$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f65be2e0-6a40-4cf1-8234-6eb4f40c788a/6bfd8c06-649d-344f-9311-8c34c244a748.roa File: 6bfd8c06-649d-344f-9311-8c34c244a748.roa (raw, json) Hash identifier: bLukI8SneqMqxOTsB4iFqBbMBWwxmPPSr/7K71KN3T8= Subject key identifier: 29:D7:DA:63:A3:55:8C:46:FF:B8:B7:B9:BA:03:51:1E:F3:A9:49:66 Certificate issuer: /CN=f65be2e0-6a40-4cf1-8234-6eb4f40c788a Certificate serial: 010D0C9F43285849B41496D88CD2C0C79F8DABC0 Authority key identifier: 7C:CA:20:FA:2B:1D:8F:D4:74:96:0A:8C:49:88:B7:54:60:A0:C6:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f65be2e0-6a40-4cf1-8234-6eb4f40c788a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f65be2e0-6a40-4cf1-8234-6eb4f40c788a/6bfd8c06-649d-344f-9311-8c34c244a748.roa Signing time: Thu 01 May 2025 01:00:46 +0000 ROA not before: Thu 01 May 2025 01:00:46 +0000 ROA not after: Wed 30 Jul 2025 01:00:46 +0000 asID: 22121 IP address blocks: 172.99.224.0/22 maxlen: 24 199.21.136.0/21 maxlen: 24 2604:14c0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f65be2e0-6a40-4cf1-8234-6eb4f40c788a/f65be2e0-6a40-4cf1-8234-6eb4f40c788a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f65be2e0-6a40-4cf1-8234-6eb4f40c788a/f65be2e0-6a40-4cf1-8234-6eb4f40c788a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f65be2e0-6a40-4cf1-8234-6eb4f40c788a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b4:14:96:d8:8c:d2:c0:c7:9f:8d:ab:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f65be2e0-6a40-4cf1-8234-6eb4f40c788a Validity Not Before: May 1 01:00:46 2025 GMT Not After : Jul 30 01:00:46 2025 GMT Subject: CN=5e7cb6f7-c369-4562-9537-1b9c28bffbc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9a:21:c5:f0:6d:4e:46:d8:6d:a5:00:22:26: ca:50:96:f9:65:9d:d5:bb:89:ad:ba:87:0b:06:3d: 2e:2a:d5:8f:e3:ce:02:3b:f6:c7:d1:91:2a:40:d1: b0:f4:55:7e:88:ca:e6:0c:4b:ce:30:f0:70:7c:c3: 9c:2c:3d:9b:e5:b3:6a:ab:d2:c5:17:12:f5:71:2d: f2:85:1e:84:be:30:6a:77:48:a8:2d:4c:34:1c:29: 28:d2:84:6f:8a:7c:85:e4:7b:12:a3:53:43:a7:ed: 71:2c:55:2a:19:00:05:5d:55:c4:fa:0d:95:18:05: 28:60:3f:5d:13:f5:35:86:6d:35:36:2e:e9:6a:a4: a3:36:42:8d:e0:88:e9:a1:0f:22:52:f1:f1:32:9b: 51:b9:20:a0:b8:58:c6:8a:4b:91:12:8c:0d:51:a0: 29:b6:44:26:2a:c3:84:cb:53:71:38:99:d9:e1:de: 0f:29:6f:3f:63:88:db:1a:87:64:d0:b9:2c:09:8e: 2d:8a:04:11:99:56:27:fb:17:cb:fe:6c:3f:de:11: 93:c4:82:63:e8:e9:a5:77:30:37:b6:63:b5:63:0a: 63:0b:b0:49:62:d0:73:db:fd:09:14:b3:25:0f:45: 8f:e8:75:a1:4a:99:a8:7d:65:da:95:ce:87:40:02: a2:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:D7:DA:63:A3:55:8C:46:FF:B8:B7:B9:BA:03:51:1E:F3:A9:49:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f65be2e0-6a40-4cf1-8234-6eb4f40c788a/6bfd8c06-649d-344f-9311-8c34c244a748.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f65be2e0-6a40-4cf1-8234-6eb4f40c788a/f65be2e0-6a40-4cf1-8234-6eb4f40c788a.crl X509v3 Authority Key Identifier: keyid:7C:CA:20:FA:2B:1D:8F:D4:74:96:0A:8C:49:88:B7:54:60:A0:C6:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f65be2e0-6a40-4cf1-8234-6eb4f40c788a.cer sbgp-ipAddrBlock: critical IPv4: 172.99.224.0/22 199.21.136.0/21 IPv6: 2604:14c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:83:27:78:d5:6c:b1:5b:b8:22:f3:ca:18:89:21:f8:b4:11: b8:9c:06:6e:66:a7:d7:30:c4:fb:a9:3f:d7:79:d3:8a:4a:e8: c8:0c:0f:e8:e2:17:17:42:ce:21:ee:b2:c8:3b:f8:8a:20:4d: 4f:d0:58:f1:91:4f:5b:4a:a4:be:aa:aa:33:14:33:f8:4f:f6: 9c:3a:0b:87:20:bb:f1:c5:ce:cb:90:18:41:bf:d4:ff:d2:ce: cc:29:2c:56:a8:af:e0:1f:b0:91:1d:dd:eb:a8:a0:88:58:ed: 43:d8:63:0b:59:47:05:de:ef:96:be:33:c2:e3:9d:30:a7:63: a3:2d:38:58:58:a0:f6:37:a4:ab:a5:29:52:a0:fc:64:e7:c7: d6:c8:bc:3b:de:5e:e4:82:f2:bc:4c:b8:1b:93:31:f7:89:ea: b8:70:42:df:d9:b9:86:42:dd:a1:2f:2c:57:93:ac:09:3b:79: de:05:f1:2c:03:94:11:a7:4f:f5:c1:f3:1b:fa:5f:f1:cb:c2: cf:52:90:1e:31:e2:e7:3c:8d:09:51:80:90:b6:38:49:9f:49: 4f:6d:bd:e6:b0:96:04:c3:59:90:e7:89:97:1e:67:57:2f:3b: 4d:4a:ab:c3:1e:ae:54:cb:11:6f:f3:71:ff:c4:d9:dd:a3:3d: 9c:e6:18:f3 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEm0FJbYjNLAx5+Nq8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjY1YmUyZTAtNmE0MC00Y2YxLTgyMzQtNmViNGY0MGM3 ODhhMB4XDTI1MDUwMTAxMDA0NloXDTI1MDczMDAxMDA0NlowLzEtMCsGA1UEAxMk NWU3Y2I2ZjctYzM2OS00NTYyLTk1MzctMWI5YzI4YmZmYmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpohxfBtTkbYbaUAIibKUJb5ZZ3Vu4mtuocL Bj0uKtWP484CO/bH0ZEqQNGw9FV+iMrmDEvOMPBwfMOcLD2b5bNqq9LFFxL1cS3y hR6EvjBqd0ioLUw0HCko0oRvinyF5HsSo1NDp+1xLFUqGQAFXVXE+g2VGAUoYD9d E/U1hm01Ni7paqSjNkKN4IjpoQ8iUvHxMptRuSCguFjGikuREowNUaAptkQmKsOE y1NxOJnZ4d4PKW8/Y4jbGodk0LksCY4tigQRmVYn+xfL/mw/3hGTxIJj6OmldzA3 tmO1YwpjC7BJYtBz2/0JFLMlD0WP6HWhSpmofWXalc6HQAKi+QIDAQABo4IDajCC A2YwHQYDVR0OBBYEFCnX2mOjVYxG/7i3uboDUR7zqUlmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mNjVi ZTJlMC02YTQwLTRjZjEtODIzNC02ZWI0ZjQwYzc4OGEvNmJmZDhjMDYtNjQ5ZC0z NDRmLTkzMTEtOGMzNGMyNDRhNzQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjY1YmUyZTAtNmE0MC00Y2YxLTgy MzQtNmViNGY0MGM3ODhhL2Y2NWJlMmUwLTZhNDAtNGNmMS04MjM0LTZlYjRmNDBj Nzg4YS5jcmwwHwYDVR0jBBgwFoAUfMog+isdj9R0lgqMSYi3VGCgxvowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mNjViZTJlMC02YTQwLTRjZjEtODIzNC02ZWI0 ZjQwYzc4OGEuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCrGPgAwQD xxWIMA0EAgACMAcDBQAmBBTAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAMmDJ3jVbLFbuCLzyhiJIfi0Ebic Bm5mp9cwxPupP9d504pK6MgMD+jiFxdCziHussg7+IogTU/QWPGRT1tKpL6qqjMU M/hP9pw6C4cgu/HFzsuQGEG/1P/SzswpLFaor+AfsJEd3euooIhY7UPYYwtZRwXe 75a+M8LjnTCnY6MtOFhYoPY3pKulKVKg/GTnx9bIvDveXuSC8rxMuBuTMfeJ6rhw Qt/ZuYZC3aEvLFeTrAk7ed4F8SwDlBGnT/XB8xv6X/HLws9SkB4x4uc8jQlRgJC2 OEmfSU9tveawlgTDWZDniZceZ1cvO01Kq8MerlTLEW/zcf/E2d2jPZzmGPM= -----END CERTIFICATE-----Generated at Wed May 14 02:56:55 2025 by rpki-client