$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/ce572ded-a56f-3f49-a84d-ad42c50210e2.roa File: ce572ded-a56f-3f49-a84d-ad42c50210e2.roa (raw, json) Hash identifier: vCEHKIJftSx4R4mvDQRrA3IPiID+DjKpPQyX4biiK/c= Subject key identifier: BF:28:35:86:37:59:15:6C:60:38:20:B1:53:B2:80:52:11:84:2A:76 Certificate issuer: /CN=1bd97e7a-c31d-417a-bc07-1ecdb96be09f Certificate serial: 010D0C9F43285849F44A5D900410553D978D2900 Authority key identifier: E0:BC:46:6D:8F:5F:DC:23:84:62:42:1C:22:C8:6C:C1:EE:EB:CB:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/ce572ded-a56f-3f49-a84d-ad42c50210e2.roa Signing time: Sat 24 May 2025 01:00:49 +0000 ROA not before: Sat 24 May 2025 01:00:49 +0000 ROA not after: Fri 22 Aug 2025 01:00:49 +0000 asID: 7018 IP address blocks: 199.189.150.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f4:4a:5d:90:04:10:55:3d:97:8d:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bd97e7a-c31d-417a-bc07-1ecdb96be09f Validity Not Before: May 24 01:00:49 2025 GMT Not After : Aug 22 01:00:49 2025 GMT Subject: CN=a178f7d1-1600-4bb7-b0ec-73573c41e388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3d:f0:f1:51:3d:fb:86:1a:bc:21:78:32:1b: bf:f1:a8:56:9a:f5:7d:1a:3e:5a:7a:e0:1c:9a:98: a1:d4:0d:82:52:8a:ca:47:ae:fd:af:b6:38:c8:bd: 0b:57:19:18:a3:12:7b:7f:1a:36:4e:a0:f5:14:5b: 04:67:5d:19:71:ab:6f:57:4b:fb:4f:51:a1:3d:e3: c6:2d:1d:90:89:69:3e:a5:18:21:9f:ad:e0:a4:12: 7f:95:4f:7e:47:7f:06:32:38:6c:e2:e4:52:52:d0: 34:24:00:c2:73:4a:03:cf:17:72:fe:6f:bb:d7:7a: 0e:d9:db:f1:69:6a:e0:78:eb:34:d8:9f:f3:da:39: 52:ec:aa:b5:b1:2f:ca:db:d9:64:08:a2:41:d6:81: 0d:05:ee:21:a0:4d:e5:11:52:5b:ab:a2:df:7e:89: 87:c9:b7:1e:78:d6:aa:e3:38:5e:6e:5f:81:88:f3: 9a:65:da:76:cd:83:52:67:cb:39:61:a0:1f:4f:ba: 54:d6:86:47:cb:80:e2:2e:3a:7a:f0:e7:bb:09:ca: 89:02:0f:0a:42:67:1d:01:3b:78:69:7f:fb:8a:87: 78:a3:ec:c1:d2:6a:dd:3c:28:93:c6:87:f8:bb:a7: c4:72:50:d9:d7:b1:8b:bb:c8:88:95:0c:cc:50:1e: fa:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:28:35:86:37:59:15:6C:60:38:20:B1:53:B2:80:52:11:84:2A:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/ce572ded-a56f-3f49-a84d-ad42c50210e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.crl X509v3 Authority Key Identifier: keyid:E0:BC:46:6D:8F:5F:DC:23:84:62:42:1C:22:C8:6C:C1:EE:EB:CB:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.cer sbgp-ipAddrBlock: critical IPv4: 199.189.150.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:c6:fd:e0:34:71:b6:93:ba:3f:43:06:f9:fe:26:e6:07:17: d5:61:a8:b8:54:19:8d:39:e3:a4:34:da:21:8d:58:e4:1b:1b: 73:43:28:1a:09:1c:97:f3:a8:a5:09:bf:f1:e0:61:ef:72:f1: a4:80:5c:9c:bf:3d:bb:2d:1b:cc:c1:14:5a:33:fb:99:8b:0d: ee:f9:cc:70:fc:80:57:e9:69:fd:5c:38:90:01:0b:cd:84:59: 40:3a:3c:57:db:1a:70:e4:6b:8b:de:ff:d2:c9:9b:9c:b0:e0: ad:09:0c:b4:5e:40:60:52:66:8f:3d:a7:46:fe:62:4a:40:57: 7c:3f:4f:16:c3:55:18:29:92:db:e8:cb:54:43:4b:58:86:62: 89:b9:78:bd:35:be:c2:6f:0a:c8:a6:37:06:9d:df:2a:34:00: d9:fe:33:a3:d6:e2:27:2d:1d:ab:96:da:cb:de:d8:d5:ac:b1: fd:43:50:34:51:27:dc:29:a3:6c:91:0b:b4:54:9d:32:5d:8d: 26:b6:3f:f6:66:61:09:4b:88:0b:09:e6:9e:77:6f:34:01:42: aa:94:e8:7f:f1:1a:21:c8:88:e0:16:98:3b:47:42:7e:22:26: 5e:43:96:71:84:bb:41:8c:61:9a:05:70:65:43:b1:60:30:03: 07:ed:17:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn0Sl2QBBBVPZeNKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWJkOTdlN2EtYzMxZC00MTdhLWJjMDctMWVjZGI5NmJl MDlmMB4XDTI1MDUyNDAxMDA0OVoXDTI1MDgyMjAxMDA0OVowLzEtMCsGA1UEAxMk YTE3OGY3ZDEtMTYwMC00YmI3LWIwZWMtNzM1NzNjNDFlMzg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxz3w8VE9+4YavCF4Mhu/8ahWmvV9Gj5aeuAc mpih1A2CUorKR679r7Y4yL0LVxkYoxJ7fxo2TqD1FFsEZ10ZcatvV0v7T1GhPePG LR2QiWk+pRghn63gpBJ/lU9+R38GMjhs4uRSUtA0JADCc0oDzxdy/m+713oO2dvx aWrgeOs02J/z2jlS7Kq1sS/K29lkCKJB1oENBe4hoE3lEVJbq6LffomHybceeNaq 4zhebl+BiPOaZdp2zYNSZ8s5YaAfT7pU1oZHy4DiLjp68Oe7CcqJAg8KQmcdATt4 aX/7iod4o+zB0mrdPCiTxof4u6fEclDZ17GLu8iIlQzMUB76QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL8oNYY3WRVsYDggsVOygFIRhCp2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xYmQ5 N2U3YS1jMzFkLTQxN2EtYmMwNy0xZWNkYjk2YmUwOWYvY2U1NzJkZWQtYTU2Zi0z ZjQ5LWE4NGQtYWQ0MmM1MDIxMGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMWJkOTdlN2EtYzMxZC00MTdhLWJj MDctMWVjZGI5NmJlMDlmLzFiZDk3ZTdhLWMzMWQtNDE3YS1iYzA3LTFlY2RiOTZi ZTA5Zi5jcmwwHwYDVR0jBBgwFoAU4LxGbY9f3COEYkIcIshswe7ry44wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xYmQ5N2U3YS1jMzFkLTQxN2EtYmMwNy0xZWNk Yjk2YmUwOWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx72WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITG/eA0cbaTuj9DBvn+JuYHF9VhqLhUGY0546Q02iGNWOQbG3NDKBoJ HJfzqKUJv/HgYe9y8aSAXJy/PbstG8zBFFoz+5mLDe75zHD8gFfpaf1cOJABC82E WUA6PFfbGnDka4ve/9LJm5yw4K0JDLReQGBSZo89p0b+YkpAV3w/TxbDVRgpktvo y1RDS1iGYom5eL01vsJvCsimNwad3yo0ANn+M6PW4ictHauW2sve2NWssf1DUDRR J9wpo2yRC7RUnTJdjSa2P/ZmYQlLiAsJ5p53bzQBQqqU6H/xGiHIiOAWmDtHQn4i Jl5DlnGEu0GMYZoFcGVDsWAwAwftF7o= -----END CERTIFICATE-----Generated at Sun Jun 15 23:10:10 2025 by rpki-client