$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/8ee0a8b9-b99e-3cdd-a68f-e7c8847925e1.roa File: 8ee0a8b9-b99e-3cdd-a68f-e7c8847925e1.roa (raw, json) Hash identifier: /fBFsJrhli+S3/E7vTw3vGRLHkm4C0K5JpqE2hYlwb8= Subject key identifier: F3:EE:19:68:74:33:05:D1:2F:9E:F0:19:48:F5:12:EA:DF:A4:18:A1 Certificate issuer: /CN=559253fe-8b4f-48f6-9fe1-109df6bb3251 Certificate serial: 010D0C9F4328584A35E58AE9171B6B88B570F340 Authority key identifier: F9:D3:AA:04:E7:49:4F:99:FF:61:B0:9D:59:8B:71:B9:00:F1:53:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/8ee0a8b9-b99e-3cdd-a68f-e7c8847925e1.roa Signing time: Mon 16 Jun 2025 13:01:03 +0000 ROA not before: Mon 16 Jun 2025 13:01:03 +0000 ROA not after: Sun 14 Sep 2025 13:01:03 +0000 asID: 36131 IP address blocks: 199.30.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/559253fe-8b4f-48f6-9fe1-109df6bb3251.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/559253fe-8b4f-48f6-9fe1-109df6bb3251.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:35:e5:8a:e9:17:1b:6b:88:b5:70:f3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=559253fe-8b4f-48f6-9fe1-109df6bb3251 Validity Not Before: Jun 16 13:01:03 2025 GMT Not After : Sep 14 13:01:03 2025 GMT Subject: CN=ae0e0a2f-5909-4664-8a1c-4478fbf048ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:eb:98:da:26:14:19:a1:88:9a:b6:83:96:87: 0e:b2:ec:c2:1e:c0:6b:1c:9f:fd:f7:5a:0f:94:a3: c2:32:c2:28:8c:35:4f:cd:28:c6:29:8a:8f:2e:5b: 2a:47:6a:ab:e7:58:85:1e:44:17:69:13:95:a0:c9: ee:65:72:b5:37:a5:0b:0f:b4:04:ed:8d:33:0c:08: 76:28:33:eb:dd:3a:4c:a5:c3:f7:8d:63:4e:1d:36: 18:62:df:40:e8:83:1a:50:21:88:01:dc:4e:03:4e: 4e:b1:78:0d:ee:c5:0e:ed:0d:1a:31:93:99:59:81: 95:b3:4a:28:fd:b5:51:3d:4c:1e:21:b0:4a:39:cc: 8f:72:56:d5:c8:25:ab:50:41:45:db:c0:04:b8:11: eb:80:ea:0b:ac:82:94:9e:03:bb:d3:93:24:2b:e6: 26:84:3e:f4:f8:d8:28:f6:8e:35:d7:1c:69:81:e3: 19:78:10:4b:8e:f0:39:2c:fc:03:d1:c1:d3:6a:04: a1:d7:54:34:d1:fe:ca:ec:86:06:5a:87:4d:62:41: 25:9a:e5:64:b2:23:f1:4c:a7:44:8e:cb:8d:c9:69: 8d:29:96:2e:2e:c4:f3:23:4e:91:b4:41:71:d2:4f: 14:eb:fa:eb:c5:1d:9f:dc:bb:91:b1:4b:8d:bf:42: 13:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:EE:19:68:74:33:05:D1:2F:9E:F0:19:48:F5:12:EA:DF:A4:18:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/8ee0a8b9-b99e-3cdd-a68f-e7c8847925e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/559253fe-8b4f-48f6-9fe1-109df6bb3251.crl X509v3 Authority Key Identifier: keyid:F9:D3:AA:04:E7:49:4F:99:FF:61:B0:9D:59:8B:71:B9:00:F1:53:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251.cer sbgp-ipAddrBlock: critical IPv4: 199.30.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:d4:08:9c:93:52:c8:b7:44:11:b6:6b:84:c4:7e:8b:4a:88: 1d:ad:ce:a3:0d:36:70:08:29:2f:b1:e5:6e:a3:61:3d:bc:7b: 32:9f:e0:79:90:d3:2b:7a:a4:9c:f4:e8:43:5f:2e:12:36:6c: e8:a3:1f:23:32:aa:58:4f:90:b7:19:97:38:48:0e:f3:11:5d: 52:20:f4:ef:9b:42:f2:f4:98:51:9f:5d:7d:53:4e:c4:e9:ea: 5a:db:ff:f8:55:8d:5c:13:87:90:7b:93:05:ce:8b:38:70:c3: cf:24:dc:57:57:4e:7c:3d:38:4a:79:86:ec:36:f9:06:3d:27: 17:5e:65:29:fd:06:ad:2f:01:76:df:6b:53:04:79:5f:85:ba: 05:7c:ec:62:81:49:83:03:4f:dd:f9:0f:e8:9f:5a:2a:ce:08: 35:09:8a:6a:a0:a4:bf:ea:31:20:99:46:2b:8b:30:b0:38:d0: de:2d:77:11:39:93:4d:40:ca:13:6f:20:00:33:6e:f0:99:9b: a8:67:c6:c7:35:af:42:0b:65:99:6e:b4:c5:c5:50:df:92:11: e5:2e:60:dd:c8:24:b4:8c:d9:5b:36:17:a0:08:64:ab:98:ae: c2:7d:05:79:c0:27:34:20:2e:ab:cd:fe:35:83:c6:1c:0a:19: d1:44:44:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo15YrpFxtriLVw80AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU5MjUzZmUtOGI0Zi00OGY2LTlmZTEtMTA5ZGY2YmIz MjUxMB4XDTI1MDYxNjEzMDEwM1oXDTI1MDkxNDEzMDEwM1owLzEtMCsGA1UEAxMk YWUwZTBhMmYtNTkwOS00NjY0LThhMWMtNDQ3OGZiZjA0OGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquuY2iYUGaGImraDlocOsuzCHsBrHJ/991oP lKPCMsIojDVPzSjGKYqPLlsqR2qr51iFHkQXaROVoMnuZXK1N6ULD7QE7Y0zDAh2 KDPr3TpMpcP3jWNOHTYYYt9A6IMaUCGIAdxOA05OsXgN7sUO7Q0aMZOZWYGVs0oo /bVRPUweIbBKOcyPclbVyCWrUEFF28AEuBHrgOoLrIKUngO705MkK+YmhD70+Ngo 9o411xxpgeMZeBBLjvA5LPwD0cHTagSh11Q00f7K7IYGWodNYkElmuVksiPxTKdE jsuNyWmNKZYuLsTzI06RtEFx0k8U6/rrxR2f3LuRsUuNv0ITlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPPuGWh0MwXRL57wGUj1EurfpBihMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81NTky NTNmZS04YjRmLTQ4ZjYtOWZlMS0xMDlkZjZiYjMyNTEvOGVlMGE4YjktYjk5ZS0z Y2RkLWE2OGYtZTdjODg0NzkyNWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNTU5MjUzZmUtOGI0Zi00OGY2LTlm ZTEtMTA5ZGY2YmIzMjUxLzU1OTI1M2ZlLThiNGYtNDhmNi05ZmUxLTEwOWRmNmJi MzI1MS5jcmwwHwYDVR0jBBgwFoAU+dOqBOdJT5n/YbCdWYtxuQDxUwswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81NTkyNTNmZS04YjRmLTQ4ZjYtOWZlMS0xMDlk ZjZiYjMyNTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxx7zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7UCJyTUsi3RBG2a4TEfotKiB2tzqMNNnAIKS+x5W6jYT28ezKf4HmQ 0yt6pJz06ENfLhI2bOijHyMyqlhPkLcZlzhIDvMRXVIg9O+bQvL0mFGfXX1TTsTp 6lrb//hVjVwTh5B7kwXOizhww88k3FdXTnw9OEp5huw2+QY9JxdeZSn9Bq0vAXbf a1MEeV+FugV87GKBSYMDT935D+ifWirOCDUJimqgpL/qMSCZRiuLMLA40N4tdxE5 k01AyhNvIAAzbvCZm6hnxsc1r0ILZZlutMXFUN+SEeUuYN3IJLSM2Vs2F6AIZKuY rsJ9BXnAJzQgLqvN/jWDxhwKGdFERA4= -----END CERTIFICATE-----Generated at Sun Jun 29 13:44:53 2025 by rpki-client