$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8332c7ea-33d5-482c-9c3e-a035a45cee4b/0dbacf1d-4230-3d02-84fd-6777d863a650.roa File: 0dbacf1d-4230-3d02-84fd-6777d863a650.roa (raw, json) Hash identifier: xHcTM3CipEKMq5jBnC1L2e/DsMXzIZNSLKHrJZu8cqI= Subject key identifier: 6A:8B:65:5B:B6:EC:D9:94:38:68:43:3B:DD:14:6B:40:CE:0B:A0:2F Certificate issuer: /CN=8332c7ea-33d5-482c-9c3e-a035a45cee4b Certificate serial: 010D0C9F4328584A4970620814CE6EEFBF42CA80 Authority key identifier: CC:8E:79:4C:8C:94:AF:6B:0C:6D:F1:03:95:4E:3B:D6:BA:A0:98:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8332c7ea-33d5-482c-9c3e-a035a45cee4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8332c7ea-33d5-482c-9c3e-a035a45cee4b/0dbacf1d-4230-3d02-84fd-6777d863a650.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 23313 IP address blocks: 199.16.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8332c7ea-33d5-482c-9c3e-a035a45cee4b/8332c7ea-33d5-482c-9c3e-a035a45cee4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8332c7ea-33d5-482c-9c3e-a035a45cee4b/8332c7ea-33d5-482c-9c3e-a035a45cee4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8332c7ea-33d5-482c-9c3e-a035a45cee4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:62:08:14:ce:6e:ef:bf:42:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8332c7ea-33d5-482c-9c3e-a035a45cee4b Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=68caf3a0-0a12-4a0f-a972-586415b2074c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3c:3b:c3:01:2b:29:b1:74:4d:20:f4:b2:c1: ee:fa:ef:51:eb:bb:00:c6:16:43:e6:1f:d6:f9:80: c9:da:aa:01:d7:c8:08:f1:fc:18:ed:db:df:14:e8: 68:41:23:dc:7c:6b:ff:fd:76:94:b6:a4:bf:8f:4f: 3c:05:67:83:44:f7:9d:8f:b9:16:42:c4:bd:18:e1: 70:88:17:3b:a4:2a:e7:0c:40:fe:ba:57:91:3a:32: 78:a4:9e:99:2a:dd:e1:d5:21:2c:aa:8d:6b:10:09: c4:c8:bb:ef:e6:90:a3:4f:9f:4e:74:84:38:f3:8c: 15:01:5a:ee:54:4c:ee:b0:14:0a:26:21:9c:cc:19: d6:11:f3:37:e2:19:94:e6:e2:19:7c:03:44:43:fa: 05:34:f9:36:b5:72:6b:93:b4:04:d6:2b:49:13:91: 35:a9:f4:4b:dd:0b:3f:e4:74:a3:3a:30:70:da:35: 3b:d0:65:75:54:46:d1:ec:3c:11:ee:64:97:9d:da: 64:ab:24:54:bb:f9:b3:c8:d7:ec:bc:d0:69:4e:32: 02:41:ac:88:88:62:fd:5b:0f:ee:b9:d1:8e:c8:1f: 1d:af:9f:f4:6e:c4:bc:94:76:81:b9:7a:ca:ae:38: 53:78:96:12:98:7e:71:2e:7b:ae:b0:e2:1f:9a:44: a8:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:8B:65:5B:B6:EC:D9:94:38:68:43:3B:DD:14:6B:40:CE:0B:A0:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8332c7ea-33d5-482c-9c3e-a035a45cee4b/0dbacf1d-4230-3d02-84fd-6777d863a650.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8332c7ea-33d5-482c-9c3e-a035a45cee4b/8332c7ea-33d5-482c-9c3e-a035a45cee4b.crl X509v3 Authority Key Identifier: keyid:CC:8E:79:4C:8C:94:AF:6B:0C:6D:F1:03:95:4E:3B:D6:BA:A0:98:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8332c7ea-33d5-482c-9c3e-a035a45cee4b.cer sbgp-ipAddrBlock: critical IPv4: 199.16.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:bd:b4:2a:fe:37:ee:dc:9a:0b:5f:f9:1e:c4:90:6a:66:be: e8:b7:e1:d8:d6:41:27:94:3a:1d:20:20:81:2e:2b:c4:8e:5b: b0:ad:0e:59:17:b1:52:13:54:46:7a:af:64:57:d3:1f:9a:41: bb:6d:bb:ec:ef:6d:3d:e6:f3:5e:a7:cc:cb:bc:1e:bd:64:b9: 17:2e:72:5a:de:9c:1f:44:f0:08:b8:4d:90:57:04:ec:77:9b: 94:ea:73:2f:42:c9:75:0b:61:e6:fb:c3:e7:6d:23:dd:a6:e2: a1:93:59:8b:dd:87:95:d9:f3:3c:f6:ad:b9:0b:c3:7a:f8:6a: fb:06:d1:b4:97:eb:d9:35:0c:c3:7e:20:a8:45:8b:20:43:dc: 2d:a9:23:76:f2:72:6a:75:e1:f1:54:64:cd:6e:5f:5c:aa:1a: ca:f3:e5:be:e1:12:d1:f2:de:c6:b7:de:57:89:c7:0e:e9:4f: 41:1f:41:b9:d3:6b:2d:f2:0c:0e:08:1d:ba:a7:6f:32:52:2c: 6d:1a:86:05:24:04:54:bc:d4:43:53:63:e2:ab:3a:f1:b6:8e: 9a:86:eb:b8:fe:13:c3:90:dc:23:7a:fd:07:ec:c8:6e:c1:21: c0:49:d8:5d:5f:ea:65:66:c3:4f:66:58:16:be:6a:28:96:e8: 84:62:c6:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcGIIFM5u779CyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMzMmM3ZWEtMzNkNS00ODJjLTljM2UtYTAzNWE0NWNl ZTRiMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk NjhjYWYzYTAtMGExMi00YTBmLWE5NzItNTg2NDE1YjIwNzRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjw7wwErKbF0TSD0ssHu+u9R67sAxhZD5h/W +YDJ2qoB18gI8fwY7dvfFOhoQSPcfGv//XaUtqS/j088BWeDRPedj7kWQsS9GOFw iBc7pCrnDED+uleROjJ4pJ6ZKt3h1SEsqo1rEAnEyLvv5pCjT59OdIQ484wVAVru VEzusBQKJiGczBnWEfM34hmU5uIZfANEQ/oFNPk2tXJrk7QE1itJE5E1qfRL3Qs/ 5HSjOjBw2jU70GV1VEbR7DwR7mSXndpkqyRUu/mzyNfsvNBpTjICQayIiGL9Ww/u udGOyB8dr5/0bsS8lHaBuXrKrjhTeJYSmH5xLnuusOIfmkSoUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGqLZVu27NmUOGhDO90Ua0DOC6AvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84MzMy YzdlYS0zM2Q1LTQ4MmMtOWMzZS1hMDM1YTQ1Y2VlNGIvMGRiYWNmMWQtNDIzMC0z ZDAyLTg0ZmQtNjc3N2Q4NjNhNjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODMzMmM3ZWEtMzNkNS00ODJjLTlj M2UtYTAzNWE0NWNlZTRiLzgzMzJjN2VhLTMzZDUtNDgyYy05YzNlLWEwMzVhNDVj ZWU0Yi5jcmwwHwYDVR0jBBgwFoAUzI55TIyUr2sMbfEDlU471rqgmMgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84MzMyYzdlYS0zM2Q1LTQ4MmMtOWMzZS1hMDM1 YTQ1Y2VlNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxxD4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAq9tCr+N+7cmgtf+R7EkGpmvui34djWQSeUOh0gIIEuK8SOW7CtDlkX sVITVEZ6r2RX0x+aQbttu+zvbT3m816nzMu8Hr1kuRcuclrenB9E8Ai4TZBXBOx3 m5Tqcy9CyXULYeb7w+dtI92m4qGTWYvdh5XZ8zz2rbkLw3r4avsG0bSX69k1DMN+ IKhFiyBD3C2pI3bycmp14fFUZM1uX1yqGsrz5b7hEtHy3sa33leJxw7pT0EfQbnT ay3yDA4IHbqnbzJSLG0ahgUkBFS81ENTY+KrOvG2jpqG67j+E8OQ3CN6/QfsyG7B IcBJ2F1f6mVmw09mWBa+aiiW6IRixpw= -----END CERTIFICATE-----Generated at Tue Jul 1 16:09:16 2025 by rpki-client