$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/10904f5e-34fd-3649-9d0d-1e43fc9f176c.roa File: 10904f5e-34fd-3649-9d0d-1e43fc9f176c.roa (raw, json) Hash identifier: kFSPo6JdwOBYNOETzhhCANATinoqAnIsn9cCLUKkRPQ= Subject key identifier: B4:42:D1:06:96:77:E2:9E:13:CB:15:FB:5B:D5:9D:C6:BF:C3:94:1F Certificate issuer: /CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c Certificate serial: 010D0C9F4328584A5B95B27D1BBEDD4562013680 Authority key identifier: 27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/10904f5e-34fd-3649-9d0d-1e43fc9f176c.roa Signing time: Mon 30 Jun 2025 01:00:50 +0000 ROA not before: Mon 30 Jun 2025 01:00:50 +0000 ROA not after: Sun 28 Sep 2025 01:00:50 +0000 asID: 125 IP address blocks: 199.64.162.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5b:95:b2:7d:1b:be:dd:45:62:01:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c Validity Not Before: Jun 30 01:00:50 2025 GMT Not After : Sep 28 01:00:50 2025 GMT Subject: CN=d2d70620-f2d1-4bcb-a0e3-f3c4ccb1685a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d0:48:84:7f:ed:5d:a8:c9:6d:40:e6:a2:86: c1:c4:ad:72:40:1b:f8:ef:be:63:cd:fa:53:43:7f: d4:31:12:7e:1e:ba:21:84:25:07:bb:9b:b9:3d:a3: 75:fb:c9:8f:02:b4:7c:b5:ad:2c:a1:12:e2:51:4d: 48:64:2a:ad:bf:4c:f6:b2:3d:04:34:b7:6f:94:b2: 81:c5:72:22:79:60:fa:ff:c7:dd:35:5b:1c:d6:ac: 92:10:9e:00:5b:c5:2b:16:73:b7:c3:72:5f:ef:70: 93:e6:d4:14:89:a0:20:f7:42:f4:b8:5c:f2:88:06: 1b:4c:d4:9b:90:50:2c:19:ca:ab:df:f3:23:f1:4c: 4a:24:48:3b:a7:ca:c0:8f:fb:ce:5d:85:b0:2c:38: 5c:f6:9d:6b:f0:18:fc:cd:4c:64:0b:4b:10:61:76: 73:67:4a:3c:34:1e:6e:58:8d:a4:3d:24:58:38:37: 8b:d1:fd:ad:e4:81:3e:34:3a:0c:10:8c:17:d9:c1: 42:2f:7a:f1:fe:f3:85:eb:80:39:45:4d:c0:85:3d: 27:c2:b5:04:eb:10:21:fb:a3:78:d5:85:12:fd:7b: 5d:17:a8:f1:86:3d:a5:24:c3:a4:0f:45:0a:14:e1: 49:8e:4d:f8:94:a2:f7:7a:64:29:39:de:84:d7:c5: 62:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:42:D1:06:96:77:E2:9E:13:CB:15:FB:5B:D5:9D:C6:BF:C3:94:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/10904f5e-34fd-3649-9d0d-1e43fc9f176c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl X509v3 Authority Key Identifier: keyid:27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer sbgp-ipAddrBlock: critical IPv4: 199.64.162.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:b6:f0:1b:1b:26:b1:4a:51:cd:bd:50:f5:a6:98:0a:6d:b7: a7:a7:0e:97:fc:5f:3a:fc:86:6e:98:1e:7d:26:16:f3:21:a3: 06:62:8f:a1:3a:c8:91:ba:a9:61:b3:2a:f2:2b:8d:30:e1:2e: 36:25:cf:9a:54:64:e7:f3:ed:09:c3:4a:26:03:ac:2e:05:6e: 67:a5:3e:2e:a1:40:27:77:54:17:84:18:d2:ef:0d:5f:09:aa: f4:a3:0a:f8:9b:43:80:f9:1c:e1:69:a5:8f:3e:89:a4:94:b3: b7:1f:42:c1:d4:a4:24:01:a9:41:3c:77:54:69:a1:6c:de:1d: 59:03:09:05:6f:e4:65:a9:bd:45:72:bb:d1:da:af:d4:4a:b6: b7:39:df:d7:6f:ac:ee:e9:2f:ce:ee:48:be:eb:a6:99:aa:62: 94:94:9c:ce:82:c6:c0:d9:78:22:5a:bc:b2:66:5e:24:1c:6e: b5:87:9d:7f:1c:fa:ed:6f:ad:c1:ca:64:1e:1a:09:49:62:32: 23:3e:ff:1c:f4:e3:25:5d:63:bb:61:6f:f0:69:d5:1b:fa:04: e8:42:5c:55:6b:db:8d:31:2b:71:8d:eb:6c:90:0a:c8:48:8d: 2e:82:51:6b:95:c9:03:3b:ae:d2:cc:83:5d:42:54:bc:a2:c3: 97:3c:41:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpblbJ9G77dRWIBNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIzMTA3N2QtMDU1OS00ZTdhLTljZGYtZmUwMGE1MTJh YjVjMB4XDTI1MDYzMDAxMDA1MFoXDTI1MDkyODAxMDA1MFowLzEtMCsGA1UEAxMk ZDJkNzA2MjAtZjJkMS00YmNiLWEwZTMtZjNjNGNjYjE2ODVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtBIhH/tXajJbUDmoobBxK1yQBv4775jzfpT Q3/UMRJ+HrohhCUHu5u5PaN1+8mPArR8ta0soRLiUU1IZCqtv0z2sj0ENLdvlLKB xXIieWD6/8fdNVsc1qySEJ4AW8UrFnO3w3Jf73CT5tQUiaAg90L0uFzyiAYbTNSb kFAsGcqr3/Mj8UxKJEg7p8rAj/vOXYWwLDhc9p1r8Bj8zUxkC0sQYXZzZ0o8NB5u WI2kPSRYODeL0f2t5IE+NDoMEIwX2cFCL3rx/vOF64A5RU3AhT0nwrUE6xAh+6N4 1YUS/XtdF6jxhj2lJMOkD0UKFOFJjk34lKL3emQpOd6E18ViawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLRC0QaWd+KeE8sV+1vVnca/w5QfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MjMx MDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAwYTUxMmFiNWMvMTA5MDRmNWUtMzRmZC0z NjQ5LTlkMGQtMWU0M2ZjOWYxNzZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODIzMTA3N2QtMDU1OS00ZTdhLTlj ZGYtZmUwMGE1MTJhYjVjLzgyMzEwNzdkLTA1NTktNGU3YS05Y2RmLWZlMDBhNTEy YWI1Yy5jcmwwHwYDVR0jBBgwFoAUJ1dCrsqoI+3BIFyf8CNlXQVl+3YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MjMxMDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAw YTUxMmFiNWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx0CiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIK28BsbJrFKUc29UPWmmAptt6enDpf8Xzr8hm6YHn0mFvMhowZij6E6 yJG6qWGzKvIrjTDhLjYlz5pUZOfz7QnDSiYDrC4FbmelPi6hQCd3VBeEGNLvDV8J qvSjCvibQ4D5HOFppY8+iaSUs7cfQsHUpCQBqUE8d1RpoWzeHVkDCQVv5GWpvUVy u9Har9RKtrc539dvrO7pL87uSL7rppmqYpSUnM6CxsDZeCJavLJmXiQcbrWHnX8c +u1vrcHKZB4aCUliMiM+/xz04yVdY7thb/Bp1Rv6BOhCXFVr240xK3GN62yQCshI jS6CUWuVyQM7rtLMg11CVLyiw5c8QZU= -----END CERTIFICATE-----Generated at Mon Jun 30 16:11:39 2025 by rpki-client