$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/1c8cfd90-1e45-3ca8-865a-284e8261e043.roa File: 1c8cfd90-1e45-3ca8-865a-284e8261e043.roa (raw, json) Hash identifier: m3gXsagtq+baMbG8qhsENE8+9qeRSi+jiJbF2eaK0do= Subject key identifier: 9B:2E:43:A2:5A:7D:5A:24:DA:39:4B:FB:6F:21:CE:E0:C2:EA:43:AF Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584A1B600332DC1F175AC31C5510 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/1c8cfd90-1e45-3ca8-865a-284e8261e043.roa Signing time: Sat 07 Jun 2025 01:00:50 +0000 ROA not before: Sat 07 Jun 2025 01:00:50 +0000 ROA not after: Fri 05 Sep 2025 01:00:50 +0000 asID: 21949 IP address blocks: 199.68.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1b:60:03:32:dc:1f:17:5a:c3:1c:55:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Jun 7 01:00:50 2025 GMT Not After : Sep 5 01:00:50 2025 GMT Subject: CN=3d911f73-12b0-4e9d-84fd-5039bfd78acb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:35:73:76:80:9a:1a:f2:48:f8:b4:88:c7:c6: be:46:5f:64:77:05:21:21:41:c6:91:5d:f9:b1:22: 24:1a:4b:ee:f8:65:19:ef:9c:72:a0:f7:0c:fa:45: b0:99:ff:e6:bb:41:c8:97:a1:4c:8c:89:c3:f6:90: 1e:81:6c:6c:8a:c5:2c:a3:ad:d0:16:90:8e:46:39: e6:b9:06:b5:90:f8:45:92:3f:0d:b2:89:11:21:cb: 73:69:53:a9:13:65:26:a3:d1:d7:de:b4:d9:62:74: 84:9b:7a:44:4e:50:65:42:5f:f4:6a:5d:92:f8:2c: be:82:4d:75:c9:43:18:29:78:60:48:66:31:c3:8e: 0b:9e:c3:0d:2b:b0:27:85:5e:b2:b8:55:05:62:ef: da:8e:39:c0:3d:b4:a8:70:fe:5c:ac:48:b2:86:82: e7:e0:ce:1e:f0:09:1d:ba:41:24:d9:35:4b:b2:e4: 44:30:e1:3c:e6:88:b3:0d:80:a9:c0:6c:c6:70:4b: bd:f4:c0:0e:6a:38:28:37:fc:11:29:4e:96:bd:cb: 51:32:81:94:ed:71:74:4b:0c:83:cc:ae:28:02:23: ee:3f:6d:c3:29:1f:48:d7:88:69:25:7e:82:1b:9e: 6f:40:8a:b8:74:33:f9:14:45:f9:ce:ac:3e:84:c2: 4e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:2E:43:A2:5A:7D:5A:24:DA:39:4B:FB:6F:21:CE:E0:C2:EA:43:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/1c8cfd90-1e45-3ca8-865a-284e8261e043.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 199.68.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:80:24:2b:a0:5c:f3:4a:47:e6:b5:b4:b4:e1:12:2e:b1:41: bf:39:ab:39:74:d5:2a:d6:07:82:d2:38:de:8b:88:6c:d4:b2: f9:54:90:3e:4d:72:f5:17:46:31:ab:63:6f:97:4b:83:37:12: 5c:0c:9e:df:da:08:cd:ca:00:b2:31:e3:0e:a5:44:ab:64:66: 63:24:ba:1d:3d:2c:02:b0:50:71:01:2a:17:5e:83:78:bb:37: 93:2e:f7:6b:5c:64:20:da:77:c6:da:1b:32:ca:43:a1:39:50: 41:7f:a8:9b:32:f9:93:55:6f:e7:3e:f2:a6:9d:e6:54:ba:4b: e4:6d:50:43:fd:fe:22:26:d7:fa:42:8f:2a:49:a6:04:52:29: 3c:9e:66:db:37:e3:95:5b:37:ae:0e:f7:1d:cd:cf:64:66:f9: a5:ee:b0:26:91:fc:e9:1f:05:45:77:ce:10:05:8d:ae:35:b9: b1:4a:04:ee:ea:12:d8:c9:a9:a0:90:fd:f7:fe:c0:21:54:a5: 3a:8e:d8:44:54:34:a6:b1:fb:c0:2b:db:1d:e8:eb:eb:dc:d4: 14:d7:81:a2:81:7f:53:d6:5e:c7:f9:a0:d4:35:fc:20:01:bc: c2:ca:a1:34:ad:b6:7a:f5:0f:68:3b:24:0c:09:54:d9:61:c7: d7:ce:9d:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEobYAMy3B8XWsMcVRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk M2Q5MTFmNzMtMTJiMC00ZTlkLTg0ZmQtNTAzOWJmZDc4YWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjVzdoCaGvJI+LSIx8a+Rl9kdwUhIUHGkV35 sSIkGkvu+GUZ75xyoPcM+kWwmf/mu0HIl6FMjInD9pAegWxsisUso63QFpCORjnm uQa1kPhFkj8NsokRIctzaVOpE2Umo9HX3rTZYnSEm3pETlBlQl/0al2S+Cy+gk11 yUMYKXhgSGYxw44LnsMNK7AnhV6yuFUFYu/ajjnAPbSocP5crEiyhoLn4M4e8Akd ukEk2TVLsuREMOE85oizDYCpwGzGcEu99MAOajgoN/wRKU6WvctRMoGU7XF0SwyD zK4oAiPuP23DKR9I14hpJX6CG55vQIq4dDP5FEX5zqw+hMJOBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJsuQ6JafVok2jlL+28hzuDC6kOvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvMWM4Y2ZkOTAtMWU0NS0z Y2E4LTg2NWEtMjg0ZTgyNjFlMDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx0R4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEuAJCugXPNKR+a1tLThEi6xQb85qzl01SrWB4LSON6LiGzUsvlUkD5N cvUXRjGrY2+XS4M3ElwMnt/aCM3KALIx4w6lRKtkZmMkuh09LAKwUHEBKhdeg3i7 N5Mu92tcZCDad8baGzLKQ6E5UEF/qJsy+ZNVb+c+8qad5lS6S+RtUEP9/iIm1/pC jypJpgRSKTyeZts345VbN64O9x3Nz2Rm+aXusCaR/OkfBUV3zhAFja41ubFKBO7q EtjJqaCQ/ff+wCFUpTqO2ERUNKax+8Ar2x3o6+vc1BTXgaKBf1PWXsf5oNQ1/CAB vMLKoTSttnr1D2g7JAwJVNlhx9fOnT8= -----END CERTIFICATE-----Generated at Mon Jun 30 20:12:30 2025 by rpki-client