$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/7d010d70-9e3e-3e5c-8465-11e63242f7c3.roa File: 7d010d70-9e3e-3e5c-8465-11e63242f7c3.roa (raw, json) Hash identifier: nXJuDkO/xWwzRw5kKrXvwns/8YD02NDAhxx6hapBYgg= Subject key identifier: 27:E3:30:08:89:FB:74:06:13:25:B0:05:2B:6C:9E:1A:F5:40:8C:68 Certificate issuer: /CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c Certificate serial: 010D0C9F4328584A00DAC5A028C636462BBB7AC0 Authority key identifier: 27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/7d010d70-9e3e-3e5c-8465-11e63242f7c3.roa Signing time: Wed 28 May 2025 13:01:04 +0000 ROA not before: Wed 28 May 2025 13:01:04 +0000 ROA not after: Tue 26 Aug 2025 13:01:04 +0000 asID: 125 IP address blocks: 199.64.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:da:c5:a0:28:c6:36:46:2b:bb:7a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c Validity Not Before: May 28 13:01:04 2025 GMT Not After : Aug 26 13:01:04 2025 GMT Subject: CN=eb677ef3-1dc0-4aa7-a11a-f95d3ae9bf7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:10:d3:71:80:f6:c2:58:aa:b3:4a:22:71:3d: af:cf:06:ed:88:9a:a0:31:1d:38:ce:3c:8e:cf:8a: aa:04:90:38:98:8d:a0:71:32:61:a4:4c:99:8c:7b: ff:26:7e:88:42:87:0b:83:67:15:82:04:a6:95:09: df:c9:5b:70:67:28:a6:b6:65:c1:9c:83:38:41:ca: c5:b0:27:9e:c7:5e:32:48:80:17:04:93:c1:43:aa: 4c:28:b5:02:ad:b1:2e:22:16:c9:da:fd:09:23:a0: e4:f2:06:c6:5e:2d:e2:d0:14:92:7b:d5:d2:bc:cb: b3:60:06:b2:49:dc:ac:9d:58:91:3d:d2:05:9b:04: c1:83:78:51:d0:c8:65:f7:78:d5:86:90:19:36:54: 7d:0a:37:5f:e6:4d:11:d2:a5:77:34:f3:43:c0:d0: 85:9e:76:3f:6b:b2:d2:42:f2:c9:75:0e:e7:ef:d7: 9b:6f:f6:a1:fc:9b:f2:80:ba:cc:e8:42:39:50:73: bf:51:59:ad:c0:2a:04:5b:ef:82:d4:67:fc:b6:a3: ef:27:08:43:00:f1:c6:b8:f1:46:36:e6:ca:bf:14: 2e:7a:cf:e5:bc:a1:21:e2:93:fb:ee:a2:9c:1b:a4: 8a:45:df:9f:af:77:19:d1:74:1b:e9:65:8a:91:b5: a1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:E3:30:08:89:FB:74:06:13:25:B0:05:2B:6C:9E:1A:F5:40:8C:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/7d010d70-9e3e-3e5c-8465-11e63242f7c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl X509v3 Authority Key Identifier: keyid:27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer sbgp-ipAddrBlock: critical IPv4: 199.64.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:e6:99:39:9d:34:c7:bf:7d:b4:9e:a3:b3:22:35:a8:e8:f4: 38:13:07:f4:14:ae:aa:52:f8:a2:a7:29:84:c3:81:e4:2b:7a: ee:04:0e:e1:19:2e:0e:53:a1:af:90:b3:38:16:68:8a:4c:b6: 08:1e:33:11:ff:60:81:72:3d:83:ea:29:26:67:d1:67:c2:ad: f7:1c:a3:3f:f2:2e:24:07:1d:95:c0:80:2d:46:e3:56:e1:4b: 25:39:8b:6a:5d:0c:ef:a3:32:3d:f6:93:40:ba:8f:65:a0:06: a7:0a:a2:2d:bb:a5:1d:d8:7c:11:d5:6d:e9:1e:6f:28:d0:60: 3a:e3:ec:3f:72:e9:b1:07:1c:c6:02:c1:2c:44:95:ab:99:db: d4:5f:bd:9b:98:21:98:f0:40:63:bb:6d:2b:1e:a3:33:38:88: 65:a0:ca:fa:2f:ba:c4:aa:fa:61:f0:a0:64:c0:9e:70:18:d2: 3f:1d:b0:85:17:a1:e1:ff:8a:6c:44:0b:9b:a0:6e:e2:fb:57: 69:bb:fa:de:6c:99:86:6b:b5:04:17:ab:9d:1e:55:36:9f:a4: 25:bc:ab:47:62:0d:db:03:6b:ab:a9:8f:63:a9:a2:f5:9a:60: 11:63:37:e2:7b:cd:52:9e:a1:ff:47:3e:5b:fd:76:8f:e7:ec: 16:4a:a4:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoA2sWgKMY2Riu7esAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIzMTA3N2QtMDU1OS00ZTdhLTljZGYtZmUwMGE1MTJh YjVjMB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk ZWI2NzdlZjMtMWRjMC00YWE3LWExMWEtZjk1ZDNhZTliZjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxDTcYD2wliqs0oicT2vzwbtiJqgMR04zjyO z4qqBJA4mI2gcTJhpEyZjHv/Jn6IQocLg2cVggSmlQnfyVtwZyimtmXBnIM4QcrF sCeex14ySIAXBJPBQ6pMKLUCrbEuIhbJ2v0JI6Dk8gbGXi3i0BSSe9XSvMuzYAay SdysnViRPdIFmwTBg3hR0Mhl93jVhpAZNlR9Cjdf5k0R0qV3NPNDwNCFnnY/a7LS QvLJdQ7n79ebb/ah/JvygLrM6EI5UHO/UVmtwCoEW++C1Gf8tqPvJwhDAPHGuPFG NubKvxQues/lvKEh4pP77qKcG6SKRd+fr3cZ0XQb6WWKkbWh7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCfjMAiJ+3QGEyWwBStsnhr1QIxoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MjMx MDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAwYTUxMmFiNWMvN2QwMTBkNzAtOWUzZS0z ZTVjLTg0NjUtMTFlNjMyNDJmN2MzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODIzMTA3N2QtMDU1OS00ZTdhLTlj ZGYtZmUwMGE1MTJhYjVjLzgyMzEwNzdkLTA1NTktNGU3YS05Y2RmLWZlMDBhNTEy YWI1Yy5jcmwwHwYDVR0jBBgwFoAUJ1dCrsqoI+3BIFyf8CNlXQVl+3YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MjMxMDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAw YTUxMmFiNWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx0AJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/mmTmdNMe/fbSeo7MiNajo9DgTB/QUrqpS+KKnKYTDgeQreu4EDuEZ Lg5Toa+QszgWaIpMtggeMxH/YIFyPYPqKSZn0WfCrfccoz/yLiQHHZXAgC1G41bh SyU5i2pdDO+jMj32k0C6j2WgBqcKoi27pR3YfBHVbekebyjQYDrj7D9y6bEHHMYC wSxElauZ29RfvZuYIZjwQGO7bSseozM4iGWgyvovusSq+mHwoGTAnnAY0j8dsIUX oeH/imxEC5ugbuL7V2m7+t5smYZrtQQXq50eVTafpCW8q0diDdsDa6upj2OpovWa YBFjN+J7zVKeof9HPlv9do/n7BZKpBw= -----END CERTIFICATE-----Generated at Mon Jun 30 19:40:34 2025 by rpki-client