$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/256f5a60-acd7-370b-a839-372a2dc4749d.roa File: 256f5a60-acd7-370b-a839-372a2dc4749d.roa (raw, json) Hash identifier: bSxRgyZEc6yOI7YNs2/Zr+UiAJB2mxlpMWUI2iT9mLQ= Subject key identifier: 49:36:49:EE:44:03:F5:1A:1C:FF:7A:59:C5:0D:FF:9F:29:8E:49:BD Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F43285849BF3F59422CD1902C8BEFC580 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/256f5a60-acd7-370b-a839-372a2dc4749d.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 3756 IP address blocks: 199.109.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:59:42:2c:d1:90:2c:8b:ef:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=17284998-e0d5-4af0-9ba1-127eb6b7e178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d5:bc:fb:f1:f3:31:13:0e:ab:47:14:8d:62: 14:0a:28:35:1b:2f:06:40:e9:77:a5:33:1c:3e:0e: 88:bc:9a:fd:0a:71:a3:84:2a:cb:68:e8:50:45:32: fa:fa:5c:16:18:c4:f1:a2:c6:88:cd:f7:0c:24:2b: 11:09:6e:53:45:14:36:a5:5d:f3:b6:b9:50:18:8d: 87:3a:c7:c1:31:2f:7e:07:ef:1c:d8:55:b6:e4:dc: 12:e2:67:60:19:28:28:81:64:1d:7f:f1:94:6e:53: c5:3d:cb:aa:5d:26:42:ac:54:01:18:12:4e:2b:bb: da:55:c9:85:73:33:e2:e2:42:45:a1:bc:76:53:85: 22:bd:c0:55:a0:b4:54:7a:e3:80:d9:b2:7e:cd:3d: af:c2:81:c6:ca:cb:4e:8e:d5:fd:a4:95:f2:db:dd: 0a:91:f9:00:60:e7:4f:bc:10:37:aa:40:8f:5a:1a: 71:76:d6:76:40:ce:f5:f0:f0:73:c9:79:d3:d2:ae: 33:5c:96:fd:05:fe:11:39:de:d1:72:d2:12:12:0b: 73:df:98:47:66:95:9e:81:bd:14:92:2f:81:fd:29: b7:96:91:bb:14:44:46:59:27:e8:0d:e4:84:e2:39: 8b:8f:91:3f:b5:52:10:c8:ee:d3:28:0d:c6:16:1a: e8:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:36:49:EE:44:03:F5:1A:1C:FF:7A:59:C5:0D:FF:9F:29:8E:49:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/256f5a60-acd7-370b-a839-372a2dc4749d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:5e:9c:4e:a8:34:fb:51:6f:4b:03:03:b9:30:7a:f6:93:b5: 0e:24:46:d2:5e:2d:12:85:30:b8:9d:75:4c:ad:57:d7:0b:db: 3e:03:be:de:4c:21:67:5b:93:d0:93:81:44:95:87:f0:cd:48: 59:20:d5:cf:c2:74:45:5a:e9:7d:a8:84:cd:6a:19:e4:d2:1a: 6d:8f:e3:3d:20:93:33:71:b6:77:52:c8:1b:1b:41:2c:26:14: 98:2b:86:a4:0f:04:f3:76:4f:b1:10:b8:0e:32:39:ed:dc:bb: 13:7a:54:48:27:36:12:5e:6c:7f:14:6b:8e:93:03:08:4a:ee: bf:fc:d3:3c:f8:d7:f8:d2:60:9e:1e:35:1f:f5:1d:42:3f:6a: 66:db:8c:f7:b3:e7:61:f4:91:a9:9d:ae:e4:59:0b:3a:10:34: 12:58:2a:a5:f7:3a:d9:ce:c9:91:b1:a2:a6:da:b1:0c:d7:af: 66:73:54:9a:59:54:25:1d:9c:25:9d:ad:aa:2e:ce:11:6f:a9: 3e:7e:a5:96:9e:cb:42:55:12:e6:32:b3:9d:00:c7:2a:e7:ca: 66:15:1d:7e:f0:60:8d:a4:77:10:8a:ba:39:05:d7:a9:3a:98: b6:16:88:02:0c:f5:a9:e9:0f:3c:9d:0d:8a:a4:8a:35:ad:9f: 10:4b:c4:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P1lCLNGQLIvvxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk MTcyODQ5OTgtZTBkNS00YWYwLTliYTEtMTI3ZWI2YjdlMTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNW8+/HzMRMOq0cUjWIUCig1Gy8GQOl3pTMc Pg6IvJr9CnGjhCrLaOhQRTL6+lwWGMTxosaIzfcMJCsRCW5TRRQ2pV3ztrlQGI2H OsfBMS9+B+8c2FW25NwS4mdgGSgogWQdf/GUblPFPcuqXSZCrFQBGBJOK7vaVcmF czPi4kJFobx2U4UivcBVoLRUeuOA2bJ+zT2vwoHGystOjtX9pJXy290KkfkAYOdP vBA3qkCPWhpxdtZ2QM718PBzyXnT0q4zXJb9Bf4ROd7RctISEgtz35hHZpWegb0U ki+B/Sm3lpG7FERGWSfoDeSE4jmLj5E/tVIQyO7TKA3GFhrotQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEk2Se5EA/UaHP96WcUN/58pjkm9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvMjU2ZjVhNjAtYWNkNy0z NzBiLWE4MzktMzcyYTJkYzQ3NDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEx23gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHdenE6oNPtRb0sDA7kwevaTtQ4kRtJeLRKFMLiddUytV9cL2z4Dvt5M IWdbk9CTgUSVh/DNSFkg1c/CdEVa6X2ohM1qGeTSGm2P4z0gkzNxtndSyBsbQSwm FJgrhqQPBPN2T7EQuA4yOe3cuxN6VEgnNhJebH8Ua46TAwhK7r/80zz41/jSYJ4e NR/1HUI/ambbjPez52H0kamdruRZCzoQNBJYKqX3OtnOyZGxoqbasQzXr2ZzVJpZ VCUdnCWdraouzhFvqT5+pZaey0JVEuYys50AxyrnymYVHX7wYI2kdxCKujkF16k6 mLYWiAIM9anpDzydDYqkijWtnxBLxBo= -----END CERTIFICATE-----Generated at Wed May 14 15:52:58 2025 by rpki-client