$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/b0f3dd68-3412-3d59-9ac4-f5398f42bcd8.roa File: b0f3dd68-3412-3d59-9ac4-f5398f42bcd8.roa (raw, json) Hash identifier: m/v+cpkA0T3PKJxYi0+iSFO+7qlSrjCTLh5i934TTtY= Subject key identifier: CF:3C:FD:19:AC:04:D3:12:4F:D9:B0:62:78:17:6D:65:23:A6:4B:33 Certificate issuer: /CN=db2617c0-03f4-4ad7-9d11-36b2c6496b7d Certificate serial: 010D0C9F43285849088172D547F9CD9BF5A6D910 Authority key identifier: 6F:8C:BC:63:FE:23:D7:C4:A8:06:09:3A:B5:B6:A1:6A:A3:94:58:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/b0f3dd68-3412-3d59-9ac4-f5398f42bcd8.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 53991 IP address blocks: 199.83.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:72:d5:47:f9:cd:9b:f5:a6:d9:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db2617c0-03f4-4ad7-9d11-36b2c6496b7d Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=6d70d52c-037d-4e05-94fb-0a00ac269e64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:59:3b:84:62:87:43:e4:cd:11:64:3e:2a:ce: 93:54:32:7d:5f:d6:f5:f3:d4:de:e8:1d:d2:9d:79: 53:bf:1e:e4:75:c0:30:b7:e4:2c:dc:c5:18:1a:eb: 56:05:b6:b3:e1:1a:5c:63:aa:35:c0:59:29:6d:11: ec:fb:a9:ff:e4:cb:8f:eb:c8:e0:b1:6d:a5:ae:9a: 77:c5:b3:c8:0a:e0:b4:fa:f5:f4:24:f0:3f:ed:b2: b0:63:7c:00:af:cc:0a:62:a1:0b:b9:f7:d3:b1:57: fd:2e:b3:3b:6c:3c:51:45:bd:b2:18:6a:a2:c4:ec: c6:18:c5:a3:6a:5e:8a:94:82:1c:27:07:75:02:be: d0:55:d5:58:5a:e6:65:db:a7:34:cf:af:f7:58:12: 58:f6:5b:68:5b:d3:86:e5:57:69:e2:26:93:73:96: e6:e2:75:53:a4:0f:3b:ec:76:d4:ef:ea:8d:23:e6: ad:97:6b:2e:d3:7f:a4:5e:0b:20:ec:89:f2:07:1a: e5:ed:38:31:5b:23:fb:54:84:a2:15:46:f0:07:17: 9e:84:5a:4f:0a:a9:54:47:3b:86:0e:f7:6a:4d:09: 2a:ae:c8:20:1b:5d:cb:6b:59:24:d8:40:2f:16:48: f6:2c:b0:bb:43:9c:ff:64:63:36:0f:85:75:ba:7c: a5:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:3C:FD:19:AC:04:D3:12:4F:D9:B0:62:78:17:6D:65:23:A6:4B:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/b0f3dd68-3412-3d59-9ac4-f5398f42bcd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.crl X509v3 Authority Key Identifier: keyid:6F:8C:BC:63:FE:23:D7:C4:A8:06:09:3A:B5:B6:A1:6A:A3:94:58:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer sbgp-ipAddrBlock: critical IPv4: 199.83.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:08:93:92:7e:56:76:69:8f:96:1e:25:df:99:87:65:34:dc: 5c:14:a4:4a:75:e2:bd:1c:88:de:50:dd:ba:73:84:01:54:b3: 90:26:ef:ec:e9:df:bf:20:40:96:1c:07:87:1c:23:6f:7b:f3: 09:97:6f:4a:35:be:6d:eb:26:bc:51:d0:10:5a:15:19:c4:bc: c4:61:39:77:c9:2b:08:cc:32:07:38:8e:b7:d3:ee:70:e9:12: 6e:6c:5a:ec:17:dd:77:a3:6e:69:19:66:fe:54:d0:27:9c:01: 2e:68:74:9d:bf:7b:d6:04:74:a0:f2:59:21:f2:05:65:e0:a0: 83:48:02:d2:75:e8:92:4f:10:68:62:da:24:f8:52:77:82:9a: 31:ee:6b:58:22:8a:99:ea:ad:c9:bf:01:56:fb:ef:d2:21:93: 01:ef:98:21:30:fd:78:38:37:89:8d:00:5c:f8:d8:68:4b:a7: b5:6b:d0:2c:86:ac:7d:d6:89:c2:23:c2:d2:47:bb:3e:95:99: fe:b5:7e:9d:88:be:87:5d:31:44:10:e8:cb:4e:df:64:9d:da: bd:7e:6b:26:ab:e5:c8:d9:db:30:7a:4b:17:04:2b:9a:04:75: 48:4c:78:e3:2d:48:d6:b1:73:12:ff:52:92:2b:95:f8:97:1d: 54:7a:42:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgXLVR/nNm/Wm2RAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGIyNjE3YzAtMDNmNC00YWQ3LTlkMTEtMzZiMmM2NDk2 YjdkMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk NmQ3MGQ1MmMtMDM3ZC00ZTA1LTk0ZmItMGEwMGFjMjY5ZTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFk7hGKHQ+TNEWQ+Ks6TVDJ9X9b189Te6B3S nXlTvx7kdcAwt+Qs3MUYGutWBbaz4RpcY6o1wFkpbRHs+6n/5MuP68jgsW2lrpp3 xbPICuC0+vX0JPA/7bKwY3wAr8wKYqELuffTsVf9LrM7bDxRRb2yGGqixOzGGMWj al6KlIIcJwd1Ar7QVdVYWuZl26c0z6/3WBJY9ltoW9OG5Vdp4iaTc5bm4nVTpA87 7HbU7+qNI+atl2su03+kXgsg7InyBxrl7TgxWyP7VISiFUbwBxeehFpPCqlURzuG DvdqTQkqrsggG13La1kk2EAvFkj2LLC7Q5z/ZGM2D4V1unylwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM88/RmsBNMST9mwYngXbWUjpkszMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYjI2 MTdjMC0wM2Y0LTRhZDctOWQxMS0zNmIyYzY0OTZiN2QvYjBmM2RkNjgtMzQxMi0z ZDU5LTlhYzQtZjUzOThmNDJiY2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGIyNjE3YzAtMDNmNC00YWQ3LTlk MTEtMzZiMmM2NDk2YjdkL2RiMjYxN2MwLTAzZjQtNGFkNy05ZDExLTM2YjJjNjQ5 NmI3ZC5jcmwwHwYDVR0jBBgwFoAUb4y8Y/4j18SoBgk6tbahaqOUWLswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYjI2MTdjMC0wM2Y0LTRhZDctOWQxMS0zNmIy YzY0OTZiN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx1P0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJIIk5J+VnZpj5YeJd+Zh2U03FwUpEp14r0ciN5Q3bpzhAFUs5Am7+zp 378gQJYcB4ccI2978wmXb0o1vm3rJrxR0BBaFRnEvMRhOXfJKwjMMgc4jrfT7nDp Em5sWuwX3XejbmkZZv5U0CecAS5odJ2/e9YEdKDyWSHyBWXgoINIAtJ16JJPEGhi 2iT4UneCmjHua1giipnqrcm/AVb779IhkwHvmCEw/Xg4N4mNAFz42GhLp7Vr0CyG rH3WicIjwtJHuz6Vmf61fp2IvoddMUQQ6MtO32Sd2r1+ayar5cjZ2zB6SxcEK5oE dUhMeOMtSNaxcxL/UpIrlfiXHVR6Qkg= -----END CERTIFICATE-----Generated at Sat May 10 20:17:17 2025 by rpki-client