$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a54703a4-3daa-455c-8724-7af942d1a391/35fdfc0e-cf10-3e1e-838b-316f3de9e130.roa File: 35fdfc0e-cf10-3e1e-838b-316f3de9e130.roa (raw, json) Hash identifier: rgwnrFdx9UDfUAQWsbIsiSwEl3OHKqxf6s1fNy68CEg= Subject key identifier: F4:5C:77:69:F4:B6:09:8B:A4:F4:9E:CE:F5:EB:A2:C9:03:92:52:71 Certificate issuer: /CN=a54703a4-3daa-455c-8724-7af942d1a391 Certificate serial: 010D0C9F432858495ABEBAF5C447349D6E987530 Authority key identifier: C1:6C:5C:8A:3F:77:F6:A9:08:27:D4:A0:9D:84:80:E4:DD:DD:ED:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a54703a4-3daa-455c-8724-7af942d1a391.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a54703a4-3daa-455c-8724-7af942d1a391/35fdfc0e-cf10-3e1e-838b-316f3de9e130.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 54830 IP address blocks: 199.103.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a54703a4-3daa-455c-8724-7af942d1a391/a54703a4-3daa-455c-8724-7af942d1a391.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a54703a4-3daa-455c-8724-7af942d1a391/a54703a4-3daa-455c-8724-7af942d1a391.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a54703a4-3daa-455c-8724-7af942d1a391.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:ba:f5:c4:47:34:9d:6e:98:75:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a54703a4-3daa-455c-8724-7af942d1a391 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=ab432308-8c2e-4fd1-a148-565e7686a719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6e:86:18:ca:a0:80:db:19:af:bc:ae:37:f7: ca:3d:b5:8a:be:10:45:19:c0:24:60:fe:a1:26:c6: 1a:65:ce:9e:ee:7f:27:22:1c:f4:a7:5a:62:1e:0a: 73:9a:3a:86:08:d2:81:6e:0a:63:d9:05:bb:cd:67: ae:a4:7f:f5:05:e3:60:22:88:03:21:7e:16:20:d8: 55:c1:cb:9d:cc:8e:28:44:9c:56:39:09:04:ac:9e: 21:c9:52:7a:b3:a9:e3:82:a0:3e:55:dd:96:a3:b3: 9c:fd:b1:a3:6a:47:c8:19:a2:c2:5c:37:3e:6e:1c: e8:43:db:43:af:27:9a:97:78:bb:34:41:2a:59:ce: ed:3d:ae:e4:4c:fc:9d:5b:19:7b:52:6b:7c:f8:9c: ae:8f:69:f7:f3:09:c3:2f:7e:94:24:e6:2e:25:d6: 03:ce:5c:5f:2e:1b:f6:5e:1f:e8:39:e1:85:7e:1a: 79:40:fa:a5:6c:26:10:96:63:7c:1a:13:82:c7:79: 7b:52:9d:3f:19:0f:c7:10:1f:2d:1e:2a:9b:f4:0a: e8:72:4b:c8:32:6a:de:d7:1b:b9:2e:11:45:9d:1b: ba:03:60:86:f1:ae:22:e8:c0:1b:d6:d1:91:fc:76: cd:0a:e4:f0:b3:7c:85:e4:bd:7a:94:7a:37:02:91: 47:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:5C:77:69:F4:B6:09:8B:A4:F4:9E:CE:F5:EB:A2:C9:03:92:52:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a54703a4-3daa-455c-8724-7af942d1a391/35fdfc0e-cf10-3e1e-838b-316f3de9e130.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a54703a4-3daa-455c-8724-7af942d1a391/a54703a4-3daa-455c-8724-7af942d1a391.crl X509v3 Authority Key Identifier: keyid:C1:6C:5C:8A:3F:77:F6:A9:08:27:D4:A0:9D:84:80:E4:DD:DD:ED:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a54703a4-3daa-455c-8724-7af942d1a391.cer sbgp-ipAddrBlock: critical IPv4: 199.103.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:6f:21:b6:0d:50:09:62:2a:b2:ba:88:2e:a4:e9:fa:32:e9: 35:13:64:58:60:d8:25:e7:be:a0:68:cb:d5:9d:6c:88:e2:9f: 60:1d:f8:d8:21:c7:30:5e:eb:4e:85:ad:59:f2:9d:99:1e:83: c3:dd:75:43:55:d3:a7:f5:f1:5d:b4:a6:ca:1b:08:ff:56:0c: ae:eb:52:09:99:f5:7d:dc:64:30:4f:f2:03:28:39:b4:58:37: 87:be:68:36:e6:c0:f2:f5:9d:8a:0c:6b:74:e4:d8:00:ba:1e: ab:bc:44:e3:01:77:17:27:87:23:68:64:cc:9f:0d:51:72:f8: 1a:cb:f4:04:a0:dc:aa:f4:7a:bc:03:e2:22:17:d4:d6:e6:11: 49:09:b3:7c:22:cb:b2:dd:1e:f0:92:a7:05:93:36:a4:f3:4e: 54:c9:9c:b2:7f:f6:7f:5e:92:1a:0f:60:d4:b0:39:51:31:af: 20:4f:28:7f:bf:d0:22:62:d6:c0:a2:47:3a:2d:47:ae:8a:b7: b5:e0:5f:56:16:f0:75:0a:7c:9c:13:0c:c4:9e:a6:c7:32:a4: 3d:56:96:35:22:2f:e9:3b:52:af:f6:60:74:b6:11:96:46:4f: 85:d1:37:1f:d8:83:7f:92:bd:08:59:c4:b8:57:7d:df:68:1b: 70:74:0a:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavrr1xEc0nW6YdTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTU0NzAzYTQtM2RhYS00NTVjLTg3MjQtN2FmOTQyZDFh MzkxMB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk YWI0MzIzMDgtOGMyZS00ZmQxLWExNDgtNTY1ZTc2ODZhNzE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvG6GGMqggNsZr7yuN/fKPbWKvhBFGcAkYP6h JsYaZc6e7n8nIhz0p1piHgpzmjqGCNKBbgpj2QW7zWeupH/1BeNgIogDIX4WINhV wcudzI4oRJxWOQkErJ4hyVJ6s6njgqA+Vd2Wo7Oc/bGjakfIGaLCXDc+bhzoQ9tD ryeal3i7NEEqWc7tPa7kTPydWxl7Umt8+Jyuj2n38wnDL36UJOYuJdYDzlxfLhv2 Xh/oOeGFfhp5QPqlbCYQlmN8GhOCx3l7Up0/GQ/HEB8tHiqb9ArockvIMmre1xu5 LhFFnRu6A2CG8a4i6MAb1tGR/HbNCuTws3yF5L16lHo3ApFHlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPRcd2n0tgmLpPSezvXroskDklJxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hNTQ3 MDNhNC0zZGFhLTQ1NWMtODcyNC03YWY5NDJkMWEzOTEvMzVmZGZjMGUtY2YxMC0z ZTFlLTgzOGItMzE2ZjNkZTllMTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTU0NzAzYTQtM2RhYS00NTVjLTg3 MjQtN2FmOTQyZDFhMzkxL2E1NDcwM2E0LTNkYWEtNDU1Yy04NzI0LTdhZjk0MmQx YTM5MS5jcmwwHwYDVR0jBBgwFoAUwWxcij939qkIJ9SgnYSA5N3d7fMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hNTQ3MDNhNC0zZGFhLTQ1NWMtODcyNC03YWY5 NDJkMWEzOTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx2dVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpvIbYNUAliKrK6iC6k6foy6TUTZFhg2CXnvqBoy9WdbIjin2Ad+Ngh xzBe606FrVnynZkeg8PddUNV06f18V20psobCP9WDK7rUgmZ9X3cZDBP8gMoObRY N4e+aDbmwPL1nYoMa3Tk2AC6Hqu8ROMBdxcnhyNoZMyfDVFy+BrL9ASg3Kr0erwD 4iIX1NbmEUkJs3wiy7LdHvCSpwWTNqTzTlTJnLJ/9n9ekhoPYNSwOVExryBPKH+/ 0CJi1sCiRzotR66Kt7XgX1YW8HUKfJwTDMSepscypD1WljUiL+k7Uq/2YHS2EZZG T4XRNx/Yg3+SvQhZxLhXfd9oG3B0Co4= -----END CERTIFICATE-----Generated at Mon May 5 18:19:56 2025 by rpki-client