$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847/df5c18b1-7d04-39af-97a4-da803d7e85ff.roa File: df5c18b1-7d04-39af-97a4-da803d7e85ff.roa (raw, json) Hash identifier: KPRISzP7oJXIvoOPVcVJfOBi05jmi9hfoGFJ+jkOYe8= Subject key identifier: AB:5A:1E:E0:85:F8:17:06:E1:28:72:F5:D3:81:DC:9A:E1:D1:0C:0A Certificate issuer: /CN=e1a5b703-5dea-47f1-b708-67940244b847 Certificate serial: 010D0C9F4328584A4AD5934E54EC9A1050570960 Authority key identifier: 5E:8C:43:38:FA:1F:B9:43:A5:ED:D2:BE:A7:E1:80:6A:B6:D0:C2:FD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847/df5c18b1-7d04-39af-97a4-da803d7e85ff.roa Signing time: Tue 24 Jun 2025 01:00:50 +0000 ROA not before: Tue 24 Jun 2025 01:00:50 +0000 ROA not after: Mon 22 Sep 2025 01:00:50 +0000 asID: 40264 IP address blocks: 199.15.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847/e1a5b703-5dea-47f1-b708-67940244b847.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847/e1a5b703-5dea-47f1-b708-67940244b847.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4a:d5:93:4e:54:ec:9a:10:50:57:09:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1a5b703-5dea-47f1-b708-67940244b847 Validity Not Before: Jun 24 01:00:50 2025 GMT Not After : Sep 22 01:00:50 2025 GMT Subject: CN=c4aa9089-c089-40a8-b6c5-ae00ac88d786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:40:8d:2f:45:24:0c:fc:eb:88:12:58:23:e8: 6f:b6:a0:fb:9e:48:f0:b6:8a:26:79:9c:78:1e:cb: 93:e5:74:88:2d:06:f3:06:1e:66:c7:fb:fe:69:c3: 3d:1e:f4:8c:25:2b:b4:76:f2:cb:2f:9d:4a:f2:07: 98:df:c8:1c:bb:2f:f0:c3:4b:5f:8d:37:cd:06:6d: 5c:db:43:69:d1:cd:01:f9:66:c8:c2:e6:73:42:d2: 3a:96:85:f1:10:3d:35:69:08:34:5c:a0:16:b4:7a: 6d:58:d2:04:60:e5:1a:3b:29:9a:10:c2:35:75:9a: 37:b4:d5:09:1f:df:fa:50:55:e1:3a:61:bd:57:18: 5c:16:44:a7:68:8a:e8:71:b9:ab:7e:c9:b7:5e:79: 74:84:0b:1c:36:8e:8b:e0:e4:58:ba:82:f2:42:e0: 9d:18:aa:6d:1e:3c:8d:27:70:df:d9:58:6a:4d:2c: f7:bf:f9:54:10:d1:61:07:cc:4c:af:d4:2f:0e:f5: bc:92:68:cc:b8:37:f6:dc:8a:d6:cb:05:4a:33:04: 60:18:4d:fa:e2:6d:07:2c:a1:8d:37:9e:96:ec:d5: a0:4a:05:96:ae:00:47:60:c6:d9:5d:96:54:c1:86: fe:07:f6:88:3f:4a:ce:32:af:6e:ac:b1:1a:16:fd: 39:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:5A:1E:E0:85:F8:17:06:E1:28:72:F5:D3:81:DC:9A:E1:D1:0C:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847/df5c18b1-7d04-39af-97a4-da803d7e85ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847/e1a5b703-5dea-47f1-b708-67940244b847.crl X509v3 Authority Key Identifier: keyid:5E:8C:43:38:FA:1F:B9:43:A5:ED:D2:BE:A7:E1:80:6A:B6:D0:C2:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847.cer sbgp-ipAddrBlock: critical IPv4: 199.15.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:e1:f9:91:3c:81:01:e0:85:5c:02:92:1e:c4:2f:45:65:14: 0c:db:d5:67:b7:0b:f1:de:ee:d7:67:25:68:8b:7e:5a:ec:6e: 2f:5e:6e:4c:a9:ba:51:99:a9:a1:83:f8:01:94:9d:2d:c1:35: 61:66:2b:00:c4:86:df:3b:27:12:f9:7c:88:e5:65:8e:96:49: 3d:1b:7d:06:ac:dc:ad:06:64:c8:d9:62:37:a0:4b:2b:20:bc: 8c:38:07:eb:af:8b:79:c2:d5:6e:d7:ee:ed:3a:e0:71:0f:3e: 6f:1d:66:af:ca:08:d8:94:cd:c1:85:fb:f9:16:97:ac:e5:35: fa:fc:16:e3:92:17:d1:ea:2c:61:62:c0:28:6b:3b:3b:e5:44: 7f:b9:d3:ed:46:04:89:31:67:85:49:42:27:ca:0b:7e:cb:81: 11:df:1a:b6:3f:75:f9:d4:18:e2:89:f2:c9:f7:80:ac:e2:78: ff:1a:4d:5a:67:ca:e5:b5:2c:58:3c:ae:73:3d:9d:96:4c:fd: 19:c7:d9:d9:52:52:5a:26:97:3a:21:fa:45:42:c3:a3:44:3e: 20:0f:98:53:0d:2d:59:d2:d2:c1:19:b3:1b:b3:20:1b:0f:f1: 9c:e4:3f:cd:94:f8:46:fc:3d:ed:28:1c:c5:1f:8f:77:62:e5: 3d:e4:68:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpK1ZNOVOyaEFBXCWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTFhNWI3MDMtNWRlYS00N2YxLWI3MDgtNjc5NDAyNDRi ODQ3MB4XDTI1MDYyNDAxMDA1MFoXDTI1MDkyMjAxMDA1MFowLzEtMCsGA1UEAxMk YzRhYTkwODktYzA4OS00MGE4LWI2YzUtYWUwMGFjODhkNzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhECNL0UkDPzriBJYI+hvtqD7nkjwtoomeZx4 HsuT5XSILQbzBh5mx/v+acM9HvSMJSu0dvLLL51K8geY38gcuy/ww0tfjTfNBm1c 20Np0c0B+WbIwuZzQtI6loXxED01aQg0XKAWtHptWNIEYOUaOymaEMI1dZo3tNUJ H9/6UFXhOmG9VxhcFkSnaIrocbmrfsm3Xnl0hAscNo6L4ORYuoLyQuCdGKptHjyN J3Df2VhqTSz3v/lUENFhB8xMr9QvDvW8kmjMuDf23IrWywVKMwRgGE364m0HLKGN N56W7NWgSgWWrgBHYMbZXZZUwYb+B/aIP0rOMq9urLEaFv05YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKtaHuCF+BcG4Shy9dOB3Jrh0QwKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lMWE1 YjcwMy01ZGVhLTQ3ZjEtYjcwOC02Nzk0MDI0NGI4NDcvZGY1YzE4YjEtN2QwNC0z OWFmLTk3YTQtZGE4MDNkN2U4NWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTFhNWI3MDMtNWRlYS00N2YxLWI3 MDgtNjc5NDAyNDRiODQ3L2UxYTViNzAzLTVkZWEtNDdmMS1iNzA4LTY3OTQwMjQ0 Yjg0Ny5jcmwwHwYDVR0jBBgwFoAUXoxDOPofuUOl7dK+p+GAarbQwv0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lMWE1YjcwMy01ZGVhLTQ3ZjEtYjcwOC02Nzk0 MDI0NGI4NDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxw/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAfh+ZE8gQHghVwCkh7EL0VlFAzb1We3C/He7tdnJWiLflrsbi9ebkyp ulGZqaGD+AGUnS3BNWFmKwDEht87JxL5fIjlZY6WST0bfQas3K0GZMjZYjegSysg vIw4B+uvi3nC1W7X7u064HEPPm8dZq/KCNiUzcGF+/kWl6zlNfr8FuOSF9HqLGFi wChrOzvlRH+50+1GBIkxZ4VJQifKC37LgRHfGrY/dfnUGOKJ8sn3gKzieP8aTVpn yuW1LFg8rnM9nZZM/RnH2dlSUlomlzoh+kVCw6NEPiAPmFMNLVnS0sEZsxuzIBsP 8ZzkP82U+Eb8Pe0oHMUfj3di5T3kaDA= -----END CERTIFICATE-----Generated at Thu Jul 3 07:39:53 2025 by rpki-client