$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/0559ee48-7615-344c-ba57-83ddfa576e1e.roa File: 0559ee48-7615-344c-ba57-83ddfa576e1e.roa (raw, json) Hash identifier: NWZ8bIcW0fz587nqcbV6mQRQWWqQn384pzzFxrL9nYs= Subject key identifier: DC:96:36:0B:B4:67:29:E6:E1:B8:31:C7:45:0F:85:D0:A6:15:8C:45 Certificate issuer: /CN=65506c68-611f-46ed-9e78-36da39f8ee7d Certificate serial: 010D0C9F43285849CD34C08A71E08E298B563E80 Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/0559ee48-7615-344c-ba57-83ddfa576e1e.roa Signing time: Sat 10 May 2025 01:00:47 +0000 ROA not before: Sat 10 May 2025 01:00:47 +0000 ROA not after: Fri 08 Aug 2025 01:00:47 +0000 asID: 36273 IP address blocks: 199.119.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cd:34:c0:8a:71:e0:8e:29:8b:56:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d Validity Not Before: May 10 01:00:47 2025 GMT Not After : Aug 8 01:00:47 2025 GMT Subject: CN=a8414323-6f87-4558-ae9a-5b5724b54813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ac:31:15:bf:98:62:45:06:40:d7:e3:bd:0e: 4a:41:a7:c5:01:f5:f4:b7:00:bb:c8:2e:44:ec:86: 7e:fc:78:5f:d5:8f:65:c8:1a:65:9d:3a:8d:09:bb: ab:7d:e0:32:5d:91:96:c8:d4:18:b4:3c:a4:36:8d: be:d0:c8:02:5f:41:c5:2b:aa:1f:33:83:e2:df:cc: e9:85:5b:1d:b2:e7:bb:75:6a:20:41:f3:8e:3f:17: 66:f7:e9:a7:97:c2:26:fe:16:ce:f7:8b:30:01:43: ee:64:35:f8:62:49:50:ba:4d:23:5d:3d:c2:87:1b: 37:7f:4e:7f:94:1f:63:4e:22:f8:a8:0b:82:20:6a: e3:6c:e0:96:e5:6c:e7:38:05:d5:a3:5b:98:e7:62: 87:d6:6e:05:40:54:87:77:ac:7c:51:e0:25:83:e8: a0:96:67:dd:b3:1f:bb:e6:d3:57:f9:52:c6:78:9b: a4:2f:e6:d6:c0:41:9a:5e:86:ca:f2:52:61:aa:74: 75:72:c7:ff:5b:12:94:47:fa:e5:2f:f3:27:e7:5c: aa:78:87:23:2a:a6:a8:13:fb:c1:55:f9:7b:94:12: 49:62:2f:32:fa:99:18:30:ba:d1:e8:b8:c4:0f:7e: 55:0d:ba:d8:18:ef:c3:9e:18:49:05:c4:e7:9a:0f: 82:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:96:36:0B:B4:67:29:E6:E1:B8:31:C7:45:0F:85:D0:A6:15:8C:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/0559ee48-7615-344c-ba57-83ddfa576e1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl X509v3 Authority Key Identifier: keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer sbgp-ipAddrBlock: critical IPv4: 199.119.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:65:a8:06:03:b8:1b:1b:11:3c:76:a4:ed:ae:76:dc:b7:fd: ab:04:7e:2d:2b:e0:2d:00:9b:5e:61:5a:01:7b:b1:91:e0:02: 0a:cc:fb:a4:a7:16:01:c6:07:fd:f1:03:6e:2d:e7:49:92:90: 7d:3d:30:fc:ef:28:57:18:27:ea:06:bc:79:2a:2c:08:2b:f9: 31:67:aa:dc:4d:84:ba:08:a2:18:48:71:65:47:9f:6e:01:a2: a0:41:24:5f:db:e5:fc:ad:0a:64:ae:65:06:4e:70:04:78:87: 50:2b:ca:96:0b:9a:c8:91:f1:9a:dd:6a:cf:da:45:26:ec:53: df:bc:a1:f3:bf:61:fd:a7:35:6d:a4:62:75:b3:30:d3:42:a9: 93:40:0b:88:e9:ad:10:15:90:f3:ab:bc:7d:04:ac:f8:6d:b9: 6e:ed:fb:5d:6f:07:e0:d4:48:28:27:f1:94:3c:cb:20:dd:57: 32:85:a7:28:74:1a:c1:06:9d:7e:a1:26:8f:16:6e:57:b6:0e: 25:e0:6f:a8:a5:3d:6b:c5:45:9c:ad:3f:4c:ab:7f:33:aa:21: d4:09:d7:73:88:eb:b2:fd:1b:eb:03:1d:40:91:37:9a:5a:98: 1f:b6:3a:f3:61:2c:c2:c5:ae:a0:4e:2c:b3:a9:49:ec:e6:46: d8:fe:5a:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnNNMCKceCOKYtWPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjU1MDZjNjgtNjExZi00NmVkLTllNzgtMzZkYTM5Zjhl ZTdkMB4XDTI1MDUxMDAxMDA0N1oXDTI1MDgwODAxMDA0N1owLzEtMCsGA1UEAxMk YTg0MTQzMjMtNmY4Ny00NTU4LWFlOWEtNWI1NzI0YjU0ODEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqwxFb+YYkUGQNfjvQ5KQafFAfX0twC7yC5E 7IZ+/Hhf1Y9lyBplnTqNCburfeAyXZGWyNQYtDykNo2+0MgCX0HFK6ofM4Pi38zp hVsdsue7dWogQfOOPxdm9+mnl8Im/hbO94swAUPuZDX4YklQuk0jXT3Chxs3f05/ lB9jTiL4qAuCIGrjbOCW5WznOAXVo1uY52KH1m4FQFSHd6x8UeAlg+iglmfdsx+7 5tNX+VLGeJukL+bWwEGaXobK8lJhqnR1csf/WxKUR/rlL/Mn51yqeIcjKqaoE/vB Vfl7lBJJYi8y+pkYMLrR6LjED35VDbrYGO/DnhhJBcTnmg+CmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNyWNgu0Zynm4bgxx0UPhdCmFYxFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NTUw NmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRhMzlmOGVlN2QvMDU1OWVlNDgtNzYxNS0z NDRjLWJhNTctODNkZGZhNTc2ZTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjU1MDZjNjgtNjExZi00NmVkLTll NzgtMzZkYTM5ZjhlZTdkLzY1NTA2YzY4LTYxMWYtNDZlZC05ZTc4LTM2ZGEzOWY4 ZWU3ZC5jcmwwHwYDVR0jBBgwFoAUZEZbboyKetm4+mOnYbot8PWcNjEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NTUwNmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRh MzlmOGVlN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx3foMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACllqAYDuBsbETx2pO2udty3/asEfi0r4C0Am15hWgF7sZHgAgrM+6Sn FgHGB/3xA24t50mSkH09MPzvKFcYJ+oGvHkqLAgr+TFnqtxNhLoIohhIcWVHn24B oqBBJF/b5fytCmSuZQZOcAR4h1ArypYLmsiR8Zrdas/aRSbsU9+8ofO/Yf2nNW2k YnWzMNNCqZNAC4jprRAVkPOrvH0ErPhtuW7t+11vB+DUSCgn8ZQ8yyDdVzKFpyh0 GsEGnX6hJo8Wble2DiXgb6ilPWvFRZytP0yrfzOqIdQJ13OI67L9G+sDHUCRN5pa mB+2OvNhLMLFrqBOLLOpSezmRtj+Wv0= -----END CERTIFICATE-----Generated at Tue May 13 00:57:47 2025 by rpki-client