$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/f4f0a900-b310-382d-b883-64f958388735.roa File: f4f0a900-b310-382d-b883-64f958388735.roa (raw, json) Hash identifier: hP3hapV5A0ZhJTjZqpd7l28ggbIH8WkQNSVG4l4s0sc= Subject key identifier: 24:40:35:AE:9C:64:36:30:B2:C4:C3:D1:26:2F:68:CB:7C:11:B1:0D Certificate issuer: /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Certificate serial: 010D0C9F4328584A00DACB540D7E35B5EDC612C0 Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/f4f0a900-b310-382d-b883-64f958388735.roa Signing time: Wed 28 May 2025 13:01:04 +0000 ROA not before: Wed 28 May 2025 13:01:04 +0000 ROA not after: Tue 26 Aug 2025 13:01:04 +0000 asID: 26744 IP address blocks: 199.166.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:da:cb:54:0d:7e:35:b5:ed:c6:12:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Validity Not Before: May 28 13:01:04 2025 GMT Not After : Aug 26 13:01:04 2025 GMT Subject: CN=726d4a00-663a-4445-8a48-0e48a6902f11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:f0:22:5d:31:a9:e8:01:97:86:3f:36:cd:cf: 13:87:96:87:60:8d:2a:00:0d:c2:70:f2:00:8d:35: 07:40:e6:36:2a:88:da:c4:23:af:cd:b6:da:37:c5: 31:9d:f7:44:ff:77:83:fb:79:54:b0:2e:4d:83:3d: 49:3a:ad:ba:6d:74:4b:d9:76:91:2c:17:63:80:2f: 3f:1b:07:0a:48:d4:e5:6b:fc:ef:db:37:dd:75:3c: 78:12:97:75:a3:fe:50:cb:2a:4b:a9:91:40:9d:9f: 4a:9b:88:da:fd:3a:67:39:65:8d:38:4e:79:f1:45: c2:9c:9e:58:e2:ac:07:8b:74:61:6d:eb:02:15:d0: 8c:b3:5b:22:5f:2b:ab:d4:1f:e5:b5:26:b5:43:29: 7f:65:7d:30:4c:c1:14:63:72:01:bf:f4:41:c0:05: 73:59:28:06:7d:0c:71:f7:67:67:7e:e0:db:89:de: a6:94:b3:f6:1b:0c:ed:bb:5c:75:14:7a:1b:3d:73: b5:9c:36:bf:f7:05:2d:ac:b3:93:4d:90:bd:10:7c: ed:61:91:32:75:2a:e0:f1:75:dc:e0:11:a6:f5:8b: ac:00:e8:fe:a6:a0:33:10:76:70:53:1d:02:3a:17: 4c:04:bf:a9:95:cd:ce:c1:55:33:96:f0:ef:4f:2f: 85:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:40:35:AE:9C:64:36:30:B2:C4:C3:D1:26:2F:68:CB:7C:11:B1:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/f4f0a900-b310-382d-b883-64f958388735.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl X509v3 Authority Key Identifier: keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer sbgp-ipAddrBlock: critical IPv4: 199.166.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:b8:64:4f:c7:a5:04:cf:b6:47:39:c3:69:93:1e:e3:cd:d8: c5:a0:fd:81:fc:52:43:54:58:1a:93:b7:4f:fd:56:74:3f:ed: f8:88:47:34:11:1d:aa:75:d9:78:72:a9:4d:dd:b4:3e:f3:b3: 92:30:d0:91:8e:43:ed:de:0e:40:1f:58:e6:27:4a:66:93:1f: 15:28:43:f6:59:33:a6:09:a9:44:4c:75:9d:f1:f4:94:54:8e: 2d:42:03:38:f3:83:dc:51:5f:c3:cd:b8:c1:db:fe:f5:86:af: 44:bd:4f:46:e9:56:0e:92:f6:44:48:4d:06:15:55:ba:3c:97: a6:ec:a6:a3:5f:e6:0d:b2:ef:99:00:96:a5:6e:fa:e8:76:5c: 12:dd:82:15:3e:22:26:0d:84:c6:ec:cf:7f:bd:69:e8:57:a3: 17:ae:8e:10:9b:5c:95:de:ca:2e:ad:e5:d9:81:7e:29:35:26: 55:cf:67:69:11:e5:f2:e7:46:66:44:32:25:c2:e1:89:c4:38: ee:1a:58:83:5a:85:86:95:3e:17:a2:5e:14:e1:52:da:26:4a: 4d:fb:52:50:14:f8:4d:34:37:64:9b:c2:c4:5e:e8:63:0c:b7: 49:5e:0d:07:aa:db:56:40:d6:50:8b:a0:88:7e:58:61:83:1d: 44:a0:8d:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoA2stUDX41te3GEsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj ZjFhMB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk NzI2ZDRhMDAtNjYzYS00NDQ1LThhNDgtMGU0OGE2OTAyZjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5PAiXTGp6AGXhj82zc8Th5aHYI0qAA3CcPIA jTUHQOY2KojaxCOvzbbaN8UxnfdE/3eD+3lUsC5Ngz1JOq26bXRL2XaRLBdjgC8/ GwcKSNTla/zv2zfddTx4Epd1o/5QyypLqZFAnZ9Km4ja/TpnOWWNOE558UXCnJ5Y 4qwHi3RhbesCFdCMs1siXyur1B/ltSa1Qyl/ZX0wTMEUY3IBv/RBwAVzWSgGfQxx 92dnfuDbid6mlLP2Gwztu1x1FHobPXO1nDa/9wUtrLOTTZC9EHztYZEydSrg8XXc 4BGm9YusAOj+pqAzEHZwUx0COhdMBL+plc3OwVUzlvDvTy+FTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCRANa6cZDYwssTD0SYvaMt8EbENMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4 NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvZjRmMGE5MDAtYjMxMC0z ODJkLWI4ODMtNjRmOTU4Mzg4NzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx6b6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADS4ZE/HpQTPtkc5w2mTHuPN2MWg/YH8UkNUWBqTt0/9VnQ/7fiIRzQR Hap12XhyqU3dtD7zs5Iw0JGOQ+3eDkAfWOYnSmaTHxUoQ/ZZM6YJqURMdZ3x9JRU ji1CAzjzg9xRX8PNuMHb/vWGr0S9T0bpVg6S9kRITQYVVbo8l6bspqNf5g2y75kA lqVu+uh2XBLdghU+IiYNhMbsz3+9aehXoxeujhCbXJXeyi6t5dmBfik1JlXPZ2kR 5fLnRmZEMiXC4YnEOO4aWINahYaVPheiXhThUtomSk37UlAU+E00N2SbwsRe6GMM t0leDQeq21ZA1lCLoIh+WGGDHUSgjR4= -----END CERTIFICATE-----Generated at Mon Jun 30 12:38:22 2025 by rpki-client