$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/3296796c-a812-3fd9-8b79-c617f853bf28.roa File: 3296796c-a812-3fd9-8b79-c617f853bf28.roa (raw, json) Hash identifier: NqoK5PWNKodnPFYowAg21dwlpDcbzzNexNE1fb0eh7Y= Subject key identifier: C6:8B:C5:43:94:65:A8:9C:5D:60:3B:46:E9:B3:14:28:0B:7B:DA:10 Certificate issuer: /CN=40a485a4-e936-4174-8999-571e03203823 Certificate serial: 010D0C9F4328584A3A15760AC4B0907A3B079100 Authority key identifier: 8E:DB:72:14:EC:37:6A:68:7B:79:16:21:24:27:B4:B0:40:42:49:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/3296796c-a812-3fd9-8b79-c617f853bf28.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 15177 IP address blocks: 199.102.60.0/22 maxlen: 24 199.191.120.0/21 maxlen: 24 208.74.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:76:0a:c4:b0:90:7a:3b:07:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40a485a4-e936-4174-8999-571e03203823 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=d83d39df-ed57-442f-8602-e5db8c5dd4e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b7:fa:4e:32:ed:5b:cc:f9:f5:75:64:99:1d: 49:2a:29:18:04:3b:54:e7:69:6c:cc:74:d6:b1:4a: 4a:c4:ae:8a:58:a8:88:8f:9a:84:47:12:ab:9a:5a: ec:96:9c:27:51:f7:50:8a:43:2e:ff:3d:56:6f:38: cb:5b:d6:eb:51:0a:00:20:44:c7:de:27:ad:42:35: ad:98:16:76:e2:67:72:4a:b5:f8:c1:56:4f:bd:c0: 58:8d:cb:61:1a:ed:74:9c:b9:1a:dd:2d:03:8d:ff: 5b:b8:b2:43:94:6c:b0:6b:72:6a:3f:5a:59:99:28: 60:42:e1:c0:8a:3d:5b:b4:7f:d9:dc:c1:ef:e1:52: 3d:32:95:c7:2a:99:18:33:74:30:a4:b8:0c:3f:8f: ba:6c:0f:fa:62:87:d2:45:ad:4b:d7:9d:f2:21:56: 73:1a:9f:d9:a8:5a:80:1b:db:da:e6:01:f0:e6:0f: a7:df:19:31:e0:d7:8b:7c:70:84:fb:ec:07:1b:d0: 8c:68:83:eb:55:01:80:a7:5d:24:58:65:68:bb:f8: e3:6b:cc:34:5d:d2:2d:da:80:36:97:14:43:3a:26: bd:ea:0d:70:0f:90:0c:7b:d1:e7:c1:1e:6b:16:a9: 68:a1:89:07:16:86:52:37:8c:19:af:09:b0:af:dd: 6f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:8B:C5:43:94:65:A8:9C:5D:60:3B:46:E9:B3:14:28:0B:7B:DA:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/3296796c-a812-3fd9-8b79-c617f853bf28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.crl X509v3 Authority Key Identifier: keyid:8E:DB:72:14:EC:37:6A:68:7B:79:16:21:24:27:B4:B0:40:42:49:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823.cer sbgp-ipAddrBlock: critical IPv4: 199.102.60.0/22 199.191.120.0/21 208.74.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:a1:69:65:76:53:38:90:d6:37:e0:83:ff:a1:e3:e7:58:61: 1a:d4:49:1a:81:51:4a:3c:47:bc:a0:e5:6a:3a:b2:1a:5d:d6: 32:a1:89:cc:59:e8:23:a3:bb:f6:31:f8:fe:57:b7:7c:9b:e0: 71:c6:ff:27:89:b4:e7:5f:12:e3:79:77:46:1d:64:75:71:27: 8c:a7:73:81:f4:98:ce:55:f7:8d:ad:af:dd:90:e0:40:06:2f: fe:6e:f5:02:65:09:4d:13:7f:c8:72:3c:41:c3:a6:93:a4:db: 75:3b:81:94:c5:d3:90:7f:be:ef:4d:c0:75:3c:0b:3e:3f:14: bc:f7:13:c7:a5:5f:f7:56:9e:0f:0e:d9:f3:4f:0b:c4:31:6a: a0:81:1f:6d:59:e2:57:1b:d1:21:78:16:f5:b2:b5:74:87:41: b0:eb:f7:4e:83:26:fd:50:86:8f:53:75:2c:88:90:73:3f:47: a4:21:60:91:95:5d:b0:1a:80:e5:be:9c:5a:60:64:fd:4e:88: 84:0b:cb:a0:71:bc:c8:82:83:57:7d:9f:98:8a:d4:c7:8f:b0: 0c:b2:d8:a2:48:2e:cf:df:8e:05:4f:13:b8:2e:26:1c:72:a7: 4c:0f:a0:3f:04:bc:2a:e7:47:63:ee:cd:8c:aa:0b:eb:28:42: f6:ef:2b:82 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEo6FXYKxLCQejsHkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBhNDg1YTQtZTkzNi00MTc0LTg5OTktNTcxZTAzMjAz ODIzMB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk ZDgzZDM5ZGYtZWQ1Ny00NDJmLTg2MDItZTVkYjhjNWRkNGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17f6TjLtW8z59XVkmR1JKikYBDtU52lszHTW sUpKxK6KWKiIj5qERxKrmlrslpwnUfdQikMu/z1WbzjLW9brUQoAIETH3ietQjWt mBZ24mdySrX4wVZPvcBYjcthGu10nLka3S0Djf9buLJDlGywa3JqP1pZmShgQuHA ij1btH/Z3MHv4VI9MpXHKpkYM3QwpLgMP4+6bA/6YofSRa1L153yIVZzGp/ZqFqA G9va5gHw5g+n3xkx4NeLfHCE++wHG9CMaIPrVQGAp10kWGVou/jja8w0XdIt2oA2 lxRDOia96g1wD5AMe9HnwR5rFqlooYkHFoZSN4wZrwmwr91v7QIDAQABo4IDYTCC A10wHQYDVR0OBBYEFMaLxUOUZaicXWA7RumzFCgLe9oQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MGE0 ODVhNC1lOTM2LTQxNzQtODk5OS01NzFlMDMyMDM4MjMvMzI5Njc5NmMtYTgxMi0z ZmQ5LThiNzktYzYxN2Y4NTNiZjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDBhNDg1YTQtZTkzNi00MTc0LTg5 OTktNTcxZTAzMjAzODIzLzQwYTQ4NWE0LWU5MzYtNDE3NC04OTk5LTU3MWUwMzIw MzgyMy5jcmwwHwYDVR0jBBgwFoAUjttyFOw3amh7eRYhJCe0sEBCSQEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MGE0ODVhNC1lOTM2LTQxNzQtODk5OS01NzFl MDMyMDM4MjMuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCx2Y8AwQD x794AwQD0EqYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBABChaWV2UziQ1jfgg/+h4+dYYRrUSRqBUUo8R7yg 5Wo6shpd1jKhicxZ6COju/Yx+P5Xt3yb4HHG/yeJtOdfEuN5d0YdZHVxJ4ync4H0 mM5V942tr92Q4EAGL/5u9QJlCU0Tf8hyPEHDppOk23U7gZTF05B/vu9NwHU8Cz4/ FLz3E8elX/dWng8O2fNPC8QxaqCBH21Z4lcb0SF4FvWytXSHQbDr906DJv1Qho9T dSyIkHM/R6QhYJGVXbAagOW+nFpgZP1OiIQLy6BxvMiCg1d9n5iK1MePsAyy2KJI Ls/fjgVPE7guJhxyp0wPoD8EvCrnR2PuzYyqC+soQvbvK4I= -----END CERTIFICATE-----Generated at Thu Jul 3 16:43:48 2025 by rpki-client