$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/2938d50c-8e48-36b6-993b-1b4431994e3b.roa File: 2938d50c-8e48-36b6-993b-1b4431994e3b.roa (raw, json) Hash identifier: 3c/PExnYb1+qQE+fsjV7WlUGPwT2WwbBbhrrs28gTQg= Subject key identifier: 12:27:6A:5F:E3:4C:3F:22:4E:D6:4B:5E:F2:2E:A6:6F:35:F1:97:C8 Certificate issuer: /CN=4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7 Certificate serial: 010D0C9F43285849F87A83EA9D57480EC46A8CE0 Authority key identifier: F7:C8:46:F1:D6:FE:04:68:EA:AC:40:E7:0B:41:CA:28:F8:25:DA:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/2938d50c-8e48-36b6-993b-1b4431994e3b.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 53589 IP address blocks: 199.188.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:83:ea:9d:57:48:0e:c4:6a:8c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7 Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=6ee83891-e670-4c00-a3bd-22aa5a8b4d62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:49:ae:41:f4:ef:87:17:8c:8d:22:74:7a:bb: 2f:0e:de:5d:4f:4f:59:f2:cd:a4:12:51:10:89:f7: 08:3e:44:d1:70:fa:95:b7:18:29:a2:8b:e7:00:ce: 40:95:7d:92:86:da:bc:c5:a0:85:37:3b:af:8b:9d: 2e:89:2b:26:73:86:d6:b0:51:c6:f6:f2:af:94:60: c4:b3:37:40:5b:2c:8d:01:53:4e:da:71:d1:b6:3d: af:27:26:32:a9:8f:53:b4:15:71:27:ec:75:2f:73: 6f:55:9f:0c:fc:b4:bc:b4:1e:fb:68:be:e5:f9:0d: fc:58:c2:ff:15:26:ed:5a:c5:db:5c:06:90:db:8e: d1:a2:0d:31:64:6f:bb:f6:2b:9a:c6:61:0a:ff:1f: f8:73:ca:25:13:33:9b:77:06:11:3a:39:ae:01:c1: b1:17:82:06:11:e6:b2:7c:ef:84:81:96:bc:41:ae: 06:fd:a8:5e:5d:38:ca:b9:0e:b5:d9:4f:dd:1c:1d: db:d2:14:67:2e:1b:06:98:12:b9:38:a5:d7:ab:fc: d3:7a:3b:75:cb:67:33:6f:02:d5:1f:92:ca:08:f9: 79:64:f5:93:f6:0d:51:18:7e:4f:48:2c:3b:7a:42: 31:b5:a8:e0:30:bc:c0:86:b7:d7:1f:18:68:b3:b3: c8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:27:6A:5F:E3:4C:3F:22:4E:D6:4B:5E:F2:2E:A6:6F:35:F1:97:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/2938d50c-8e48-36b6-993b-1b4431994e3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.crl X509v3 Authority Key Identifier: keyid:F7:C8:46:F1:D6:FE:04:68:EA:AC:40:E7:0B:41:CA:28:F8:25:DA:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.cer sbgp-ipAddrBlock: critical IPv4: 199.188.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:45:bb:ad:1d:87:81:e2:f9:d1:c7:d2:0d:99:01:b1:a9:7a: b2:eb:a5:83:43:2f:86:ac:55:8b:38:ca:12:02:e6:da:49:dc: 47:27:e4:26:1e:72:c0:5d:a8:96:4f:6f:68:d9:44:1c:7e:fa: 56:8c:cf:bd:e9:7e:4b:28:16:b5:70:cb:b5:71:09:ec:3c:74: 7e:1a:49:47:84:2b:ca:71:32:e3:c5:1c:ba:4e:db:33:b8:b3: 95:cc:8f:61:98:02:27:54:ac:c6:3b:b7:00:8d:a1:11:12:49: 80:e9:7c:e7:17:1a:31:c4:8f:34:ab:f7:86:e3:54:4a:ec:cd: b3:ed:cb:b3:21:76:28:20:d6:64:7f:a8:22:72:98:48:9d:39: 61:b5:4c:8d:96:a4:40:ba:6b:4b:d3:55:e1:9e:ae:96:bb:fc: c9:91:48:5e:1a:b5:1f:9c:0c:58:bd:65:98:94:6f:59:d0:65: 06:56:08:48:9d:cf:31:41:72:1d:8b:d9:16:4c:7f:6a:06:c6: ec:69:a1:4b:14:91:ec:e4:dd:54:e7:68:6a:bd:4f:63:8a:55: e5:d3:a6:e7:f8:34:34:b2:cc:2d:ac:8e:4d:91:95:e6:cf:80: 86:63:59:53:2e:d0:25:09:47:8e:41:73:ec:a3:83:94:5b:14: c3:8e:58:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn4eoPqnVdIDsRqjOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJlNTFlODItN2NjNS00NTAwLWEwZmYtY2MzYTlkNWUz ZmI3MB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk NmVlODM4OTEtZTY3MC00YzAwLWEzYmQtMjJhYTVhOGI0ZDYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUmuQfTvhxeMjSJ0ersvDt5dT09Z8s2kElEQ ifcIPkTRcPqVtxgpoovnAM5AlX2Shtq8xaCFNzuvi50uiSsmc4bWsFHG9vKvlGDE szdAWyyNAVNO2nHRtj2vJyYyqY9TtBVxJ+x1L3NvVZ8M/LS8tB77aL7l+Q38WML/ FSbtWsXbXAaQ247Rog0xZG+79iuaxmEK/x/4c8olEzObdwYROjmuAcGxF4IGEeay fO+EgZa8Qa4G/aheXTjKuQ612U/dHB3b0hRnLhsGmBK5OKXXq/zTejt1y2czbwLV H5LKCPl5ZPWT9g1RGH5PSCw7ekIxtajgMLzAhrfXHxhos7PIHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBInal/jTD8iTtZLXvIupm818ZfIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YmU1 MWU4Mi03Y2M1LTQ1MDAtYTBmZi1jYzNhOWQ1ZTNmYjcvMjkzOGQ1MGMtOGU0OC0z NmI2LTk5M2ItMWI0NDMxOTk0ZTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGJlNTFlODItN2NjNS00NTAwLWEw ZmYtY2MzYTlkNWUzZmI3LzRiZTUxZTgyLTdjYzUtNDUwMC1hMGZmLWNjM2E5ZDVl M2ZiNy5jcmwwHwYDVR0jBBgwFoAU98hG8db+BGjqrEDnC0HKKPgl2lkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80YmU1MWU4Mi03Y2M1LTQ1MDAtYTBmZi1jYzNh OWQ1ZTNmYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx7zcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRFu60dh4Hi+dHH0g2ZAbGperLrpYNDL4asVYs4yhIC5tpJ3Ecn5CYe csBdqJZPb2jZRBx++laMz73pfksoFrVwy7VxCew8dH4aSUeEK8pxMuPFHLpO2zO4 s5XMj2GYAidUrMY7twCNoRESSYDpfOcXGjHEjzSr94bjVErszbPty7Mhdigg1mR/ qCJymEidOWG1TI2WpEC6a0vTVeGerpa7/MmRSF4atR+cDFi9ZZiUb1nQZQZWCEid zzFBch2L2RZMf2oGxuxpoUsUkezk3VTnaGq9T2OKVeXTpuf4NDSyzC2sjk2RlebP gIZjWVMu0CUJR45Bc+yjg5RbFMOOWEM= -----END CERTIFICATE-----Generated at Mon Jun 30 01:27:08 2025 by rpki-client