$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/3f9ad2a5-8547-3650-a790-25df90ed3852.roa File: 3f9ad2a5-8547-3650-a790-25df90ed3852.roa (raw, json) Hash identifier: uZW3vlAAhrZn7qsRMigIpAzlLsoJroXO6u0TYLL5SWM= Subject key identifier: A0:0A:52:FB:7F:BF:C5:D2:00:CA:FA:1D:EA:33:F5:08:39:85:8B:C5 Certificate issuer: /CN=8d34ec60-03b0-4663-8748-fab291e36393 Certificate serial: 010D0C9F43285849BC74AA2FB5BE3170911D2A80 Authority key identifier: 3C:E1:AD:C4:6C:FF:FF:61:D2:6D:75:13:59:A5:F2:0A:4D:07:85:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/3f9ad2a5-8547-3650-a790-25df90ed3852.roa Signing time: Sun 04 May 2025 01:00:47 +0000 ROA not before: Sun 04 May 2025 01:00:47 +0000 ROA not after: Sat 02 Aug 2025 01:00:47 +0000 asID: 395807 IP address blocks: 199.60.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bc:74:aa:2f:b5:be:31:70:91:1d:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d34ec60-03b0-4663-8748-fab291e36393 Validity Not Before: May 4 01:00:47 2025 GMT Not After : Aug 2 01:00:47 2025 GMT Subject: CN=9a357bb8-4ede-42cc-a84c-ad698f4ad4ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ab:98:eb:d7:36:14:a1:53:c9:56:f2:d3:aa: 9a:cd:ca:96:1b:e4:d9:89:17:62:31:0e:e3:84:1c: b2:6d:4c:80:32:39:66:99:b9:66:13:7c:6f:5a:78: 25:2a:95:96:37:de:4a:5c:d9:89:c9:df:39:65:10: 0d:a7:59:1c:9d:6c:6f:72:8d:d7:1b:4c:31:03:a6: 28:35:63:a2:9b:f9:d7:1f:80:80:6f:95:1a:aa:70: 00:b5:22:7a:6a:63:99:23:83:ca:84:b7:3e:2e:d9: a3:71:0e:bb:74:45:ba:ee:3f:4f:08:e0:a7:14:f6: e2:b3:f9:eb:9f:e6:63:d0:79:25:69:af:fa:08:be: d0:b7:41:10:39:c0:c4:de:c2:2f:e4:5e:cd:2c:c8: a5:9e:58:8c:c7:8c:53:2a:42:ee:90:e6:4f:9b:df: 56:c1:66:22:9d:2f:f2:b6:c6:e2:c8:23:3f:0c:1f: 7d:5d:68:ac:7e:fc:0e:df:01:99:1b:a3:18:4a:83: 9f:09:05:2d:cb:0e:91:e5:eb:7e:9a:99:ad:2e:09: 33:bc:b9:ef:66:ca:4a:92:af:22:21:13:ad:ea:03: 96:96:49:34:1b:ad:c2:53:86:13:7b:ed:6d:f2:30: 08:b7:df:91:87:a4:8f:8d:04:f0:ed:77:d3:ce:53: 45:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:0A:52:FB:7F:BF:C5:D2:00:CA:FA:1D:EA:33:F5:08:39:85:8B:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/3f9ad2a5-8547-3650-a790-25df90ed3852.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.crl X509v3 Authority Key Identifier: keyid:3C:E1:AD:C4:6C:FF:FF:61:D2:6D:75:13:59:A5:F2:0A:4D:07:85:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer sbgp-ipAddrBlock: critical IPv4: 199.60.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:08:07:c2:ae:c9:86:e2:86:ba:5b:fc:d6:c2:80:8d:de:4c: 5e:5a:fa:31:78:23:b1:ce:d3:5b:71:0a:a3:df:fe:6f:65:3e: e5:aa:a9:3d:6f:60:af:ea:dc:8c:06:e3:61:23:ef:34:7b:50: e8:5c:78:67:b8:77:ca:0a:89:20:0e:c0:0c:4d:35:fc:b7:33: 7d:d6:61:09:d2:8b:b5:45:7a:83:5b:c9:b4:70:5b:3e:2c:d5: 09:54:64:20:8b:cc:8f:e7:08:b5:db:bc:5c:67:dd:f9:1c:09: ee:2c:cb:bc:b3:f8:6e:fb:10:d0:cd:4a:42:95:9e:f1:59:59: aa:27:df:76:3c:c1:a3:3e:29:8c:0c:85:e2:c3:cd:95:4e:27: 5e:8a:44:9a:80:88:ff:0f:ee:2b:2a:b6:89:63:4d:b6:63:dc: df:98:99:47:9e:77:ed:be:e0:ba:5c:6f:bd:17:dd:ef:b5:1f: 45:02:4c:15:bf:e1:b2:07:19:9b:3e:04:ee:0d:1c:89:1a:e3: 74:a5:8d:0e:b4:3a:d5:cf:d9:4d:9e:27:50:86:c6:43:aa:02: 6c:1f:22:cd:be:34:97:98:a5:05:dd:f5:82:83:20:36:51:91: c4:1e:9c:ce:2f:d7:4f:06:05:48:7e:04:2d:6a:b3:27:8c:d4: 04:17:a8:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm8dKovtb4xcJEdKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQzNGVjNjAtMDNiMC00NjYzLTg3NDgtZmFiMjkxZTM2 MzkzMB4XDTI1MDUwNDAxMDA0N1oXDTI1MDgwMjAxMDA0N1owLzEtMCsGA1UEAxMk OWEzNTdiYjgtNGVkZS00MmNjLWE4NGMtYWQ2OThmNGFkNGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApquY69c2FKFTyVby06qazcqWG+TZiRdiMQ7j hByybUyAMjlmmblmE3xvWnglKpWWN95KXNmJyd85ZRANp1kcnWxvco3XG0wxA6Yo NWOim/nXH4CAb5UaqnAAtSJ6amOZI4PKhLc+LtmjcQ67dEW67j9PCOCnFPbis/nr n+Zj0Hklaa/6CL7Qt0EQOcDE3sIv5F7NLMilnliMx4xTKkLukOZPm99WwWYinS/y tsbiyCM/DB99XWisfvwO3wGZG6MYSoOfCQUtyw6R5et+mpmtLgkzvLnvZspKkq8i IROt6gOWlkk0G63CU4YTe+1t8jAIt9+Rh6SPjQTw7XfTzlNFswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKAKUvt/v8XSAMr6Heoz9Qg5hYvFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDM0 ZWM2MC0wM2IwLTQ2NjMtODc0OC1mYWIyOTFlMzYzOTMvM2Y5YWQyYTUtODU0Ny0z NjUwLWE3OTAtMjVkZjkwZWQzODUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGQzNGVjNjAtMDNiMC00NjYzLTg3 NDgtZmFiMjkxZTM2MzkzLzhkMzRlYzYwLTAzYjAtNDY2My04NzQ4LWZhYjI5MWUz NjM5My5jcmwwHwYDVR0jBBgwFoAUPOGtxGz//2HSbXUTWaXyCk0Hhd0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDM0ZWM2MC0wM2IwLTQ2NjMtODc0OC1mYWIy OTFlMzYzOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxzyQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcIB8KuyYbihrpb/NbCgI3eTF5a+jF4I7HO01txCqPf/m9lPuWqqT1v YK/q3IwG42Ej7zR7UOhceGe4d8oKiSAOwAxNNfy3M33WYQnSi7VFeoNbybRwWz4s 1QlUZCCLzI/nCLXbvFxn3fkcCe4sy7yz+G77ENDNSkKVnvFZWaon33Y8waM+KYwM heLDzZVOJ16KRJqAiP8P7isqtoljTbZj3N+YmUeed+2+4Lpcb70X3e+1H0UCTBW/ 4bIHGZs+BO4NHIka43SljQ60OtXP2U2eJ1CGxkOqAmwfIs2+NJeYpQXd9YKDIDZR kcQenM4v108GBUh+BC1qsyeM1AQXqDI= -----END CERTIFICATE-----Generated at Tue May 13 17:47:28 2025 by rpki-client