$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/b7751a83-4d77-3534-a692-22c9f15e2c5e.roa File: b7751a83-4d77-3534-a692-22c9f15e2c5e.roa (raw, json) Hash identifier: mZ2DZm0l7vFFI+mjzzwtXPgA726t0mQ8SoPBrcPINM4= Subject key identifier: 2E:26:2D:B3:E7:16:EC:FE:58:8F:C9:5E:30:05:45:84:46:35:DB:10 Certificate issuer: /CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76 Certificate serial: 010D0C9F4328584A3E45A5D4F510AF4230195A80 Authority key identifier: D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/b7751a83-4d77-3534-a692-22c9f15e2c5e.roa Signing time: Thu 19 Jun 2025 13:01:02 +0000 ROA not before: Thu 19 Jun 2025 13:01:02 +0000 ROA not after: Wed 17 Sep 2025 13:01:02 +0000 asID: 14618 IP address blocks: 199.187.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:45:a5:d4:f5:10:af:42:30:19:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76 Validity Not Before: Jun 19 13:01:02 2025 GMT Not After : Sep 17 13:01:02 2025 GMT Subject: CN=f075f31f-8ddc-45e2-837d-9810ab114b92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:99:37:e0:8f:fe:bc:1a:a1:8d:70:ea:07:db: 72:e4:19:5f:5d:1f:ba:b7:b8:65:86:b0:1f:65:17: c2:c6:e2:6b:bd:e4:5f:0e:87:53:5f:7e:1e:20:a0: 53:cc:b3:50:94:93:45:90:72:c4:ad:b1:17:75:d3: 11:ea:f5:ca:fa:d8:65:81:39:09:7f:bf:e6:02:9a: 29:aa:38:89:a6:0d:90:77:c7:90:28:6c:a7:a0:8d: ba:ba:52:dc:b8:b9:86:9f:eb:51:f4:59:92:8a:4d: e9:b4:a3:d8:e7:34:08:b2:8e:fc:61:16:1f:2e:82: 9e:61:88:e6:84:aa:6e:5a:b2:ac:c6:a5:db:bd:01: 60:af:da:65:df:e1:9d:af:6b:25:13:ee:54:61:c9: 8c:61:ab:23:68:68:d7:fd:d5:ce:09:1c:01:78:d7: 5d:1a:e3:19:27:f1:50:59:f9:e0:71:31:02:92:34: f4:21:b1:4c:c3:b7:f2:b2:4e:e9:7d:de:3c:18:c9: f4:c6:37:de:b5:1c:2f:db:0f:c1:3d:fd:7d:3c:00: 83:c6:f9:2c:d8:a5:48:55:0f:bf:b7:df:bf:98:cf: 0b:0d:4e:8b:6e:45:d3:1d:69:1c:4e:82:c6:eb:39: d1:ac:fb:74:9f:13:7f:bd:5e:06:50:72:32:72:9e: e2:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:26:2D:B3:E7:16:EC:FE:58:8F:C9:5E:30:05:45:84:46:35:DB:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/b7751a83-4d77-3534-a692-22c9f15e2c5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.crl X509v3 Authority Key Identifier: keyid:D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer sbgp-ipAddrBlock: critical IPv4: 199.187.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:5f:f4:34:e0:bb:1d:bd:ae:bd:e6:34:15:76:5a:2e:da:f1: 3a:ff:a4:bf:78:2c:82:dd:72:e3:96:41:42:27:26:c9:c1:b9: da:3c:42:6f:9c:89:02:d5:af:fa:1e:e2:79:42:bd:89:6a:8e: 06:40:7c:c6:2d:a3:92:57:69:10:95:81:24:85:0a:3e:db:a0: fb:5a:23:f0:0c:cd:17:8d:74:47:e5:a9:f1:3e:8a:68:f6:df: 2f:78:e9:6f:31:22:db:22:1b:5b:dd:dc:9d:3d:0e:b2:ca:93: c3:d2:5a:a6:64:55:80:2d:ec:0f:08:4a:c0:4e:41:3c:b0:51: b6:e5:ee:8b:6f:d7:85:e9:23:07:82:d4:50:14:82:69:ff:3e: 97:d1:7e:4d:25:3c:de:4f:2d:70:81:7f:7f:a3:62:c1:66:68: 87:1c:d0:b2:a2:c1:36:bc:8a:a1:05:10:20:84:f5:88:24:5e: 94:f7:83:55:50:a6:67:3c:33:c4:7d:33:2d:a5:92:a2:4d:b3: f9:ec:db:22:23:89:c1:80:e6:27:13:40:70:a0:d9:eb:6e:cf: b8:41:da:97:14:0b:bb:dd:dc:ef:36:72:f7:e5:3c:f6:4e:2a: 16:eb:22:88:d6:84:9a:e2:27:30:bf:1d:bc:ca:5d:b9:53:1b: 2f:8c:1b:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+RaXU9RCvQjAZWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNmNDM1YzAtOWQyOC00NzdhLTkwYTktMWI0ZmQ3NWNk YTc2MB4XDTI1MDYxOTEzMDEwMloXDTI1MDkxNzEzMDEwMlowLzEtMCsGA1UEAxMk ZjA3NWYzMWYtOGRkYy00NWUyLTgzN2QtOTgxMGFiMTE0YjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pk34I/+vBqhjXDqB9ty5BlfXR+6t7hlhrAf ZRfCxuJrveRfDodTX34eIKBTzLNQlJNFkHLErbEXddMR6vXK+thlgTkJf7/mApop qjiJpg2Qd8eQKGynoI26ulLcuLmGn+tR9FmSik3ptKPY5zQIso78YRYfLoKeYYjm hKpuWrKsxqXbvQFgr9pl3+Gdr2slE+5UYcmMYasjaGjX/dXOCRwBeNddGuMZJ/FQ WfngcTECkjT0IbFMw7fysk7pfd48GMn0xjfetRwv2w/BPf19PACDxvks2KVIVQ+/ t9+/mM8LDU6LbkXTHWkcToLG6znRrPt0nxN/vV4GUHIycp7iwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC4mLbPnFuz+WI/JXjAFRYRGNdsQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xY2Y0 MzVjMC05ZDI4LTQ3N2EtOTBhOS0xYjRmZDc1Y2RhNzYvYjc3NTFhODMtNGQ3Ny0z NTM0LWE2OTItMjJjOWYxNWUyYzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMWNmNDM1YzAtOWQyOC00NzdhLTkw YTktMWI0ZmQ3NWNkYTc2LzFjZjQzNWMwLTlkMjgtNDc3YS05MGE5LTFiNGZkNzVj ZGE3Ni5jcmwwHwYDVR0jBBgwFoAU1T8UX0FTWvBBwtK/fTtQ5jUy/9QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xY2Y0MzVjMC05ZDI4LTQ3N2EtOTBhOS0xYjRm ZDc1Y2RhNzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7uqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpf9DTgux29rr3mNBV2Wi7a8Tr/pL94LILdcuOWQUInJsnBudo8Qm+c iQLVr/oe4nlCvYlqjgZAfMYto5JXaRCVgSSFCj7boPtaI/AMzReNdEflqfE+imj2 3y946W8xItsiG1vd3J09DrLKk8PSWqZkVYAt7A8ISsBOQTywUbbl7otv14XpIweC 1FAUgmn/PpfRfk0lPN5PLXCBf3+jYsFmaIcc0LKiwTa8iqEFECCE9YgkXpT3g1VQ pmc8M8R9My2lkqJNs/ns2yIjicGA5icTQHCg2etuz7hB2pcUC7vd3O82cvflPPZO KhbrIojWhJriJzC/HbzKXblTGy+MG7o= -----END CERTIFICATE-----Generated at Sun Jun 29 14:50:46 2025 by rpki-client