$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009/d3c5df3e-f2e4-3613-9626-265a72a6dcb1.roa File: d3c5df3e-f2e4-3613-9626-265a72a6dcb1.roa (raw, json) Hash identifier: Z1WChuZV/Ql5sghXmfFGvCJ7oLQWAhh55EchSjLqexg= Subject key identifier: 32:FE:5C:64:26:35:67:7F:06:B1:48:A7:54:D9:58:0B:A0:4C:0E:89 Certificate issuer: /CN=3bb548a9-e172-41a3-925a-609e931d0009 Certificate serial: 010D0C9F4328584A07D53BA2270F7090ED1486D0 Authority key identifier: 16:45:78:81:7F:45:4F:3C:CC:47:18:0B:E4:D9:31:D1:48:93:8B:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009/d3c5df3e-f2e4-3613-9626-265a72a6dcb1.roa Signing time: Sat 31 May 2025 01:00:50 +0000 ROA not before: Sat 31 May 2025 01:00:50 +0000 ROA not after: Fri 29 Aug 2025 01:00:50 +0000 asID: 40460 IP address blocks: 199.182.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009/3bb548a9-e172-41a3-925a-609e931d0009.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009/3bb548a9-e172-41a3-925a-609e931d0009.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:d5:3b:a2:27:0f:70:90:ed:14:86:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bb548a9-e172-41a3-925a-609e931d0009 Validity Not Before: May 31 01:00:50 2025 GMT Not After : Aug 29 01:00:50 2025 GMT Subject: CN=2ef72a4d-357d-4f4a-a1de-4e38493a794a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:74:cb:e6:9f:d0:15:ca:37:c5:1e:9e:1f:cb: 9d:34:e1:d9:b9:9d:36:ab:2b:73:c6:e4:5c:00:c7: b4:49:22:28:61:f1:15:20:67:ca:4d:32:5a:41:4f: 40:a2:1d:3e:54:37:45:15:37:1c:ef:6b:31:86:41: 18:15:9e:a4:b4:af:bb:19:75:9f:5a:7b:8e:72:47: 12:2e:cb:ab:7d:4a:8d:7b:0c:d1:c7:0b:78:16:cc: ef:f1:dd:74:f4:f0:32:3b:35:83:3a:2e:3c:ea:5b: 4a:58:95:0b:51:f8:30:0e:4b:04:de:0c:9d:c1:b9: e9:fc:e0:8d:e7:39:fc:17:5a:39:93:8d:a1:fb:1c: dc:79:03:ae:e0:79:de:3e:ef:0a:9c:3a:0c:83:58: 30:6d:fb:48:b2:9d:3b:60:c6:4d:3d:59:d9:be:cc: 4e:30:27:35:f3:5a:76:59:8e:32:3f:68:22:1c:12: 63:20:bd:ef:74:3c:4e:ca:48:9d:43:9a:ae:1e:f0: f3:1c:70:bf:16:87:80:7a:9c:3d:a4:fa:76:c0:ff: 8e:71:61:86:de:46:6e:d3:ef:d9:86:07:98:7c:02: 5d:c2:f6:37:af:03:dc:38:06:13:b5:c2:a7:97:00: 0f:23:14:85:fa:e5:cb:ef:2b:0b:b4:12:d0:c2:e2: ca:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:FE:5C:64:26:35:67:7F:06:B1:48:A7:54:D9:58:0B:A0:4C:0E:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009/d3c5df3e-f2e4-3613-9626-265a72a6dcb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009/3bb548a9-e172-41a3-925a-609e931d0009.crl X509v3 Authority Key Identifier: keyid:16:45:78:81:7F:45:4F:3C:CC:47:18:0B:E4:D9:31:D1:48:93:8B:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009.cer sbgp-ipAddrBlock: critical IPv4: 199.182.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:26:ac:ae:ba:84:08:50:d4:d0:44:b8:58:3c:dc:5c:d0:c5: 89:cc:d3:d5:a5:af:f2:19:db:13:52:98:a4:c0:87:6e:f9:cf: 61:11:b7:f9:f0:52:20:80:b9:0b:f9:60:0b:77:0b:43:bd:08: 21:87:da:f4:b4:fe:e9:62:6a:b6:89:52:fc:70:ed:5e:63:2a: 68:82:64:f3:6a:eb:85:2d:76:62:3a:0f:19:1e:2c:60:95:6c: a2:8f:d1:5e:7d:5e:ae:c0:fa:d6:3b:ee:36:a0:a6:57:95:81: 87:8b:81:86:84:be:53:89:8e:78:b3:4f:c1:0f:c7:ed:41:e9: eb:d1:fb:45:ca:67:db:15:5a:e9:75:ec:e5:f1:74:1f:b9:f1: c4:a4:b3:13:d5:e8:ed:0a:c8:e9:fd:a2:e5:85:1c:00:2a:7f: a3:f3:54:1c:36:44:da:59:a8:b3:f3:8f:16:df:1b:c2:ea:75: 15:fc:fb:8a:c9:b4:ef:f3:50:4f:5d:c8:1a:16:a6:bc:e1:dc: 99:75:24:df:b7:2f:79:ca:ec:90:b5:f9:62:54:1f:11:c7:2a: a7:28:97:e9:88:1a:c3:29:2c:5b:58:19:f9:99:74:76:84:c7: 22:c4:66:b9:e5:ff:82:31:77:05:44:61:cc:48:37:11:0e:36: 13:8d:f4:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoH1TuiJw9wkO0UhtAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JiNTQ4YTktZTE3Mi00MWEzLTkyNWEtNjA5ZTkzMWQw MDA5MB4XDTI1MDUzMTAxMDA1MFoXDTI1MDgyOTAxMDA1MFowLzEtMCsGA1UEAxMk MmVmNzJhNGQtMzU3ZC00ZjRhLWExZGUtNGUzODQ5M2E3OTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3TL5p/QFco3xR6eH8udNOHZuZ02qytzxuRc AMe0SSIoYfEVIGfKTTJaQU9Aoh0+VDdFFTcc72sxhkEYFZ6ktK+7GXWfWnuOckcS LsurfUqNewzRxwt4Fszv8d109PAyOzWDOi486ltKWJULUfgwDksE3gydwbnp/OCN 5zn8F1o5k42h+xzceQOu4HnePu8KnDoMg1gwbftIsp07YMZNPVnZvsxOMCc181p2 WY4yP2giHBJjIL3vdDxOykidQ5quHvDzHHC/FoeAepw9pPp2wP+OcWGG3kZu0+/Z hgeYfAJdwvY3rwPcOAYTtcKnlwAPIxSF+uXL7ysLtBLQwuLK/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDL+XGQmNWd/BrFIp1TZWAugTA6JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zYmI1 NDhhOS1lMTcyLTQxYTMtOTI1YS02MDllOTMxZDAwMDkvZDNjNWRmM2UtZjJlNC0z NjEzLTk2MjYtMjY1YTcyYTZkY2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2JiNTQ4YTktZTE3Mi00MWEzLTky NWEtNjA5ZTkzMWQwMDA5LzNiYjU0OGE5LWUxNzItNDFhMy05MjVhLTYwOWU5MzFk MDAwOS5jcmwwHwYDVR0jBBgwFoAUFkV4gX9FTzzMRxgL5Nkx0UiTiwowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zYmI1NDhhOS1lMTcyLTQxYTMtOTI1YS02MDll OTMxZDAwMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx7a8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKgmrK66hAhQ1NBEuFg83FzQxYnM09Wlr/IZ2xNSmKTAh275z2ERt/nw UiCAuQv5YAt3C0O9CCGH2vS0/uliaraJUvxw7V5jKmiCZPNq64UtdmI6DxkeLGCV bKKP0V59Xq7A+tY77jagpleVgYeLgYaEvlOJjnizT8EPx+1B6evR+0XKZ9sVWul1 7OXxdB+58cSksxPV6O0KyOn9ouWFHAAqf6PzVBw2RNpZqLPzjxbfG8LqdRX8+4rJ tO/zUE9dyBoWprzh3Jl1JN+3L3nK7JC1+WJUHxHHKqcol+mIGsMpLFtYGfmZdHaE xyLEZrnl/4IxdwVEYcxINxEONhON9NI= -----END CERTIFICATE-----Generated at Sat Jul 5 05:03:54 2025 by rpki-client