$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/6adfbf1b-339a-377d-8dda-1c0fcc4304e3.roa File: 6adfbf1b-339a-377d-8dda-1c0fcc4304e3.roa (raw, json) Hash identifier: rpSNTw637cYoRVGE6re2LAhoUkvoacTG2p3CP3uvkWs= Subject key identifier: 11:20:FE:74:CF:2D:DF:DC:11:9C:C9:E5:A1:80:92:7C:5D:3E:DB:20 Certificate issuer: /CN=8d34ec60-03b0-4663-8748-fab291e36393 Certificate serial: 010D0C9F43285849BC74AA63C4B1CB87F9569C80 Authority key identifier: 3C:E1:AD:C4:6C:FF:FF:61:D2:6D:75:13:59:A5:F2:0A:4D:07:85:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/6adfbf1b-339a-377d-8dda-1c0fcc4304e3.roa Signing time: Sun 04 May 2025 01:00:47 +0000 ROA not before: Sun 04 May 2025 01:00:47 +0000 ROA not after: Sat 02 Aug 2025 01:00:47 +0000 asID: 395807 IP address blocks: 199.60.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bc:74:aa:63:c4:b1:cb:87:f9:56:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d34ec60-03b0-4663-8748-fab291e36393 Validity Not Before: May 4 01:00:47 2025 GMT Not After : Aug 2 01:00:47 2025 GMT Subject: CN=b292f213-9659-4e9a-a54d-f0f138afb55e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d0:76:68:d5:49:cf:fc:4c:e5:3e:31:f0:74: d3:77:f5:ca:95:7f:f5:33:82:1a:29:2e:29:fb:48: 85:f2:5d:09:34:63:cf:07:6f:69:88:2a:bb:7a:68: e8:9a:02:79:fe:66:32:d4:52:03:04:75:71:c7:f2: a6:51:fe:a2:a4:f9:eb:62:f4:db:cd:50:54:d0:fb: f1:80:1f:a8:52:66:1d:d3:3b:73:0c:cb:4e:52:35: ce:3e:1e:d5:79:1e:ae:2e:ee:8b:83:6b:47:7c:06: 85:92:f9:3d:a9:f2:de:8c:5d:65:0c:7c:c9:66:22: b4:50:cd:4d:0d:c1:c8:aa:f3:70:73:5f:13:0a:7c: 88:23:34:b2:52:8f:8a:9f:cf:65:81:7e:f0:93:d0: 5b:f7:ce:7b:6b:8b:ad:df:f0:2f:1f:af:b9:7b:78: 2f:2c:09:52:93:f6:a3:75:89:1b:fe:c4:97:d9:1c: fb:34:3e:e9:58:43:38:25:32:28:66:99:93:de:20: 27:00:6c:5b:fe:14:d7:3e:2a:7b:bb:6a:61:73:1d: 7f:fa:89:5e:3d:23:71:cb:3e:52:06:fe:83:6e:92: c8:57:12:57:e4:c8:2e:31:e8:8e:1d:1b:c0:c0:d2: c7:34:cb:37:52:aa:4f:57:f3:0c:f6:56:94:6f:6c: d8:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:20:FE:74:CF:2D:DF:DC:11:9C:C9:E5:A1:80:92:7C:5D:3E:DB:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/6adfbf1b-339a-377d-8dda-1c0fcc4304e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.crl X509v3 Authority Key Identifier: keyid:3C:E1:AD:C4:6C:FF:FF:61:D2:6D:75:13:59:A5:F2:0A:4D:07:85:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer sbgp-ipAddrBlock: critical IPv4: 199.60.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:c9:67:d5:db:b1:84:9e:45:82:e3:83:ad:dd:5f:d6:e8:2f: b5:01:32:f1:26:ed:b4:c4:92:ca:a2:bb:4f:c4:77:8c:8c:b4: 50:06:06:8b:1a:89:0a:6d:1f:c6:15:65:b0:7b:5d:3c:b6:3e: 9f:11:ba:34:37:31:09:08:f7:9b:83:dd:e4:01:5b:64:6b:c9: dc:c5:dd:0e:81:b8:68:96:da:a4:5b:0d:b2:c1:dd:9b:07:be: cf:08:4f:27:d6:75:2f:77:e9:da:54:65:e9:1c:d2:c2:16:37: 50:00:f4:e3:81:81:1d:45:b5:6c:50:92:8e:d9:01:4f:d0:d0: 44:a4:af:e2:f6:a6:50:ef:22:17:4f:68:8d:e2:a5:d6:58:12: 93:b7:af:3f:63:50:09:07:19:74:1b:4c:1e:55:94:b1:bf:6d: 48:76:e9:cd:e3:4a:c5:09:d6:d1:44:26:6f:d7:59:b1:18:c6: 19:86:60:08:4f:7f:1d:e1:58:4a:30:bc:a3:c6:9e:60:b5:af: ac:55:27:a9:0e:84:4e:f3:55:c0:2e:9d:49:98:a4:7f:7c:33: 19:33:6d:73:b7:fc:1a:06:6a:f0:28:8c:4f:4e:35:24:cd:ea: de:27:5d:84:a8:df:84:97:26:ec:eb:b3:6d:18:4f:af:36:a2: 12:5b:ae:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm8dKpjxLHLh/lWnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQzNGVjNjAtMDNiMC00NjYzLTg3NDgtZmFiMjkxZTM2 MzkzMB4XDTI1MDUwNDAxMDA0N1oXDTI1MDgwMjAxMDA0N1owLzEtMCsGA1UEAxMk YjI5MmYyMTMtOTY1OS00ZTlhLWE1NGQtZjBmMTM4YWZiNTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNB2aNVJz/xM5T4x8HTTd/XKlX/1M4IaKS4p +0iF8l0JNGPPB29piCq7emjomgJ5/mYy1FIDBHVxx/KmUf6ipPnrYvTbzVBU0Pvx gB+oUmYd0ztzDMtOUjXOPh7VeR6uLu6Lg2tHfAaFkvk9qfLejF1lDHzJZiK0UM1N DcHIqvNwc18TCnyIIzSyUo+Kn89lgX7wk9Bb9857a4ut3/AvH6+5e3gvLAlSk/aj dYkb/sSX2Rz7ND7pWEM4JTIoZpmT3iAnAGxb/hTXPip7u2phcx1/+olePSNxyz5S Bv6DbpLIVxJX5MguMeiOHRvAwNLHNMs3UqpPV/MM9laUb2zY9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBEg/nTPLd/cEZzJ5aGAknxdPtsgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDM0 ZWM2MC0wM2IwLTQ2NjMtODc0OC1mYWIyOTFlMzYzOTMvNmFkZmJmMWItMzM5YS0z NzdkLThkZGEtMWMwZmNjNDMwNGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGQzNGVjNjAtMDNiMC00NjYzLTg3 NDgtZmFiMjkxZTM2MzkzLzhkMzRlYzYwLTAzYjAtNDY2My04NzQ4LWZhYjI5MWUz NjM5My5jcmwwHwYDVR0jBBgwFoAUPOGtxGz//2HSbXUTWaXyCk0Hhd0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDM0ZWM2MC0wM2IwLTQ2NjMtODc0OC1mYWIy OTFlMzYzOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzyTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7JZ9XbsYSeRYLjg63dX9boL7UBMvEm7bTEksqiu0/Ed4yMtFAGBosa iQptH8YVZbB7XTy2Pp8RujQ3MQkI95uD3eQBW2RrydzF3Q6BuGiW2qRbDbLB3ZsH vs8ITyfWdS936dpUZekc0sIWN1AA9OOBgR1FtWxQko7ZAU/Q0ESkr+L2plDvIhdP aI3ipdZYEpO3rz9jUAkHGXQbTB5VlLG/bUh26c3jSsUJ1tFEJm/XWbEYxhmGYAhP fx3hWEowvKPGnmC1r6xVJ6kOhE7zVcAunUmYpH98MxkzbXO3/BoGavAojE9ONSTN 6t4nXYSo34SXJuzrs20YT682ohJbrlw= -----END CERTIFICATE-----Generated at Tue May 13 13:34:53 2025 by rpki-client