$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/91f4df49-d646-3432-ac2e-fc36c5489baf.roa File: 91f4df49-d646-3432-ac2e-fc36c5489baf.roa (raw, json) Hash identifier: y1PJDTmSIpqGsPnNoA7L5pnEOQL2U8X/yvptbUKyT24= Subject key identifier: EE:3C:1E:EC:FC:56:1A:50:36:D2:0E:99:27:BD:AC:7C:D3:17:DB:52 Certificate issuer: /CN=6f64cc24-ef62-4498-b9ab-965375ea0e8e Certificate serial: 010D0C9F4328584957F3FE1D81124E4B48C5DC00 Authority key identifier: A9:6A:9A:E3:3D:66:0D:C4:7C:C8:A4:02:58:D8:FD:15:E1:90:61:0F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/91f4df49-d646-3432-ac2e-fc36c5489baf.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 54138 IP address blocks: 199.33.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/6f64cc24-ef62-4498-b9ab-965375ea0e8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/6f64cc24-ef62-4498-b9ab-965375ea0e8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f3:fe:1d:81:12:4e:4b:48:c5:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f64cc24-ef62-4498-b9ab-965375ea0e8e Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=2f7dc37d-54a6-43c5-9f78-c2368ad316dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:f4:a3:cc:0d:3c:7c:dc:6e:7b:8c:1c:51:5b: d2:68:3a:3d:dc:08:16:8d:74:d8:01:fe:2f:b0:26: 38:66:1c:bb:4e:5b:cf:16:d9:59:66:84:10:de:c9: bb:1e:2f:9d:8f:18:b9:01:53:13:c7:e8:25:7b:95: 26:f4:4b:00:48:a3:e4:ca:e9:d7:66:e8:f7:84:2b: a0:3b:07:88:c8:61:28:cf:49:f0:64:e4:e8:1e:bd: 39:c9:fd:d6:0a:58:07:11:d7:4a:56:d3:4c:1a:26: 47:1c:e1:89:8c:c6:ba:7f:50:03:e9:38:97:c4:49: 5a:62:35:bd:de:51:cb:b8:fe:55:b7:64:af:46:ef: 5f:dc:41:80:af:54:94:dd:a0:97:81:8a:43:e2:8c: ee:9f:05:a7:db:6c:2b:2a:22:ad:b0:51:44:62:04: 2f:16:0e:38:51:59:5e:97:96:95:ea:fa:2c:83:61: 29:18:73:60:f5:39:57:ff:6c:6f:c2:59:5a:aa:f8: b0:68:2f:00:87:0b:82:d6:71:22:ce:c2:b7:94:95: e8:a6:98:40:6e:72:23:59:39:e8:47:41:54:2b:1e: 23:05:e3:48:c3:2d:ae:4a:01:24:6d:62:52:bc:2d: d9:cb:3e:5e:1d:25:ca:59:81:a1:e6:72:e6:26:6b: 67:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:3C:1E:EC:FC:56:1A:50:36:D2:0E:99:27:BD:AC:7C:D3:17:DB:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/91f4df49-d646-3432-ac2e-fc36c5489baf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/6f64cc24-ef62-4498-b9ab-965375ea0e8e.crl X509v3 Authority Key Identifier: keyid:A9:6A:9A:E3:3D:66:0D:C4:7C:C8:A4:02:58:D8:FD:15:E1:90:61:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e.cer sbgp-ipAddrBlock: critical IPv4: 199.33.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:04:7d:50:b0:19:0d:9e:e3:06:eb:3b:d7:38:02:79:4b:17: d7:e8:94:a8:b0:75:8c:c1:bd:0b:3c:29:25:4d:a5:ff:4b:e7: 2a:5b:11:1a:bb:f1:1d:d6:e9:ea:de:f5:fc:d8:e8:48:30:a6: 34:2a:84:6e:e4:ff:96:22:03:7a:b0:98:06:af:c8:88:e4:18: db:7b:df:ab:2b:4c:f4:6a:75:f7:5f:c9:c6:e5:f7:57:c0:61: 64:e8:0c:ad:f5:93:76:6c:af:34:c3:b6:a4:9f:1b:c8:ab:35: eb:48:9c:f3:af:6a:3e:f8:98:b8:1f:b4:45:d2:41:17:18:8c: a2:79:4c:e4:a3:50:d1:c3:16:a9:05:43:2f:46:e6:75:c6:b3: b1:cd:ec:35:46:da:05:4b:d9:bc:10:0e:be:02:ef:b4:ec:18: 90:b7:94:9e:2e:a1:ba:8d:ed:10:63:51:24:1e:50:d2:1e:4d: 05:a5:a9:b0:00:4c:4f:13:49:86:15:00:c4:6f:05:b0:e0:ff: 0f:58:57:76:13:77:4f:c1:99:66:64:88:e0:ba:49:ca:d9:ab: d3:45:fc:bc:2d:c8:95:b5:e3:14:43:66:5e:cb:68:e5:c4:03: 95:cc:04:62:27:3d:c1:dd:86:76:20:8e:28:7e:28:b7:a3:cb: ac:5c:ef:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX8/4dgRJOS0jF3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY2NGNjMjQtZWY2Mi00NDk4LWI5YWItOTY1Mzc1ZWEw ZThlMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk MmY3ZGMzN2QtNTRhNi00M2M1LTlmNzgtYzIzNjhhZDMxNmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9vSjzA08fNxue4wcUVvSaDo93AgWjXTYAf4v sCY4Zhy7TlvPFtlZZoQQ3sm7Hi+djxi5AVMTx+gle5Um9EsASKPkyunXZuj3hCug OweIyGEoz0nwZOToHr05yf3WClgHEddKVtNMGiZHHOGJjMa6f1AD6TiXxElaYjW9 3lHLuP5Vt2SvRu9f3EGAr1SU3aCXgYpD4ozunwWn22wrKiKtsFFEYgQvFg44UVle l5aV6vosg2EpGHNg9TlX/2xvwllaqviwaC8AhwuC1nEizsK3lJXopphAbnIjWTno R0FUKx4jBeNIwy2uSgEkbWJSvC3Zyz5eHSXKWYGh5nLmJmtnWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO48Huz8VhpQNtIOmSe9rHzTF9tSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82ZjY0 Y2MyNC1lZjYyLTQ0OTgtYjlhYi05NjUzNzVlYTBlOGUvOTFmNGRmNDktZDY0Ni0z NDMyLWFjMmUtZmMzNmM1NDg5YmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNmY2NGNjMjQtZWY2Mi00NDk4LWI5 YWItOTY1Mzc1ZWEwZThlLzZmNjRjYzI0LWVmNjItNDQ5OC1iOWFiLTk2NTM3NWVh MGU4ZS5jcmwwHwYDVR0jBBgwFoAUqWqa4z1mDcR8yKQCWNj9FeGQYQ8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82ZjY0Y2MyNC1lZjYyLTQ0OTgtYjlhYi05NjUz NzVlYTBlOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyFGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcEfVCwGQ2e4wbrO9c4AnlLF9folKiwdYzBvQs8KSVNpf9L5ypbERq7 8R3W6ere9fzY6EgwpjQqhG7k/5YiA3qwmAavyIjkGNt736srTPRqdfdfycbl91fA YWToDK31k3ZsrzTDtqSfG8irNetInPOvaj74mLgftEXSQRcYjKJ5TOSjUNHDFqkF Qy9G5nXGs7HN7DVG2gVL2bwQDr4C77TsGJC3lJ4uobqN7RBjUSQeUNIeTQWlqbAA TE8TSYYVAMRvBbDg/w9YV3YTd0/BmWZkiOC6ScrZq9NF/LwtyJW14xRDZl7LaOXE A5XMBGInPcHdhnYgjih+KLejy6xc74A= -----END CERTIFICATE-----Generated at Tue May 13 10:21:20 2025 by rpki-client