$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/6ede325a-ba24-308c-a1a3-54012fa276ef.roa File: 6ede325a-ba24-308c-a1a3-54012fa276ef.roa (raw, json) Hash identifier: vzSOPXatCWyFm5N5MQwCnJui1j+brsbWHtJ1sKKz9nM= Subject key identifier: A4:E3:B2:C9:B4:83:C9:1D:F1:E0:BA:E8:11:37:52:AB:3E:69:87:A2 Certificate issuer: /CN=e5333a6e-37dc-4213-b928-ae0341454759 Certificate serial: 010D0C9F43285849CE9A4EB9649C4D4FC02DC400 Authority key identifier: 39:3C:9B:6B:84:4D:12:F0:64:F5:53:BB:8F:7F:31:00:A1:27:A0:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/6ede325a-ba24-308c-a1a3-54012fa276ef.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 46650 IP address blocks: 199.85.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/e5333a6e-37dc-4213-b928-ae0341454759.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/e5333a6e-37dc-4213-b928-ae0341454759.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:4e:b9:64:9c:4d:4f:c0:2d:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5333a6e-37dc-4213-b928-ae0341454759 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=401e23a0-3743-46ca-a66c-0fe9c5002403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:63:45:b8:7f:2e:ab:25:88:cd:0b:3f:6a:f2: fb:12:e2:49:67:5e:58:a3:ca:20:34:a1:12:59:01: 89:85:b1:52:bc:a9:08:09:ff:f8:b3:83:9a:73:b8: 92:3b:01:ee:c0:62:11:1d:9f:0e:25:55:e6:f5:16: 29:be:b9:4c:8f:87:94:1e:78:98:b9:2f:a8:75:cb: f3:67:87:f3:28:88:3a:93:8b:a1:ba:ae:ef:d2:c1: 5d:e7:dc:f0:16:67:bc:88:7b:ce:ba:79:47:3a:3a: 68:8b:db:e7:7b:18:21:1c:80:c9:34:9e:e5:95:5b: 57:db:b9:ab:10:69:b4:e6:9e:8e:34:53:89:4f:af: a2:8d:61:fc:92:d0:a0:fa:e5:e7:cc:09:82:21:16: 42:91:dc:3a:c3:6a:0c:69:73:27:04:1e:bf:9c:e4: 31:40:44:1f:f3:9d:37:0c:68:0d:42:58:81:ab:d1: ba:a6:b0:d8:d1:88:3c:c2:fb:ba:6c:a1:ab:c2:de: 70:de:72:45:eb:24:9a:db:74:47:63:af:ba:b2:ef: 88:cb:c8:18:7a:f4:e6:0a:a3:3c:f6:8d:49:a8:eb: 50:23:50:e2:fd:9d:c7:35:d7:5e:80:3c:2e:e6:2d: 34:1b:2c:f7:f0:37:82:2b:29:24:88:25:57:81:82: 74:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:E3:B2:C9:B4:83:C9:1D:F1:E0:BA:E8:11:37:52:AB:3E:69:87:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/6ede325a-ba24-308c-a1a3-54012fa276ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/e5333a6e-37dc-4213-b928-ae0341454759.crl X509v3 Authority Key Identifier: keyid:39:3C:9B:6B:84:4D:12:F0:64:F5:53:BB:8F:7F:31:00:A1:27:A0:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759.cer sbgp-ipAddrBlock: critical IPv4: 199.85.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:02:17:12:e3:b2:dc:e1:89:84:53:d9:29:12:c9:a8:df:cf: 8d:98:78:61:18:17:45:d0:ee:60:d5:ef:a5:a3:2e:83:24:20: ed:94:72:13:e7:d8:9a:ee:5d:b4:7a:4a:1c:c4:ec:dd:27:24: 56:19:f3:19:f0:2f:c7:e8:f0:a3:29:fb:55:e5:dc:c4:c5:83: d5:5b:b4:06:ad:6a:77:1f:88:c4:4d:a4:96:09:4c:d1:ce:d9: b6:88:af:03:30:46:a0:c3:33:24:bc:13:eb:e8:a9:75:cb:67: 27:40:fd:e6:c8:74:36:69:78:e7:96:25:a6:16:77:55:af:22: fa:12:62:9c:b9:c0:d9:82:71:da:57:a9:68:e0:df:27:89:ff: 6b:74:28:57:c0:c0:57:54:ed:58:26:ec:3e:20:87:32:2e:ce: 99:63:47:e7:dd:68:cd:19:14:20:2e:3a:be:bb:18:a9:39:b3: f0:52:27:26:bd:7c:47:45:bf:46:ac:aa:38:a4:d9:e0:87:c5: 34:12:fb:e6:6a:43:3e:f0:21:15:0d:0b:20:03:b1:d4:e2:79: 02:9f:c3:2e:96:fe:ca:1d:3e:27:22:07:cb:c2:2e:ba:84:ee: ea:70:14:b2:10:75:c3:c2:d0:18:77:01:a5:3a:4d:52:86:1e: 6d:85:15:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmk65ZJxNT8AtxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTUzMzNhNmUtMzdkYy00MjEzLWI5MjgtYWUwMzQxNDU0 NzU5MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk NDAxZTIzYTAtMzc0My00NmNhLWE2NmMtMGZlOWM1MDAyNDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWNFuH8uqyWIzQs/avL7EuJJZ15Yo8ogNKES WQGJhbFSvKkICf/4s4Oac7iSOwHuwGIRHZ8OJVXm9RYpvrlMj4eUHniYuS+odcvz Z4fzKIg6k4uhuq7v0sFd59zwFme8iHvOunlHOjpoi9vnexghHIDJNJ7llVtX27mr EGm05p6ONFOJT6+ijWH8ktCg+uXnzAmCIRZCkdw6w2oMaXMnBB6/nOQxQEQf8503 DGgNQliBq9G6prDY0Yg8wvu6bKGrwt5w3nJF6ySa23RHY6+6su+Iy8gYevTmCqM8 9o1JqOtQI1Di/Z3HNddegDwu5i00Gyz38DeCKykkiCVXgYJ0WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKTjssm0g8kd8eC66BE3Uqs+aYeiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lNTMz M2E2ZS0zN2RjLTQyMTMtYjkyOC1hZTAzNDE0NTQ3NTkvNmVkZTMyNWEtYmEyNC0z MDhjLWExYTMtNTQwMTJmYTI3NmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTUzMzNhNmUtMzdkYy00MjEzLWI5 MjgtYWUwMzQxNDU0NzU5L2U1MzMzYTZlLTM3ZGMtNDIxMy1iOTI4LWFlMDM0MTQ1 NDc1OS5jcmwwHwYDVR0jBBgwFoAUOTyba4RNEvBk9VO7j38xAKEnoHMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lNTMzM2E2ZS0zN2RjLTQyMTMtYjkyOC1hZTAz NDE0NTQ3NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx1XsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0CFxLjstzhiYRT2SkSyajfz42YeGEYF0XQ7mDV76WjLoMkIO2UchPn 2JruXbR6ShzE7N0nJFYZ8xnwL8fo8KMp+1Xl3MTFg9VbtAatancfiMRNpJYJTNHO 2baIrwMwRqDDMyS8E+voqXXLZydA/ebIdDZpeOeWJaYWd1WvIvoSYpy5wNmCcdpX qWjg3yeJ/2t0KFfAwFdU7Vgm7D4ghzIuzpljR+fdaM0ZFCAuOr67GKk5s/BSJya9 fEdFv0asqjik2eCHxTQS++ZqQz7wIRUNCyADsdTieQKfwy6W/sodPiciB8vCLrqE 7upwFLIQdcPC0Bh3AaU6TVKGHm2FFdY= -----END CERTIFICATE-----Generated at Mon May 12 03:32:58 2025 by rpki-client