$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/486b3896-2841-391a-bebe-039803db5d71.roa File: 486b3896-2841-391a-bebe-039803db5d71.roa (raw, json) Hash identifier: tNbeAgrp8A8T8iX+84VKuXRvdaZXy9tKkB7ezUq6OF0= Subject key identifier: 0F:98:7A:54:5C:CB:F3:F7:15:72:90:C8:FF:33:0E:79:1D:29:BF:CF Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F432858496CE447912C1632EE2D94DA80 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/486b3896-2841-391a-bebe-039803db5d71.roa Signing time: Sat 05 Apr 2025 13:01:01 +0000 ROA not before: Sat 05 Apr 2025 13:01:01 +0000 ROA not after: Fri 04 Jul 2025 13:01:01 +0000 asID: 6643 IP address blocks: 199.87.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6c:e4:47:91:2c:16:32:ee:2d:94:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Apr 5 13:01:01 2025 GMT Not After : Jul 4 13:01:01 2025 GMT Subject: CN=7d5d4854-de7b-4ce8-8c90-4d6b91b80866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d2:3f:68:67:6a:ee:f4:de:2d:7d:8f:e7:15: bf:c5:47:64:7e:93:f5:76:6b:28:dc:c0:dc:2c:c4: ba:cd:89:ac:69:50:03:69:c8:8a:f0:35:4c:33:08: 56:c8:43:d9:9e:10:cc:64:08:39:1e:40:5d:cc:37: 2f:64:d8:ca:fe:9b:97:2f:ed:fd:b7:84:93:72:2f: 1c:87:a3:ac:a5:f9:70:39:22:01:ac:0d:04:bc:3f: e2:79:79:63:3f:b7:11:a6:0d:bd:e8:14:e9:bb:68: dd:0f:77:ab:76:19:18:b7:63:93:e0:72:bc:ee:53: cd:c2:ad:3d:18:b5:8b:c9:b9:20:de:3b:52:02:b9: cb:99:bf:d1:82:bc:f3:f5:39:73:7f:0f:60:38:44: 50:93:9f:17:c7:9f:74:73:c6:c9:08:1e:8f:a5:ca: 11:51:e4:0b:c5:84:19:7a:47:61:de:90:57:ef:44: a9:3f:a8:28:43:2d:76:1f:8b:29:86:24:e8:40:11: 64:ac:18:a2:b5:be:6f:11:ca:38:50:25:d9:38:8d: e8:1e:bc:8c:e9:09:f9:dc:b7:87:a8:11:9b:36:b3: ba:9d:31:76:be:f0:4d:58:12:fa:3d:b9:95:a6:29: 20:2d:67:03:95:c7:a0:68:a9:be:ce:a0:45:68:37: 9f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:98:7A:54:5C:CB:F3:F7:15:72:90:C8:FF:33:0E:79:1D:29:BF:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/486b3896-2841-391a-bebe-039803db5d71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 199.87.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:d9:92:90:18:b2:92:5a:85:46:da:71:77:16:c4:62:f6:f6: fd:fa:f1:11:a3:b7:74:fc:bb:5e:5f:9d:68:db:ed:a8:06:72: 0f:d2:6e:e6:6e:f5:31:e7:99:3d:aa:6a:4f:14:af:6e:c7:0d: d6:34:86:60:0e:15:0b:39:c8:43:6f:4c:d7:58:03:72:af:2e: ca:b5:29:d3:13:74:b7:9c:16:11:20:82:b1:fb:6d:48:8a:09: e5:18:f5:84:7a:ac:e1:01:68:3b:1d:ea:54:7a:99:35:da:f2: 2b:5e:fb:d5:7c:9c:44:84:26:eb:1a:57:f0:3b:76:ec:b8:97: f6:c7:8c:2d:f1:35:68:47:d3:d3:a0:c7:19:cf:68:6b:8f:40: ce:fa:e4:10:0e:93:62:38:41:64:99:02:3d:7f:60:78:06:78: 44:55:0b:4b:22:b4:1f:fa:33:e3:d4:d7:37:94:06:4b:28:a1: 1b:95:51:ad:91:89:11:2d:16:14:15:a6:38:ba:38:95:85:01: 91:18:74:dd:ac:84:df:21:c8:c0:81:1c:5b:05:20:5b:d2:63: eb:39:49:40:b1:60:fa:11:b5:85:ab:86:51:90:0c:77:53:77: 6c:99:2a:80:c1:db:81:82:bf:80:11:56:f8:e7:4f:8d:9b:a9: de:95:18:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEls5EeRLBYy7i2U2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk N2Q1ZDQ4NTQtZGU3Yi00Y2U4LThjOTAtNGQ2YjkxYjgwODY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9I/aGdq7vTeLX2P5xW/xUdkfpP1dmso3MDc LMS6zYmsaVADaciK8DVMMwhWyEPZnhDMZAg5HkBdzDcvZNjK/puXL+39t4STci8c h6OspflwOSIBrA0EvD/ieXljP7cRpg296BTpu2jdD3erdhkYt2OT4HK87lPNwq09 GLWLybkg3jtSArnLmb/Rgrzz9Tlzfw9gOERQk58Xx590c8bJCB6PpcoRUeQLxYQZ ekdh3pBX70SpP6goQy12H4sphiToQBFkrBiitb5vEco4UCXZOI3oHryM6Qn53LeH qBGbNrO6nTF2vvBNWBL6PbmVpikgLWcDlcegaKm+zqBFaDef5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA+YelRcy/P3FXKQyP8zDnkdKb/PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNDg2YjM4OTYtMjg0MS0z OTFhLWJlYmUtMDM5ODAzZGI1ZDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx1d4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJPZkpAYspJahUbacXcWxGL29v368RGjt3T8u15fnWjb7agGcg/SbuZu 9THnmT2qak8Ur27HDdY0hmAOFQs5yENvTNdYA3KvLsq1KdMTdLecFhEggrH7bUiK CeUY9YR6rOEBaDsd6lR6mTXa8ite+9V8nESEJusaV/A7duy4l/bHjC3xNWhH09Og xxnPaGuPQM765BAOk2I4QWSZAj1/YHgGeERVC0sitB/6M+PU1zeUBksooRuVUa2R iREtFhQVpji6OJWFAZEYdN2shN8hyMCBHFsFIFvSY+s5SUCxYPoRtYWrhlGQDHdT d2yZKoDB24GCv4ARVvjnT42bqd6VGFE= -----END CERTIFICATE-----Generated at Wed Apr 30 19:52:28 2025 by rpki-client