$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/0a495132-7cda-3198-aa84-524b4588371a.roa File: 0a495132-7cda-3198-aa84-524b4588371a.roa (raw, json) Hash identifier: GkNj0+6FWW92x0j2JP5Xn2D0JoJPqDOp3u95bXfhW24= Subject key identifier: 15:A7:DF:3A:6C:8C:A4:B9:72:11:1C:E6:BA:AF:48:7B:56:BF:48:B2 Certificate issuer: /CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Certificate serial: 010D0C9F43285849DC8FB083FA31985E153D8A80 Authority key identifier: 5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/0a495132-7cda-3198-aa84-524b4588371a.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 21766 IP address blocks: 199.217.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:b0:83:fa:31:98:5e:15:3d:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=061a9e9f-c510-4f53-be77-619702ab60fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e2:ae:8f:a9:ef:b5:ff:a9:c7:b0:1e:00:b0: 34:0e:e9:d5:3e:b3:9e:7e:7b:a7:15:06:05:1e:84: 28:9b:f3:d1:d8:83:2b:5d:d0:75:e4:77:dc:ca:b0: 25:c1:56:02:14:3f:a7:fd:97:2b:39:a9:82:75:ef: 74:26:f3:21:8e:27:32:f9:24:ea:b9:d5:a8:3e:2a: 46:20:bf:e5:bd:43:ca:dc:b0:45:3b:02:71:25:f9: 0b:4c:c9:45:19:bf:a7:12:3c:db:ae:6b:0b:f1:50: ba:e0:98:a1:83:db:a4:c5:5f:e2:d5:f7:c0:49:54: 09:16:05:ce:98:c9:f7:31:f2:20:a7:2c:46:3f:2a: 2d:11:bc:09:48:b8:a9:25:99:30:98:ba:ac:dc:bc: 69:78:15:1f:b5:69:50:78:3a:0b:fe:83:02:45:51: 92:ca:26:4d:45:6d:cc:9f:c8:38:6d:48:5b:e2:ee: c5:7d:95:74:5b:ac:c5:a2:02:75:6e:38:b1:98:f2: 78:78:a2:fd:ae:85:02:46:e6:96:36:b2:bb:46:b2: 60:83:7d:04:03:0b:04:c8:af:25:46:0d:0b:16:6b: 0d:dc:69:28:bf:6b:ec:ba:b8:6d:c8:33:9f:81:77: 30:63:de:b0:08:cd:3b:db:91:a9:f7:c2:d9:a1:2e: 64:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:A7:DF:3A:6C:8C:A4:B9:72:11:1C:E6:BA:AF:48:7B:56:BF:48:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/0a495132-7cda-3198-aa84-524b4588371a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl X509v3 Authority Key Identifier: keyid:5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer sbgp-ipAddrBlock: critical IPv4: 199.217.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:a2:99:1a:5d:a6:f5:be:98:c9:9f:ec:a1:20:4a:30:42:62: 36:9d:33:ef:85:7b:01:46:94:2c:1d:d4:e0:89:5d:c9:bc:f2: c8:9a:a8:76:61:8e:dc:a7:0d:ca:00:87:09:37:47:74:58:67: 09:fb:68:25:4d:96:b5:42:5b:d9:95:c5:65:81:59:58:05:f7: 5b:6a:1e:20:f3:f2:e1:ca:ee:48:1f:aa:12:09:11:0c:78:0c: 1e:a5:ae:16:43:57:fb:23:07:26:b6:2b:fd:a9:9f:f5:c1:6b: ad:ed:5c:13:2c:15:bd:6f:72:0c:05:a9:8c:7e:ed:fd:18:e5: 8f:43:5b:50:0e:8c:33:7e:18:19:41:9c:c7:10:17:39:5a:16: 60:58:a9:be:9f:b5:be:76:94:8c:93:33:bd:cf:69:4c:f2:70: 21:42:f4:15:67:b5:53:1d:96:a8:01:29:2f:5d:88:2f:74:52: 0a:dc:7a:0d:00:47:c0:a4:7d:5f:dc:12:b6:17:f8:f2:c1:0e: 1f:2c:de:91:ce:3a:64:cd:81:48:f1:24:45:17:8e:af:0f:3d: 4a:ed:96:c4:2d:cd:5f:72:e7:55:68:97:a2:94:67:74:f3:50: 47:08:dc:5d:93:49:48:a3:3b:e1:e0:8f:77:86:fd:97:e4:ae: 4c:e9:3b:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj7CD+jGYXhU9ioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTdkN2YxNGUtNzJjNC00N2U0LWFkMDYtYTFiNzJmOTRj N2IxMB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk MDYxYTllOWYtYzUxMC00ZjUzLWJlNzctNjE5NzAyYWI2MGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuKuj6nvtf+px7AeALA0DunVPrOefnunFQYF HoQom/PR2IMrXdB15HfcyrAlwVYCFD+n/ZcrOamCde90JvMhjicy+STqudWoPipG IL/lvUPK3LBFOwJxJfkLTMlFGb+nEjzbrmsL8VC64Jihg9ukxV/i1ffASVQJFgXO mMn3MfIgpyxGPyotEbwJSLipJZkwmLqs3LxpeBUftWlQeDoL/oMCRVGSyiZNRW3M n8g4bUhb4u7FfZV0W6zFogJ1bjixmPJ4eKL9roUCRuaWNrK7RrJgg30EAwsEyK8l Rg0LFmsN3Gkov2vsurhtyDOfgXcwY96wCM0725Gp98LZoS5kzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBWn3zpsjKS5chEc5rqvSHtWv0iyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3 ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3MmY5NGM3YjEvMGE0OTUxMzItN2NkYS0z MTk4LWFhODQtNTI0YjQ1ODgzNzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTdkN2YxNGUtNzJjNC00N2U0LWFk MDYtYTFiNzJmOTRjN2IxL2E3ZDdmMTRlLTcyYzQtNDdlNC1hZDA2LWExYjcyZjk0 YzdiMS5jcmwwHwYDVR0jBBgwFoAUXtwOAtpu5BW/4iOR5NyjJ1ELeg0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3 MmY5NGM3YjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx9l8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6imRpdpvW+mMmf7KEgSjBCYjadM++FewFGlCwd1OCJXcm88siaqHZh jtynDcoAhwk3R3RYZwn7aCVNlrVCW9mVxWWBWVgF91tqHiDz8uHK7kgfqhIJEQx4 DB6lrhZDV/sjBya2K/2pn/XBa63tXBMsFb1vcgwFqYx+7f0Y5Y9DW1AOjDN+GBlB nMcQFzlaFmBYqb6ftb52lIyTM73PaUzycCFC9BVntVMdlqgBKS9diC90Ugrceg0A R8CkfV/cErYX+PLBDh8s3pHOOmTNgUjxJEUXjq8PPUrtlsQtzV9y51Vol6KUZ3Tz UEcI3F2TSUijO+Hgj3eG/ZfkrkzpOz4= -----END CERTIFICATE-----Generated at Mon Jun 30 07:35:55 2025 by rpki-client