$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/42263cbd-3f34-3e24-89a4-0def13aa0f5e.roa File: 42263cbd-3f34-3e24-89a4-0def13aa0f5e.roa (raw, json) Hash identifier: k1F8MNFWoT1NMEzN6zY4A50q6gMEFpiTWHxiNvlPVSI= Subject key identifier: 2C:E1:A0:66:2F:21:0C:52:A5:24:2C:C9:7F:03:72:C6:FD:D2:2C:8D Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F432858499829D3531D4ED5BF272B2200 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/42263cbd-3f34-3e24-89a4-0def13aa0f5e.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 11090 IP address blocks: 199.192.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:d3:53:1d:4e:d5:bf:27:2b:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=bea0640e-ebf9-4c98-9be7-860b675fd0a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0e:3e:5f:86:35:8f:b7:8e:92:e7:de:69:1c: 54:81:6c:5d:b4:50:b5:6e:1d:e7:1c:bf:07:7d:eb: be:d5:04:54:6d:cd:50:53:51:97:c8:e6:36:b8:00: db:d2:db:c7:61:99:26:e3:3f:74:94:3a:c9:ce:2f: c5:dc:da:c4:a3:41:8a:4c:b8:31:6c:ec:97:58:72: c8:97:1d:b8:66:41:72:24:3c:72:8c:50:ae:48:de: cb:4b:26:f9:2d:c8:89:5a:e8:d6:7f:3c:2e:e8:27: 7e:fe:d0:f5:db:a7:35:e0:de:d7:a2:03:39:75:38: ed:ac:82:d4:ba:eb:8f:c7:5d:29:ce:ac:2d:a7:7d: ac:d7:3e:45:2e:43:5d:51:a4:39:bf:a8:24:10:33: 47:ba:e5:86:62:1c:0b:93:0a:3a:65:14:a0:4a:6c: 1e:16:76:49:e8:bf:3f:51:04:9b:f5:99:78:a3:b7: c7:f5:ba:91:fb:0b:59:3c:7d:0a:20:5a:d7:d2:6f: c6:9e:20:7e:d3:84:31:77:e5:f9:9f:95:89:92:3e: ef:70:22:d1:2d:a3:d4:57:50:c1:33:d5:0c:8e:ae: af:a4:0b:60:cc:08:d0:1d:21:4e:9f:ef:87:9c:4c: cb:c1:47:15:41:7d:10:32:9a:bb:0c:7a:8f:27:9f: 65:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:E1:A0:66:2F:21:0C:52:A5:24:2C:C9:7F:03:72:C6:FD:D2:2C:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/42263cbd-3f34-3e24-89a4-0def13aa0f5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 199.192.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:ce:75:ac:14:fd:a7:84:d7:23:0d:a1:e0:51:ef:80:32:ac: 3b:c8:84:42:3f:a2:ff:40:b4:7f:28:65:5b:d4:72:a3:1f:02: 04:f7:ac:4a:65:55:f7:d5:90:68:1a:02:45:cf:6d:cd:ff:8d: 14:bf:83:55:76:5b:59:ff:57:e9:af:40:93:e9:db:77:ed:19: 8d:41:2d:55:69:74:07:c0:7e:2a:45:0e:d7:5f:bd:46:e0:06: 0b:08:cb:2c:3f:02:bc:54:a6:5b:dc:ce:dc:d3:4c:78:46:73: 1a:22:c7:a0:b8:f3:f2:a2:17:1d:e0:96:13:e5:5f:bf:09:ef: 8e:2c:29:20:18:d0:44:64:bc:4e:9f:7a:b8:f1:ef:f9:55:82: 39:fc:95:7c:26:75:a3:ad:b7:ea:6f:58:b2:f7:46:a6:00:91: 68:53:43:6b:4c:5c:3b:8b:a5:b3:cb:e8:39:fa:23:d7:79:66: 0d:5a:15:fa:e8:03:ed:6c:0d:b5:5d:24:75:f5:44:f2:2c:22: 99:79:c6:cc:72:a4:07:42:9f:c1:55:df:56:a9:43:fc:7a:d9: d0:5b:39:54:ea:f9:59:c5:22:0a:4c:c0:f5:9a:cd:bd:ca:26: 71:c9:8b:1c:f5:b6:3a:f1:03:15:31:74:f6:20:58:47:e5:3a: 8e:22:b9:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKdNTHU7VvycrIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk YmVhMDY0MGUtZWJmOS00Yzk4LTliZTctODYwYjY3NWZkMGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApA4+X4Y1j7eOkufeaRxUgWxdtFC1bh3nHL8H feu+1QRUbc1QU1GXyOY2uADb0tvHYZkm4z90lDrJzi/F3NrEo0GKTLgxbOyXWHLI lx24ZkFyJDxyjFCuSN7LSyb5LciJWujWfzwu6Cd+/tD126c14N7XogM5dTjtrILU uuuPx10pzqwtp32s1z5FLkNdUaQ5v6gkEDNHuuWGYhwLkwo6ZRSgSmweFnZJ6L8/ UQSb9Zl4o7fH9bqR+wtZPH0KIFrX0m/GniB+04Qxd+X5n5WJkj7vcCLRLaPUV1DB M9UMjq6vpAtgzAjQHSFOn++HnEzLwUcVQX0QMpq7DHqPJ59lfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCzhoGYvIQxSpSQsyX8Dcsb90iyNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvNDIyNjNjYmQtM2YzNC0z ZTI0LTg5YTQtMGRlZjEzYWEwZjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx8DCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrOdawU/aeE1yMNoeBR74AyrDvIhEI/ov9AtH8oZVvUcqMfAgT3rEpl VffVkGgaAkXPbc3/jRS/g1V2W1n/V+mvQJPp23ftGY1BLVVpdAfAfipFDtdfvUbg BgsIyyw/ArxUplvcztzTTHhGcxoix6C48/KiFx3glhPlX78J744sKSAY0ERkvE6f erjx7/lVgjn8lXwmdaOtt+pvWLL3RqYAkWhTQ2tMXDuLpbPL6Dn6I9d5Zg1aFfro A+1sDbVdJHX1RPIsIpl5xsxypAdCn8FV31apQ/x62dBbOVTq+VnFIgpMwPWazb3K JnHJixz1tjrxAxUxdPYgWEflOo4iuRI= -----END CERTIFICATE-----Generated at Mon Jun 30 13:16:35 2025 by rpki-client