$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/aa5922ce-6574-311d-bc01-e66125efb577.roa File: aa5922ce-6574-311d-bc01-e66125efb577.roa (raw, json) Hash identifier: ErN4mhET7cLjcPJZz4B0pg6X5P+MARtgGMbRNKSA3tg= Subject key identifier: 3B:6B:90:8A:E4:D5:A7:04:F8:D6:A7:67:4D:22:51:1D:17:26:CE:F9 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F43285849AA4F71E15D1270513EB0DC00 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/aa5922ce-6574-311d-bc01-e66125efb577.roa Signing time: Sun 27 Apr 2025 13:01:01 +0000 ROA not before: Sun 27 Apr 2025 13:01:01 +0000 ROA not after: Sat 26 Jul 2025 13:01:01 +0000 asID: 31898 IP address blocks: 199.87.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:4f:71:e1:5d:12:70:51:3e:b0:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Apr 27 13:01:01 2025 GMT Not After : Jul 26 13:01:01 2025 GMT Subject: CN=b806ba5a-4054-45c3-a87d-40d862bb9c23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f6:fa:73:bb:c6:2a:b2:f1:1a:01:96:7b:47: db:81:6a:a4:64:94:13:b3:84:a7:60:e2:6d:14:6a: e2:24:6d:fe:73:3f:21:ce:72:3d:75:e5:c7:f6:d8: 6a:48:43:d1:6f:5f:b2:0f:e7:ad:e5:5c:b9:9d:f8: 87:8d:be:40:c4:eb:a8:c3:b8:86:44:95:d6:fb:99: 0f:38:68:1d:10:5b:67:0a:ea:0a:e3:9f:62:e8:a9: 85:6e:c9:0c:cc:09:31:41:dd:89:51:81:e8:1d:8c: 64:2a:be:69:3b:de:e1:90:34:ed:74:a8:7e:29:4a: 00:cb:e5:aa:5a:8c:28:aa:8c:29:68:02:21:d0:07: ce:02:1d:5b:74:9d:b9:79:dd:29:f4:97:4a:92:2e: fa:e5:f0:8a:e4:9b:e5:cb:0e:f1:1b:72:2c:5c:86: 33:c6:f6:93:1a:f7:9b:c9:c3:18:14:aa:17:c9:c4: d9:b4:ae:fe:b8:97:10:c9:00:ed:95:84:8e:04:f2: b2:90:e5:dc:3b:d3:bf:0a:da:0e:c8:31:5d:08:c4: 7a:1e:c5:ce:27:11:25:1e:70:30:69:e6:bf:c0:1e: dd:ec:2a:e1:bd:f6:8a:fc:83:39:46:e3:dd:12:bd: e4:3a:dc:c3:06:c3:8e:7d:6f:f4:95:b7:45:77:1a: a2:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:6B:90:8A:E4:D5:A7:04:F8:D6:A7:67:4D:22:51:1D:17:26:CE:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/aa5922ce-6574-311d-bc01-e66125efb577.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 199.87.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:39:5f:8f:70:02:ba:e5:31:8c:db:79:77:86:c3:b1:6d:62: ab:7f:ff:9b:d3:c1:fd:55:88:07:8e:4c:1d:c4:cc:8e:ba:60: a2:e5:a3:ea:0b:42:dc:e8:69:3f:57:09:4a:26:fd:6d:c2:fd: be:ca:0d:7c:d3:f5:8d:a7:b6:31:80:56:ed:a3:a6:e0:1e:59: 09:36:87:0a:da:d0:52:f7:b5:5d:36:6f:82:6c:96:dc:33:2e: 3c:f9:25:19:6a:77:bc:f7:9b:95:e4:bb:0b:44:79:6d:33:aa: 17:08:5a:a3:70:29:11:ca:2f:f0:9c:c1:44:84:f7:38:4f:8f: be:bf:63:32:e4:06:78:29:ba:42:2e:36:30:a0:ac:31:96:2f: 03:9f:e0:8f:6b:cd:fd:00:c9:1c:ef:44:db:a4:0a:31:39:47: c2:6f:66:c9:e3:ef:29:ad:fb:53:cb:90:84:d8:bd:e6:86:fe: 83:d2:9b:d5:28:72:1b:49:22:c0:b3:ac:6f:a4:dd:e3:83:ae: a8:62:e7:a5:7f:97:88:47:6b:45:b9:a4:21:0f:be:59:ca:7a: 47:a1:7f:11:5b:9a:b4:5b:7d:c3:3d:70:f8:71:3d:2b:87:dd: 64:f9:c9:1d:1e:75:ed:e3:df:13:23:ea:b5:58:44:fd:ef:9b: 49:c5:84:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmqT3HhXRJwUT6w3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDQyNzEzMDEwMVoXDTI1MDcyNjEzMDEwMVowLzEtMCsGA1UEAxMk YjgwNmJhNWEtNDA1NC00NWMzLWE4N2QtNDBkODYyYmI5YzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfb6c7vGKrLxGgGWe0fbgWqkZJQTs4SnYOJt FGriJG3+cz8hznI9deXH9thqSEPRb1+yD+et5Vy5nfiHjb5AxOuow7iGRJXW+5kP OGgdEFtnCuoK459i6KmFbskMzAkxQd2JUYHoHYxkKr5pO97hkDTtdKh+KUoAy+Wq WowoqowpaAIh0AfOAh1bdJ25ed0p9JdKki765fCK5Jvlyw7xG3IsXIYzxvaTGveb ycMYFKoXycTZtK7+uJcQyQDtlYSOBPKykOXcO9O/CtoOyDFdCMR6HsXOJxElHnAw aea/wB7d7CrhvfaK/IM5RuPdEr3kOtzDBsOOfW/0lbdFdxqi0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDtrkIrk1acE+NanZ00iUR0XJs75MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvYWE1OTIyY2UtNjU3NC0z MTFkLWJjMDEtZTY2MTI1ZWZiNTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1d4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHU5X49wArrlMYzbeXeGw7FtYqt//5vTwf1ViAeOTB3EzI66YKLlo+oL QtzoaT9XCUom/W3C/b7KDXzT9Y2ntjGAVu2jpuAeWQk2hwra0FL3tV02b4Jsltwz Ljz5JRlqd7z3m5XkuwtEeW0zqhcIWqNwKRHKL/CcwUSE9zhPj76/YzLkBngpukIu NjCgrDGWLwOf4I9rzf0AyRzvRNukCjE5R8JvZsnj7ymt+1PLkITYveaG/oPSm9Uo chtJIsCzrG+k3eODrqhi56V/l4hHa0W5pCEPvlnKekehfxFbmrRbfcM9cPhxPSuH 3WT5yR0ede3j3xMj6rVYRP3vm0nFhPU= -----END CERTIFICATE-----Generated at Sun Jun 29 14:11:33 2025 by rpki-client