$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/536bdaa0-0f1a-3e47-9251-28af7a104243.roa File: 536bdaa0-0f1a-3e47-9251-28af7a104243.roa (raw, json) Hash identifier: qbgZ6uTbSUkHKugMbXWLd/So3Uzu6FKbgfGtSiGsNKQ= Subject key identifier: C4:99:3E:4D:46:74:98:54:9A:06:B2:87:3F:6F:9A:D0:86:9F:AB:92 Certificate issuer: /CN=65506c68-611f-46ed-9e78-36da39f8ee7d Certificate serial: 010D0C9F43285849CD34BFF3292B480A413FA4C0 Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/536bdaa0-0f1a-3e47-9251-28af7a104243.roa Signing time: Sat 10 May 2025 01:00:47 +0000 ROA not before: Sat 10 May 2025 01:00:47 +0000 ROA not after: Fri 08 Aug 2025 01:00:47 +0000 asID: 20365 IP address blocks: 199.7.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cd:34:bf:f3:29:2b:48:0a:41:3f:a4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d Validity Not Before: May 10 01:00:47 2025 GMT Not After : Aug 8 01:00:47 2025 GMT Subject: CN=61451ef3-9fe6-495e-a24b-2b66d02dd842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2d:0d:85:05:75:29:dd:ea:85:1a:d5:98:85: e2:d8:a9:62:ad:b0:2f:c8:db:7a:b2:eb:b8:69:ea: dc:24:38:dd:f7:32:9b:30:56:90:3a:5e:1c:9c:71: 05:f6:93:1d:b3:a5:e6:f5:43:76:68:3e:4b:9d:56: d3:04:35:e0:b9:ca:ff:c0:ee:b5:4e:cf:4e:3e:f6: 19:d9:ef:ea:4d:91:12:33:9f:9a:39:bd:ef:a0:af: c8:f4:41:2d:9d:a3:ad:7d:4d:ca:30:27:85:7c:5b: b7:cb:a4:10:ac:ba:95:93:33:45:a5:9f:b6:ce:46: 20:91:96:2b:c3:59:40:86:35:08:e8:a3:ab:78:19: 0e:6f:6e:5c:9a:9d:44:0b:6e:01:4a:d9:a6:a0:a5: 24:f7:91:c8:55:2c:e4:29:f5:48:c3:01:24:96:14: c4:25:11:2d:6c:a9:17:2f:1e:e5:8a:96:7f:a8:7a: 93:3f:79:80:84:6f:4c:dd:8f:d8:53:6a:51:2a:38: 7f:0e:46:62:75:8f:55:20:a8:9b:3d:95:99:03:f8: 6f:f9:1e:e9:62:4b:d2:a2:cb:5f:4e:55:f6:ec:4f: 44:1b:97:af:b0:56:63:a6:3c:49:06:45:43:9d:a8: 41:66:8f:c2:13:ec:c5:ff:7b:b8:fa:9f:22:7a:5b: 7d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:99:3E:4D:46:74:98:54:9A:06:B2:87:3F:6F:9A:D0:86:9F:AB:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/536bdaa0-0f1a-3e47-9251-28af7a104243.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl X509v3 Authority Key Identifier: keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer sbgp-ipAddrBlock: critical IPv4: 199.7.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:22:50:51:ea:81:8f:68:b4:2a:65:50:af:ec:c4:8b:34:c6: 23:1d:d0:cb:1d:6a:e0:14:2f:f3:56:6f:9d:88:fe:2a:63:bb: bf:e9:a8:24:f1:eb:03:54:a9:34:e4:59:a5:42:f5:32:d8:64: cb:0f:0c:ed:99:33:d8:c7:b7:69:55:22:c2:94:ac:d9:9e:d2: 15:47:6d:ac:ae:d4:06:a7:0e:ad:fa:9b:bd:07:cc:44:cb:06: 3a:a8:d4:b6:83:e9:c2:30:0f:46:d9:32:71:e6:13:00:2d:e9: ae:6e:9c:1e:c3:4f:10:9d:2b:68:01:38:13:80:98:05:63:1c: 54:cb:4f:ee:07:6e:97:53:a0:7a:b4:8b:11:49:05:a9:97:dc: d1:1a:f5:72:7b:00:33:ee:c4:1b:cb:f4:d4:5a:83:99:3a:39: af:78:54:79:88:80:3a:d7:07:6c:b2:24:31:72:a9:99:cd:5e: fd:1c:bf:89:08:dd:be:e9:13:70:8f:f7:14:ec:11:a5:5f:ff: dc:08:19:97:70:f2:0c:a1:d2:f1:6c:8e:19:95:91:3b:04:d8: e0:58:0d:8c:58:cc:97:99:4d:4e:2f:94:b4:f3:8e:1c:11:93: 91:88:d5:2d:bb:7d:1e:12:30:9b:6f:88:22:e2:17:62:c7:16: 27:9e:39:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnNNL/zKStICkE/pMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjU1MDZjNjgtNjExZi00NmVkLTllNzgtMzZkYTM5Zjhl ZTdkMB4XDTI1MDUxMDAxMDA0N1oXDTI1MDgwODAxMDA0N1owLzEtMCsGA1UEAxMk NjE0NTFlZjMtOWZlNi00OTVlLWEyNGItMmI2NmQwMmRkODQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqS0NhQV1Kd3qhRrVmIXi2KlirbAvyNt6suu4 aercJDjd9zKbMFaQOl4cnHEF9pMds6Xm9UN2aD5LnVbTBDXgucr/wO61Ts9OPvYZ 2e/qTZESM5+aOb3voK/I9EEtnaOtfU3KMCeFfFu3y6QQrLqVkzNFpZ+2zkYgkZYr w1lAhjUI6KOreBkOb25cmp1EC24BStmmoKUk95HIVSzkKfVIwwEklhTEJREtbKkX Lx7lipZ/qHqTP3mAhG9M3Y/YU2pRKjh/DkZidY9VIKibPZWZA/hv+R7pYkvSostf TlX27E9EG5evsFZjpjxJBkVDnahBZo/CE+zF/3u4+p8ielt9dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMSZPk1GdJhUmgayhz9vmtCGn6uSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NTUw NmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRhMzlmOGVlN2QvNTM2YmRhYTAtMGYxYS0z ZTQ3LTkyNTEtMjhhZjdhMTA0MjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjU1MDZjNjgtNjExZi00NmVkLTll NzgtMzZkYTM5ZjhlZTdkLzY1NTA2YzY4LTYxMWYtNDZlZC05ZTc4LTM2ZGEzOWY4 ZWU3ZC5jcmwwHwYDVR0jBBgwFoAUZEZbboyKetm4+mOnYbot8PWcNjEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NTUwNmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRh MzlmOGVlN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxwecMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGciUFHqgY9otCplUK/sxIs0xiMd0MsdauAUL/NWb52I/ipju7/pqCTx 6wNUqTTkWaVC9TLYZMsPDO2ZM9jHt2lVIsKUrNme0hVHbayu1AanDq36m70HzETL Bjqo1LaD6cIwD0bZMnHmEwAt6a5unB7DTxCdK2gBOBOAmAVjHFTLT+4HbpdToHq0 ixFJBamX3NEa9XJ7ADPuxBvL9NRag5k6Oa94VHmIgDrXB2yyJDFyqZnNXv0cv4kI 3b7pE3CP9xTsEaVf/9wIGZdw8gyh0vFsjhmVkTsE2OBYDYxYzJeZTU4vlLTzjhwR k5GI1S27fR4SMJtviCLiF2LHFieeObE= -----END CERTIFICATE-----Generated at Mon May 12 21:37:10 2025 by rpki-client