$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/2d8e14bf-123a-353f-bc1d-7f0f708721d4.roa File: 2d8e14bf-123a-353f-bc1d-7f0f708721d4.roa (raw, json) Hash identifier: h1hGKL6eMoA+xTdgc/znnF3chBskczX1bFR8cePpLpc= Subject key identifier: 31:82:C5:C1:EA:74:54:58:5D:2D:D9:7F:4D:55:D3:35:0B:4F:58:41 Certificate issuer: /CN=346c6ea1-4f1c-4579-b4b1-78891a34647a Certificate serial: 010D0C9F4328584A3CE024E93441E3CCDEB2EC80 Authority key identifier: 72:8D:72:D7:99:F2:15:41:22:BE:EB:F1:09:AC:CF:96:BF:BF:86:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/2d8e14bf-123a-353f-bc1d-7f0f708721d4.roa Signing time: Thu 19 Jun 2025 01:00:50 +0000 ROA not before: Thu 19 Jun 2025 01:00:50 +0000 ROA not after: Wed 17 Sep 2025 01:00:50 +0000 asID: 396026 IP address blocks: 199.230.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:e0:24:e9:34:41:e3:cc:de:b2:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=346c6ea1-4f1c-4579-b4b1-78891a34647a Validity Not Before: Jun 19 01:00:50 2025 GMT Not After : Sep 17 01:00:50 2025 GMT Subject: CN=49c6ac72-0f4d-4ce1-b6dd-be5018edcef4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:43:90:e9:43:71:91:03:70:be:6d:22:d1:7c: ea:dc:2c:fe:cd:60:ee:8a:48:3d:91:b5:5b:c1:d9: 0a:0f:a4:5d:fc:2a:74:6f:5e:84:99:d3:d9:d9:94: 6c:08:12:fc:4d:e6:d7:5b:f1:14:4e:ad:08:35:0e: f9:df:90:75:8d:87:71:50:e0:f0:83:f1:65:c6:4f: 9a:fe:84:9a:26:a9:aa:1d:81:c5:bb:bb:2e:e5:b4: 97:1c:b3:97:03:56:17:09:f5:2e:ee:f9:55:d6:9c: 5d:13:9a:07:05:f9:4d:f9:b8:c0:ab:14:ce:16:5c: 0b:0b:f7:31:5b:a7:16:68:8a:c9:2f:02:e8:5e:2e: 24:00:41:09:c9:cb:45:98:32:c6:c9:02:90:50:4b: c8:a3:3a:66:4a:5b:8f:0c:cc:01:c7:8c:4c:21:6a: a1:78:58:09:ed:7b:50:aa:b3:fe:e8:09:23:71:a5: 33:ef:cd:ed:97:35:27:05:d7:26:15:c4:dc:aa:60: ae:b7:6a:ac:a5:f0:9f:c1:a0:76:33:bc:bd:22:55: 64:2e:1c:53:39:ad:b7:29:32:29:0f:b9:da:2b:ec: 91:18:2f:cf:de:ad:f0:49:9e:a8:6d:a1:c4:6c:fc: 2c:56:42:c6:98:ab:28:fd:91:2b:c6:74:16:c3:20: 4c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:82:C5:C1:EA:74:54:58:5D:2D:D9:7F:4D:55:D3:35:0B:4F:58:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/2d8e14bf-123a-353f-bc1d-7f0f708721d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.crl X509v3 Authority Key Identifier: keyid:72:8D:72:D7:99:F2:15:41:22:BE:EB:F1:09:AC:CF:96:BF:BF:86:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer sbgp-ipAddrBlock: critical IPv4: 199.230.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:dd:fd:41:bd:21:da:9d:f7:10:75:8a:34:ab:97:cd:25:2a: ab:34:d1:ca:10:f8:db:1c:9b:4a:2d:cf:9b:2b:46:8d:f0:a0: 80:a9:fb:9b:ed:d3:fe:e7:fa:ed:b0:c2:d9:e4:3c:bf:35:63: 9a:c0:ca:c6:4f:ba:a0:6d:23:7c:9f:74:9a:60:6a:44:b7:2f: b6:6a:d9:d7:8c:24:e7:57:6c:ce:e8:3b:61:ff:b8:af:ec:3d: dc:ed:c6:5e:cb:05:0f:0f:f4:18:49:30:6a:b0:6e:70:ea:33: dd:cc:10:62:25:ba:f3:d3:6b:2b:72:5f:37:5b:fa:46:d4:94: 5e:9f:4d:7b:bb:f2:0c:4b:5e:6c:81:bc:72:ca:96:77:4e:22: 8c:31:5a:4c:eb:ef:f9:40:cd:a7:90:1e:f4:63:13:6d:04:35: bd:89:e1:fa:e6:8e:c3:e4:b5:89:2d:07:43:76:a1:40:9e:4f: 75:b8:a5:c2:9a:44:41:8a:e2:63:c3:1c:eb:cb:6b:3a:b6:2e: 15:56:e7:d0:c9:67:cc:ed:5b:c6:bb:fa:2e:30:40:19:2d:3b: a2:fd:5a:02:a8:63:2a:af:80:8e:f2:18:c2:48:49:4e:cd:67: 7c:5a:53:a6:22:fa:55:6a:3b:b1:52:17:0d:89:6a:03:c7:42: 4d:11:40:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo84CTpNEHjzN6y7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzQ2YzZlYTEtNGYxYy00NTc5LWI0YjEtNzg4OTFhMzQ2 NDdhMB4XDTI1MDYxOTAxMDA1MFoXDTI1MDkxNzAxMDA1MFowLzEtMCsGA1UEAxMk NDljNmFjNzItMGY0ZC00Y2UxLWI2ZGQtYmU1MDE4ZWRjZWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkOQ6UNxkQNwvm0i0Xzq3Cz+zWDuikg9kbVb wdkKD6Rd/Cp0b16EmdPZ2ZRsCBL8TebXW/EUTq0INQ7535B1jYdxUODwg/Flxk+a /oSaJqmqHYHFu7su5bSXHLOXA1YXCfUu7vlV1pxdE5oHBflN+bjAqxTOFlwLC/cx W6cWaIrJLwLoXi4kAEEJyctFmDLGyQKQUEvIozpmSluPDMwBx4xMIWqheFgJ7XtQ qrP+6AkjcaUz783tlzUnBdcmFcTcqmCut2qspfCfwaB2M7y9IlVkLhxTOa23KTIp D7naK+yRGC/P3q3wSZ6obaHEbPwsVkLGmKso/ZErxnQWwyBMCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDGCxcHqdFRYXS3Zf01V0zULT1hBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zNDZj NmVhMS00ZjFjLTQ1NzktYjRiMS03ODg5MWEzNDY0N2EvMmQ4ZTE0YmYtMTIzYS0z NTNmLWJjMWQtN2YwZjcwODcyMWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzQ2YzZlYTEtNGYxYy00NTc5LWI0 YjEtNzg4OTFhMzQ2NDdhLzM0NmM2ZWExLTRmMWMtNDU3OS1iNGIxLTc4ODkxYTM0 NjQ3YS5jcmwwHwYDVR0jBBgwFoAUco1y15nyFUEivuvxCazPlr+/hnYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zNDZjNmVhMS00ZjFjLTQ1NzktYjRiMS03ODg5 MWEzNDY0N2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx+ZsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHd/UG9Idqd9xB1ijSrl80lKqs00coQ+Nscm0otz5srRo3woICp+5vt 0/7n+u2wwtnkPL81Y5rAysZPuqBtI3yfdJpgakS3L7Zq2deMJOdXbM7oO2H/uK/s Pdztxl7LBQ8P9BhJMGqwbnDqM93MEGIluvPTaytyXzdb+kbUlF6fTXu78gxLXmyB vHLKlndOIowxWkzr7/lAzaeQHvRjE20ENb2J4frmjsPktYktB0N2oUCeT3W4pcKa REGK4mPDHOvLazq2LhVW59DJZ8ztW8a7+i4wQBktO6L9WgKoYyqvgI7yGMJISU7N Z3xaU6Yi+lVqO7FSFw2JagPHQk0RQIo= -----END CERTIFICATE-----Generated at Tue Jul 1 21:23:51 2025 by rpki-client