$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/d76cf084-a2b1-3413-8b31-b784dc8faa6f.roa File: d76cf084-a2b1-3413-8b31-b784dc8faa6f.roa (raw, json) Hash identifier: H7VS1uJfY6Evjc0qef0F8ijBr657WC+EpFyqu/6iVbU= Subject key identifier: D7:34:C4:88:F6:A7:91:F9:BE:B9:6E:60:54:D6:B0:AB:13:9F:FD:00 Certificate issuer: /CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Certificate serial: 010D0C9F43285849C20A2471065843A6EF5C0A40 Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/d76cf084-a2b1-3413-8b31-b784dc8faa6f.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 46687 IP address blocks: 199.122.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:24:71:06:58:43:a6:ef:5c:0a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=32f63d40-eb4f-4a40-8556-1883e75a10e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:84:be:6a:a8:78:0b:68:f2:dc:90:6f:f3:fe: c7:1a:f6:2d:e1:c7:66:fe:31:07:f7:e8:0d:dd:06: c4:83:fe:a1:62:2d:71:dc:f1:fd:8e:87:b6:4f:d3: 28:33:10:42:d4:e4:bc:06:f9:7d:a6:c3:21:1d:2f: 0c:e0:76:aa:b0:37:38:9d:ea:46:b3:ee:77:96:87: 2c:d8:89:cb:ea:88:69:55:1d:d5:7d:aa:64:8b:93: a7:1b:58:77:be:2e:4a:10:c7:e3:be:0a:15:e2:bb: dd:cf:38:eb:d9:b4:59:24:d9:f8:68:30:75:24:94: 7e:46:3a:7c:2f:62:20:cd:af:1f:f8:88:da:c7:34: 63:27:31:f0:80:f9:9c:57:9d:88:73:f4:f8:db:89: 56:d7:3d:5f:5f:d7:4e:09:a7:11:7b:a4:6a:f2:6b: 3e:4b:8a:7a:66:46:70:d4:e3:94:1f:98:5c:ef:e1: 05:b3:a0:8e:bc:ff:3a:15:af:3a:8e:a5:62:13:cf: 4d:32:bf:bf:01:f5:9c:f9:41:93:ae:19:69:99:77: 0c:94:47:53:9b:32:9a:39:31:c0:48:e9:85:93:69: 04:37:db:af:e1:48:38:b4:11:13:d4:9e:c6:04:c8: 5a:d1:1c:09:e2:b0:ed:29:75:16:74:a6:30:03:99: 2e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:34:C4:88:F6:A7:91:F9:BE:B9:6E:60:54:D6:B0:AB:13:9F:FD:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/d76cf084-a2b1-3413-8b31-b784dc8faa6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl X509v3 Authority Key Identifier: keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer sbgp-ipAddrBlock: critical IPv4: 199.122.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:37:19:54:b4:2f:4d:a4:48:60:d9:ad:12:0b:2e:df:50:a5: 84:ea:68:c8:ca:91:2e:93:2c:b4:81:1e:16:0e:fe:4d:45:59: 29:92:f8:34:5e:33:e3:d6:d5:68:0b:e6:f5:7f:ef:31:26:27: cb:f8:06:d8:96:54:d4:e0:5f:df:96:7e:b9:b5:4d:bd:ca:41: 71:e5:dc:55:a6:44:b7:20:e2:9e:fe:c9:e9:a4:f5:d2:41:93: e0:4a:5a:50:27:b1:85:15:13:8a:59:09:18:dd:84:ac:01:6e: 93:a9:fb:d8:ac:02:a5:01:9c:04:04:a2:59:e7:1a:c3:08:a1: 13:86:ef:b6:c5:09:f1:2b:fa:04:1a:71:65:e1:e1:05:8b:8e: 18:3b:44:06:2a:3e:79:ce:03:38:34:6d:70:f5:fd:d0:ba:d5: 7a:c8:bf:a6:9f:37:a9:58:71:09:74:4f:62:6e:0e:41:93:f8: 2a:e7:c6:8e:8a:98:a5:3e:b6:fa:c2:9f:39:94:db:4f:4e:b8: 32:ad:e7:f8:d8:ad:f6:8e:4a:89:50:fd:f6:64:62:93:88:32: da:35:cd:98:8f:8a:08:3c:c6:ed:04:78:20:64:2b:45:94:bb: 1e:a5:b9:1e:35:4b:fc:05:f5:d1:4d:49:eb:84:c8:e6:1d:64: a5:79:bf:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCiRxBlhDpu9cCkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzMWE0YTAtN2I3Ny00ZjU2LThmODktMDE1MjViNTA2 MTI5MB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk MzJmNjNkNDAtZWI0Zi00YTQwLTg1NTYtMTg4M2U3NWExMGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YS+aqh4C2jy3JBv8/7HGvYt4cdm/jEH9+gN 3QbEg/6hYi1x3PH9joe2T9MoMxBC1OS8Bvl9psMhHS8M4HaqsDc4nepGs+53locs 2InL6ohpVR3Vfapki5OnG1h3vi5KEMfjvgoV4rvdzzjr2bRZJNn4aDB1JJR+Rjp8 L2Igza8f+IjaxzRjJzHwgPmcV52Ic/T424lW1z1fX9dOCacRe6Rq8ms+S4p6ZkZw 1OOUH5hc7+EFs6COvP86Fa86jqViE89NMr+/AfWc+UGTrhlpmXcMlEdTmzKaOTHA SOmFk2kEN9uv4Ug4tBET1J7GBMha0RwJ4rDtKXUWdKYwA5kuvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNc0xIj2p5H5vrluYFTWsKsTn/0AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTMx YTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUyNWI1MDYxMjkvZDc2Y2YwODQtYTJiMS0z NDEzLThiMzEtYjc4NGRjOGZhYTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEzMWE0YTAtN2I3Ny00ZjU2LThm ODktMDE1MjViNTA2MTI5L2FhMzFhNGEwLTdiNzctNGY1Ni04Zjg5LTAxNTI1YjUw NjEyOS5jcmwwHwYDVR0jBBgwFoAUWIlNWT2gnXPWliBuheubsbqbZj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTMxYTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUy NWI1MDYxMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx3poMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGU3GVS0L02kSGDZrRILLt9QpYTqaMjKkS6TLLSBHhYO/k1FWSmS+DRe M+PW1WgL5vV/7zEmJ8v4BtiWVNTgX9+Wfrm1Tb3KQXHl3FWmRLcg4p7+yemk9dJB k+BKWlAnsYUVE4pZCRjdhKwBbpOp+9isAqUBnAQEolnnGsMIoROG77bFCfEr+gQa cWXh4QWLjhg7RAYqPnnOAzg0bXD1/dC61XrIv6afN6lYcQl0T2JuDkGT+Crnxo6K mKU+tvrCnzmU209OuDKt5/jYrfaOSolQ/fZkYpOIMto1zZiPigg8xu0EeCBkK0WU ux6luR41S/wF9dFNSeuEyOYdZKV5v70= -----END CERTIFICATE-----Generated at Mon May 12 05:15:54 2025 by rpki-client