$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/5368e9b8-712e-3eaf-a366-757c94d5124e.roa File: 5368e9b8-712e-3eaf-a366-757c94d5124e.roa (raw, json) Hash identifier: dyV+UPZ1lBbKAj3d8wQsVKuU3nncAhYYF8rhA3B98Nk= Subject key identifier: 68:7A:79:44:27:0F:25:57:41:93:4E:40:C1:56:5B:8C:85:6B:80:2F Certificate issuer: /CN=73c8aa7b-fac7-4435-95df-f01200da47d9 Certificate serial: 010D0C9F4328584A506AEE32A3EAD472FEE65980 Authority key identifier: E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/5368e9b8-712e-3eaf-a366-757c94d5124e.roa Signing time: Thu 26 Jun 2025 01:00:49 +0000 ROA not before: Thu 26 Jun 2025 01:00:49 +0000 ROA not after: Wed 24 Sep 2025 01:00:49 +0000 asID: 14618 IP address blocks: 199.66.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:50:6a:ee:32:a3:ea:d4:72:fe:e6:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c8aa7b-fac7-4435-95df-f01200da47d9 Validity Not Before: Jun 26 01:00:49 2025 GMT Not After : Sep 24 01:00:49 2025 GMT Subject: CN=721b1bdf-d59b-4f40-831c-e73292fefb3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:3e:ad:d2:42:c2:4d:05:da:19:46:97:f4:56: 62:0d:f6:08:ad:46:6b:4e:a2:f9:3a:e6:25:52:ea: 65:63:24:52:cd:0e:78:7f:02:c4:79:d3:2d:50:a0: d9:47:fd:70:52:e1:28:c1:3e:af:b4:97:1c:f4:12: 3f:b8:be:47:9e:22:5f:ce:5b:a4:a0:51:5a:8a:06: 20:08:89:cb:7e:d1:c2:1e:5e:f1:7b:ae:39:f2:17: d8:1c:36:33:30:a7:ae:4b:a5:52:54:f2:1e:81:3e: 4b:d2:c6:ac:67:55:81:75:65:b8:c0:04:8d:e6:3d: a2:9f:83:35:6b:56:3f:26:87:f4:4b:64:ff:70:97: 7c:b3:16:62:41:21:43:8b:e8:27:ab:60:e9:ef:67: 78:8c:fd:b8:a5:a0:9a:58:e6:4f:3c:6d:ca:40:bd: a6:8c:4a:48:16:cf:72:fa:d8:1a:c9:fd:8e:86:18: f8:b0:e2:70:56:10:8c:60:91:a1:02:5f:3c:af:99: 2b:84:b6:3c:db:a0:b6:6b:27:b2:0c:42:2b:01:ca: 0e:91:f1:65:0d:31:cb:6d:0e:a5:52:6f:78:55:b7: 98:9f:c2:ec:88:95:d8:3e:6f:ce:fa:a1:7d:02:c5: 1b:d7:55:85:7f:42:57:c2:46:ba:2f:b6:d9:0a:1e: 0e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:7A:79:44:27:0F:25:57:41:93:4E:40:C1:56:5B:8C:85:6B:80:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/5368e9b8-712e-3eaf-a366-757c94d5124e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl X509v3 Authority Key Identifier: keyid:E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer sbgp-ipAddrBlock: critical IPv4: 199.66.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:11:85:5b:9e:a1:5b:c2:5f:73:9b:fe:36:5d:eb:1b:5c:80: 4c:e2:d6:f4:fa:ec:11:e6:33:e9:6c:0f:f1:ab:4e:61:47:bb: e7:3f:c7:bd:eb:3b:62:7d:6f:42:3c:85:a4:dd:ba:52:74:fd: f8:40:a3:93:35:d7:42:f3:be:72:12:42:61:20:02:4f:7a:bf: fe:fa:e3:a0:02:13:39:18:56:f8:d5:54:71:ba:58:2f:ed:64: 2e:e9:c1:57:2b:aa:af:34:0f:f7:d2:0d:4e:78:8a:88:f6:52: b5:70:cf:67:b3:d9:64:b8:60:43:16:b2:2b:7b:96:ed:58:0c: 1e:15:fd:c2:d9:24:db:f9:1f:6f:fa:f8:43:9b:51:54:a3:0f: 96:aa:c5:07:b4:54:0d:f4:8c:4b:4a:58:45:a2:a6:99:c2:64: b6:c6:1e:d3:d8:a6:46:cc:9e:cc:97:d2:24:e9:6d:27:e6:8a: 18:71:45:32:94:6f:a2:f5:48:22:f6:22:9f:d7:bc:3c:c8:00: a8:fc:29:eb:55:77:c2:e0:c0:72:fa:b5:95:8c:1a:30:1c:40: 46:58:52:65:ef:3b:1b:7c:9d:51:80:6b:e6:61:fc:57:ac:41: b5:51:7a:24:85:8d:68:52:b1:e2:ff:96:19:a7:5e:d4:d8:3d: 0d:4a:0b:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpQau4yo+rUcv7mWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzNjOGFhN2ItZmFjNy00NDM1LTk1ZGYtZjAxMjAwZGE0 N2Q5MB4XDTI1MDYyNjAxMDA0OVoXDTI1MDkyNDAxMDA0OVowLzEtMCsGA1UEAxMk NzIxYjFiZGYtZDU5Yi00ZjQwLTgzMWMtZTczMjkyZmVmYjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiz6t0kLCTQXaGUaX9FZiDfYIrUZrTqL5OuYl UuplYyRSzQ54fwLEedMtUKDZR/1wUuEowT6vtJcc9BI/uL5HniJfzlukoFFaigYg CInLftHCHl7xe6458hfYHDYzMKeuS6VSVPIegT5L0sasZ1WBdWW4wASN5j2in4M1 a1Y/Jof0S2T/cJd8sxZiQSFDi+gnq2Dp72d4jP24paCaWOZPPG3KQL2mjEpIFs9y +tgayf2Ohhj4sOJwVhCMYJGhAl88r5krhLY826C2ayeyDEIrAcoOkfFlDTHLbQ6l Um94VbeYn8LsiJXYPm/O+qF9AsUb11WFf0JXwka6L7bZCh4O4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGh6eUQnDyVXQZNOQMFWW4yFa4AvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83M2M4 YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEyMDBkYTQ3ZDkvNTM2OGU5YjgtNzEyZS0z ZWFmLWEzNjYtNzU3Yzk0ZDUxMjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzNjOGFhN2ItZmFjNy00NDM1LTk1 ZGYtZjAxMjAwZGE0N2Q5LzczYzhhYTdiLWZhYzctNDQzNS05NWRmLWYwMTIwMGRh NDdkOS5jcmwwHwYDVR0jBBgwFoAU479wIdxEWa9cY/l4RGY3xgpdsxwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83M2M4YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEy MDBkYTQ3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx0K8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0RhVueoVvCX3Ob/jZd6xtcgEzi1vT67BHmM+lsD/GrTmFHu+c/x73r O2J9b0I8haTdulJ0/fhAo5M110LzvnISQmEgAk96v/7646ACEzkYVvjVVHG6WC/t ZC7pwVcrqq80D/fSDU54ioj2UrVwz2ez2WS4YEMWsit7lu1YDB4V/cLZJNv5H2/6 +EObUVSjD5aqxQe0VA30jEtKWEWippnCZLbGHtPYpkbMnsyX0iTpbSfmihhxRTKU b6L1SCL2Ip/XvDzIAKj8KetVd8LgwHL6tZWMGjAcQEZYUmXvOxt8nVGAa+Zh/Fes QbVReiSFjWhSseL/lhmnXtTYPQ1KC+g= -----END CERTIFICATE-----Generated at Tue Jul 1 16:44:17 2025 by rpki-client