$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/12c8b264-052f-356f-a94d-718e65321e32.roa File: 12c8b264-052f-356f-a94d-718e65321e32.roa (raw, json) Hash identifier: SZnhv+RxcxSuQWV6WHkEZ1uDKHUar5W3eJZ763z+Vv4= Subject key identifier: B5:4D:31:6F:96:B1:C6:E1:FD:91:6C:45:CD:31:B0:FA:E0:7A:FC:14 Certificate issuer: /CN=23658315-b56f-46db-89d2-184000d7f7e1 Certificate serial: 010D0C9F43285849C20A0A78BB15DD06105B9A80 Authority key identifier: E5:87:CC:6D:8E:ED:D7:82:E5:1D:8D:4E:59:77:6B:36:63:34:77:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/12c8b264-052f-356f-a94d-718e65321e32.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 14007 IP address blocks: 199.101.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/23658315-b56f-46db-89d2-184000d7f7e1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/23658315-b56f-46db-89d2-184000d7f7e1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:0a:78:bb:15:dd:06:10:5b:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23658315-b56f-46db-89d2-184000d7f7e1 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=25a2430c-be24-4669-876d-0a8babef7763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a2:fb:39:a8:f5:0b:15:01:68:14:b8:77:e5: d4:0b:a1:e1:10:5f:10:a9:27:6f:23:bf:f0:5d:69: 25:53:ed:2a:61:7a:aa:f1:cc:f2:f4:b5:2b:41:7a: 4b:9d:8c:0c:50:d6:af:2b:2d:87:7d:f1:d0:a4:77: c6:ee:fe:fe:f7:15:51:27:7d:9c:9e:06:8e:f1:6c: 2f:4f:e4:91:31:c3:e6:33:4c:e4:48:73:83:e2:80: 71:1d:ad:fb:45:d9:c3:7f:60:ed:80:be:93:c3:cf: b7:bd:fb:03:11:22:e6:b4:37:a3:d4:0a:78:8b:c6: fc:01:07:90:f2:06:3b:29:db:22:d7:76:9a:9a:b7: a7:2e:c0:f2:2d:ab:0a:f6:10:ea:b8:d4:8b:ec:0c: 64:d9:28:b6:ba:a1:ad:e8:05:01:cf:60:0c:29:1d: d3:8d:7b:45:4e:16:0b:1a:ca:3e:5e:ef:35:fc:e3: 77:01:33:02:c2:e6:d4:b1:ca:b1:08:e7:62:80:6b: 42:77:31:87:5f:27:7d:e9:fd:ed:2b:fe:e5:f4:c6: 76:38:f4:65:18:17:ac:56:86:b3:7f:91:d3:6c:58: a9:ce:ba:23:73:25:ad:a7:81:d4:75:2c:57:8d:b2: 05:79:fe:be:e1:80:34:e7:69:64:98:17:71:e8:31: c3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:4D:31:6F:96:B1:C6:E1:FD:91:6C:45:CD:31:B0:FA:E0:7A:FC:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/12c8b264-052f-356f-a94d-718e65321e32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/23658315-b56f-46db-89d2-184000d7f7e1.crl X509v3 Authority Key Identifier: keyid:E5:87:CC:6D:8E:ED:D7:82:E5:1D:8D:4E:59:77:6B:36:63:34:77:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1.cer sbgp-ipAddrBlock: critical IPv4: 199.101.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:cd:8a:fd:d5:a5:82:89:78:a3:b2:e5:87:6b:9d:0a:bf:b6: 42:0f:b7:a8:d1:22:4f:83:8e:4e:0f:93:5e:20:3a:a9:69:56: d7:55:4a:b6:9e:fc:9a:d4:c6:6e:7e:1a:fd:83:75:69:19:10: 3b:19:90:8e:a5:6a:24:e7:2f:95:78:64:58:b2:1c:8b:1a:ea: e3:6a:c1:03:29:b0:29:f9:67:ee:f6:0c:95:a2:66:51:1c:4a: ab:1c:3a:b5:9d:45:eb:53:e9:32:52:4a:3a:13:e9:b2:05:d9: c4:f6:73:70:26:68:ad:e7:36:d4:20:71:9e:17:e8:e5:88:3a: 32:23:21:91:13:62:7f:a4:20:dc:b9:b5:b3:f0:4e:18:58:bd: a0:21:1f:72:63:2a:60:6e:f7:fb:03:08:94:da:34:10:6c:54: 12:a5:47:ae:f9:43:f2:be:e2:76:9d:27:af:93:f2:ff:89:f5: 45:fc:c5:b7:0b:6d:59:6f:72:6f:af:17:c8:c7:03:97:0b:f8: 00:17:f1:a8:af:ca:48:16:0e:fb:5c:3b:13:56:72:5d:10:c1: 18:64:57:42:1b:e2:5e:83:8c:df:ef:63:74:4b:d4:76:d7:4c: a2:e5:a2:9b:4b:b6:9f:0d:45:ed:62:29:4c:28:8b:41:b5:27: 1d:e7:97:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCgp4uxXdBhBbmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjM2NTgzMTUtYjU2Zi00NmRiLTg5ZDItMTg0MDAwZDdm N2UxMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk MjVhMjQzMGMtYmUyNC00NjY5LTg3NmQtMGE4YmFiZWY3NzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaL7Oaj1CxUBaBS4d+XUC6HhEF8QqSdvI7/w XWklU+0qYXqq8czy9LUrQXpLnYwMUNavKy2HffHQpHfG7v7+9xVRJ32cngaO8Wwv T+SRMcPmM0zkSHOD4oBxHa37RdnDf2DtgL6Tw8+3vfsDESLmtDej1Ap4i8b8AQeQ 8gY7Kdsi13aamrenLsDyLasK9hDquNSL7Axk2Si2uqGt6AUBz2AMKR3TjXtFThYL Gso+Xu81/ON3ATMCwubUscqxCOdigGtCdzGHXyd96f3tK/7l9MZ2OPRlGBesVoaz f5HTbFipzrojcyWtp4HUdSxXjbIFef6+4YA052lkmBdx6DHDywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLVNMW+Wscbh/ZFsRc0xsPrgevwUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMzY1 ODMxNS1iNTZmLTQ2ZGItODlkMi0xODQwMDBkN2Y3ZTEvMTJjOGIyNjQtMDUyZi0z NTZmLWE5NGQtNzE4ZTY1MzIxZTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjM2NTgzMTUtYjU2Zi00NmRiLTg5 ZDItMTg0MDAwZDdmN2UxLzIzNjU4MzE1LWI1NmYtNDZkYi04OWQyLTE4NDAwMGQ3 ZjdlMS5jcmwwHwYDVR0jBBgwFoAU5YfMbY7t14LlHY1OWXdrNmM0d3owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMzY1ODMxNS1iNTZmLTQ2ZGItODlkMi0xODQw MDBkN2Y3ZTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx2VIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJDNiv3VpYKJeKOy5YdrnQq/tkIPt6jRIk+Djk4Pk14gOqlpVtdVSrae /JrUxm5+Gv2DdWkZEDsZkI6laiTnL5V4ZFiyHIsa6uNqwQMpsCn5Z+72DJWiZlEc SqscOrWdRetT6TJSSjoT6bIF2cT2c3AmaK3nNtQgcZ4X6OWIOjIjIZETYn+kINy5 tbPwThhYvaAhH3JjKmBu9/sDCJTaNBBsVBKlR675Q/K+4nadJ6+T8v+J9UX8xbcL bVlvcm+vF8jHA5cL+AAX8aivykgWDvtcOxNWcl0QwRhkV0Ib4l6DjN/vY3RL1HbX TKLloptLtp8NRe1iKUwoi0G1Jx3nl/Y= -----END CERTIFICATE-----Generated at Tue May 6 13:14:21 2025 by rpki-client