8D0 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/5e1f88d7-bee0-3195-bd82-daf1df8d8e0d.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 11404 IP address blocks: 199.59.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:2e:96:7d:0b:bc:2c:ae:54:b8:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=905247af-2ad3-470b-af0c-0a9198392bc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:23:e2:03:58:f1:9a:00:88:45:3c:7a:a9:0f: b0:c7:f3:72:32:cf:6a:8a:e5:3a:c6:bc:cb:80:75: 17:8e:88:3c:6f:fb:92:11:ba:95:b7:0e:6e:0e:55: ae:1b:49:8a:69:d0:c0:f5:fc:04:a7:b4:41:c7:40: 99:77:b5:fa:e7:62:92:df:d2:af:f0:cb:b7:9d:0f: d9:ee:b8:31:cb:97:5e:ed:2c:0f:da:4d:23:5b:0d: e7:2d:78:ba:81:81:40:af:ed:4a:48:2d:1b:68:4f: 20:af:f5:e6:db:c1:7e:c5:5e:70:97:d2:7b:f6:fc: 14:72:0b:06:b0:90:17:be:12:8f:c2:0d:f8:1e:de: 5d:5e:f0:db:cb:5b:04:28:03:bc:d3:30:1d:98:94: 25:24:2f:15:b6:b5:43:ff:e2:d0:19:86:f4:b9:30: 91:86:31:58:d5:e9:65:90:bd:fb:3a:79:09:f2:75: 56:2e:43:d7:ad:ad:75:c1:1d:9f:c6:3f:54:ec:27: b0:08:80:ca:b5:dc:25:91:90:2f:90:6d:36:31:ab: cb:b1:52:75:41:ac:36:31:08:30:5f:54:0a:9f:c7: 21:7b:b7:2c:4c:2c:58:a6:98:f8:fd:d0:14:28:62: c6:68:42:b8:c2:1f:e0:ea:d3:7f:75:db:79:75:0f: 20:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:3A:EB:AF:E0:73:50:AE:86:AD:D5:9B:FC:D5:00:32:72:85:1C:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/5e1f88d7-bee0-3195-bd82-daf1df8d8e0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 199.59.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:51:34:ed:c6:f7:68:d4:13:12:94:a4:e8:d5:1e:8f:a1:5d: e1:0d:e3:53:fb:7f:01:52:68:32:25:be:1a:d6:16:b1:7a:85: 06:8c:54:d1:d1:a8:77:15:b4:a0:3a:3e:ca:79:24:8c:64:c8: ab:b1:ea:9b:11:ee:4c:10:08:5c:fa:05:8c:65:02:f3:61:61: 67:85:f0:45:62:59:d9:01:77:01:3e:67:af:47:2e:89:c4:19: b3:b2:3f:8d:f0:07:d3:1d:76:d9:23:7a:5b:d0:93:e3:7d:81: e6:12:26:55:96:a5:f2:48:2a:ea:a6:c3:ba:b1:ff:4f:a2:71: fc:59:c7:55:24:e1:a4:6f:1c:d9:7a:86:b0:fb:3d:a7:a7:23: 72:0f:da:f9:c1:04:f1:f6:a6:60:e0:2e:41:e0:c4:97:b0:ed: 06:d8:0a:a6:11:73:75:86:ee:42:bd:2a:a7:fa:37:9c:25:75: a0:74:d7:49:49:f0:53:3a:68:3d:41:9c:21:f3:91:7d:0d:fa: 0f:2e:bd:98:32:05:59:67:4a:15:34:5b:29:66:e5:1e:a8:79: 9f:a4:d5:92:78:a9:9c:70:1b:f2:24:72:ec:32:dd:2b:79:1d: e7:87:5b:fc:dc:f2:f8:07:41:32:50:39:b1:81:48:e7:d5:a7: 97:a6:6a:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZC6WfQu8LK5UuNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk OTA1MjQ3YWYtMmFkMy00NzBiLWFmMGMtMGE5MTk4MzkyYmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiPiA1jxmgCIRTx6qQ+wx/NyMs9qiuU6xrzL gHUXjog8b/uSEbqVtw5uDlWuG0mKadDA9fwEp7RBx0CZd7X652KS39Kv8Mu3nQ/Z 7rgxy5de7SwP2k0jWw3nLXi6gYFAr+1KSC0baE8gr/Xm28F+xV5wl9J79vwUcgsG sJAXvhKPwg34Ht5dXvDby1sEKAO80zAdmJQlJC8VtrVD/+LQGYb0uTCRhjFY1ell kL37OnkJ8nVWLkPXra11wR2fxj9U7CewCIDKtdwlkZAvkG02MavLsVJ1Qaw2MQgw X1QKn8che7csTCxYppj4/dAUKGLGaEK4wh/g6tN/ddt5dQ8gbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFc666/gc1Cuhq3Vm/zVADJyhRw0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvNWUxZjg4ZDctYmVlMC0z MTk1LWJkODItZGFmMWRmOGQ4ZTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxztoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZRNO3G92jUExKUpOjVHo+hXeEN41P7fwFSaDIlvhrWFrF6hQaMVNHR qHcVtKA6Psp5JIxkyKux6psR7kwQCFz6BYxlAvNhYWeF8EViWdkBdwE+Z69HLonE GbOyP43wB9MddtkjelvQk+N9geYSJlWWpfJIKuqmw7qx/0+icfxZx1Uk4aRvHNl6 hrD7PaenI3IP2vnBBPH2pmDgLkHgxJew7QbYCqYRc3WG7kK9Kqf6N5wldaB010lJ 8FM6aD1BnCHzkX0N+g8uvZgyBVlnShU0Wylm5R6oeZ+k1ZJ4qZxwG/Ikcuwy3St5 HeeHW/zc8vgHQTJQObGBSOfVp5emaos= -----END CERTIFICATE-----Generated at Sun Apr 27 12:49:12 2025 by rpki-client