$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/b270954a-48c4-3971-aeb6-a89d93f59e0d.roa File: b270954a-48c4-3971-aeb6-a89d93f59e0d.roa (raw, json) Hash identifier: hLpHnGojNvzFTgRAN2wrw6HZZ7+Y78VS1o3MBisxw44= Subject key identifier: 51:3B:99:F2:D5:AC:8D:EA:7E:52:A5:5D:8C:5A:6E:97:EB:E2:7E:B8 Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F43285849A8E9DD4E570DF4A6D079A880 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/b270954a-48c4-3971-aeb6-a89d93f59e0d.roa Signing time: Sun 27 Apr 2025 01:00:46 +0000 ROA not before: Sun 27 Apr 2025 01:00:46 +0000 ROA not after: Sat 26 Jul 2025 01:00:46 +0000 asID: 23471 IP address blocks: 199.244.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a8:e9:dd:4e:57:0d:f4:a6:d0:79:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Apr 27 01:00:46 2025 GMT Not After : Jul 26 01:00:46 2025 GMT Subject: CN=4b108732-f654-4889-a469-e2c8a2482b36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:95:c8:13:f5:0c:d4:da:40:de:ac:bc:f8:de: 00:a5:03:01:ba:51:1e:c7:d4:4d:13:93:da:4c:1d: 2f:b5:e5:cc:04:01:14:64:7d:49:51:b2:42:e9:fc: 35:fb:8f:7e:ed:e0:70:70:6b:7e:7b:7f:af:2f:9b: 0c:13:e6:70:aa:27:4b:af:da:e0:e9:05:11:c5:9c: 3f:12:3f:ad:b8:bd:ce:c5:48:88:dd:1a:7a:0d:4a: d9:0d:e6:f0:96:26:e1:25:cf:a9:7a:8a:25:8e:20: db:02:89:3d:6d:50:c1:ff:89:8a:16:e2:9b:27:91: ba:6e:c8:df:a1:8a:0a:f7:52:5d:09:50:a3:7c:ec: b4:5a:81:6a:57:d9:33:32:14:e4:6e:f7:2e:20:ff: 3d:57:4f:c9:58:dc:c1:d2:29:9a:95:f8:b6:3b:d3: 23:c4:7d:e3:4f:6f:cd:fa:45:63:49:15:81:2c:24: 6e:43:b7:2c:02:dc:11:c4:29:a1:8b:74:86:ae:f6: a3:40:ed:3e:ac:1d:04:0a:0e:70:6a:c3:ff:a8:13: 6f:35:17:e3:ad:ec:a4:22:a6:14:9a:b0:a2:fd:46: 57:d9:be:0e:77:55:42:fb:c2:9f:49:40:a2:b4:74: 1c:dc:56:9e:3d:f1:09:9b:35:2a:6d:a9:72:b2:a7: 2b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:3B:99:F2:D5:AC:8D:EA:7E:52:A5:5D:8C:5A:6E:97:EB:E2:7E:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/b270954a-48c4-3971-aeb6-a89d93f59e0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 199.244.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:70:f7:a7:91:b8:8d:d7:9f:48:62:49:60:e4:3e:6f:92:b0: 70:54:22:8f:9a:25:aa:99:9c:95:0a:c2:5f:76:1d:cf:70:a4: b8:ab:24:93:89:21:0b:43:e8:26:b0:64:35:06:ec:1e:78:e2: 2c:b9:b1:1f:19:03:6b:3f:e1:a8:ca:1d:ba:57:6a:1f:54:c1: 92:5d:2d:4d:ae:98:44:e9:1c:6b:17:d8:f0:74:71:5b:13:9d: 67:f2:54:5a:3a:c7:a0:62:97:a9:68:5e:92:32:21:9c:75:d2: b3:1c:de:a3:5f:65:72:69:3a:6d:14:dd:66:7f:8b:09:4f:88: 8f:86:9b:4d:28:5e:4b:be:87:ea:6c:46:31:99:b7:65:91:01: ef:8f:32:a8:4d:ad:20:e3:5e:86:3c:98:d5:b3:dd:08:23:25: ee:17:0d:cd:4a:34:49:6f:ef:e2:1d:97:55:ed:9d:08:09:a7: 1b:1b:8a:df:b6:8c:5a:a3:ee:36:41:6a:30:00:4d:24:fc:fd: 8a:52:c2:1b:4d:1b:ed:fb:dc:ad:e6:25:48:51:8e:18:d6:29: dd:a7:4a:d1:03:69:8e:cc:26:37:2b:c3:4b:ac:f4:e2:f1:e0: 74:ac:c7:6e:a0:04:6f:a1:7f:e1:78:13:fc:ff:e9:af:1b:ae: f8:a4:e2:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmo6d1OVw30ptB5qIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI1MDQyNzAxMDA0NloXDTI1MDcyNjAxMDA0NlowLzEtMCsGA1UEAxMk NGIxMDg3MzItZjY1NC00ODg5LWE0NjktZTJjOGEyNDgyYjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5XIE/UM1NpA3qy8+N4ApQMBulEex9RNE5Pa TB0vteXMBAEUZH1JUbJC6fw1+49+7eBwcGt+e3+vL5sME+ZwqidLr9rg6QURxZw/ Ej+tuL3OxUiI3Rp6DUrZDebwlibhJc+peooljiDbAok9bVDB/4mKFuKbJ5G6bsjf oYoK91JdCVCjfOy0WoFqV9kzMhTkbvcuIP89V0/JWNzB0imalfi2O9MjxH3jT2/N +kVjSRWBLCRuQ7csAtwRxCmhi3SGrvajQO0+rB0ECg5wasP/qBNvNRfjreykIqYU mrCi/UZX2b4Od1VC+8KfSUCitHQc3FaePfEJmzUqbalysqcrGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFE7mfLVrI3qflKlXYxabpfr4n64MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvYjI3MDk1NGEtNDhjNC0z OTcxLWFlYjYtYTg5ZDkzZjU5ZTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/R7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJw96eRuI3Xn0hiSWDkPm+SsHBUIo+aJaqZnJUKwl92Hc9wpLirJJOJ IQtD6CawZDUG7B544iy5sR8ZA2s/4ajKHbpXah9UwZJdLU2umETpHGsX2PB0cVsT nWfyVFo6x6Bil6loXpIyIZx10rMc3qNfZXJpOm0U3WZ/iwlPiI+Gm00oXku+h+ps RjGZt2WRAe+PMqhNrSDjXoY8mNWz3QgjJe4XDc1KNElv7+Idl1XtnQgJpxsbit+2 jFqj7jZBajAATST8/YpSwhtNG+373K3mJUhRjhjWKd2nStEDaY7MJjcrw0us9OLx 4HSsx26gBG+hf+F4E/z/6a8brvik4tY= -----END CERTIFICATE-----Generated at Fri May 9 21:47:47 2025 by rpki-client