$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6c6ca1ee-9ad0-47ce-9caf-4f9731ffc86f/510d2d2b-32eb-3acc-aa4d-fb7e602f1cd7.roa File: 510d2d2b-32eb-3acc-aa4d-fb7e602f1cd7.roa (raw, json) Hash identifier: xxZRa0QYuLIjbTt513nqA6rG3SqeAzzrNfLiTjMWH/c= Subject key identifier: 62:37:62:69:36:A2:D9:EB:1D:9F:2A:DC:8A:75:30:14:BE:CA:88:F0 Certificate issuer: /CN=6c6ca1ee-9ad0-47ce-9caf-4f9731ffc86f Certificate serial: 010D0C9F432858499D41C3D8F4B1FCA37B141A80 Authority key identifier: DA:9F:76:A1:41:47:B4:8E:C4:DF:AD:A4:EB:0C:4C:EF:7B:D4:F7:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6c6ca1ee-9ad0-47ce-9caf-4f9731ffc86f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6c6ca1ee-9ad0-47ce-9caf-4f9731ffc86f/510d2d2b-32eb-3acc-aa4d-fb7e602f1cd7.roa Signing time: Tue 22 Apr 2025 20:48:15 +0000 ROA not before: Tue 22 Apr 2025 20:48:15 +0000 ROA not after: Mon 21 Jul 2025 20:48:15 +0000 asID: 27292 IP address blocks: 199.47.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6c6ca1ee-9ad0-47ce-9caf-4f9731ffc86f/6c6ca1ee-9ad0-47ce-9caf-4f9731ffc86f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6c6ca1ee-9ad0-47ce-9caf-4f9731ffc86f/6c6ca1ee-9ad0-47ce-9caf-4f9731ffc86f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6c6ca1ee-9ad0-47ce-9caf-4f9731ffc86f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:41:c3:d8:f4:b1:fc:a3:7b:14:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c6ca1ee-9ad0-47ce-9caf-4f9731ffc86f Validity Not Before: Apr 22 20:48:15 2025 GMT Not After : Jul 21 20:48:15 2025 GMT Subject: CN=5760ef61-a1b2-4748-b776-79652cd41756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a5:1f:9b:5a:46:ad:75:04:fe:0a:88:99:37: f8:42:22:e6:7e:58:1d:05:91:89:e5:b0:b2:50:34: b3:8e:75:10:97:4c:b9:b1:f9:36:b5:a1:e3:94:95: 88:8c:56:76:4d:9e:69:d2:8e:8e:31:1d:6d:fb:bd: 40:87:9d:f7:ee:63:c0:8c:bb:68:c8:c3:0b:f7:52: b6:aa:0c:b4:31:c3:20:22:5a:58:4f:92:96:fe:b1: 51:37:4c:6d:68:70:70:93:18:f1:af:92:5a:c6:35: 58:60:d0:81:7d:84:31:88:bd:93:2c:2b:e6:ca:3d: eb:39:0c:6c:b2:4a:f5:a6:c5:61:45:43:82:a8:68: 51:88:6f:63:f7:46:66:c4:0f:8b:b8:9c:c8:67:59: f7:f5:cd:f1:d9:24:54:35:0b:82:33:a8:aa:aa:4f: b2:c3:c8:f9:52:59:b2:0a:fa:60:5a:d9:b7:61:f3: cc:e2:36:84:8d:1c:93:92:89:4a:1a:f7:83:39:55: 56:3c:b5:f3:d2:dd:dc:8a:b5:a9:3f:e1:f6:3d:ed: b7:bc:ff:26:31:04:d1:b3:6e:b6:c3:b4:f0:93:f0: b3:c2:f6:0c:c7:af:4a:0a:b1:bf:5a:cf:f8:85:40: 04:30:21:f0:8a:2a:7b:8e:43:b7:db:b7:58:13:d4: 02:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:37:62:69:36:A2:D9:EB:1D:9F:2A:DC:8A:75:30:14:BE:CA:88:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6c6ca1ee-9ad0-47ce-9caf-4f9731ffc86f/510d2d2b-32eb-3acc-aa4d-fb7e602f1cd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6c6ca1ee-9ad0-47ce-9caf-4f9731ffc86f/6c6ca1ee-9ad0-47ce-9caf-4f9731ffc86f.crl X509v3 Authority Key Identifier: keyid:DA:9F:76:A1:41:47:B4:8E:C4:DF:AD:A4:EB:0C:4C:EF:7B:D4:F7:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6c6ca1ee-9ad0-47ce-9caf-4f9731ffc86f.cer sbgp-ipAddrBlock: critical IPv4: 199.47.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:47:25:1e:95:a7:26:0e:11:11:5a:08:f4:48:46:53:b0:c6: dd:f0:bd:cf:a1:a7:5a:33:7c:f8:6c:be:b5:d2:e3:27:4c:fb: e3:72:59:72:4b:66:91:76:01:9c:7e:0c:32:99:1f:da:45:df: cb:41:b5:ba:d3:81:db:0d:92:6c:6b:fd:46:80:f9:3d:61:40: d9:d2:ef:cb:b5:2a:40:ab:01:93:c9:41:04:2f:45:e0:26:24: e9:78:dc:b7:78:32:d1:d9:43:f0:04:64:78:f4:a0:0b:5f:eb: 7d:69:c9:89:3b:21:ae:e9:e6:d0:eb:ef:e8:63:bb:32:c8:fc: 41:15:c2:d2:b0:53:df:bc:4a:88:e2:40:9c:79:09:55:94:f8: 35:8b:41:95:77:8e:54:77:3b:91:ea:32:f4:a7:b4:c1:c2:66: 9a:88:5f:45:01:6b:2d:d2:5a:cf:02:e6:b1:f9:88:17:4b:e8: 0b:a5:4e:d0:78:01:f6:ac:4e:9b:e5:93:a8:ad:e3:69:82:05: af:c1:0e:1e:f6:46:ae:ea:2c:b3:8e:7b:40:54:54:66:76:8a: e2:97:b7:bf:a7:a8:d1:89:39:48:f7:91:37:8a:34:08:52:77: e0:fb:e8:7f:95:4a:93:46:cf:ac:98:1a:ef:f5:2d:2a:43:72: 1a:6e:21:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdQcPY9LH8o3sUGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmM2Y2ExZWUtOWFkMC00N2NlLTljYWYtNGY5NzMxZmZj ODZmMB4XDTI1MDQyMjIwNDgxNVoXDTI1MDcyMTIwNDgxNVowLzEtMCsGA1UEAxMk NTc2MGVmNjEtYTFiMi00NzQ4LWI3NzYtNzk2NTJjZDQxNzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6Ufm1pGrXUE/gqImTf4QiLmflgdBZGJ5bCy UDSzjnUQl0y5sfk2taHjlJWIjFZ2TZ5p0o6OMR1t+71Ah5337mPAjLtoyMML91K2 qgy0McMgIlpYT5KW/rFRN0xtaHBwkxjxr5JaxjVYYNCBfYQxiL2TLCvmyj3rOQxs skr1psVhRUOCqGhRiG9j90ZmxA+LuJzIZ1n39c3x2SRUNQuCM6iqqk+yw8j5Ulmy CvpgWtm3YfPM4jaEjRyTkolKGveDOVVWPLXz0t3cirWpP+H2Pe23vP8mMQTRs262 w7Twk/CzwvYMx69KCrG/Ws/4hUAEMCHwiip7jkO327dYE9QCPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGI3Ymk2otnrHZ8q3Ip1MBS+yojwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82YzZj YTFlZS05YWQwLTQ3Y2UtOWNhZi00Zjk3MzFmZmM4NmYvNTEwZDJkMmItMzJlYi0z YWNjLWFhNGQtZmI3ZTYwMmYxY2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNmM2Y2ExZWUtOWFkMC00N2NlLTlj YWYtNGY5NzMxZmZjODZmLzZjNmNhMWVlLTlhZDAtNDdjZS05Y2FmLTRmOTczMWZm Yzg2Zi5jcmwwHwYDVR0jBBgwFoAU2p92oUFHtI7E362k6wxM73vU9wUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy82YzZjYTFlZS05YWQwLTQ3Y2UtOWNhZi00Zjk3 MzFmZmM4NmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxy/3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9HJR6VpyYOERFaCPRIRlOwxt3wvc+hp1ozfPhsvrXS4ydM++NyWXJL ZpF2AZx+DDKZH9pF38tBtbrTgdsNkmxr/UaA+T1hQNnS78u1KkCrAZPJQQQvReAm JOl43Ld4MtHZQ/AEZHj0oAtf631pyYk7Ia7p5tDr7+hjuzLI/EEVwtKwU9+8Soji QJx5CVWU+DWLQZV3jlR3O5HqMvSntMHCZpqIX0UBay3SWs8C5rH5iBdL6AulTtB4 AfasTpvlk6it42mCBa/BDh72Rq7qLLOOe0BUVGZ2iuKXt7+nqNGJOUj3kTeKNAhS d+D76H+VSpNGz6yYGu/1LSpDchpuIXE= -----END CERTIFICATE-----Generated at Mon May 12 04:24:47 2025 by rpki-client