$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/828f5560-8643-3618-befe-cdea85db6497.roa File: 828f5560-8643-3618-befe-cdea85db6497.roa (raw, json) Hash identifier: zfsqZBXPaT+2VNdfV/S4MuPtf5SWTKsxS806oasouGg= Subject key identifier: A3:4D:E6:37:29:F9:F4:49:89:D0:C1:C1:FE:25:59:C1:2E:91:F1:9A Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584A103536CF710CC5CCD11E4300 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/828f5560-8643-3618-befe-cdea85db6497.roa Signing time: Tue 03 Jun 2025 01:00:50 +0000 ROA not before: Tue 03 Jun 2025 01:00:50 +0000 ROA not after: Mon 01 Sep 2025 01:00:50 +0000 asID: 31898 IP address blocks: 199.87.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:35:36:cf:71:0c:c5:cc:d1:1e:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Jun 3 01:00:50 2025 GMT Not After : Sep 1 01:00:50 2025 GMT Subject: CN=64ac7ff6-a1ce-4cdb-8693-3d798983d6e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cb:ed:4f:4b:bb:57:34:77:b7:2f:5b:b7:a3: d8:fd:fe:72:8b:72:b6:64:fc:00:0e:e6:f5:32:a0: 7d:a8:d4:3a:8c:b8:5b:66:45:40:bd:6c:ae:8a:ce: db:da:15:11:5f:c3:ab:1f:8a:ac:68:0e:4e:aa:5b: ee:15:22:ef:79:2b:f3:ab:4c:bf:72:d9:ab:43:90: 21:a5:a0:35:e2:cb:2d:a9:4c:9c:46:b2:1d:bf:e8: 86:ea:12:23:d1:7b:f7:61:a5:ac:be:d3:fe:c8:ff: ca:86:51:33:a0:34:e2:b4:2d:97:b2:33:d8:d5:c4: 7b:4f:2b:0a:31:1b:7d:4d:f2:c4:5f:18:94:fa:52: 8e:ca:ac:f3:ce:d2:0b:f6:95:7a:c9:a6:9c:35:70: 7c:11:10:54:d9:52:a8:0b:4a:11:72:45:e8:a4:a5: ec:a2:9c:29:29:43:e4:ec:80:42:d6:74:d8:0e:6b: bd:ea:07:1f:46:6d:7d:99:73:2a:2d:a3:79:98:cd: e7:19:1f:7e:a1:d0:5e:46:2e:6d:ae:b8:70:b6:8d: 9a:30:be:8b:3b:38:1f:89:df:75:e0:1c:e2:3b:33: 30:54:7c:0c:f0:3f:36:f5:93:f7:04:2f:9b:8c:e4: 42:28:f8:9d:d8:57:3b:80:80:2e:c0:76:dd:85:ef: 1f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:4D:E6:37:29:F9:F4:49:89:D0:C1:C1:FE:25:59:C1:2E:91:F1:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/828f5560-8643-3618-befe-cdea85db6497.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 199.87.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:05:ae:05:e3:cc:94:49:82:cc:07:55:ef:81:30:48:cb:36: 0d:e4:2e:bd:02:9a:fe:c1:60:09:c3:b2:07:9d:bf:d5:ed:76: 04:3a:b1:fa:2a:5c:56:75:ac:19:66:af:80:85:60:02:cf:84: e2:6e:ba:1a:c5:63:3c:ac:88:56:85:c6:65:56:e7:03:0e:5b: c9:55:69:5f:05:02:c4:5f:4f:1a:e9:81:35:13:4f:3a:1a:36: f1:4f:7b:f5:ad:52:ad:98:a7:fc:16:1b:b3:66:03:8f:7a:da: d2:b9:04:b9:80:82:25:0f:e5:13:1f:2e:d3:4c:78:f0:bb:20: dd:b2:76:d3:d6:5f:21:ee:cb:d7:ec:2e:95:12:d4:d2:e5:5c: c1:f6:a6:8c:1c:63:69:3a:37:d0:d7:db:21:d6:44:e9:7a:4d: d8:4b:7b:99:e5:69:e6:bc:e2:30:8d:3b:1c:cd:91:83:cb:a6: 33:e0:6b:af:74:20:3b:f3:f9:1d:9d:ba:09:39:b8:5f:21:91: fa:09:73:16:26:2a:b1:9f:e6:7c:71:15:5c:1c:6d:80:83:71: 52:49:87:77:95:ed:44:c4:f7:79:80:3f:c4:bb:d1:5f:78:b1: 16:44:b7:50:50:29:b6:a3:5d:f1:c6:1b:05:82:ab:6d:86:3f: 03:ce:8f:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoQNTbPcQzFzNEeQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk NjRhYzdmZjYtYTFjZS00Y2RiLTg2OTMtM2Q3OTg5ODNkNmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsvtT0u7VzR3ty9bt6PY/f5yi3K2ZPwADub1 MqB9qNQ6jLhbZkVAvWyuis7b2hURX8OrH4qsaA5OqlvuFSLveSvzq0y/ctmrQ5Ah paA14sstqUycRrIdv+iG6hIj0Xv3YaWsvtP+yP/KhlEzoDTitC2XsjPY1cR7TysK MRt9TfLEXxiU+lKOyqzzztIL9pV6yaacNXB8ERBU2VKoC0oRckXopKXsopwpKUPk 7IBC1nTYDmu96gcfRm19mXMqLaN5mM3nGR9+odBeRi5trrhwto2aML6LOzgfid91 4BziOzMwVHwM8D829ZP3BC+bjORCKPid2Fc7gIAuwHbdhe8fvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKNN5jcp+fRJidDBwf4lWcEukfGaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvODI4ZjU1NjAtODY0My0z NjE4LWJlZmUtY2RlYTg1ZGI2NDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1d7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQFrgXjzJRJgswHVe+BMEjLNg3kLr0Cmv7BYAnDsgedv9XtdgQ6sfoq XFZ1rBlmr4CFYALPhOJuuhrFYzysiFaFxmVW5wMOW8lVaV8FAsRfTxrpgTUTTzoa NvFPe/WtUq2Yp/wWG7NmA4962tK5BLmAgiUP5RMfLtNMePC7IN2ydtPWXyHuy9fs LpUS1NLlXMH2powcY2k6N9DX2yHWROl6TdhLe5nlaea84jCNOxzNkYPLpjPga690 IDvz+R2dugk5uF8hkfoJcxYmKrGf5nxxFVwcbYCDcVJJh3eV7UTE93mAP8S70V94 sRZEt1BQKbajXfHGGwWCq22GPwPOjwY= -----END CERTIFICATE-----Generated at Tue Jun 17 07:30:23 2025 by rpki-client