$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e/0639ea96-660c-316a-8237-bab7ef39f7ec.roa File: 0639ea96-660c-316a-8237-bab7ef39f7ec.roa (raw, json) Hash identifier: yapTz2MGfdVtDonyaruou8ZvK4K9z4zjvdwwA82zNVM= Subject key identifier: 59:52:0C:9A:16:E0:80:AF:5E:07:58:84:2A:FF:C8:1B:9A:80:5E:8D Certificate issuer: /CN=56dc9981-1d62-4501-a3ce-9ab389a49b4e Certificate serial: 010D0C9F432858499294A0BECAC698618630C140 Authority key identifier: CD:DD:67:3D:B3:FD:DE:2E:2C:C4:E9:E5:2D:9F:7D:F4:96:B0:2E:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e/0639ea96-660c-316a-8237-bab7ef39f7ec.roa Signing time: Sat 19 Apr 2025 01:00:48 +0000 ROA not before: Sat 19 Apr 2025 01:00:48 +0000 ROA not after: Fri 18 Jul 2025 01:00:48 +0000 asID: 16509 IP address blocks: 199.73.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e/56dc9981-1d62-4501-a3ce-9ab389a49b4e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e/56dc9981-1d62-4501-a3ce-9ab389a49b4e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:94:a0:be:ca:c6:98:61:86:30:c1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56dc9981-1d62-4501-a3ce-9ab389a49b4e Validity Not Before: Apr 19 01:00:48 2025 GMT Not After : Jul 18 01:00:48 2025 GMT Subject: CN=9abdc8ac-37cf-4a69-9d32-ecfc88fd8840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:53:87:06:36:99:ea:bb:12:0f:c4:f6:5d:99: 6c:60:51:d7:f1:c9:f6:7d:ef:53:0d:8b:df:65:aa: d4:e1:8f:1a:b0:f6:23:8e:9e:31:0a:92:c3:07:d6: 99:84:a3:e6:b9:6c:5c:df:89:32:5c:50:d6:85:14: 57:72:03:0e:92:d8:ee:fc:c4:d3:6a:3f:12:ef:82: 3d:42:b2:e7:71:70:c5:b9:cc:31:3e:2e:89:06:70: d9:31:ca:18:b1:20:15:6a:7c:47:09:51:1d:06:35: c8:90:56:46:73:81:aa:cd:af:c7:ac:42:e7:fd:63: 17:62:3a:64:65:a6:b2:ae:5c:44:94:9b:00:ed:e0: 42:fd:c0:19:c6:56:1d:d8:a3:9b:ae:78:9b:b2:13: 19:9d:ed:26:f9:84:05:aa:0a:f8:14:02:16:f7:4c: 24:a3:a1:f6:61:89:33:d3:d2:c8:0c:d6:7b:1f:c4: cb:69:fe:da:71:ad:99:71:90:4d:12:12:a2:7f:a9: a5:86:3a:4f:7a:2e:ab:d8:0a:62:17:cc:32:3b:bb: 45:cc:29:cd:07:99:33:38:fb:9f:20:e3:9d:eb:56: c6:58:dd:d7:0f:b4:fa:b5:45:dd:31:af:a9:4d:a8: a9:84:ad:d1:d1:0b:ee:3c:55:49:de:fc:2b:64:d9: e9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:52:0C:9A:16:E0:80:AF:5E:07:58:84:2A:FF:C8:1B:9A:80:5E:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e/0639ea96-660c-316a-8237-bab7ef39f7ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e/56dc9981-1d62-4501-a3ce-9ab389a49b4e.crl X509v3 Authority Key Identifier: keyid:CD:DD:67:3D:B3:FD:DE:2E:2C:C4:E9:E5:2D:9F:7D:F4:96:B0:2E:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e.cer sbgp-ipAddrBlock: critical IPv4: 199.73.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:be:3e:d1:71:59:ad:31:3c:eb:58:ea:bd:80:c1:c3:2c:be: 1a:1c:3f:13:8b:8e:37:2a:9d:03:fd:78:13:0e:6f:b6:b1:85: 52:07:82:91:74:b8:c0:c5:a5:76:57:fc:00:6f:98:e7:62:9e: b0:d6:a3:89:8c:4b:c5:f0:1d:23:7e:69:0f:59:df:92:9e:79: e4:53:b1:23:41:ef:39:0c:68:bb:15:27:6b:69:42:fd:15:24: 54:31:39:78:40:c9:f7:01:9c:08:9b:2f:44:85:b0:43:c1:7a: 12:82:d8:db:8b:80:a7:46:aa:06:49:75:0e:26:70:ec:c0:a8: fe:09:ae:59:e9:25:8c:7b:17:c8:96:97:36:5f:06:86:6f:35: 19:f9:6b:50:b7:f9:e4:eb:ab:d7:f2:09:4b:53:0d:a4:72:dd: ff:4c:29:13:d0:bb:aa:fb:ac:d9:cf:c2:b9:8c:66:ff:19:e9: a8:d8:c6:fe:a6:46:4c:96:b2:09:c7:79:5b:4b:7b:0e:1b:89: 37:ba:31:7b:5c:d6:ac:13:07:b3:5f:f0:6f:ce:19:5b:b1:29: 68:e5:98:19:03:69:1b:a9:4e:3a:c3:c7:ec:b2:ea:2e:f0:93: 14:c2:59:cc:30:0e:d4:98:1a:42:2a:aa:34:e8:59:14:23:43: 1a:22:12:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSlKC+ysaYYYYwwUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTZkYzk5ODEtMWQ2Mi00NTAxLWEzY2UtOWFiMzg5YTQ5 YjRlMB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk OWFiZGM4YWMtMzdjZi00YTY5LTlkMzItZWNmYzg4ZmQ4ODQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVOHBjaZ6rsSD8T2XZlsYFHX8cn2fe9TDYvf ZarU4Y8asPYjjp4xCpLDB9aZhKPmuWxc34kyXFDWhRRXcgMOktju/MTTaj8S74I9 QrLncXDFucwxPi6JBnDZMcoYsSAVanxHCVEdBjXIkFZGc4Gqza/HrELn/WMXYjpk ZaayrlxElJsA7eBC/cAZxlYd2KObrnibshMZne0m+YQFqgr4FAIW90wko6H2YYkz 09LIDNZ7H8TLaf7aca2ZcZBNEhKif6mlhjpPei6r2ApiF8wyO7tFzCnNB5kzOPuf IOOd61bGWN3XD7T6tUXdMa+pTaiphK3R0QvuPFVJ3vwrZNnppwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFlSDJoW4ICvXgdYhCr/yBuagF6NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81NmRj OTk4MS0xZDYyLTQ1MDEtYTNjZS05YWIzODlhNDliNGUvMDYzOWVhOTYtNjYwYy0z MTZhLTgyMzctYmFiN2VmMzlmN2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTZkYzk5ODEtMWQ2Mi00NTAxLWEz Y2UtOWFiMzg5YTQ5YjRlLzU2ZGM5OTgxLTFkNjItNDUwMS1hM2NlLTlhYjM4OWE0 OWI0ZS5jcmwwHwYDVR0jBBgwFoAUzd1nPbP93i4sxOnlLZ999JawLmowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81NmRjOTk4MS0xZDYyLTQ1MDEtYTNjZS05YWIz ODlhNDliNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx0l0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHW+PtFxWa0xPOtY6r2AwcMsvhocPxOLjjcqnQP9eBMOb7axhVIHgpF0 uMDFpXZX/ABvmOdinrDWo4mMS8XwHSN+aQ9Z35KeeeRTsSNB7zkMaLsVJ2tpQv0V JFQxOXhAyfcBnAibL0SFsEPBehKC2NuLgKdGqgZJdQ4mcOzAqP4JrlnpJYx7F8iW lzZfBoZvNRn5a1C3+eTrq9fyCUtTDaRy3f9MKRPQu6r7rNnPwrmMZv8Z6ajYxv6m RkyWsgnHeVtLew4biTe6MXtc1qwTB7Nf8G/OGVuxKWjlmBkDaRupTjrDx+yy6i7w kxTCWcwwDtSYGkIqqjToWRQjQxoiEnM= -----END CERTIFICATE-----Generated at Sun Apr 27 00:23:07 2025 by rpki-client