$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1f255c25-c365-3640-bfa2-cec39955762c.roa File: 1f255c25-c365-3640-bfa2-cec39955762c.roa (raw, json) Hash identifier: BmJiIsTDjT1sY2j2hQVRcL1KWZSyTzATeQFrWSiZbBo= Subject key identifier: E8:8E:0D:7B:F4:D4:FC:4D:8F:81:A3:01:01:EF:98:C6:AE:02:E1:E2 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F43285849F71506CAD6DED907082BFC00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1f255c25-c365-3640-bfa2-cec39955762c.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 22691 IP address blocks: 199.224.0.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:06:ca:d6:de:d9:07:08:2b:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=db310acf-8649-4c43-ae50-4204f8c280ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:23:44:2c:da:60:26:87:29:54:e8:ed:65:da: b8:6e:3c:af:ed:61:53:a0:2e:8a:88:8d:96:4c:99: c6:d3:46:57:ba:50:73:25:66:aa:3a:5d:c4:cf:4a: 7c:24:f2:eb:b1:55:62:fd:67:61:e3:ca:f0:f8:08: f8:87:af:da:e3:1c:94:f2:44:73:66:23:7b:9c:ed: 99:9b:66:48:44:d1:5e:be:15:85:47:f1:44:d4:d4: 33:a8:81:39:44:83:80:4c:f8:28:47:2d:c4:4d:9c: 58:21:f1:dc:09:ca:1d:6a:ce:c9:64:9f:80:48:02: ad:d0:e5:0e:7e:78:99:aa:d2:8f:0b:f7:fe:3e:7a: b5:6e:3f:86:fc:f9:59:5d:8f:bb:49:a2:28:63:73: e0:5f:83:4f:fc:04:7b:50:ce:55:60:d1:a6:4e:39: e7:c9:b8:46:a3:cf:e3:4d:c8:2c:21:8a:a1:3d:a7: 3e:c1:03:10:d4:10:78:c7:9c:73:bd:16:50:0f:5e: a7:90:2a:67:21:ed:15:ea:df:6f:03:c0:a5:de:4c: b1:f9:7f:5a:1e:91:2c:1e:dd:0e:37:c6:6a:f7:4d: d9:c8:8e:3f:e6:e4:23:44:05:b2:e9:1f:5b:95:9c: dc:f6:81:f7:09:68:05:a0:55:d4:ad:bc:0b:05:7d: 5a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:8E:0D:7B:F4:D4:FC:4D:8F:81:A3:01:01:EF:98:C6:AE:02:E1:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1f255c25-c365-3640-bfa2-cec39955762c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 199.224.0.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:de:16:0b:17:88:72:be:b1:54:7b:44:61:bf:2b:ac:96:ca: 46:46:dc:1a:88:4b:b0:43:82:21:8b:d8:c0:74:18:1e:a9:db: 36:de:0d:96:67:f8:ac:b6:63:b9:13:f6:40:20:11:c3:c1:2c: e8:a8:55:f5:61:0f:a2:5a:a5:d1:23:e1:5e:20:86:f0:94:68: 7a:9f:40:2d:d0:b2:79:e4:b2:3e:c3:42:52:7b:ad:49:4e:69: 5a:1c:c2:6b:93:7d:17:74:b5:9d:20:8a:b7:3e:aa:c1:f2:c0: f6:87:d8:2a:db:6f:f5:e3:68:5b:31:ad:2f:94:ee:90:ff:92: 08:ce:46:2d:e1:56:04:ee:9b:03:19:09:c8:1e:dd:ca:0d:be: 98:86:0d:43:8b:34:6d:0d:e0:0c:d5:55:be:97:9c:5e:36:b9: 68:c4:4c:23:5b:a2:e6:30:3f:1c:5a:5e:6b:03:9f:70:b3:8b: 2a:90:7f:78:a4:2d:0e:49:27:90:5f:76:db:72:2e:15:45:e3: 36:1d:cd:1f:73:ef:16:c4:c5:d2:91:02:56:20:2f:bc:b3:39: c1:7d:24:5e:d6:bd:0f:c4:0e:f1:ba:33:37:fb:ad:36:dc:8e: c2:ce:7a:02:d1:e6:10:72:3c:99:a7:d9:f2:6c:59:00:a1:4a: 1d:97:cc:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn3FQbK1t7ZBwgr/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk ZGIzMTBhY2YtODY0OS00YzQzLWFlNTAtNDIwNGY4YzI4MGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCNELNpgJocpVOjtZdq4bjyv7WFToC6KiI2W TJnG00ZXulBzJWaqOl3Ez0p8JPLrsVVi/Wdh48rw+Aj4h6/a4xyU8kRzZiN7nO2Z m2ZIRNFevhWFR/FE1NQzqIE5RIOATPgoRy3ETZxYIfHcCcodas7JZJ+ASAKt0OUO fniZqtKPC/f+Pnq1bj+G/PlZXY+7SaIoY3PgX4NP/AR7UM5VYNGmTjnnybhGo8/j TcgsIYqhPac+wQMQ1BB4x5xzvRZQD16nkCpnIe0V6t9vA8Cl3kyx+X9aHpEsHt0O N8Zq903ZyI4/5uQjRAWy6R9blZzc9oH3CWgFoFXUrbwLBX1aKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOiODXv01PxNj4GjAQHvmMauAuHiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMWYyNTVjMjUtYzM2NS0z NjQwLWJmYTItY2VjMzk5NTU3NjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx+AAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHeFgsXiHK+sVR7RGG/K6yWykZG3BqIS7BDgiGL2MB0GB6p2zbeDZZn +Ky2Y7kT9kAgEcPBLOioVfVhD6JapdEj4V4ghvCUaHqfQC3Qsnnksj7DQlJ7rUlO aVocwmuTfRd0tZ0girc+qsHywPaH2Crbb/XjaFsxrS+U7pD/kgjORi3hVgTumwMZ Ccge3coNvpiGDUOLNG0N4AzVVb6XnF42uWjETCNbouYwPxxaXmsDn3CziyqQf3ik LQ5JJ5BfdttyLhVF4zYdzR9z7xbExdKRAlYgL7yzOcF9JF7WvQ/EDvG6Mzf7rTbc jsLOegLR5hByPJmn2fJsWQChSh2XzOk= -----END CERTIFICATE-----Generated at Mon Jun 30 20:28:39 2025 by rpki-client