$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/2ff8b681-d2bf-30ff-a728-84775f05b750.roa File: 2ff8b681-d2bf-30ff-a728-84775f05b750.roa (raw, json) Hash identifier: TQ86Aeev4B6ZBcWsRF8ViAvNEnfnv2hH7LYa0NGJxF0= Subject key identifier: A3:05:9D:61:2C:25:4D:5B:0E:7D:F7:15:19:5E:E1:06:5A:1F:E6:CE Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584A51D07121F6D4590F91AA3880 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/2ff8b681-d2bf-30ff-a728-84775f05b750.roa Signing time: Thu 26 Jun 2025 13:01:04 +0000 ROA not before: Thu 26 Jun 2025 13:01:04 +0000 ROA not after: Wed 24 Sep 2025 13:01:04 +0000 asID: 394832 IP address blocks: 199.91.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:51:d0:71:21:f6:d4:59:0f:91:aa:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Jun 26 13:01:04 2025 GMT Not After : Sep 24 13:01:04 2025 GMT Subject: CN=25af2f5e-0bf9-4a5a-9f6d-378fc734ccd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:60:cb:cf:1d:38:20:04:9a:5e:3b:fe:98:39: 8f:3e:f9:88:ba:74:1e:bf:a8:26:31:29:f7:bb:21: 87:8d:a4:32:ca:7e:30:3c:59:ea:b9:44:d8:8d:70: a6:54:f4:fd:ee:52:39:dc:da:e5:de:20:bb:0b:47: 38:3c:af:87:8f:76:71:d6:50:80:2f:81:d8:16:f8: 78:f2:3a:2d:49:49:9f:0c:82:78:20:b5:5a:ac:9f: 42:2c:31:4c:ff:03:47:2a:8f:c6:87:ea:a4:23:48: e5:3c:82:bf:88:e3:9e:40:e6:a0:22:43:a2:b7:19: 11:d2:7c:23:01:9c:5e:ad:a2:92:c9:5c:e5:eb:76: 4b:7b:d4:00:9a:7b:8a:8c:30:97:b6:c3:34:0f:3a: 26:32:5c:ac:8a:c4:4a:5c:0b:c5:1e:79:a3:79:63: 0c:27:61:e1:e3:e5:cf:08:9c:b2:5c:3e:67:15:5d: 1b:b3:3b:1a:59:d8:25:9c:14:e1:f3:62:2d:34:78: 8f:51:34:5f:bf:7a:7a:ae:10:38:89:b9:ac:d8:37: 8f:dd:4c:50:89:68:00:b8:c4:4f:ad:46:7e:ad:53: 13:6e:c7:d1:f8:7b:ce:80:39:3f:87:78:87:cc:17: e2:df:f1:ce:3a:ab:7d:f2:65:b3:a6:5b:7f:fe:22: 08:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:05:9D:61:2C:25:4D:5B:0E:7D:F7:15:19:5E:E1:06:5A:1F:E6:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/2ff8b681-d2bf-30ff-a728-84775f05b750.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 199.91.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:9d:e7:38:14:84:48:c6:c8:41:a3:f1:85:d1:1a:d3:eb:20: b7:be:96:21:28:07:a4:00:43:ca:c9:25:61:ed:2f:72:ff:54: 6a:03:a6:8e:2a:4e:15:fc:12:61:9d:46:06:6e:47:5a:58:b5: fb:10:98:95:6d:99:a3:03:a2:2d:6a:d3:b7:84:8d:5e:dc:c0: ba:5b:18:cb:ca:f6:ec:1c:58:8b:7a:e6:0f:e2:65:b2:88:13: b6:5e:5d:0b:92:2f:08:b0:45:70:04:31:e4:07:e1:b1:c4:8d: 03:8e:69:65:7d:80:8b:fe:ac:65:0b:0b:ed:6b:ae:a7:0d:08: 22:d8:7f:40:95:b1:e4:b8:65:29:5e:98:2b:76:9b:1a:26:39: a0:33:48:4d:6e:5f:e5:aa:66:46:c2:3f:38:08:31:ca:d1:f8: 99:ff:29:3e:ee:c1:db:e6:eb:8a:b0:46:f3:1f:6b:f3:87:c3: 10:ba:85:fe:1d:12:3b:a1:eb:b9:f7:0d:8c:36:38:3c:94:d2: 55:5b:7b:db:b5:bc:c2:f9:d1:b3:d1:83:d7:47:1c:2f:25:ea: db:dc:b4:57:2f:8a:54:a3:a2:48:e1:6d:e0:0e:02:3f:1a:9c: ae:9e:17:a0:96:80:93:03:6c:82:82:c5:83:1a:71:e4:97:56: 74:8d:db:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpR0HEh9tRZD5GqOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI1MDYyNjEzMDEwNFoXDTI1MDkyNDEzMDEwNFowLzEtMCsGA1UEAxMk MjVhZjJmNWUtMGJmOS00YTVhLTlmNmQtMzc4ZmM3MzRjY2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWDLzx04IASaXjv+mDmPPvmIunQev6gmMSn3 uyGHjaQyyn4wPFnquUTYjXCmVPT97lI53Nrl3iC7C0c4PK+Hj3Zx1lCAL4HYFvh4 8jotSUmfDIJ4ILVarJ9CLDFM/wNHKo/Gh+qkI0jlPIK/iOOeQOagIkOitxkR0nwj AZxeraKSyVzl63ZLe9QAmnuKjDCXtsM0DzomMlysisRKXAvFHnmjeWMMJ2Hh4+XP CJyyXD5nFV0bszsaWdglnBTh82ItNHiPUTRfv3p6rhA4ibms2DeP3UxQiWgAuMRP rUZ+rVMTbsfR+HvOgDk/h3iHzBfi3/HOOqt98mWzplt//iIILwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKMFnWEsJU1bDn33FRle4QZaH+bOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvMmZmOGI2ODEtZDJiZi0z MGZmLWE3MjgtODQ3NzVmMDViNzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1vgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyd5zgUhEjGyEGj8YXRGtPrILe+liEoB6QAQ8rJJWHtL3L/VGoDpo4q ThX8EmGdRgZuR1pYtfsQmJVtmaMDoi1q07eEjV7cwLpbGMvK9uwcWIt65g/iZbKI E7ZeXQuSLwiwRXAEMeQH4bHEjQOOaWV9gIv+rGULC+1rrqcNCCLYf0CVseS4ZSle mCt2mxomOaAzSE1uX+WqZkbCPzgIMcrR+Jn/KT7uwdvm64qwRvMfa/OHwxC6hf4d Ejuh67n3DYw2ODyU0lVbe9u1vML50bPRg9dHHC8l6tvctFcvilSjokjhbeAOAj8a nK6eF6CWgJMDbIKCxYMaceSXVnSN2xw= -----END CERTIFICATE-----Generated at Mon Jun 30 01:15:23 2025 by rpki-client