$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/7e41608c-f4a3-38f3-a7b4-736ec6086365.roa File: 7e41608c-f4a3-38f3-a7b4-736ec6086365.roa (raw, json) Hash identifier: mxtTnYM5ZgYkRwIXfW2Z06QwK97LhTdMo7vRpThbRq8= Subject key identifier: 7A:59:AD:A3:78:35:2A:27:E4:E6:81:B1:DA:E9:97:11:D8:6F:44:67 Certificate issuer: /CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c Certificate serial: 010D0C9F43285849E91F9CEFEAAB0B5E21F4D5C0 Authority key identifier: 27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/7e41608c-f4a3-38f3-a7b4-736ec6086365.roa Signing time: Tue 20 May 2025 01:00:49 +0000 ROA not before: Tue 20 May 2025 01:00:49 +0000 ROA not after: Mon 18 Aug 2025 01:00:49 +0000 asID: 396982 IP address blocks: 199.64.78.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e9:1f:9c:ef:ea:ab:0b:5e:21:f4:d5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c Validity Not Before: May 20 01:00:49 2025 GMT Not After : Aug 18 01:00:49 2025 GMT Subject: CN=a4ab4ab8-b462-4910-981f-9b6a576c38c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:85:33:f6:26:7c:64:ba:be:e5:04:2e:9f:67: d5:8e:99:83:f4:ef:11:b0:b2:10:b1:f6:66:04:31: 15:c2:02:af:a9:9b:25:21:c6:4a:c9:41:a8:2d:3d: c2:4c:c6:e8:fe:68:cc:56:78:ad:92:55:0f:df:16: 2d:f1:cc:b4:55:6a:76:c1:c8:bc:73:d7:44:45:29: f2:c6:10:cf:36:14:e1:57:c6:2e:c1:25:77:0e:37: 1b:9d:b0:b9:d3:f8:2a:9a:6e:67:19:80:c5:22:49: 9b:3c:1e:5b:da:83:79:56:d6:3c:93:89:a0:8f:15: 98:69:56:a4:cd:52:f4:c7:c2:9d:25:d9:8d:a4:5c: ca:6b:3b:d5:3f:6e:45:ea:d8:b3:44:0a:13:af:3e: 28:40:9e:3c:07:f5:12:e4:ac:df:fa:3f:e3:8c:92: 43:a0:e8:49:f7:ff:74:3e:69:98:17:96:8f:e0:b3: b9:d2:1f:2d:22:e9:f5:65:18:45:66:3c:d2:2b:77: b7:d1:cc:d0:41:a7:e4:9f:4c:67:ea:ad:71:b0:cc: 52:be:20:a2:7a:e0:6e:77:5e:16:c2:5a:b8:4b:90: 18:89:33:e1:ca:74:9d:a1:ff:54:dc:e4:57:99:b7: 08:9d:81:d2:3c:a3:fa:4d:40:e3:65:e8:ab:49:6a: 51:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:59:AD:A3:78:35:2A:27:E4:E6:81:B1:DA:E9:97:11:D8:6F:44:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/7e41608c-f4a3-38f3-a7b4-736ec6086365.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl X509v3 Authority Key Identifier: keyid:27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer sbgp-ipAddrBlock: critical IPv4: 199.64.78.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:98:c9:b0:df:1a:35:45:e1:dd:f3:5d:bf:99:7c:92:ce:3e: 0c:b2:14:17:09:4c:5f:83:d2:f6:c0:f5:fd:4e:97:2e:2b:0b: 9d:cc:a4:2c:f4:9c:87:9d:4a:9d:f3:82:e0:14:73:9a:53:15: 7c:84:f4:96:30:1d:32:71:cd:a6:45:e1:0c:50:e5:69:35:29: 62:bd:a8:ff:1a:aa:35:8a:7f:99:a7:64:46:11:76:2c:ee:30: d5:f5:0a:dd:1d:ce:b1:f8:89:42:39:fd:a0:5d:10:d8:90:eb: e6:90:90:32:ce:96:34:ae:27:e3:8b:ca:72:58:4e:a4:16:ed: dd:dd:33:51:b8:39:4d:49:38:e6:08:1e:b1:fc:17:70:82:fa: 4e:b7:7c:1c:fb:e1:b8:df:48:cc:e8:99:d0:ff:94:4e:fd:37: 20:fb:62:32:cc:44:44:86:fc:63:06:5e:b9:62:00:89:06:9b: 8b:d6:75:fc:fb:6a:8e:cd:71:ef:8f:35:0a:ff:22:d2:10:97: ed:2c:37:ec:91:cd:ad:29:7d:e3:36:03:30:9a:b1:e3:21:e3: 1f:7e:9c:24:60:b0:04:49:fb:bf:80:91:fd:5e:9f:d0:b8:12: 82:e4:43:bc:56:8c:92:31:51:a2:2b:29:7d:93:d6:5d:f7:04: aa:49:98:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnpH5zv6qsLXiH01cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIzMTA3N2QtMDU1OS00ZTdhLTljZGYtZmUwMGE1MTJh YjVjMB4XDTI1MDUyMDAxMDA0OVoXDTI1MDgxODAxMDA0OVowLzEtMCsGA1UEAxMk YTRhYjRhYjgtYjQ2Mi00OTEwLTk4MWYtOWI2YTU3NmMzOGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YUz9iZ8ZLq+5QQun2fVjpmD9O8RsLIQsfZm BDEVwgKvqZslIcZKyUGoLT3CTMbo/mjMVnitklUP3xYt8cy0VWp2wci8c9dERSny xhDPNhThV8YuwSV3DjcbnbC50/gqmm5nGYDFIkmbPB5b2oN5VtY8k4mgjxWYaVak zVL0x8KdJdmNpFzKazvVP25F6tizRAoTrz4oQJ48B/US5Kzf+j/jjJJDoOhJ9/90 PmmYF5aP4LO50h8tIun1ZRhFZjzSK3e30czQQafkn0xn6q1xsMxSviCieuBud14W wlq4S5AYiTPhynSdof9U3ORXmbcInYHSPKP6TUDjZeirSWpRTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHpZraN4NSon5OaBsdrplxHYb0RnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MjMx MDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAwYTUxMmFiNWMvN2U0MTYwOGMtZjRhMy0z OGYzLWE3YjQtNzM2ZWM2MDg2MzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODIzMTA3N2QtMDU1OS00ZTdhLTlj ZGYtZmUwMGE1MTJhYjVjLzgyMzEwNzdkLTA1NTktNGU3YS05Y2RmLWZlMDBhNTEy YWI1Yy5jcmwwHwYDVR0jBBgwFoAUJ1dCrsqoI+3BIFyf8CNlXQVl+3YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MjMxMDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAw YTUxMmFiNWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx0BOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKaYybDfGjVF4d3zXb+ZfJLOPgyyFBcJTF+D0vbA9f1Oly4rC53MpCz0 nIedSp3zguAUc5pTFXyE9JYwHTJxzaZF4QxQ5Wk1KWK9qP8aqjWKf5mnZEYRdizu MNX1Ct0dzrH4iUI5/aBdENiQ6+aQkDLOljSuJ+OLynJYTqQW7d3dM1G4OU1JOOYI HrH8F3CC+k63fBz74bjfSMzomdD/lE79NyD7YjLMRESG/GMGXrliAIkGm4vWdfz7 ao7Nce+PNQr/ItIQl+0sN+yRza0pfeM2AzCaseMh4x9+nCRgsARJ+7+Akf1en9C4 EoLkQ7xWjJIxUaIrKX2T1l33BKpJmBs= -----END CERTIFICATE-----Generated at Tue Jul 1 09:55:04 2025 by rpki-client