$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/9e5ebf40-c830-3982-802c-6fb0581c00a8.roa File: 9e5ebf40-c830-3982-802c-6fb0581c00a8.roa (raw, json) Hash identifier: 6n5mfDZgamF5HhDqqbOlPLFCeeh1IFbt5unKNhKoKhg= Subject key identifier: 6A:78:32:3F:77:5B:E9:F0:D3:0C:F9:CC:69:C3:56:05:FD:B5:AA:E5 Certificate issuer: /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Certificate serial: 010D0C9F43285849C20A0572D87D41622F49E180 Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/9e5ebf40-c830-3982-802c-6fb0581c00a8.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 398395 IP address blocks: 172.99.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:05:72:d8:7d:41:62:2f:49:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=df1e1487-48e9-45f2-bc92-34dc30e9e654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b1:7b:7a:5f:b1:7b:cd:ad:e8:e1:e6:df:05: 62:60:23:4d:22:85:ea:dd:bf:c2:df:f1:7d:2f:68: 94:7b:14:aa:fa:90:a4:ca:02:d4:34:58:76:92:1c: 8a:ee:bc:55:79:a2:bc:55:22:1e:23:c0:d1:d0:3c: 51:4f:37:df:5f:28:74:1a:34:f9:f1:7f:64:08:0d: 5b:ef:9f:62:f3:bb:26:63:35:97:5e:c7:da:d8:08: 79:38:36:c1:f1:47:b0:ab:6f:30:a8:53:bb:7b:fc: 07:93:6c:fe:9c:2a:f2:6f:bf:b2:75:d9:5c:84:68: 59:f3:02:af:08:78:11:50:fa:03:b5:ba:8b:96:a7: 1a:38:6d:92:41:2d:eb:4c:2d:de:7a:d7:56:e2:e4: 19:8c:aa:30:8c:52:13:64:1a:ea:46:e1:e7:1d:27: 0b:52:9e:d4:31:2f:0a:ee:3f:cf:27:45:09:f7:3a: f2:f6:4a:18:ae:ec:e2:cd:97:ab:33:5e:db:e4:4b: c0:56:ed:47:78:aa:87:ed:38:1d:8e:78:e0:09:a9: e0:73:54:08:3e:ab:7c:e1:cf:ca:e2:97:a0:71:42: c6:38:68:07:a0:0a:51:28:d9:29:17:1e:46:3e:e0: ee:e3:1e:bd:54:7b:cd:d0:eb:97:c6:99:77:9f:2f: de:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:78:32:3F:77:5B:E9:F0:D3:0C:F9:CC:69:C3:56:05:FD:B5:AA:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/9e5ebf40-c830-3982-802c-6fb0581c00a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl X509v3 Authority Key Identifier: keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer sbgp-ipAddrBlock: critical IPv4: 172.99.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:33:7c:37:75:f6:e9:17:56:38:3c:b0:78:21:aa:a4:1b:f7: 08:a8:63:b3:78:bf:f7:a5:6a:91:02:34:1b:fd:ee:67:67:c0: 0f:27:9b:6f:2d:8b:b5:a0:2e:dc:45:72:ea:35:a7:73:aa:19: 58:4d:28:e4:aa:36:fc:63:48:22:06:eb:8a:4a:4f:d7:da:a2: 20:ee:56:99:bc:86:3f:ab:36:20:a3:fb:c9:da:a7:a3:87:0e: 2c:ab:f8:cf:4f:38:ef:5a:04:1c:9e:bc:6e:38:90:12:87:e6: 23:4c:e2:a8:a5:94:1d:e9:78:2d:6f:ca:ab:6b:8d:b0:ad:02: 9e:b7:1b:ff:9f:61:c2:28:4e:f9:4c:95:0c:45:4a:ad:e8:89: dd:b0:a3:31:de:52:bf:a5:be:d6:57:73:52:bd:77:a1:9b:7a: da:64:2c:a0:be:f7:35:bd:58:0d:1c:50:0d:ff:75:f0:a3:9b: 76:93:6f:08:a6:2e:c0:44:1f:84:14:ca:6a:eb:63:d7:c9:67: 2b:8d:0b:08:bd:a9:43:62:b5:e6:78:d7:45:55:df:8e:51:cb: 72:7d:ee:87:1a:31:e2:a4:c6:21:7e:bb:4c:de:2c:95:34:6f: 75:93:51:b3:ef:83:80:a3:1f:eb:90:71:a9:2c:7e:1f:18:b6: 3a:b5:29:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCgVy2H1BYi9J4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMxOWEyNDYtZDlmYS00ODFhLWE0ZDctMDEwYWY4YzEz MmIzMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk ZGYxZTE0ODctNDhlOS00NWYyLWJjOTItMzRkYzMwZTllNjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7F7el+xe82t6OHm3wViYCNNIoXq3b/C3/F9 L2iUexSq+pCkygLUNFh2khyK7rxVeaK8VSIeI8DR0DxRTzffXyh0GjT58X9kCA1b 759i87smYzWXXsfa2Ah5ODbB8Uewq28wqFO7e/wHk2z+nCryb7+yddlchGhZ8wKv CHgRUPoDtbqLlqcaOG2SQS3rTC3eetdW4uQZjKowjFITZBrqRuHnHScLUp7UMS8K 7j/PJ0UJ9zry9koYruzizZerM17b5EvAVu1HeKqH7TgdjnjgCangc1QIPqt84c/K 4pegcULGOGgHoApRKNkpFx5GPuDu4x69VHvN0OuXxpl3ny/eTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGp4Mj93W+nw0wz5zGnDVgX9tarlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YzE5 YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBhZjhjMTMyYjMvOWU1ZWJmNDAtYzgzMC0z OTgyLTgwMmMtNmZiMDU4MWMwMGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWMxOWEyNDYtZDlmYS00ODFhLWE0 ZDctMDEwYWY4YzEzMmIzLzVjMTlhMjQ2LWQ5ZmEtNDgxYS1hNGQ3LTAxMGFmOGMx MzJiMy5jcmwwHwYDVR0jBBgwFoAUGBmr0BGL/MK+/l1zc0BDuuWTrnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YzE5YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBh ZjhjMTMyYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGOEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIzfDd19ukXVjg8sHghqqQb9wioY7N4v/elapECNBv97mdnwA8nm28t i7WgLtxFcuo1p3OqGVhNKOSqNvxjSCIG64pKT9faoiDuVpm8hj+rNiCj+8nap6OH Diyr+M9POO9aBByevG44kBKH5iNM4qillB3peC1vyqtrjbCtAp63G/+fYcIoTvlM lQxFSq3oid2wozHeUr+lvtZXc1K9d6GbetpkLKC+9zW9WA0cUA3/dfCjm3aTbwim LsBEH4QUymrrY9fJZyuNCwi9qUNiteZ410VV345Ry3J97ocaMeKkxiF+u0zeLJU0 b3WTUbPvg4CjH+uQcaksfh8Ytjq1Keg= -----END CERTIFICATE-----Generated at Sun Jun 15 15:25:37 2025 by rpki-client