$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/2a99f6d7-aed5-3f47-8b31-7ab6d39cab47.roa File: 2a99f6d7-aed5-3f47-8b31-7ab6d39cab47.roa (raw, json) Hash identifier: g75Y7KgHHvsVpayoThXKGBywGDjLGnXI/z+apRGLjP0= Subject key identifier: 89:A9:DD:8E:ED:60:AA:98:07:C2:F7:77:4B:04:6E:24:DF:CA:1D:69 Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F4328584A43DB02DF7BBBE4EFCA9FBB80 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/2a99f6d7-aed5-3f47-8b31-7ab6d39cab47.roa Signing time: Sat 21 Jun 2025 13:01:03 +0000 ROA not before: Sat 21 Jun 2025 13:01:03 +0000 ROA not after: Fri 19 Sep 2025 13:01:03 +0000 asID: 3755 IP address blocks: 199.110.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:43:db:02:df:7b:bb:e4:ef:ca:9f:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: Jun 21 13:01:03 2025 GMT Not After : Sep 19 13:01:03 2025 GMT Subject: CN=b74653d7-cb3a-4782-b9c2-3b3435fa9308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:db:a1:1d:e6:d8:03:bb:fe:0f:bf:74:f5:72: d0:b3:dc:03:b5:d5:d1:c9:b8:f7:8f:7f:df:ba:5f: d4:e1:d5:54:7b:f7:51:e4:15:cf:46:3a:8e:d9:56: a6:1d:79:aa:a9:42:9f:2f:f7:1d:0b:2d:1b:72:c8: 3d:5a:0b:b6:69:74:b9:01:e3:99:b1:a8:97:75:cd: cb:02:18:db:e8:f8:14:b9:c6:95:ea:83:7a:b0:e4: ca:a2:a0:74:9d:0f:c1:48:9a:ed:31:04:32:cb:70: 11:58:90:61:74:0f:a6:db:f8:c5:76:16:92:10:ae: e2:6f:de:d5:f3:2c:66:ac:c4:34:79:44:38:1e:6e: 3f:1a:1e:d4:56:8e:43:7d:d1:cb:64:98:6c:1f:51: bd:63:ee:30:06:d0:93:23:0f:ff:f5:ce:2b:73:2e: 02:7b:2f:db:ac:b1:b6:87:a7:98:e5:d7:0f:2c:d3: c0:b9:34:49:b0:4d:cb:1b:e0:40:4d:e1:49:ac:f3: 07:9d:21:63:ee:4f:c0:b7:be:3a:f9:69:12:f4:61: 9b:3e:38:ae:5f:4a:20:98:bb:03:8a:68:c0:8a:2a: 05:f1:3a:3e:52:05:41:cc:50:9f:92:46:5b:47:40: 37:96:ac:5b:17:f8:df:57:3b:03:11:bf:42:09:2c: 05:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:A9:DD:8E:ED:60:AA:98:07:C2:F7:77:4B:04:6E:24:DF:CA:1D:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/2a99f6d7-aed5-3f47-8b31-7ab6d39cab47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.110.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:e4:c2:8b:4e:02:8a:a7:b0:2a:78:0f:3c:61:17:36:cd:8c: 0f:b5:9c:e7:70:55:9d:90:cc:78:67:d6:84:30:e7:c1:9c:a2: 0b:aa:29:f8:12:82:55:0c:69:e7:be:70:43:b5:3b:c7:88:95: 0a:2b:0f:64:5f:14:b3:48:ca:bf:a0:14:b3:f6:b7:1c:d2:82: fa:d3:e8:2b:2b:d0:0f:1b:ca:77:2d:ac:7b:bc:61:8f:d0:d3: 65:43:4f:6c:10:33:3b:fb:8d:b8:4c:44:f6:c2:56:07:15:72: c6:62:51:cf:27:01:09:73:70:fd:df:fe:14:7b:6b:7b:61:76: 0b:6d:9f:0b:cb:cb:48:49:78:fd:17:e7:5d:c6:ba:ab:09:70: 6e:2e:c3:aa:7d:8d:01:1d:a1:19:8f:21:d8:64:c8:fe:9d:c4: 36:99:56:e2:3e:06:e8:89:aa:24:5c:bf:27:dc:51:25:80:27: c1:9a:22:95:64:57:ea:aa:10:7a:0c:cb:e8:f0:7d:6e:86:a9: ec:1f:db:dc:f4:a1:1a:18:de:75:75:b0:fc:f9:7a:36:c9:bd: 53:da:8c:88:73:a0:1c:05:75:99:0b:c3:25:2b:7e:da:6e:ac: 31:6c:dc:b6:cf:ca:5e:af:8d:0a:8d:aa:27:fd:b2:2d:7e:b1: 8d:50:20:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpD2wLfe7vk78qfu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI1MDYyMTEzMDEwM1oXDTI1MDkxOTEzMDEwM1owLzEtMCsGA1UEAxMk Yjc0NjUzZDctY2IzYS00NzgyLWI5YzItM2IzNDM1ZmE5MzA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAituhHebYA7v+D7909XLQs9wDtdXRybj3j3/f ul/U4dVUe/dR5BXPRjqO2VamHXmqqUKfL/cdCy0bcsg9Wgu2aXS5AeOZsaiXdc3L Ahjb6PgUucaV6oN6sOTKoqB0nQ/BSJrtMQQyy3ARWJBhdA+m2/jFdhaSEK7ib97V 8yxmrMQ0eUQ4Hm4/Gh7UVo5DfdHLZJhsH1G9Y+4wBtCTIw//9c4rcy4Cey/brLG2 h6eY5dcPLNPAuTRJsE3LG+BATeFJrPMHnSFj7k/At746+WkS9GGbPjiuX0ogmLsD imjAiioF8To+UgVBzFCfkkZbR0A3lqxbF/jfVzsDEb9CCSwF3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFImp3Y7tYKqYB8L3d0sEbiTfyh1pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvMmE5OWY2ZDctYWVkNS0z ZjQ3LThiMzEtN2FiNmQzOWNhYjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEx27wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI3kwotOAoqnsCp4DzxhFzbNjA+1nOdwVZ2QzHhn1oQw58GcoguqKfgS glUMaee+cEO1O8eIlQorD2RfFLNIyr+gFLP2txzSgvrT6Csr0A8bynctrHu8YY/Q 02VDT2wQMzv7jbhMRPbCVgcVcsZiUc8nAQlzcP3f/hR7a3thdgttnwvLy0hJeP0X 513GuqsJcG4uw6p9jQEdoRmPIdhkyP6dxDaZVuI+BuiJqiRcvyfcUSWAJ8GaIpVk V+qqEHoMy+jwfW6Gqewf29z0oRoY3nV1sPz5ejbJvVPajIhzoBwFdZkLwyUrftpu rDFs3LbPyl6vjQqNqif9si1+sY1QINw= -----END CERTIFICATE-----Generated at Mon Jun 30 08:52:22 2025 by rpki-client