$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/c8c06edb-b0cf-3405-9d62-91233a2bfcdb.roa File: c8c06edb-b0cf-3405-9d62-91233a2bfcdb.roa (raw, json) Hash identifier: orQgU7FK9r2viCZAl0DP1GdBVVb4+F3MJw9m4gIc3AM= Subject key identifier: 0E:14:62:3F:C2:12:F9:CE:CB:B2:EE:F9:6E:C1:B2:C0:1F:0B:35:FD Certificate issuer: /CN=868a77c4-49cd-4821-b1f2-58d35028b0ed Certificate serial: 010D0C9F4328584A5E605B7059E064568DFB0380 Authority key identifier: A2:19:F0:EB:7A:5F:24:BB:20:59:03:C8:AB:8E:28:00:C8:56:AC:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/c8c06edb-b0cf-3405-9d62-91233a2bfcdb.roa Signing time: Tue 01 Jul 2025 01:00:50 +0000 ROA not before: Tue 01 Jul 2025 01:00:50 +0000 ROA not after: Mon 29 Sep 2025 01:00:50 +0000 asID: 46970 IP address blocks: 199.242.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/868a77c4-49cd-4821-b1f2-58d35028b0ed.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/868a77c4-49cd-4821-b1f2-58d35028b0ed.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Jul 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:60:5b:70:59:e0:64:56:8d:fb:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=868a77c4-49cd-4821-b1f2-58d35028b0ed Validity Not Before: Jul 1 01:00:50 2025 GMT Not After : Sep 29 01:00:50 2025 GMT Subject: CN=86014954-876b-467e-b815-bee8344fffec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:34:5a:5f:9a:9b:a1:43:60:f1:77:e8:fa:93: 62:7a:f0:92:42:39:da:d0:8a:a8:6a:93:1d:c0:b7: 1d:e6:1e:ee:43:c2:56:df:b7:bb:3f:ad:96:e7:f1: 16:ad:45:2b:b4:6a:be:3c:2c:f4:9c:37:b6:a5:e6: 91:30:fa:43:5c:db:26:63:e7:9d:3a:9e:35:da:2c: 5e:09:b4:5c:41:c0:94:a4:80:41:1d:1c:7e:0e:89: 5f:10:70:03:fe:ba:0b:cc:13:05:a4:c1:8b:19:ef: c0:30:f3:e9:eb:a1:23:ed:b3:54:99:be:df:c3:c7: a3:05:44:cb:e0:b8:a4:e4:5e:e3:21:13:6c:df:e1: 11:85:0c:30:e5:63:79:1c:02:af:31:f0:cc:cf:f9: 70:8d:20:df:ab:c0:76:fe:e0:2d:4d:3e:5b:52:ea: ae:a5:45:56:88:a8:a0:bd:36:80:0c:39:bc:08:33: 93:37:26:4c:c3:29:1b:93:4f:fe:a7:84:e9:3a:aa: 60:17:de:a3:a1:c9:5e:b1:fd:cd:47:1f:59:f5:b8: 3a:cd:0d:69:73:db:c8:d1:06:05:d5:e9:b9:a1:50: 32:fa:0f:e6:cb:bb:1d:e1:2f:88:02:57:0e:ca:81: 96:84:45:e4:cc:ad:74:da:1f:31:38:5f:fe:81:e9: ba:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:14:62:3F:C2:12:F9:CE:CB:B2:EE:F9:6E:C1:B2:C0:1F:0B:35:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/c8c06edb-b0cf-3405-9d62-91233a2bfcdb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/868a77c4-49cd-4821-b1f2-58d35028b0ed.crl X509v3 Authority Key Identifier: keyid:A2:19:F0:EB:7A:5F:24:BB:20:59:03:C8:AB:8E:28:00:C8:56:AC:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed.cer sbgp-ipAddrBlock: critical IPv4: 199.242.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:c4:80:a3:ab:f0:b5:23:2c:b8:38:66:d5:bb:f7:1c:d5:66: 7c:a0:44:7e:80:4d:c3:1e:d6:1a:ee:fd:34:20:6d:b9:f2:ee: 11:70:17:8b:0f:75:89:3f:e3:39:00:82:dd:90:db:c3:1d:67: 93:97:5b:a4:b9:84:ec:a1:48:e2:b1:03:b0:26:9a:09:84:49: 88:bf:af:57:85:b5:1d:57:47:e9:36:5f:04:d8:38:ea:f2:41: 99:8a:33:e5:cb:a6:2d:ea:72:4b:12:a4:b4:ad:0c:6e:b9:12: d7:f0:5e:49:a3:e7:f1:2c:9c:51:e8:a5:2a:52:7c:14:12:f1: cf:2b:94:81:14:3d:b3:70:3f:97:89:09:60:4f:d7:5a:46:cf: 80:a9:90:b9:5b:81:01:fe:2b:46:d6:56:0b:e6:db:57:dc:a8: 7a:86:15:62:fb:05:dc:36:08:fd:29:cb:7c:bf:92:a1:a6:56: ce:a3:f0:55:ff:de:5a:39:9c:ac:f8:79:6a:af:68:33:76:2b: 2f:7c:9f:25:9b:d4:7b:df:bf:0c:e0:f3:54:e3:82:b9:97:e5: 3e:0d:cc:b2:29:f4:75:84:2d:db:68:ab:97:7f:9a:04:65:7d: 88:60:6c:a3:57:fb:4e:53:67:ea:ed:75:ef:e9:f2:ae:33:2f: da:09:ac:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpeYFtwWeBkVo37A4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODY4YTc3YzQtNDljZC00ODIxLWIxZjItNThkMzUwMjhi MGVkMB4XDTI1MDcwMTAxMDA1MFoXDTI1MDkyOTAxMDA1MFowLzEtMCsGA1UEAxMk ODYwMTQ5NTQtODc2Yi00NjdlLWI4MTUtYmVlODM0NGZmZmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jRaX5qboUNg8Xfo+pNievCSQjna0IqoapMd wLcd5h7uQ8JW37e7P62W5/EWrUUrtGq+PCz0nDe2peaRMPpDXNsmY+edOp412ixe CbRcQcCUpIBBHRx+DolfEHAD/roLzBMFpMGLGe/AMPPp66Ej7bNUmb7fw8ejBUTL 4Lik5F7jIRNs3+ERhQww5WN5HAKvMfDMz/lwjSDfq8B2/uAtTT5bUuqupUVWiKig vTaADDm8CDOTNyZMwykbk0/+p4TpOqpgF96joclesf3NRx9Z9bg6zQ1pc9vI0QYF 1em5oVAy+g/my7sd4S+IAlcOyoGWhEXkzK102h8xOF/+gem6LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA4UYj/CEvnOy7Lu+W7BssAfCzX9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84Njhh NzdjNC00OWNkLTQ4MjEtYjFmMi01OGQzNTAyOGIwZWQvYzhjMDZlZGItYjBjZi0z NDA1LTlkNjItOTEyMzNhMmJmY2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODY4YTc3YzQtNDljZC00ODIxLWIx ZjItNThkMzUwMjhiMGVkLzg2OGE3N2M0LTQ5Y2QtNDgyMS1iMWYyLTU4ZDM1MDI4 YjBlZC5jcmwwHwYDVR0jBBgwFoAUohnw63pfJLsgWQPIq44oAMhWrAEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NjhhNzdjNC00OWNkLTQ4MjEtYjFmMi01OGQz NTAyOGIwZWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx/IcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvEgKOr8LUjLLg4ZtW79xzVZnygRH6ATcMe1hru/TQgbbny7hFwF4sP dYk/4zkAgt2Q28MdZ5OXW6S5hOyhSOKxA7AmmgmESYi/r1eFtR1XR+k2XwTYOOry QZmKM+XLpi3qcksSpLStDG65EtfwXkmj5/EsnFHopSpSfBQS8c8rlIEUPbNwP5eJ CWBP11pGz4CpkLlbgQH+K0bWVgvm21fcqHqGFWL7Bdw2CP0py3y/kqGmVs6j8FX/ 3lo5nKz4eWqvaDN2Ky98nyWb1Hvfvwzg81TjgrmX5T4NzLIp9HWELdtoq5d/mgRl fYhgbKNX+05TZ+rtde/p8q4zL9oJrDc= -----END CERTIFICATE-----Generated at Sat Jul 5 14:28:17 2025 by rpki-client