$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/18e749d1-f0e3-3f27-9598-de2eb7c53f65.roa File: 18e749d1-f0e3-3f27-9598-de2eb7c53f65.roa (raw, json) Hash identifier: JvMz7yH1D8WR5KGmNTArfW48XwBepB87WzmmqUB4ZkY= Subject key identifier: 03:AE:F5:4C:36:05:3D:BC:8B:44:0D:7D:5E:8F:70:D8:42:14:32:A6 Certificate issuer: /CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7 Certificate serial: 010D0C9F43285849E7AC939343A10424D3A50280 Authority key identifier: F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/18e749d1-f0e3-3f27-9598-de2eb7c53f65.roa Signing time: Mon 19 May 2025 12:33:16 +0000 ROA not before: Mon 19 May 2025 12:33:16 +0000 ROA not after: Sun 17 Aug 2025 12:33:16 +0000 asID: 22709 IP address blocks: 199.101.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ac:93:93:43:a1:04:24:d3:a5:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7 Validity Not Before: May 19 12:33:16 2025 GMT Not After : Aug 17 12:33:16 2025 GMT Subject: CN=d70a1497-ba1c-44f1-aaae-dac1ae2714be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ad:df:a0:ab:22:45:0a:e9:ff:7d:f4:80:dd: b7:a6:ec:7e:eb:8f:ac:e9:1a:5b:b7:cf:7e:c2:8f: 36:57:ac:57:0c:cb:fb:12:2c:ed:38:07:c9:68:e7: ea:1e:8e:f2:ec:39:2d:2d:e6:c0:d7:fc:8f:c0:15: f2:a9:4b:b8:11:c1:f4:87:8c:8d:e9:ca:0d:93:c5: d8:02:cd:18:2e:c5:c5:60:5f:0d:7f:a4:d3:9d:d9: 02:3b:eb:7a:b4:37:01:97:f7:8f:59:a6:e0:f9:38: 3b:b2:5f:24:2a:c6:dd:61:ee:56:22:a3:4e:ea:1e: 7e:28:be:fc:7e:c0:bf:a0:52:2a:8c:3b:7b:31:f3: c0:12:e8:93:fa:01:a7:92:0d:16:09:b8:f9:0c:a2: ee:5b:57:3c:27:5c:82:61:05:ac:e6:8e:35:c1:b2: 15:96:7c:af:e1:1c:73:a4:c5:17:85:d6:74:bb:93: 2e:72:b1:43:64:ea:f1:c2:f2:e3:4e:f5:54:ec:34: 3f:e7:77:61:ef:71:89:76:01:8f:aa:b1:f7:72:0e: d9:9f:8a:6d:61:d2:ec:4c:65:38:96:0c:01:a8:93: db:39:b8:f7:fc:e9:24:23:b4:94:4a:df:b6:39:20: a1:11:0c:fd:be:cc:3c:4b:de:45:4c:d6:ff:4e:d2: 96:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:AE:F5:4C:36:05:3D:BC:8B:44:0D:7D:5E:8F:70:D8:42:14:32:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/18e749d1-f0e3-3f27-9598-de2eb7c53f65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl X509v3 Authority Key Identifier: keyid:F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer sbgp-ipAddrBlock: critical IPv4: 199.101.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:0b:ff:ac:51:78:f9:4f:eb:2d:95:0a:0c:83:f8:07:30:55: 9a:d2:19:3b:fc:ff:c6:8f:88:30:51:a5:eb:3a:91:c7:8a:79: 22:31:5e:13:dc:eb:3f:a8:3f:1c:24:08:dd:92:ab:6d:37:d2: 35:56:61:bc:8b:dc:1b:a3:45:f7:3b:85:b5:27:c4:34:6f:a6: 60:23:52:27:32:b3:02:c3:96:3c:b9:74:5b:00:fe:e4:c5:4f: 92:9d:72:9a:ba:d3:86:30:e6:d2:0f:6b:b9:58:dc:7f:94:22: 4b:f3:cb:4e:0e:11:d8:cb:bd:f0:bb:af:2c:ec:55:77:85:ec: 32:30:94:72:78:0c:c0:37:7a:ff:d8:aa:ad:dd:3c:d3:e5:54: 29:6d:d7:0d:ab:83:20:87:71:e2:80:e1:f9:93:24:1e:e5:fd: 37:d6:8d:34:02:c0:58:b2:a0:36:07:60:a3:b0:6b:b4:17:4a: 00:69:2a:c8:c5:ff:97:74:e4:d6:fe:22:5a:8b:80:fa:46:9a: c1:f7:af:ab:c4:ca:f1:a5:67:d5:a8:7c:e5:bb:63:2e:e8:69: e8:fa:05:27:46:66:a4:e2:b0:f7:ba:8e:a4:1f:6a:0f:3d:3c: 74:d7:d9:9d:dc:fe:2a:97:13:15:ab:22:b2:e1:ee:8f:e6:58: e1:ae:3c:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnrJOTQ6EEJNOlAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNlOWE0YzAtYjg4Yi00Y2Y1LTg2MDMtZjJkMDljZmI1 ZmE3MB4XDTI1MDUxOTEyMzMxNloXDTI1MDgxNzEyMzMxNlowLzEtMCsGA1UEAxMk ZDcwYTE0OTctYmExYy00NGYxLWFhYWUtZGFjMWFlMjcxNGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsq3foKsiRQrp/330gN23pux+64+s6Rpbt89+ wo82V6xXDMv7EiztOAfJaOfqHo7y7DktLebA1/yPwBXyqUu4EcH0h4yN6coNk8XY As0YLsXFYF8Nf6TTndkCO+t6tDcBl/ePWabg+Tg7sl8kKsbdYe5WIqNO6h5+KL78 fsC/oFIqjDt7MfPAEuiT+gGnkg0WCbj5DKLuW1c8J1yCYQWs5o41wbIVlnyv4Rxz pMUXhdZ0u5MucrFDZOrxwvLjTvVU7DQ/53dh73GJdgGPqrH3cg7Zn4ptYdLsTGU4 lgwBqJPbObj3/OkkI7SUSt+2OSChEQz9vsw8S95FTNb/TtKWdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAOu9Uw2BT28i0QNfV6PcNhCFDKmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hM2U5 YTRjMC1iODhiLTRjZjUtODYwMy1mMmQwOWNmYjVmYTcvMThlNzQ5ZDEtZjBlMy0z ZjI3LTk1OTgtZGUyZWI3YzUzZjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTNlOWE0YzAtYjg4Yi00Y2Y1LTg2 MDMtZjJkMDljZmI1ZmE3L2EzZTlhNGMwLWI4OGItNGNmNS04NjAzLWYyZDA5Y2Zi NWZhNy5jcmwwHwYDVR0jBBgwFoAU8HKPkEcdsCoGHpgpE5pGA72MWJIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hM2U5YTRjMC1iODhiLTRjZjUtODYwMy1mMmQw OWNmYjVmYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx2V4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEoL/6xRePlP6y2VCgyD+AcwVZrSGTv8/8aPiDBRpes6kceKeSIxXhPc 6z+oPxwkCN2Sq2030jVWYbyL3BujRfc7hbUnxDRvpmAjUicyswLDljy5dFsA/uTF T5Kdcpq604Yw5tIPa7lY3H+UIkvzy04OEdjLvfC7ryzsVXeF7DIwlHJ4DMA3ev/Y qq3dPNPlVClt1w2rgyCHceKA4fmTJB7l/TfWjTQCwFiyoDYHYKOwa7QXSgBpKsjF /5d05Nb+IlqLgPpGmsH3r6vEyvGlZ9WofOW7Yy7oaej6BSdGZqTisPe6jqQfag89 PHTX2Z3c/iqXExWrIrLh7o/mWOGuPGc= -----END CERTIFICATE-----Generated at Tue Jun 17 17:27:05 2025 by rpki-client