$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6703e771-5eea-3671-b411-16fe0476211b.roa File: 6703e771-5eea-3671-b411-16fe0476211b.roa (raw, json) Hash identifier: bFFFX2ZSDMoBVZF5acqGylsPE8bmn0NnX991wMIFYn8= Subject key identifier: 53:67:C6:4C:10:81:BB:AD:88:1C:09:A0:C7:01:0F:54:AB:C0:DF:71 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB63ABE1827344DD468E80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6703e771-5eea-3671-b411-16fe0476211b.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 199.36.154.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:63:ab:e1:82:73:44:dd:46:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=f2c81c0d-5821-4b25-afad-7f6f44c9614e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:52:c1:45:fc:68:74:30:2a:11:f5:4f:65:ac: e6:ba:13:ba:7c:ad:6c:b5:d9:76:21:27:ef:44:6b: 19:f0:c1:c7:ff:47:e0:31:df:10:92:b2:86:0f:b3: f6:ac:9a:60:9b:a0:be:5c:80:2f:1a:e8:5b:b2:d3: c1:aa:27:eb:12:66:8c:e6:e3:c0:79:c3:99:8c:f4: 46:64:b6:44:24:64:78:03:31:36:be:2e:5e:7e:c2: 9b:a6:b8:6c:60:bc:cb:82:d9:ca:3d:bc:0b:37:71: 1c:5d:7a:0c:9f:fa:26:23:12:6e:c0:a3:45:62:a9: 6f:e7:7f:3d:71:6f:cd:b2:81:c5:dd:41:90:b2:e4: 61:de:c7:6c:ce:e8:10:bf:a2:41:1a:8d:47:ee:84: 71:37:fc:17:a8:0c:9c:f3:e4:62:51:3d:28:2e:e0: b6:33:be:c1:f8:7c:d0:5b:78:70:71:23:21:00:d6: f5:95:4e:2d:1f:38:74:fe:30:6e:64:c3:4d:f9:2d: 48:9c:7e:c8:af:0d:fe:3a:b7:5f:a6:bb:cb:f8:ea: 9e:c9:70:d9:47:10:65:a9:32:ab:bb:7a:d6:e2:09: 62:c1:85:cd:a2:7e:cb:3c:29:d6:5a:5d:e0:03:f6: c9:bc:2d:1c:3e:30:a2:fc:f7:78:f6:9a:b8:9c:9f: 13:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:67:C6:4C:10:81:BB:AD:88:1C:09:A0:C7:01:0F:54:AB:C0:DF:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6703e771-5eea-3671-b411-16fe0476211b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 199.36.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:35:6f:3c:c3:ea:ef:f5:8d:3a:e8:ef:68:6a:85:6d:0a:2a: 7a:7c:85:d7:d7:9e:d4:83:47:b1:23:56:ac:fa:38:32:f2:de: 26:8e:84:93:00:27:17:1b:94:07:bc:1c:92:e9:01:2b:be:38: 86:b1:e7:85:f8:02:7a:01:54:56:18:8d:0b:3e:9c:63:4e:02: d7:d5:3d:d9:a5:11:20:94:f4:8f:d3:42:bf:3c:47:18:b5:ed: a2:d4:8a:a6:12:8e:22:d1:56:18:44:49:02:35:25:30:25:f8: c7:08:23:6a:c2:82:9f:53:cb:fa:8a:dd:3a:82:f6:8c:d8:82: 17:af:76:75:4c:de:33:f7:f9:37:a3:36:43:47:e8:e8:38:39: 80:e9:0a:98:8f:9d:99:2b:42:89:1f:a4:9b:82:14:e1:de:94: 30:d4:d1:a3:02:c3:73:a2:68:b5:77:db:90:eb:cf:20:6d:6b: 00:ae:2b:0e:c0:2b:ea:55:74:92:dc:72:f8:2d:cd:21:08:21: fa:2a:56:96:39:ee:14:96:33:8c:1f:ae:f3:7b:30:c0:48:ed: 18:cf:a7:cc:bb:98:69:f2:ed:9e:51:9e:ec:87:ed:1f:af:ff: b6:1f:db:65:ed:a8:f3:9c:4b:d4:0a:e6:06:e8:21:77:61:f3: 58:49:12:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku2Or4YJzRN1GjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZjJjODFjMGQtNTgyMS00YjI1LWFmYWQtN2Y2ZjQ0Yzk2MTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFLBRfxodDAqEfVPZazmuhO6fK1stdl2ISfv RGsZ8MHH/0fgMd8QkrKGD7P2rJpgm6C+XIAvGuhbstPBqifrEmaM5uPAecOZjPRG ZLZEJGR4AzE2vi5efsKbprhsYLzLgtnKPbwLN3EcXXoMn/omIxJuwKNFYqlv5389 cW/NsoHF3UGQsuRh3sdszugQv6JBGo1H7oRxN/wXqAyc8+RiUT0oLuC2M77B+HzQ W3hwcSMhANb1lU4tHzh0/jBuZMNN+S1InH7Irw3+OrdfprvL+OqeyXDZRxBlqTKr u3rW4gliwYXNon7LPCnWWl3gA/bJvC0cPjCi/Pd49pq4nJ8T1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFNnxkwQgbutiBwJoMcBD1SrwN9xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjcwM2U3NzEtNWVlYS0z NjcxLWI0MTEtMTZmZTA0NzYyMTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxySaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJA1bzzD6u/1jTro72hqhW0KKnp8hdfXntSDR7EjVqz6ODLy3iaOhJMA JxcblAe8HJLpASu+OIax54X4AnoBVFYYjQs+nGNOAtfVPdmlESCU9I/TQr88Rxi1 7aLUiqYSjiLRVhhESQI1JTAl+McII2rCgp9Ty/qK3TqC9ozYghevdnVM3jP3+Tej NkNH6Og4OYDpCpiPnZkrQokfpJuCFOHelDDU0aMCw3OiaLV325DrzyBtawCuKw7A K+pVdJLccvgtzSEIIfoqVpY57hSWM4wfrvN7MMBI7RjPp8y7mGny7Z5RnuyH7R+v /7Yf22XtqPOcS9QK5gboIXdh81hJErE= -----END CERTIFICATE-----Generated at Sun Apr 27 00:24:41 2025 by rpki-client