$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/6f12b6b3-3f88-3b5f-a379-6b6c651c025b.roa File: 6f12b6b3-3f88-3b5f-a379-6b6c651c025b.roa (raw, json) Hash identifier: hkJfjM15bLC9wtgfTVkMW0gCXV8q7uIP4XofTtGpN6w= Subject key identifier: E5:00:AE:DB:9F:9A:B3:EE:80:26:A3:E0:08:AC:A2:41:C6:5E:E4:AF Certificate issuer: /CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78 Certificate serial: 010D0C9F4328584A411053DD43EDCFC201534000 Authority key identifier: A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/6f12b6b3-3f88-3b5f-a379-6b6c651c025b.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 19551 IP address blocks: 199.83.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:53:dd:43:ed:cf:c2:01:53:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78 Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=cd241ac4-b577-4f15-93a0-c46dfa1b1de8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:2f:3c:2c:10:2f:13:7a:03:5f:3e:93:c2:0a: 27:22:e4:26:cb:8c:38:70:df:4f:20:b6:ad:5b:3c: a1:24:74:56:c9:f6:cb:82:12:d3:5c:6b:00:20:3c: 61:5f:94:a4:63:e9:88:e9:76:c5:80:09:2f:6b:49: e3:a0:85:91:cc:b6:b1:d0:54:e1:de:5b:28:a5:3b: 06:66:a5:f2:fc:a9:40:f7:78:71:41:7b:25:1c:9a: d2:f9:a2:45:02:72:fc:be:6c:0b:9b:4a:86:92:c5: cf:c6:d8:9b:26:52:f8:11:9d:aa:56:7c:46:db:aa: 95:31:0f:76:9a:ea:13:77:ed:5f:50:56:ed:9d:3a: cc:5d:48:d1:49:38:b7:5c:2e:2e:a7:63:6e:68:48: ec:c9:d2:ea:f7:88:5f:29:61:00:fe:d5:81:f1:91: c8:25:df:f0:5f:50:1c:33:b0:97:3f:2c:67:f3:41: 90:c9:70:7a:eb:2e:83:eb:76:8e:d5:89:b8:f8:d7: 4e:e7:b1:b4:68:80:3e:9b:e2:25:c0:ee:46:c4:e5: 65:c2:67:fe:45:be:52:bd:38:b7:df:c9:f0:79:3e: c4:b6:f5:b7:de:aa:4f:ee:b7:05:47:eb:2a:f6:36: 3c:2e:00:a0:04:01:3f:0e:bc:72:03:a4:bc:81:d5: 8a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:00:AE:DB:9F:9A:B3:EE:80:26:A3:E0:08:AC:A2:41:C6:5E:E4:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/6f12b6b3-3f88-3b5f-a379-6b6c651c025b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.crl X509v3 Authority Key Identifier: keyid:A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer sbgp-ipAddrBlock: critical IPv4: 199.83.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:3a:5b:b1:2b:78:86:7b:33:76:4e:30:85:dd:dd:59:f9:19: 22:e4:8d:4c:8f:c9:11:fc:70:e2:cf:53:50:71:96:88:b8:05: 8f:a5:43:7c:98:24:f5:c0:81:0c:f8:f1:68:bc:7b:93:fe:27: b1:c2:6b:50:ef:a8:11:b9:a6:00:94:53:7b:cc:0f:35:20:55: 8a:80:c3:f6:b8:49:34:96:b4:18:7f:ac:fb:ac:6e:36:7d:11: 71:ba:36:de:e9:c5:52:4b:52:b7:c6:c5:9e:fb:c6:5e:7e:9f: a9:7d:e4:39:78:6b:41:54:f2:47:d4:9e:94:ca:6a:32:6d:32: 8c:f1:04:83:23:b8:88:7f:15:0f:f1:e1:49:6e:1e:a0:ee:41: 94:69:9b:08:a3:9f:fb:83:e2:62:82:c0:76:04:7c:a4:bf:85: ca:b9:d6:d6:58:e5:a1:1b:61:f8:e7:6a:88:42:6e:4f:14:b6: f1:e1:c4:c7:2d:a4:a1:ad:be:9a:1f:6b:c5:cc:e3:c3:7a:21: 61:5d:0f:c2:2d:41:65:27:39:7c:89:cf:48:7d:51:78:36:31: 25:89:2f:10:e5:a0:9d:46:cc:93:bc:40:35:3c:5b:f8:4d:3e: a6:94:25:20:dd:62:4f:7f:f5:4b:78:58:74:a4:bd:2d:2f:11: 14:65:77:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpBEFPdQ+3PwgFTQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzQxYjdlOTYtYTZmMC00NGQzLWFlY2MtOTI5NGQ2YmNj Yzc4MB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk Y2QyNDFhYzQtYjU3Ny00ZjE1LTkzYTAtYzQ2ZGZhMWIxZGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlS88LBAvE3oDXz6TwgonIuQmy4w4cN9PILat WzyhJHRWyfbLghLTXGsAIDxhX5SkY+mI6XbFgAkva0njoIWRzLax0FTh3lsopTsG ZqXy/KlA93hxQXslHJrS+aJFAnL8vmwLm0qGksXPxtibJlL4EZ2qVnxG26qVMQ92 muoTd+1fUFbtnTrMXUjRSTi3XC4up2NuaEjsydLq94hfKWEA/tWB8ZHIJd/wX1Ac M7CXPyxn80GQyXB66y6D63aO1Ym4+NdO57G0aIA+m+IlwO5GxOVlwmf+Rb5SvTi3 38nweT7EtvW33qpP7rcFR+sq9jY8LgCgBAE/DrxyA6S8gdWKWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOUArtufmrPugCaj4AisokHGXuSvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNDFi N2U5Ni1hNmYwLTQ0ZDMtYWVjYy05Mjk0ZDZiY2NjNzgvNmYxMmI2YjMtM2Y4OC0z YjVmLWEzNzktNmI2YzY1MWMwMjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzQxYjdlOTYtYTZmMC00NGQzLWFl Y2MtOTI5NGQ2YmNjYzc4LzM0MWI3ZTk2LWE2ZjAtNDRkMy1hZWNjLTkyOTRkNmJj Y2M3OC5jcmwwHwYDVR0jBBgwFoAUoPBBeGGMSJbPqYzGmlOLQFAosrUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNDFiN2U5Ni1hNmYwLTQ0ZDMtYWVjYy05Mjk0 ZDZiY2NjNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx1OAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE86W7EreIZ7M3ZOMIXd3Vn5GSLkjUyPyRH8cOLPU1Bxloi4BY+lQ3yY JPXAgQz48Wi8e5P+J7HCa1DvqBG5pgCUU3vMDzUgVYqAw/a4STSWtBh/rPusbjZ9 EXG6Nt7pxVJLUrfGxZ77xl5+n6l95Dl4a0FU8kfUnpTKajJtMozxBIMjuIh/FQ/x 4UluHqDuQZRpmwijn/uD4mKCwHYEfKS/hcq51tZY5aEbYfjnaohCbk8UtvHhxMct pKGtvpofa8XM48N6IWFdD8ItQWUnOXyJz0h9UXg2MSWJLxDloJ1GzJO8QDU8W/hN PqaUJSDdYk9/9Ut4WHSkvS0vERRldwc= -----END CERTIFICATE-----Generated at Sun Jun 29 17:58:21 2025 by rpki-client