$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05ceb199-4ec7-4d16-9739-22face258c65/4e8df451-0a94-3c5b-8d3f-5db4d7deb197.roa File: 4e8df451-0a94-3c5b-8d3f-5db4d7deb197.roa (raw, json) Hash identifier: PjldBUIx89pDukWr8T5Pti93a64Rf/Wp/AnL8UYo4ms= Subject key identifier: 4D:33:D6:00:BF:FE:A0:31:A7:DB:79:4B:15:63:B5:37:4C:A0:E5:B8 Certificate issuer: /CN=05ceb199-4ec7-4d16-9739-22face258c65 Certificate serial: 010D0C9F4328584A42757CEA934521CCB701ED80 Authority key identifier: 25:A3:6A:9B:CE:3D:CB:6F:93:56:D2:97:42:07:51:16:5C:E9:9D:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05ceb199-4ec7-4d16-9739-22face258c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05ceb199-4ec7-4d16-9739-22face258c65/4e8df451-0a94-3c5b-8d3f-5db4d7deb197.roa Signing time: Sat 21 Jun 2025 01:00:48 +0000 ROA not before: Sat 21 Jun 2025 01:00:48 +0000 ROA not after: Fri 19 Sep 2025 01:00:48 +0000 asID: 32073 IP address blocks: 205.222.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05ceb199-4ec7-4d16-9739-22face258c65/05ceb199-4ec7-4d16-9739-22face258c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05ceb199-4ec7-4d16-9739-22face258c65/05ceb199-4ec7-4d16-9739-22face258c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05ceb199-4ec7-4d16-9739-22face258c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:42:75:7c:ea:93:45:21:cc:b7:01:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05ceb199-4ec7-4d16-9739-22face258c65 Validity Not Before: Jun 21 01:00:48 2025 GMT Not After : Sep 19 01:00:48 2025 GMT Subject: CN=301e64f4-cfed-473c-acc1-d2427991b044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:49:61:b4:fb:f9:57:46:c2:67:8a:3e:60:23: 2d:da:48:c2:ea:af:de:04:4b:64:f9:0f:4f:6a:9a: 8d:74:5f:85:73:f0:bc:dc:f7:c7:f3:5e:1d:53:d7: d5:58:3a:05:bc:ad:45:df:4c:8d:60:41:af:88:cd: 77:4b:0a:cc:d1:bc:3d:4a:70:8a:94:2d:b5:d0:a0: b1:8b:3d:c5:a3:a2:2b:8e:52:c7:f6:35:d8:35:6d: 21:2b:b3:78:1d:07:ac:6a:06:c2:59:c6:39:65:1e: 87:35:15:ef:cd:46:23:da:8c:fd:2a:29:25:58:ba: db:da:ba:51:eb:25:11:72:4c:2f:87:c9:bb:37:5b: 66:60:2e:2a:02:5e:a9:4c:55:7a:9b:42:65:01:1f: 25:f1:24:de:ec:39:35:3d:aa:f8:84:16:30:8c:55: b6:1d:f5:65:78:d7:d2:12:08:c7:2f:1c:0b:fd:70: 02:25:c3:b4:1a:33:4a:04:24:f7:a6:bd:1b:5b:85: 6f:13:b1:dc:f6:53:d7:c8:d0:9b:9d:4b:75:0c:2b: 57:d1:0b:41:a0:9f:71:99:b7:70:08:8e:fc:a1:a0: b2:95:e8:c1:44:6b:0b:7f:59:9b:e0:a1:ce:40:9b: 14:d6:e7:99:46:64:e5:73:17:3c:e1:2b:e6:cb:a0: 3f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:33:D6:00:BF:FE:A0:31:A7:DB:79:4B:15:63:B5:37:4C:A0:E5:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05ceb199-4ec7-4d16-9739-22face258c65/4e8df451-0a94-3c5b-8d3f-5db4d7deb197.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05ceb199-4ec7-4d16-9739-22face258c65/05ceb199-4ec7-4d16-9739-22face258c65.crl X509v3 Authority Key Identifier: keyid:25:A3:6A:9B:CE:3D:CB:6F:93:56:D2:97:42:07:51:16:5C:E9:9D:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05ceb199-4ec7-4d16-9739-22face258c65.cer sbgp-ipAddrBlock: critical IPv4: 205.222.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:08:07:a2:fe:c8:9a:35:b8:a4:60:43:a4:e2:40:e1:15:de: d0:e1:a9:bc:f0:21:56:47:2d:c4:0a:36:26:b4:8b:0a:17:57: 3f:7f:20:8e:f8:9b:00:7c:98:65:33:54:73:c7:2d:33:09:fc: 11:69:ad:52:97:30:6d:c6:d6:09:a1:86:54:85:18:52:d0:96: 7f:ea:78:38:a7:21:b7:cf:b2:36:a6:b9:28:fa:0f:81:f1:3c: 34:63:1a:95:4c:ed:ce:95:cf:61:ec:07:0d:01:f3:06:91:88: f5:ac:9e:95:d6:bc:12:3f:64:2a:31:75:ab:ae:b7:ad:77:f0: 7a:39:16:49:41:95:98:2b:c6:e4:f4:40:68:f9:bf:56:44:20: 4f:0b:5b:80:91:e4:2b:af:8d:f4:ed:1d:3b:db:e8:76:a3:50: 4f:cc:4a:d0:62:01:fc:67:be:7e:6b:8e:25:84:7f:62:2f:11: 59:b1:76:4c:61:53:21:7d:08:8b:55:35:26:59:6c:6b:11:d1: 5f:b9:ef:37:cc:23:37:0f:54:2c:a8:79:04:fb:22:26:4c:5a: 63:60:5d:b9:a4:14:8d:e0:87:d8:72:6b:49:7a:85:cd:09:94: ad:d3:09:f2:54:41:ad:6f:77:30:fd:bd:ee:7c:11:3c:93:42: d3:31:37:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpCdXzqk0UhzLcB7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDVjZWIxOTktNGVjNy00ZDE2LTk3MzktMjJmYWNlMjU4 YzY1MB4XDTI1MDYyMTAxMDA0OFoXDTI1MDkxOTAxMDA0OFowLzEtMCsGA1UEAxMk MzAxZTY0ZjQtY2ZlZC00NzNjLWFjYzEtZDI0Mjc5OTFiMDQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArklhtPv5V0bCZ4o+YCMt2kjC6q/eBEtk+Q9P apqNdF+Fc/C83PfH814dU9fVWDoFvK1F30yNYEGviM13SwrM0bw9SnCKlC210KCx iz3Fo6IrjlLH9jXYNW0hK7N4HQesagbCWcY5ZR6HNRXvzUYj2oz9KiklWLrb2rpR 6yURckwvh8m7N1tmYC4qAl6pTFV6m0JlAR8l8STe7Dk1Par4hBYwjFW2HfVleNfS EgjHLxwL/XACJcO0GjNKBCT3pr0bW4VvE7Hc9lPXyNCbnUt1DCtX0QtBoJ9xmbdw CI78oaCylejBRGsLf1mb4KHOQJsU1ueZRmTlcxc84Svmy6A/NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE0z1gC//qAxp9t5SxVjtTdMoOW4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wNWNl YjE5OS00ZWM3LTRkMTYtOTczOS0yMmZhY2UyNThjNjUvNGU4ZGY0NTEtMGE5NC0z YzViLThkM2YtNWRiNGQ3ZGViMTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMDVjZWIxOTktNGVjNy00ZDE2LTk3 MzktMjJmYWNlMjU4YzY1LzA1Y2ViMTk5LTRlYzctNGQxNi05NzM5LTIyZmFjZTI1 OGM2NS5jcmwwHwYDVR0jBBgwFoAUJaNqm849y2+TVtKXQgdRFlzpneQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8wNWNlYjE5OS00ZWM3LTRkMTYtOTczOS0yMmZh Y2UyNThjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzd75MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFgIB6L+yJo1uKRgQ6TiQOEV3tDhqbzwIVZHLcQKNia0iwoXVz9/II74 mwB8mGUzVHPHLTMJ/BFprVKXMG3G1gmhhlSFGFLQln/qeDinIbfPsjamuSj6D4Hx PDRjGpVM7c6Vz2HsBw0B8waRiPWsnpXWvBI/ZCoxdauut6138Ho5FklBlZgrxuT0 QGj5v1ZEIE8LW4CR5CuvjfTtHTvb6HajUE/MStBiAfxnvn5rjiWEf2IvEVmxdkxh UyF9CItVNSZZbGsR0V+57zfMIzcPVCyoeQT7IiZMWmNgXbmkFI3gh9hya0l6hc0J lK3TCfJUQa1vdzD9ve58ETyTQtMxNyY= -----END CERTIFICATE-----Generated at Tue Jul 1 05:34:36 2025 by rpki-client