$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/d6893d2e-6e41-31db-8c6d-27ca6fc5bd27.roa File: d6893d2e-6e41-31db-8c6d-27ca6fc5bd27.roa (raw, json) Hash identifier: Fb1EelvvawihdCpBUQJkpZyrG0ku2jgi6jAthD9jL6U= Subject key identifier: FC:C7:CF:7E:9E:E1:A0:25:E0:15:E8:78:B4:4B:8A:AD:A7:96:59:1C Certificate issuer: /CN=a2ca3b16-f470-4287-8db9-b28e0667efdb Certificate serial: 010D0C9F432858494B64151799D7050AE0F41940 Authority key identifier: 4A:DD:6A:82:2A:1B:35:7E:F1:5B:84:25:E5:84:55:50:F9:42:68:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/d6893d2e-6e41-31db-8c6d-27ca6fc5bd27.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 43685 IP address blocks: 199.91.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/a2ca3b16-f470-4287-8db9-b28e0667efdb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/a2ca3b16-f470-4287-8db9-b28e0667efdb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:15:17:99:d7:05:0a:e0:f4:19:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2ca3b16-f470-4287-8db9-b28e0667efdb Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=39469400-fdfb-4be3-8ec6-16616ccec509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8b:52:0c:9e:e5:06:6a:1d:d4:02:40:0e:aa: 9b:b9:38:99:bd:1c:3b:70:75:ac:23:af:49:33:1f: d6:ec:56:fe:99:47:b1:b1:6e:98:04:38:72:21:7e: 9a:90:4a:ca:3c:bb:49:9d:01:30:22:68:16:ab:e5: 14:bd:2f:f5:06:9a:d4:b5:4d:54:5b:55:01:e3:65: a2:ac:7d:a0:6a:f7:ff:24:55:fd:2b:af:3a:0d:f4: 62:a2:c3:26:50:9d:13:96:7c:a9:9d:0d:ce:8a:61: d3:f6:66:db:3b:a6:7c:ab:84:5c:80:a2:27:1e:04: 39:78:32:de:64:ac:9c:16:88:9b:97:41:e6:cd:7e: 96:b3:73:bb:a5:80:c7:7f:32:cf:c1:3b:12:e5:88: 48:29:eb:f6:a8:e9:87:16:3c:50:6f:1a:59:7d:d1: 8f:5d:c0:da:e3:dd:70:0e:46:ad:f7:b2:28:b6:64: 2f:4c:17:46:25:f6:5b:55:05:00:c6:35:3c:51:14: 81:64:2c:b4:d0:83:49:e1:2b:fd:22:1c:66:88:c3: 2e:9d:ab:2f:22:ab:ac:72:33:42:20:2a:29:13:a0: e5:e2:a8:d0:e3:c7:de:35:e6:2c:94:41:fe:a7:ce: 76:1b:75:07:8f:c8:91:99:68:81:f1:7d:2d:dd:63: 75:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:C7:CF:7E:9E:E1:A0:25:E0:15:E8:78:B4:4B:8A:AD:A7:96:59:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/d6893d2e-6e41-31db-8c6d-27ca6fc5bd27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/a2ca3b16-f470-4287-8db9-b28e0667efdb.crl X509v3 Authority Key Identifier: keyid:4A:DD:6A:82:2A:1B:35:7E:F1:5B:84:25:E5:84:55:50:F9:42:68:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb.cer sbgp-ipAddrBlock: critical IPv4: 199.91.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:29:6e:d1:db:10:40:b8:a8:91:8e:19:55:b5:36:76:ab:7c: f1:0e:18:d1:ad:66:66:b5:fe:18:b1:9d:16:cc:2e:5b:d1:32: 44:b1:49:9e:8f:00:11:22:e0:6c:77:1b:9a:cb:18:70:92:22: 5b:ec:35:b9:ec:29:2f:aa:f5:f6:43:4d:97:d0:ae:47:b1:4d: 11:e1:f6:09:5b:66:a4:b2:8d:d4:43:56:74:82:79:9e:fa:af: 03:39:22:85:e1:6f:b1:1f:60:c0:35:01:2d:b9:de:ff:af:4c: dc:7e:d0:5e:94:09:1e:83:a7:e9:03:ad:5c:00:d7:ae:8e:2e: 08:7d:98:03:3f:15:cc:65:85:45:7f:15:de:b6:e1:5d:a8:99: 04:ad:79:29:0a:67:bb:29:f4:33:86:3a:75:40:3b:14:86:de: 3d:7a:e1:5a:6c:5a:d3:c0:c9:37:fa:d0:f7:8c:c3:1b:f8:eb: 56:ea:30:29:33:05:96:6d:c7:9d:f0:f2:5c:d0:11:92:67:5a: c6:a6:fa:6e:a8:b4:11:0e:6a:6b:a7:2c:f7:d8:2d:cc:ba:d1: 00:e0:c9:ee:5b:f3:76:a8:b0:6e:5c:b3:7c:8c:ed:5a:34:9c: a0:46:4f:ab:14:a2:34:69:8f:a9:1e:9c:35:aa:b1:1a:68:d4: e3:a8:a7:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZBUXmdcFCuD0GUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTJjYTNiMTYtZjQ3MC00Mjg3LThkYjktYjI4ZTA2Njdl ZmRiMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk Mzk0Njk0MDAtZmRmYi00YmUzLThlYzYtMTY2MTZjY2VjNTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlotSDJ7lBmod1AJADqqbuTiZvRw7cHWsI69J Mx/W7Fb+mUexsW6YBDhyIX6akErKPLtJnQEwImgWq+UUvS/1BprUtU1UW1UB42Wi rH2gavf/JFX9K686DfRiosMmUJ0TlnypnQ3OimHT9mbbO6Z8q4RcgKInHgQ5eDLe ZKycFoibl0HmzX6Ws3O7pYDHfzLPwTsS5YhIKev2qOmHFjxQbxpZfdGPXcDa491w Dkat97IotmQvTBdGJfZbVQUAxjU8URSBZCy00INJ4Sv9IhxmiMMunasvIquscjNC ICopE6Dl4qjQ48feNeYslEH+p852G3UHj8iRmWiB8X0t3WN1kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPzHz36e4aAl4BXoeLRLiq2nllkcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMmNh M2IxNi1mNDcwLTQyODctOGRiOS1iMjhlMDY2N2VmZGIvZDY4OTNkMmUtNmU0MS0z MWRiLThjNmQtMjdjYTZmYzViZDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTJjYTNiMTYtZjQ3MC00Mjg3LThk YjktYjI4ZTA2NjdlZmRiL2EyY2EzYjE2LWY0NzAtNDI4Ny04ZGI5LWIyOGUwNjY3 ZWZkYi5jcmwwHwYDVR0jBBgwFoAUSt1qgiobNX7xW4Ql5YRVUPlCaK0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hMmNhM2IxNi1mNDcwLTQyODctOGRiOS1iMjhl MDY2N2VmZGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx1toMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMpbtHbEEC4qJGOGVW1NnarfPEOGNGtZma1/hixnRbMLlvRMkSxSZ6P ABEi4Gx3G5rLGHCSIlvsNbnsKS+q9fZDTZfQrkexTRHh9glbZqSyjdRDVnSCeZ76 rwM5IoXhb7EfYMA1AS253v+vTNx+0F6UCR6Dp+kDrVwA166OLgh9mAM/FcxlhUV/ Fd624V2omQSteSkKZ7sp9DOGOnVAOxSG3j164VpsWtPAyTf60PeMwxv461bqMCkz BZZtx53w8lzQEZJnWsam+m6otBEOamunLPfYLcy60QDgye5b83aosG5cs3yM7Vo0 nKBGT6sUojRpj6kenDWqsRpo1OOop2c= -----END CERTIFICATE-----Generated at Sat May 10 20:01:59 2025 by rpki-client