$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/8db1943e-17fa-375d-aa4b-b018e52e3c40.roa File: 8db1943e-17fa-375d-aa4b-b018e52e3c40.roa (raw, json) Hash identifier: mkrK8rXNbc40ICldtV4f4pM7vH174VB5iYksPusbgD0= Subject key identifier: CF:9E:78:1C:C7:7D:13:D3:F2:22:39:2A:DE:D4:8E:39:13:45:EE:23 Certificate issuer: /CN=bad5af20-8385-44d4-815f-bb83497d4a0e Certificate serial: 010D0C9F4328584A497063B5FB750EBC45208580 Authority key identifier: 11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/8db1943e-17fa-375d-aa4b-b018e52e3c40.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 21777 IP address blocks: 199.45.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:63:b5:fb:75:0e:bc:45:20:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bad5af20-8385-44d4-815f-bb83497d4a0e Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=ad3896b5-e77d-42cd-8260-615ef7b42864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:53:af:a0:95:19:49:ab:49:05:d7:88:2b:77: 41:44:81:1a:f4:00:cd:de:09:a1:d2:1e:d6:d2:a2: 3c:e4:40:d4:bc:08:cb:24:a3:8b:b5:3f:3c:68:73: b2:fd:6b:6f:f3:ff:01:87:5a:5b:aa:5b:54:c7:ca: 83:39:6a:46:ec:aa:45:cf:01:96:7a:3a:53:0d:f0: ae:5c:75:c7:d3:71:3b:a1:af:43:c0:40:eb:f1:97: b7:06:b9:69:16:d4:65:b8:8f:e7:ba:d1:c7:0d:3a: b4:fc:b3:66:fa:9b:89:4b:de:26:29:13:06:59:1d: 22:1c:f7:fa:03:d5:02:91:81:e0:d9:42:a7:22:71: 1a:bc:9c:a7:d8:a1:89:11:44:d2:33:cf:e5:4d:07: 66:d0:11:8d:e9:51:97:d2:95:16:a0:d2:5f:8c:df: 04:24:be:07:29:f4:d8:e4:0b:69:58:35:81:fd:17: 73:95:cb:2c:38:ff:3a:d4:c1:26:3a:76:0d:33:a1: be:08:ed:ec:cd:99:79:10:13:52:09:58:cd:89:30: de:07:34:08:59:70:76:31:5f:4e:a3:3f:e3:e0:b0: 79:bd:cc:39:76:a3:55:53:97:81:7c:c7:ba:54:a2: e6:6d:d7:bf:db:91:cf:a9:13:21:f2:be:4c:8d:cf: b3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:9E:78:1C:C7:7D:13:D3:F2:22:39:2A:DE:D4:8E:39:13:45:EE:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/8db1943e-17fa-375d-aa4b-b018e52e3c40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.crl X509v3 Authority Key Identifier: keyid:11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer sbgp-ipAddrBlock: critical IPv4: 199.45.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:78:ba:78:5a:5e:b8:fa:fa:60:6c:30:78:67:eb:aa:ae:4a: d1:c5:f4:63:9b:e4:03:cb:6e:dc:87:8c:28:c9:d1:09:b8:dd: d3:04:51:5c:11:bf:fd:68:9a:8a:f8:5b:2b:24:e2:57:d3:77: 31:3c:66:21:91:40:e3:b4:9b:b5:8b:ab:15:ed:c9:97:83:4d: 0a:52:66:d4:58:2f:4f:05:97:95:88:1a:90:cb:29:da:64:3d: 24:6f:55:6e:60:06:fa:a6:98:98:75:f9:b2:73:f9:6d:25:fc: 77:cb:5f:e2:70:0f:77:6d:c7:80:68:38:c0:26:b2:ea:03:a4: 3c:cc:5f:e3:1e:2a:c3:a7:23:44:a4:d8:41:39:74:68:e5:7e: 83:71:f9:ee:58:3a:49:ca:2c:7e:86:7d:df:01:fc:f5:e0:47: 66:8a:9f:c0:b3:15:c1:41:c8:f8:55:8f:6c:46:1a:60:14:b7: f3:1d:18:1b:1b:4b:e2:37:dd:ce:2b:36:db:fd:c8:a8:75:42: 45:71:44:78:76:29:a8:2d:1a:8a:09:d3:d8:11:d8:ae:71:4b: 0a:6f:74:3c:3f:9a:29:cc:d8:da:d1:04:59:a0:9d:96:c4:53: 08:03:b5:5f:3b:7d:09:fc:13:09:cd:e3:63:95:9b:d1:79:a1: f4:1f:d8:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcGO1+3UOvEUghYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmFkNWFmMjAtODM4NS00NGQ0LTgxNWYtYmI4MzQ5N2Q0 YTBlMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk YWQzODk2YjUtZTc3ZC00MmNkLTgyNjAtNjE1ZWY3YjQyODY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA91OvoJUZSatJBdeIK3dBRIEa9ADN3gmh0h7W 0qI85EDUvAjLJKOLtT88aHOy/Wtv8/8Bh1pbqltUx8qDOWpG7KpFzwGWejpTDfCu XHXH03E7oa9DwEDr8Ze3BrlpFtRluI/nutHHDTq0/LNm+puJS94mKRMGWR0iHPf6 A9UCkYHg2UKnInEavJyn2KGJEUTSM8/lTQdm0BGN6VGX0pUWoNJfjN8EJL4HKfTY 5AtpWDWB/RdzlcssOP861MEmOnYNM6G+CO3szZl5EBNSCVjNiTDeBzQIWXB2MV9O oz/j4LB5vcw5dqNVU5eBfMe6VKLmbde/25HPqRMh8r5Mjc+zqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+eeBzHfRPT8iI5Kt7UjjkTRe4jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYWQ1 YWYyMC04Mzg1LTQ0ZDQtODE1Zi1iYjgzNDk3ZDRhMGUvOGRiMTk0M2UtMTdmYS0z NzVkLWFhNGItYjAxOGU1MmUzYzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmFkNWFmMjAtODM4NS00NGQ0LTgx NWYtYmI4MzQ5N2Q0YTBlL2JhZDVhZjIwLTgzODUtNDRkNC04MTVmLWJiODM0OTdk NGEwZS5jcmwwHwYDVR0jBBgwFoAUEapw8wRQo6yCOXMUtq3WNdHdOZQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYWQ1YWYyMC04Mzg1LTQ0ZDQtODE1Zi1iYjgz NDk3ZDRhMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxy2YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD54unhaXrj6+mBsMHhn66quStHF9GOb5APLbtyHjCjJ0Qm43dMEUVwR v/1omor4Wysk4lfTdzE8ZiGRQOO0m7WLqxXtyZeDTQpSZtRYL08Fl5WIGpDLKdpk PSRvVW5gBvqmmJh1+bJz+W0l/HfLX+JwD3dtx4BoOMAmsuoDpDzMX+MeKsOnI0Sk 2EE5dGjlfoNx+e5YOknKLH6Gfd8B/PXgR2aKn8CzFcFByPhVj2xGGmAUt/MdGBsb S+I33c4rNtv9yKh1QkVxRHh2KagtGooJ09gR2K5xSwpvdDw/minM2NrRBFmgnZbE UwgDtV87fQn8EwnN42OVm9F5ofQf2Cw= -----END CERTIFICATE-----Generated at Thu Jul 3 06:54:05 2025 by rpki-client