$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/521c3d90-e8a5-3699-8987-db21e5cefb4e.roa File: 521c3d90-e8a5-3699-8987-db21e5cefb4e.roa (raw, json) Hash identifier: 9RqF+iowyOXAQUuAmESSIXwvbBHXxsFslcdSTKQc87E= Subject key identifier: 9C:45:66:D8:C1:E9:D0:9F:D5:D7:5A:85:6E:37:4F:56:A2:FD:BC:28 Certificate issuer: /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Certificate serial: 010D0C9F43285849806F0DD3F49C464968D0D640 Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/521c3d90-e8a5-3699-8987-db21e5cefb4e.roa Signing time: Sat 12 Apr 2025 13:01:01 +0000 ROA not before: Sat 12 Apr 2025 13:01:01 +0000 ROA not after: Fri 11 Jul 2025 13:01:01 +0000 asID: 19165 IP address blocks: 199.87.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:6f:0d:d3:f4:9c:46:49:68:d0:d6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Validity Not Before: Apr 12 13:01:01 2025 GMT Not After : Jul 11 13:01:01 2025 GMT Subject: CN=01df5da9-aeab-4846-a7cf-5743200cec93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6a:2e:d7:81:f6:98:3f:e6:0c:74:df:34:b1: 0b:bf:0d:9e:44:b1:5c:18:1e:84:a7:9e:ad:ae:64: 38:f1:90:7c:5d:16:f4:65:ca:e7:fc:a3:8d:d9:f4: 75:0a:95:0b:75:8f:b8:c1:0a:cc:a7:ca:ad:0a:c0: fb:7a:a0:04:d4:a2:ad:76:f9:86:5d:07:0c:0b:25: 0c:fb:0d:a0:88:72:b4:1b:81:f9:7f:35:70:7f:40: f5:3a:2a:1a:fd:04:42:36:ed:85:87:58:5d:0e:13: 0e:3f:30:50:6f:fc:c0:3d:05:68:7e:0c:13:02:6f: a3:b2:67:03:c5:f6:4a:d2:2d:ab:51:37:d5:84:72: 49:7e:c9:3e:78:21:75:d7:40:f0:0b:7b:9b:ab:db: c5:1e:37:25:bc:ca:2c:8b:fb:9a:50:e8:60:92:0a: 81:9c:56:ee:d0:8a:bb:f1:9a:73:7e:da:62:18:3c: 78:7c:80:a8:be:9a:94:6a:07:74:76:66:02:03:98: 6a:54:91:30:a2:22:6a:4e:fb:dc:88:82:8b:32:fb: 37:70:50:0b:07:1e:f0:d5:09:c5:5b:0b:ed:0c:6e: 27:ae:bd:d1:e4:25:bb:e4:b4:d2:81:ff:5c:1e:3c: 97:99:5b:88:a8:2c:30:9f:7c:bd:58:12:da:3d:be: 91:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:45:66:D8:C1:E9:D0:9F:D5:D7:5A:85:6E:37:4F:56:A2:FD:BC:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/521c3d90-e8a5-3699-8987-db21e5cefb4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl X509v3 Authority Key Identifier: keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer sbgp-ipAddrBlock: critical IPv4: 199.87.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:17:96:f4:3a:50:02:09:b6:92:cd:6b:e8:57:70:3c:c2:d6: 49:38:3f:fb:53:bc:83:35:ba:44:85:91:49:df:c7:0a:af:6d: 9d:fb:8b:89:0b:37:27:80:47:0a:c6:ac:ac:73:0b:72:2a:82: 2b:d7:3d:b5:25:0a:53:85:eb:23:c5:59:05:33:6b:27:95:ff: de:38:b0:4a:94:e6:d9:b6:2a:af:df:91:95:76:01:fd:69:0b: 35:86:9e:ee:21:e6:c4:5b:5c:4e:1a:54:20:c7:92:83:c0:1a: cb:bf:3d:18:ae:ae:57:3d:01:bf:5e:c1:35:97:15:91:89:f9: fa:09:2b:96:59:a6:5c:bd:99:1d:2b:7d:8e:0c:2e:1c:3b:97: 8c:67:6d:9b:fe:e7:f5:7f:43:73:bd:97:70:01:0d:37:fe:d2: d1:0c:5c:ec:b6:72:a7:ee:83:87:ee:98:8f:c0:a7:bd:a6:6b: b7:d2:3c:b6:d9:13:f3:2c:23:c8:b6:5d:bc:72:1b:e6:b2:75: ed:b4:56:05:93:40:15:43:f7:e7:95:de:7a:42:43:80:68:fc: aa:52:c5:5f:9e:21:94:24:b1:22:40:f4:a4:11:22:14:c1:2e: a3:3a:31:e4:b7:57:0e:e9:d6:28:16:58:09:a1:09:e7:93:cf: 6e:19:b5:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmAbw3T9JxGSWjQ1kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTc3M2I5MWItYTYwMS00ZjBkLWFmNGMtOTNiM2Y2NWU2 NDA0MB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk MDFkZjVkYTktYWVhYi00ODQ2LWE3Y2YtNTc0MzIwMGNlYzkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWou14H2mD/mDHTfNLELvw2eRLFcGB6Ep56t rmQ48ZB8XRb0Zcrn/KON2fR1CpULdY+4wQrMp8qtCsD7eqAE1KKtdvmGXQcMCyUM +w2giHK0G4H5fzVwf0D1Oioa/QRCNu2Fh1hdDhMOPzBQb/zAPQVofgwTAm+jsmcD xfZK0i2rUTfVhHJJfsk+eCF110DwC3ubq9vFHjclvMosi/uaUOhgkgqBnFbu0Iq7 8ZpzftpiGDx4fICovpqUagd0dmYCA5hqVJEwoiJqTvvciIKLMvs3cFALBx7w1QnF WwvtDG4nrr3R5CW75LTSgf9cHjyXmVuIqCwwn3y9WBLaPb6RkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJxFZtjB6dCf1ddahW43T1ai/bwoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xNzcz YjkxYi1hNjAxLTRmMGQtYWY0Yy05M2IzZjY1ZTY0MDQvNTIxYzNkOTAtZThhNS0z Njk5LTg5ODctZGIyMWU1Y2VmYjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTc3M2I5MWItYTYwMS00ZjBkLWFm NGMtOTNiM2Y2NWU2NDA0LzE3NzNiOTFiLWE2MDEtNGYwZC1hZjRjLTkzYjNmNjVl NjQwNC5jcmwwHwYDVR0jBBgwFoAU5dhVH06yx92E7wMChlouzzki8a8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xNzczYjkxYi1hNjAxLTRmMGQtYWY0Yy05M2Iz ZjY1ZTY0MDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx1dQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwXlvQ6UAIJtpLNa+hXcDzC1kk4P/tTvIM1ukSFkUnfxwqvbZ37i4kL NyeARwrGrKxzC3IqgivXPbUlClOF6yPFWQUzayeV/944sEqU5tm2Kq/fkZV2Af1p CzWGnu4h5sRbXE4aVCDHkoPAGsu/PRiurlc9Ab9ewTWXFZGJ+foJK5ZZply9mR0r fY4MLhw7l4xnbZv+5/V/Q3O9l3ABDTf+0tEMXOy2cqfug4fumI/Ap72ma7fSPLbZ E/MsI8i2XbxyG+ayde20VgWTQBVD9+eV3npCQ4Bo/KpSxV+eIZQksSJA9KQRIhTB LqM6MeS3Vw7p1igWWAmhCeeTz24ZtaI= -----END CERTIFICATE-----Generated at Tue May 13 23:24:47 2025 by rpki-client