$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/1148204d-0c51-3060-80e2-cfaa96ea1e5f.roa File: 1148204d-0c51-3060-80e2-cfaa96ea1e5f.roa (raw, json) Hash identifier: TfNxOeyeiZadz8QVMuoT2XFUed40Va22apzzHu5pY28= Subject key identifier: A6:99:19:6B:72:0F:78:85:A0:A3:B7:A5:8C:49:73:5D:A8:A0:FB:49 Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F4328584A43DAFB60FCE6DC57EC48F880 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/1148204d-0c51-3060-80e2-cfaa96ea1e5f.roa Signing time: Sat 21 Jun 2025 13:01:03 +0000 ROA not before: Sat 21 Jun 2025 13:01:03 +0000 ROA not after: Fri 19 Sep 2025 13:01:03 +0000 asID: 3756 IP address blocks: 199.109.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:43:da:fb:60:fc:e6:dc:57:ec:48:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: Jun 21 13:01:03 2025 GMT Not After : Sep 19 13:01:03 2025 GMT Subject: CN=4fef92bc-3885-49a1-8d55-e1b39e5f2626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8f:0b:10:53:f8:89:1b:af:0c:37:28:51:1c: d7:80:e9:ad:19:89:45:04:0e:93:ac:02:2d:a5:e0: fc:bc:e0:5c:2a:c8:f6:3b:bf:2e:a5:4c:ae:ec:0c: 1c:b9:c4:2a:e8:ad:ff:47:d6:63:13:36:36:75:cf: 6b:a2:29:41:ef:2f:15:a0:ab:7c:63:2d:57:42:22: 7b:73:67:f1:2e:79:17:e8:b6:4a:ad:48:01:c3:97: d4:78:4c:9b:ce:f4:80:aa:cc:7c:84:7d:8b:d1:55: bb:66:92:1c:38:21:c8:8c:9b:df:a1:a4:06:5e:a6: 4c:2b:af:28:30:01:8e:9c:44:d1:f8:b2:e8:24:3c: f8:d3:51:ff:7d:ca:96:ac:d8:40:7c:c8:d3:cb:6a: d3:7b:15:bd:24:69:41:a5:9a:49:7b:5c:0f:54:3f: 9d:08:f3:8d:2b:ce:af:8b:25:0c:cf:80:0e:88:73: ea:a9:5f:93:9f:01:d4:43:b7:5d:46:c0:81:f7:e0: 08:89:32:16:86:72:c4:7d:2e:b5:04:e4:74:94:60: 08:fb:1a:9e:92:a2:98:83:e5:29:fc:72:53:30:dd: 05:58:73:73:6c:03:20:47:1c:50:cf:a6:0c:58:be: 51:fd:78:ac:64:89:fb:bb:da:a7:2e:ab:b7:6b:70: 67:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:99:19:6B:72:0F:78:85:A0:A3:B7:A5:8C:49:73:5D:A8:A0:FB:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/1148204d-0c51-3060-80e2-cfaa96ea1e5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:78:4a:30:d1:4f:88:65:c5:6f:8e:30:f1:e8:3f:04:f3:8e: e5:64:c2:a3:74:0c:0a:3b:2e:9c:62:8e:c0:75:b4:cd:80:cd: 2d:75:c4:b2:54:89:05:d3:c1:1e:40:84:4f:5e:a3:20:ea:06: 26:11:78:1c:6c:b3:8d:e4:e1:b8:b4:b7:ef:14:60:b3:a2:bf: f4:03:bc:5f:04:49:ab:06:08:c4:0a:0c:e1:ff:37:88:8c:bb: b3:95:52:36:ca:30:04:d4:1b:ad:ba:07:c2:63:28:8d:bb:d9: df:42:c7:ac:ed:7a:e5:cf:74:2b:13:ed:6c:5c:c0:5e:ae:9d: 7f:e1:ab:89:2b:6b:fe:4f:c6:2a:29:6e:0b:01:69:4e:4b:3a: 7c:86:bc:5f:2e:e0:aa:68:34:6a:1d:99:64:05:46:8b:e2:e5: 24:3d:37:9e:b8:71:51:f9:e1:a5:e2:77:89:70:32:84:c4:46: d2:2e:9a:56:e5:4a:8a:5e:95:c4:3d:d9:ab:47:11:d2:3f:18: 2a:7a:d9:22:b2:a3:59:d6:d9:8e:fb:ba:c7:e9:77:48:bc:93: e3:e4:ed:bb:e9:6b:27:b2:94:62:6c:cb:35:96:d4:9f:2f:e0: a7:da:0c:f4:bc:aa:b0:1e:99:76:73:d8:16:db:55:d3:31:2b: 86:b7:5a:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpD2vtg/ObcV+xI+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI1MDYyMTEzMDEwM1oXDTI1MDkxOTEzMDEwM1owLzEtMCsGA1UEAxMk NGZlZjkyYmMtMzg4NS00OWExLThkNTUtZTFiMzllNWYyNjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzI8LEFP4iRuvDDcoURzXgOmtGYlFBA6TrAIt peD8vOBcKsj2O78upUyu7AwcucQq6K3/R9ZjEzY2dc9roilB7y8VoKt8Yy1XQiJ7 c2fxLnkX6LZKrUgBw5fUeEybzvSAqsx8hH2L0VW7ZpIcOCHIjJvfoaQGXqZMK68o MAGOnETR+LLoJDz401H/fcqWrNhAfMjTy2rTexW9JGlBpZpJe1wPVD+dCPONK86v iyUMz4AOiHPqqV+TnwHUQ7ddRsCB9+AIiTIWhnLEfS61BOR0lGAI+xqekqKYg+Up /HJTMN0FWHNzbAMgRxxQz6YMWL5R/XisZIn7u9qnLqu3a3BnTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKaZGWtyD3iFoKO3pYxJc12ooPtJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvMTE0ODIwNGQtMGM1MS0z MDYwLTgwZTItY2ZhYTk2ZWExZTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx20gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEp4SjDRT4hlxW+OMPHoPwTzjuVkwqN0DAo7LpxijsB1tM2AzS11xLJU iQXTwR5AhE9eoyDqBiYReBxss43k4bi0t+8UYLOiv/QDvF8ESasGCMQKDOH/N4iM u7OVUjbKMATUG626B8JjKI272d9Cx6zteuXPdCsT7WxcwF6unX/hq4kra/5Pxiop bgsBaU5LOnyGvF8u4KpoNGodmWQFRovi5SQ9N564cVH54aXid4lwMoTERtIumlbl SopelcQ92atHEdI/GCp62SKyo1nW2Y77usfpd0i8k+Pk7bvpayeylGJsyzWW1J8v 4KfaDPS8qrAemXZz2BbbVdMxK4a3WlE= -----END CERTIFICATE-----Generated at Mon Jun 30 14:27:36 2025 by rpki-client