$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50/9f904d6f-04cf-31be-817e-18ee7663b54b.roa File: 9f904d6f-04cf-31be-817e-18ee7663b54b.roa (raw, json) Hash identifier: O3ibnbktZJ2/8pdCsnYfjVjH3OSHhsENzJKurykk5PI= Subject key identifier: C0:D6:F0:C1:65:B5:B8:70:40:54:89:BF:B3:BF:CC:B4:83:83:79:65 Certificate issuer: /CN=e90f54fd-200a-4b2f-914b-2bc8530b5d50 Certificate serial: 010D0C9F43285849BC74AEA331A3405D3FBC90C0 Authority key identifier: 88:6C:52:4A:DC:FA:78:E7:28:41:14:40:67:D4:3D:2D:BB:C7:F5:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50/9f904d6f-04cf-31be-817e-18ee7663b54b.roa Signing time: Sun 04 May 2025 01:00:47 +0000 ROA not before: Sun 04 May 2025 01:00:47 +0000 ROA not after: Sat 02 Aug 2025 01:00:47 +0000 asID: 13552 IP address blocks: 199.202.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50/e90f54fd-200a-4b2f-914b-2bc8530b5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50/e90f54fd-200a-4b2f-914b-2bc8530b5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bc:74:ae:a3:31:a3:40:5d:3f:bc:90:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e90f54fd-200a-4b2f-914b-2bc8530b5d50 Validity Not Before: May 4 01:00:47 2025 GMT Not After : Aug 2 01:00:47 2025 GMT Subject: CN=2a4dea19-7cee-4035-8bb3-057eba06bb91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:7e:12:ba:65:73:69:54:8d:d1:3b:f6:0e:ab: 6c:dc:1e:24:4a:48:27:5b:da:26:6e:f9:6a:45:f1: 03:06:51:26:3d:21:67:d8:86:ff:d5:b1:42:9c:33: b3:ad:7c:6b:c2:13:6b:68:0f:0c:5b:43:c1:da:6b: 33:7a:64:3a:ef:c2:6d:37:ea:25:38:7a:15:91:40: d8:4e:c7:01:73:b3:03:6a:60:87:ba:2d:4b:b2:03: 3c:ad:45:ff:c8:f4:48:c1:6b:5c:ef:5b:b0:a3:8c: 0a:c9:5e:36:9c:11:69:5a:73:30:82:05:3b:e6:fa: b2:04:27:e6:ae:c9:0d:ca:f7:38:d9:b7:07:d5:2c: 4c:87:88:4b:a3:cf:7b:15:d4:24:3d:41:85:f0:a1: 58:5a:93:71:de:8f:62:b3:57:06:ae:a3:51:3b:47: 89:c8:41:1d:5d:7e:e0:56:79:34:99:ad:c5:f4:6c: 01:c7:96:39:5c:76:f4:59:4b:8a:17:e2:6c:b7:33: 8d:0d:37:62:61:c4:96:38:b2:18:a5:76:8a:f0:b1: 4f:43:16:97:ee:e9:eb:11:1e:71:12:aa:b5:68:e0: a9:08:52:da:f5:eb:a8:65:83:09:44:fc:6e:48:17: 9c:85:24:0e:0a:62:66:90:7b:88:78:cc:bf:3b:80: 99:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:D6:F0:C1:65:B5:B8:70:40:54:89:BF:B3:BF:CC:B4:83:83:79:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50/9f904d6f-04cf-31be-817e-18ee7663b54b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50/e90f54fd-200a-4b2f-914b-2bc8530b5d50.crl X509v3 Authority Key Identifier: keyid:88:6C:52:4A:DC:FA:78:E7:28:41:14:40:67:D4:3D:2D:BB:C7:F5:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50.cer sbgp-ipAddrBlock: critical IPv4: 199.202.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:48:ea:be:7f:29:aa:17:4d:46:e0:2c:38:5e:69:7e:b8:26: 05:9e:43:ef:1e:8b:b7:58:7d:61:5a:24:70:32:4b:35:44:d8: 97:d2:3e:47:ea:b4:86:5c:1f:47:83:7e:37:0e:ac:5b:5d:9d: 0a:fc:bd:8a:e6:56:76:24:4b:f5:d3:83:b7:74:b8:c7:1e:b1: 45:80:73:d0:8c:e8:38:e6:86:df:c5:87:69:0f:78:75:9d:6c: c4:6e:3e:af:e3:5f:ad:b2:34:be:07:04:16:c8:17:d9:ea:ff: 6f:be:8e:f1:eb:8a:c6:5e:e3:ef:34:be:29:ff:5d:8b:86:ca: 94:37:e9:1c:44:5a:b7:2b:f8:47:51:27:46:c7:2d:2f:52:bd: 71:99:d0:ea:f9:80:a8:b8:7b:3f:2b:c6:61:68:00:12:5e:e9: 43:d4:fb:23:2f:43:61:60:70:a6:3c:0d:9d:1f:fc:77:b2:de: 73:d1:da:ab:de:a0:e1:33:66:06:4c:4f:d8:c4:56:e2:5d:09: 3c:94:ed:e6:6b:43:95:f5:5f:59:82:ad:0b:c3:a7:9d:24:23: 9f:2c:22:02:c5:76:c8:c1:4f:df:38:1c:37:64:39:15:5c:03: d9:1f:82:4c:e8:be:07:bf:4b:a0:94:4a:55:d8:fe:3a:d6:d2: 86:44:57:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm8dK6jMaNAXT+8kMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTkwZjU0ZmQtMjAwYS00YjJmLTkxNGItMmJjODUzMGI1 ZDUwMB4XDTI1MDUwNDAxMDA0N1oXDTI1MDgwMjAxMDA0N1owLzEtMCsGA1UEAxMk MmE0ZGVhMTktN2NlZS00MDM1LThiYjMtMDU3ZWJhMDZiYjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4H4SumVzaVSN0Tv2Dqts3B4kSkgnW9ombvlq RfEDBlEmPSFn2Ib/1bFCnDOzrXxrwhNraA8MW0PB2mszemQ678JtN+olOHoVkUDY TscBc7MDamCHui1LsgM8rUX/yPRIwWtc71uwo4wKyV42nBFpWnMwggU75vqyBCfm rskNyvc42bcH1SxMh4hLo897FdQkPUGF8KFYWpNx3o9is1cGrqNRO0eJyEEdXX7g Vnk0ma3F9GwBx5Y5XHb0WUuKF+JstzONDTdiYcSWOLIYpXaK8LFPQxaX7unrER5x Eqq1aOCpCFLa9euoZYMJRPxuSBechSQOCmJmkHuIeMy/O4CZ0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMDW8MFltbhwQFSJv7O/zLSDg3llMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lOTBm NTRmZC0yMDBhLTRiMmYtOTE0Yi0yYmM4NTMwYjVkNTAvOWY5MDRkNmYtMDRjZi0z MWJlLTgxN2UtMThlZTc2NjNiNTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTkwZjU0ZmQtMjAwYS00YjJmLTkx NGItMmJjODUzMGI1ZDUwL2U5MGY1NGZkLTIwMGEtNGIyZi05MTRiLTJiYzg1MzBi NWQ1MC5jcmwwHwYDVR0jBBgwFoAUiGxSStz6eOcoQRRAZ9Q9LbvH9VYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lOTBmNTRmZC0yMDBhLTRiMmYtOTE0Yi0yYmM4 NTMwYjVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx8poMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5I6r5/KaoXTUbgLDheaX64JgWeQ+8ei7dYfWFaJHAySzVE2JfSPkfq tIZcH0eDfjcOrFtdnQr8vYrmVnYkS/XTg7d0uMcesUWAc9CM6Djmht/Fh2kPeHWd bMRuPq/jX62yNL4HBBbIF9nq/2++jvHrisZe4+80vin/XYuGypQ36RxEWrcr+EdR J0bHLS9SvXGZ0Or5gKi4ez8rxmFoABJe6UPU+yMvQ2FgcKY8DZ0f/Hey3nPR2qve oOEzZgZMT9jEVuJdCTyU7eZrQ5X1X1mCrQvDp50kI58sIgLFdsjBT984HDdkORVc A9kfgkzovge/S6CUSlXY/jrW0oZEV0o= -----END CERTIFICATE-----Generated at Fri May 9 22:03:04 2025 by rpki-client