$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/16e56f4d-ab70-3766-907b-22447a23eeb4.roa File: 16e56f4d-ab70-3766-907b-22447a23eeb4.roa (raw, json) Hash identifier: 4+uQxbk+T0jdCpyjT3syvHm/Zjg89oWtxVRs9uhreU4= Subject key identifier: C1:9D:A6:F9:36:85:24:A0:49:1F:52:B2:77:11:09:23:2D:C0:23:40 Certificate issuer: /CN=df2d2a52-5ca7-4a36-849f-a7d6b876e687 Certificate serial: 010D0C9F43285849C170F07A6B9FD13F49E64820 Authority key identifier: A0:DF:EE:0C:A3:CA:99:A2:2F:92:AF:E5:F6:52:C1:DF:94:46:97:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/16e56f4d-ab70-3766-907b-22447a23eeb4.roa Signing time: Mon 05 May 2025 19:52:24 +0000 ROA not before: Mon 05 May 2025 19:52:24 +0000 ROA not after: Sun 03 Aug 2025 19:52:24 +0000 asID: 400702 IP address blocks: 199.127.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c1:70:f0:7a:6b:9f:d1:3f:49:e6:48:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df2d2a52-5ca7-4a36-849f-a7d6b876e687 Validity Not Before: May 5 19:52:24 2025 GMT Not After : Aug 3 19:52:24 2025 GMT Subject: CN=70dec94a-a20c-4e80-851c-a785616e4432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1e:07:a5:6c:cf:07:8f:58:1a:ed:65:08:95: b8:ae:3b:f8:16:ae:0c:36:8a:bf:bb:33:a7:ee:e5: 03:83:02:bd:50:2c:2a:82:06:68:bb:74:4d:2a:ab: 3d:68:4f:89:a7:ec:1b:6b:b9:36:85:d0:5a:74:79: d2:2e:af:54:ce:01:8f:ac:30:cf:60:34:6f:9a:bd: 4f:43:ed:7f:13:6e:05:29:e3:4e:63:d2:0a:81:9b: 26:31:a1:66:f2:8d:5c:56:65:d8:dd:9f:e4:85:16: d6:3a:5e:ff:57:0c:3e:16:30:e7:88:86:6b:45:e9: c3:d8:71:49:41:bf:e5:44:56:b3:40:c2:d2:43:f3: ca:7e:c2:f5:57:46:ee:56:b0:e0:fc:2d:3a:2e:f4: d2:03:21:a8:b8:13:59:a4:75:1d:ca:1b:4d:3e:6a: 0e:37:02:e2:ae:ac:d7:af:9c:2e:15:07:76:3d:d9: 4c:1b:0b:2d:05:61:9f:18:8e:6c:6c:54:6f:d8:77: ee:da:b3:44:1b:25:d2:0b:68:b9:46:d0:fc:f4:18: b9:a4:54:c3:ef:c8:68:26:23:b7:d3:d2:d2:5c:ac: 8d:a2:ff:f2:92:25:ec:b8:af:df:5e:e1:f1:f4:6d: 5d:d2:3e:6f:b2:b1:28:67:df:43:07:db:61:d5:3e: 60:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:9D:A6:F9:36:85:24:A0:49:1F:52:B2:77:11:09:23:2D:C0:23:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/16e56f4d-ab70-3766-907b-22447a23eeb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.crl X509v3 Authority Key Identifier: keyid:A0:DF:EE:0C:A3:CA:99:A2:2F:92:AF:E5:F6:52:C1:DF:94:46:97:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687.cer sbgp-ipAddrBlock: critical IPv4: 199.127.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:c1:7b:05:db:ab:4a:f2:36:54:0c:11:cd:ad:da:9b:c1:8f: 09:12:70:03:9c:1e:3f:d6:c3:7b:63:c1:8e:39:4e:ac:dd:d3: c3:54:34:56:de:20:4a:cf:8d:b3:72:89:17:45:da:bb:34:1c: 76:3b:c7:47:8e:55:87:fd:8c:76:e7:44:60:a1:96:d5:24:d2: 4c:22:46:f9:bc:69:fe:f6:6d:5a:0e:17:57:db:2a:b2:62:9d: bc:82:d9:c3:3d:f8:07:cb:37:9c:a8:24:75:48:00:1c:61:d6: 91:73:c7:35:ee:df:74:db:fc:c6:bb:cd:e9:a5:7b:44:1e:31: 67:7b:8e:ac:48:1a:53:bd:6c:de:71:8a:39:f8:d9:7d:a3:e8: 3a:96:dd:5d:35:1c:c8:57:a3:2f:d5:ba:2a:48:66:3e:b7:00: 42:10:0f:95:8f:2e:da:93:3d:51:9b:4c:7d:b5:f1:2d:69:f5: c5:19:91:70:15:88:d4:a1:e1:f0:5a:08:c7:c1:c6:2e:35:96: 05:4d:19:4f:cf:67:3d:e6:10:3b:4d:75:25:86:56:c6:a4:78: 64:f1:1f:8f:82:ca:b2:9f:c8:5c:a8:77:f8:81:df:25:cf:ce: 56:a0:97:8f:a6:fb:b9:8a:1b:b0:db:a5:f1:e1:93:9f:7f:44: b8:a6:4b:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnBcPB6a5/RP0nmSCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYyZDJhNTItNWNhNy00YTM2LTg0OWYtYTdkNmI4NzZl Njg3MB4XDTI1MDUwNTE5NTIyNFoXDTI1MDgwMzE5NTIyNFowLzEtMCsGA1UEAxMk NzBkZWM5NGEtYTIwYy00ZTgwLTg1MWMtYTc4NTYxNmU0NDMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmx4HpWzPB49YGu1lCJW4rjv4Fq4MNoq/uzOn 7uUDgwK9UCwqggZou3RNKqs9aE+Jp+wba7k2hdBadHnSLq9UzgGPrDDPYDRvmr1P Q+1/E24FKeNOY9IKgZsmMaFm8o1cVmXY3Z/khRbWOl7/Vww+FjDniIZrRenD2HFJ Qb/lRFazQMLSQ/PKfsL1V0buVrDg/C06LvTSAyGouBNZpHUdyhtNPmoONwLirqzX r5wuFQd2PdlMGwstBWGfGI5sbFRv2Hfu2rNEGyXSC2i5RtD89Bi5pFTD78hoJiO3 09LSXKyNov/ykiXsuK/fXuHx9G1d0j5vsrEoZ99DB9th1T5gYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMGdpvk2hSSgSR9SsncRCSMtwCNAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjJk MmE1Mi01Y2E3LTRhMzYtODQ5Zi1hN2Q2Yjg3NmU2ODcvMTZlNTZmNGQtYWI3MC0z NzY2LTkwN2ItMjI0NDdhMjNlZWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYyZDJhNTItNWNhNy00YTM2LTg0 OWYtYTdkNmI4NzZlNjg3L2RmMmQyYTUyLTVjYTctNGEzNi04NDlmLWE3ZDZiODc2 ZTY4Ny5jcmwwHwYDVR0jBBgwFoAUoN/uDKPKmaIvkq/l9lLB35RGlwkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjJkMmE1Mi01Y2E3LTRhMzYtODQ5Zi1hN2Q2 Yjg3NmU2ODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx3+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/BewXbq0ryNlQMEc2t2pvBjwkScAOcHj/Ww3tjwY45Tqzd08NUNFbe IErPjbNyiRdF2rs0HHY7x0eOVYf9jHbnRGChltUk0kwiRvm8af72bVoOF1fbKrJi nbyC2cM9+AfLN5yoJHVIABxh1pFzxzXu33Tb/Ma7zemle0QeMWd7jqxIGlO9bN5x ijn42X2j6DqW3V01HMhXoy/VuipIZj63AEIQD5WPLtqTPVGbTH218S1p9cUZkXAV iNSh4fBaCMfBxi41lgVNGU/PZz3mEDtNdSWGVsakeGTxH4+CyrKfyFyod/iB3yXP zlagl4+m+7mKG7DbpfHhk59/RLimSyo= -----END CERTIFICATE-----Generated at Wed May 7 11:22:09 2025 by rpki-client