$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/3356d989-0123-3d9e-b389-cf1f83f3df2b.roa File: 3356d989-0123-3d9e-b389-cf1f83f3df2b.roa (raw, json) Hash identifier: Ukk9nNPkmtTeswz1pl0e2PkrzI4l7lyOphxoRONBd3I= Subject key identifier: 14:52:46:3B:E0:C8:13:0B:36:BD:A9:AE:84:F8:5D:27:84:A0:86:6F Certificate issuer: /CN=346c6ea1-4f1c-4579-b4b1-78891a34647a Certificate serial: 010D0C9F4328584A3CE024F9F92674E849E66900 Authority key identifier: 72:8D:72:D7:99:F2:15:41:22:BE:EB:F1:09:AC:CF:96:BF:BF:86:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/3356d989-0123-3d9e-b389-cf1f83f3df2b.roa Signing time: Thu 19 Jun 2025 01:00:50 +0000 ROA not before: Thu 19 Jun 2025 01:00:50 +0000 ROA not after: Wed 17 Sep 2025 01:00:50 +0000 asID: 396026 IP address blocks: 199.96.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:e0:24:f9:f9:26:74:e8:49:e6:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=346c6ea1-4f1c-4579-b4b1-78891a34647a Validity Not Before: Jun 19 01:00:50 2025 GMT Not After : Sep 17 01:00:50 2025 GMT Subject: CN=88ddb201-80f7-4264-9922-8a3a3b22f881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f3:9b:94:83:b9:fe:16:d6:42:b1:41:80:78: 42:f8:b0:b2:c6:bc:5b:7d:da:08:ed:73:93:7b:d0: 78:fd:07:e1:c2:9f:ce:d7:e7:05:0a:e0:56:4c:05: e7:33:aa:72:ef:13:01:0b:fa:ff:7f:d0:ed:45:e3: 93:d7:46:e8:ac:81:7b:07:93:75:3c:6d:8c:a6:a7: b2:85:ca:dd:f3:f2:25:d6:a3:9c:7f:50:ea:d0:db: 79:6f:9e:2a:62:7e:25:e2:18:3b:d6:d8:1b:d7:25: 7c:4e:ab:e0:4d:df:d1:76:7e:39:09:ff:2e:78:68: 52:5e:25:4e:30:7a:20:04:d4:d9:de:99:42:0c:97: db:2c:a0:d5:00:e6:ab:26:f6:58:63:0b:b4:fa:3a: 79:ae:a0:11:13:57:0b:82:fa:30:40:02:06:c5:ea: ec:4a:a4:14:a1:d5:b0:ce:42:db:53:08:f6:c8:bb: f4:88:cf:93:20:20:25:00:71:b4:d9:30:9f:7e:70: d0:4e:40:ef:02:be:b2:ae:a7:27:0d:d4:85:c9:47: eb:22:d3:1d:96:15:6b:e7:83:16:ca:68:09:fa:a8: a0:09:f4:de:0b:1a:a8:d3:0a:29:5c:9f:43:78:3f: b7:d0:78:c6:b1:a9:5c:33:55:fc:9e:28:64:90:ac: fe:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:52:46:3B:E0:C8:13:0B:36:BD:A9:AE:84:F8:5D:27:84:A0:86:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/3356d989-0123-3d9e-b389-cf1f83f3df2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.crl X509v3 Authority Key Identifier: keyid:72:8D:72:D7:99:F2:15:41:22:BE:EB:F1:09:AC:CF:96:BF:BF:86:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer sbgp-ipAddrBlock: critical IPv4: 199.96.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:40:75:98:26:0d:7b:e1:b7:1c:93:80:01:e2:00:f0:c0:b6: 07:89:8e:1c:b4:73:dc:f3:85:b7:a7:fa:bf:d0:84:c7:f8:cb: 7e:78:c2:6d:0d:74:d3:c3:90:6c:a6:82:40:69:a1:57:ad:69: cb:e6:33:57:e0:6d:bf:8a:79:36:f8:44:f7:a8:77:15:42:74: e3:48:14:af:de:13:76:d8:39:00:2f:bc:6f:19:16:b9:d9:1a: b6:1b:60:7b:3f:c3:6a:3c:dd:5b:53:84:c8:08:c7:89:3a:03: cf:a1:ec:84:28:07:00:42:5a:81:22:85:9e:5b:90:84:2c:09: fc:a9:55:82:c7:41:ca:97:b5:e8:3d:41:60:3d:68:a4:01:72: 9d:2c:9d:ce:57:62:83:d6:86:6e:56:8a:4e:18:b2:68:0c:b7: 99:9d:de:c8:e4:17:19:0e:b5:a7:22:74:76:1a:9f:c6:5d:44: be:ac:c1:ad:a3:bb:19:9c:e7:c7:d1:d5:4f:21:9c:e6:48:ec: f5:13:47:34:8c:22:44:b9:09:9f:c3:59:34:04:c7:c1:10:12: 34:bc:43:76:bd:91:b4:f2:77:bd:8a:d4:b7:d6:0d:fb:3d:e4: 1b:d6:dc:97:ff:7b:64:7d:e7:11:3e:8a:0b:01:d1:c7:4e:66: 8a:ee:83:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo84CT5+SZ06EnmaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzQ2YzZlYTEtNGYxYy00NTc5LWI0YjEtNzg4OTFhMzQ2 NDdhMB4XDTI1MDYxOTAxMDA1MFoXDTI1MDkxNzAxMDA1MFowLzEtMCsGA1UEAxMk ODhkZGIyMDEtODBmNy00MjY0LTk5MjItOGEzYTNiMjJmODgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/OblIO5/hbWQrFBgHhC+LCyxrxbfdoI7XOT e9B4/Qfhwp/O1+cFCuBWTAXnM6py7xMBC/r/f9DtReOT10borIF7B5N1PG2Mpqey hcrd8/Il1qOcf1Dq0Nt5b54qYn4l4hg71tgb1yV8TqvgTd/Rdn45Cf8ueGhSXiVO MHogBNTZ3plCDJfbLKDVAOarJvZYYwu0+jp5rqARE1cLgvowQAIGxersSqQUodWw zkLbUwj2yLv0iM+TICAlAHG02TCffnDQTkDvAr6yrqcnDdSFyUfrItMdlhVr54MW ymgJ+qigCfTeCxqo0wopXJ9DeD+30HjGsalcM1X8nihkkKz+tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBRSRjvgyBMLNr2proT4XSeEoIZvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zNDZj NmVhMS00ZjFjLTQ1NzktYjRiMS03ODg5MWEzNDY0N2EvMzM1NmQ5ODktMDEyMy0z ZDllLWIzODktY2YxZjgzZjNkZjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzQ2YzZlYTEtNGYxYy00NTc5LWI0 YjEtNzg4OTFhMzQ2NDdhLzM0NmM2ZWExLTRmMWMtNDU3OS1iNGIxLTc4ODkxYTM0 NjQ3YS5jcmwwHwYDVR0jBBgwFoAUco1y15nyFUEivuvxCazPlr+/hnYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zNDZjNmVhMS00ZjFjLTQ1NzktYjRiMS03ODg5 MWEzNDY0N2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx2CGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtAdZgmDXvhtxyTgAHiAPDAtgeJjhy0c9zzhben+r/QhMf4y354wm0N dNPDkGymgkBpoVetacvmM1fgbb+KeTb4RPeodxVCdONIFK/eE3bYOQAvvG8ZFrnZ GrYbYHs/w2o83VtThMgIx4k6A8+h7IQoBwBCWoEihZ5bkIQsCfypVYLHQcqXteg9 QWA9aKQBcp0snc5XYoPWhm5Wik4YsmgMt5md3sjkFxkOtacidHYan8ZdRL6swa2j uxmc58fR1U8hnOZI7PUTRzSMIkS5CZ/DWTQEx8EQEjS8Q3a9kbTyd72K1LfWDfs9 5BvW3Jf/e2R95xE+igsB0cdOZorug2g= -----END CERTIFICATE-----Generated at Mon Jun 30 16:07:05 2025 by rpki-client