$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/d1d035f6-95d4-3dbe-a301-249e15b96059.roa File: d1d035f6-95d4-3dbe-a301-249e15b96059.roa (raw, json) Hash identifier: gG+noxrk1dNJON4CDXKHf53LHGH+Pm0XT8fnvzgPiIM= Subject key identifier: BC:E0:F3:8D:D7:67:AE:65:58:24:BB:F7:C4:92:24:27:8D:ED:18:C8 Certificate issuer: /CN=4746a92d-5f69-4264-863f-81298a3d93ed Certificate serial: 010D0C9F4328584A3E7FD8DCA0D4A6097201282E Authority key identifier: 81:6F:5D:9C:52:44:D7:10:29:C6:8B:DE:2B:66:72:BA:A6:9A:1E:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/d1d035f6-95d4-3dbe-a301-249e15b96059.roa Signing time: Tue 17 Jun 2025 12:41:43 +0000 ROA not before: Tue 17 Jun 2025 12:41:43 +0000 ROA not after: Mon 15 Sep 2025 12:41:43 +0000 asID: 397373 IP address blocks: 199.127.59.0/24 maxlen: 24 204.77.8.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/4746a92d-5f69-4264-863f-81298a3d93ed.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/4746a92d-5f69-4264-863f-81298a3d93ed.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:7f:d8:dc:a0:d4:a6:09:72:01:28:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4746a92d-5f69-4264-863f-81298a3d93ed Validity Not Before: Jun 17 12:41:43 2025 GMT Not After : Sep 15 12:41:43 2025 GMT Subject: CN=d9924e0f-3a7e-4420-b824-e552a5875249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:73:82:04:3a:7e:11:af:14:86:4f:43:a3:86: 93:03:66:cb:9c:fa:63:31:95:db:43:f3:b6:e8:13: 94:54:2a:84:d8:3e:1f:9e:82:4c:4b:b2:24:28:27: 45:1e:60:7f:92:27:ee:33:92:31:7f:1f:27:de:60: 9b:ee:e3:02:57:07:d6:3d:d1:8d:c0:22:ca:20:e6: c2:41:89:a5:24:b2:78:50:8a:ac:6e:1b:05:5f:52: 49:ae:00:4a:07:e3:de:1a:51:33:26:90:b7:c6:9f: aa:fe:98:bb:15:7d:26:d4:90:5b:f6:a1:38:d1:1a: 66:97:38:21:69:5e:d9:63:24:74:24:fb:52:1b:5b: 30:3a:bb:72:56:c1:5e:95:57:94:d7:aa:5e:1b:21: b5:90:7e:dc:0f:7d:df:f1:20:11:f9:82:7b:8b:60: 20:fb:50:e2:59:19:35:eb:7c:2f:84:0c:f3:73:64: 8d:e1:8b:e0:3a:08:fe:85:ab:93:f3:87:a4:14:83: d1:a3:84:22:26:80:ff:8d:f4:34:dc:28:b7:d8:f2: 77:72:83:c0:41:ee:a2:f5:4e:fa:9b:a0:93:58:c5: e3:36:48:bb:25:11:12:8d:24:53:7f:15:f9:0c:58: 81:85:49:41:8b:71:60:cf:50:bd:a0:8d:2d:89:dc: ad:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:E0:F3:8D:D7:67:AE:65:58:24:BB:F7:C4:92:24:27:8D:ED:18:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/d1d035f6-95d4-3dbe-a301-249e15b96059.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/4746a92d-5f69-4264-863f-81298a3d93ed.crl X509v3 Authority Key Identifier: keyid:81:6F:5D:9C:52:44:D7:10:29:C6:8B:DE:2B:66:72:BA:A6:9A:1E:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed.cer sbgp-ipAddrBlock: critical IPv4: 199.127.59.0/24 204.77.8.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:1f:a5:27:4b:46:9e:4a:0e:cf:af:8e:4e:bb:e9:28:78:9b: d0:25:df:0f:0f:fd:c1:60:b7:c0:35:52:4d:1c:16:b5:0c:48: 0c:78:f3:1b:f2:c2:ab:28:3d:4b:10:61:ad:39:79:3b:3f:cf: 56:2b:e4:20:1c:ea:1b:bf:2c:5c:db:e7:5d:8d:06:94:d9:00: 43:fb:06:c5:91:84:93:8e:cb:29:d0:7a:2d:c0:ea:02:d1:98: cf:8a:00:85:a6:c6:1f:82:94:20:f5:94:3b:3b:c0:94:00:2b: e4:76:67:32:72:c8:c9:8f:2e:c3:75:ab:17:6d:c4:d4:b5:3b: 95:4d:b2:1d:fd:e3:92:65:ae:2f:a2:d4:cf:82:d5:5e:2b:bb: 5f:40:ed:6d:1b:2f:a5:e0:61:ff:a4:7f:f3:04:34:64:02:d7: e7:c4:2b:d5:ea:5f:36:8a:f6:53:35:30:cb:65:03:82:60:b5: 36:7b:05:7f:63:c0:13:65:2d:85:5c:05:95:a6:cd:8c:6d:f7: 2d:a5:7f:07:db:46:40:74:28:4c:09:c2:13:36:c6:2e:a3:58: 9a:33:d2:80:1b:64:a1:a6:c5:58:6f:4c:8a:ef:30:2d:72:3f: 9d:e1:48:06:b6:6c:c2:42:c7:27:29:d6:ed:76:66:fc:dc:11: f6:f3:8a:df -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEo+f9jcoNSmCXIBKC4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDc0NmE5MmQtNWY2OS00MjY0LTg2M2YtODEyOThhM2Q5 M2VkMB4XDTI1MDYxNzEyNDE0M1oXDTI1MDkxNTEyNDE0M1owLzEtMCsGA1UEAxMk ZDk5MjRlMGYtM2E3ZS00NDIwLWI4MjQtZTU1MmE1ODc1MjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHOCBDp+Ea8Uhk9Do4aTA2bLnPpjMZXbQ/O2 6BOUVCqE2D4fnoJMS7IkKCdFHmB/kifuM5Ixfx8n3mCb7uMCVwfWPdGNwCLKIObC QYmlJLJ4UIqsbhsFX1JJrgBKB+PeGlEzJpC3xp+q/pi7FX0m1JBb9qE40Rpmlzgh aV7ZYyR0JPtSG1swOrtyVsFelVeU16peGyG1kH7cD33f8SAR+YJ7i2Ag+1DiWRk1 63wvhAzzc2SN4YvgOgj+hauT84ekFIPRo4QiJoD/jfQ03Ci32PJ3coPAQe6i9U76 m6CTWMXjNki7JRESjSRTfxX5DFiBhUlBi3Fgz1C9oI0tidytzQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFLzg843XZ65lWCS798SSJCeN7RjIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NzQ2 YTkyZC01ZjY5LTQyNjQtODYzZi04MTI5OGEzZDkzZWQvZDFkMDM1ZjYtOTVkNC0z ZGJlLWEzMDEtMjQ5ZTE1Yjk2MDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDc0NmE5MmQtNWY2OS00MjY0LTg2 M2YtODEyOThhM2Q5M2VkLzQ3NDZhOTJkLTVmNjktNDI2NC04NjNmLTgxMjk4YTNk OTNlZC5jcmwwHwYDVR0jBBgwFoAUgW9dnFJE1xApxoveK2ZyuqaaHnYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NzQ2YTkyZC01ZjY5LTQyNjQtODYzZi04MTI5 OGEzZDkzZWQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAx387AwQB zE0IMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHsfpSdLRp5KDs+vjk676Sh4m9Al3w8P/cFgt8A1Uk0cFrUM SAx48xvywqsoPUsQYa05eTs/z1Yr5CAc6hu/LFzb512NBpTZAEP7BsWRhJOOyynQ ei3A6gLRmM+KAIWmxh+ClCD1lDs7wJQAK+R2ZzJyyMmPLsN1qxdtxNS1O5VNsh39 45Jlri+i1M+C1V4ru19A7W0bL6XgYf+kf/MENGQC1+fEK9XqXzaK9lM1MMtlA4Jg tTZ7BX9jwBNlLYVcBZWmzYxt9y2lfwfbRkB0KEwJwhM2xi6jWJoz0oAbZKGmxVhv TIrvMC1yP53hSAa2bMJCxycp1u12ZvzcEfbzit8= -----END CERTIFICATE-----Generated at Mon Jun 30 19:46:42 2025 by rpki-client