$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68/0a4ea47c-1151-36e1-9f1f-51fff629ea50.roa File: 0a4ea47c-1151-36e1-9f1f-51fff629ea50.roa (raw, json) Hash identifier: X5YiE4mOFbCZAU12V9W36RCf/IdcOBrkt8CzrPYgcic= Subject key identifier: 5D:3F:2A:F8:AD:DB:D7:2B:E8:E6:29:9A:04:3C:85:6A:90:55:2F:A8 Certificate issuer: /CN=4c7af685-9e64-44e4-ac36-719ad5b8bf68 Certificate serial: 010D0C9F4328584A5CFB2E5F3C95C8E1D3BAF600 Authority key identifier: 83:1F:FA:45:E1:13:40:75:27:2F:26:DD:18:21:09:AD:FC:C8:9A:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68/0a4ea47c-1151-36e1-9f1f-51fff629ea50.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 16509 IP address blocks: 199.59.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68/4c7af685-9e64-44e4-ac36-719ad5b8bf68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68/4c7af685-9e64-44e4-ac36-719ad5b8bf68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:2e:5f:3c:95:c8:e1:d3:ba:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c7af685-9e64-44e4-ac36-719ad5b8bf68 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=3094a69c-9b0e-4d54-870b-dca0a915d38d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:5f:d6:92:92:3c:52:f7:44:37:1a:3f:65:d4: 0e:24:e3:b1:77:bb:72:1d:1a:fb:76:23:e9:5b:4b: 21:dc:41:96:75:36:3b:7b:3f:4a:5d:77:ed:bd:c2: 48:0c:90:a4:ba:f6:b4:37:0b:42:14:24:ff:b6:be: f3:d5:f5:c6:60:42:ba:22:6d:19:d9:66:39:c1:32: e2:d5:0f:31:ad:8c:dc:36:73:47:b1:dc:1c:a5:49: 3b:c8:dc:54:63:31:a1:ad:ea:d8:b3:c1:61:77:c3: 53:a8:85:3a:1c:f9:40:5f:b7:22:85:c9:f2:2b:b1: 57:7e:46:c1:1d:a9:98:f8:6e:86:d3:4b:c5:ae:ba: 32:55:2d:17:e9:de:d6:9b:49:4b:cb:a6:e5:d6:2c: 21:dd:9d:4b:00:f4:e3:f2:b3:ae:4c:2b:57:5e:be: 85:78:4b:e1:07:30:bf:db:c0:c1:4e:6f:69:ba:7a: 97:ec:e2:5f:25:06:33:ba:30:c6:fe:54:13:94:e1: 79:07:58:f4:16:c1:50:56:04:e9:56:06:68:16:57: e9:77:c8:58:85:1d:20:a8:a1:93:85:d7:7a:8e:51: 8e:5b:c8:b5:39:d0:08:3a:bb:b4:08:aa:6a:db:40: 13:37:4e:ed:12:e0:b5:e7:e4:e2:71:59:04:07:ac: 0d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:3F:2A:F8:AD:DB:D7:2B:E8:E6:29:9A:04:3C:85:6A:90:55:2F:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68/0a4ea47c-1151-36e1-9f1f-51fff629ea50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68/4c7af685-9e64-44e4-ac36-719ad5b8bf68.crl X509v3 Authority Key Identifier: keyid:83:1F:FA:45:E1:13:40:75:27:2F:26:DD:18:21:09:AD:FC:C8:9A:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68.cer sbgp-ipAddrBlock: critical IPv4: 199.59.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:1a:8f:11:c8:de:11:93:50:3e:54:66:3c:21:e3:2b:8e:7f: 74:6f:a9:40:00:5c:6f:3b:1d:55:7b:84:4b:b4:6e:47:5f:f6: d2:a8:0c:6f:d3:d0:a4:6a:ff:20:37:03:56:7c:11:94:ac:71: 14:bc:c5:0c:2d:8f:0f:c0:a7:4c:70:8a:c7:b7:90:be:1d:df: 93:06:c5:03:a4:e9:99:56:8b:b0:8b:73:5e:de:be:dc:3f:2d: 28:09:ce:e1:ba:85:39:ba:dc:5d:f2:63:3b:93:bf:25:14:e6: d6:f0:8f:79:c2:25:03:48:df:ee:c2:ff:c9:24:d7:22:76:e8: 1e:04:63:42:17:c6:ba:79:ab:ab:eb:52:6c:8b:21:c8:b4:96: 3c:c1:b8:12:8a:2c:8b:54:b5:bb:04:e8:22:e2:e6:f5:91:f1: c1:1f:99:a1:2c:b9:7e:7b:4b:f7:78:54:46:bd:e1:98:69:17: 46:5d:6b:57:31:69:3f:b9:83:09:05:51:04:f4:51:5f:eb:91: cc:fc:41:73:ce:69:d7:ff:d5:d3:27:e8:b5:e9:73:fb:94:3f: da:ae:3b:cf:cf:30:35:66:46:0a:89:39:c1:22:4f:f7:dd:3f: 4b:25:53:a1:e1:c3:14:a1:83:44:2e:46:25:30:db:25:6b:39: d5:f7:1a:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+y5fPJXI4dO69gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM3YWY2ODUtOWU2NC00NGU0LWFjMzYtNzE5YWQ1Yjhi ZjY4MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk MzA5NGE2OWMtOWIwZS00ZDU0LTg3MGItZGNhMGE5MTVkMzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAil/WkpI8UvdENxo/ZdQOJOOxd7tyHRr7diPp W0sh3EGWdTY7ez9KXXftvcJIDJCkuva0NwtCFCT/tr7z1fXGYEK6Im0Z2WY5wTLi 1Q8xrYzcNnNHsdwcpUk7yNxUYzGhrerYs8Fhd8NTqIU6HPlAX7cihcnyK7FXfkbB HamY+G6G00vFrroyVS0X6d7Wm0lLy6bl1iwh3Z1LAPTj8rOuTCtXXr6FeEvhBzC/ 28DBTm9punqX7OJfJQYzujDG/lQTlOF5B1j0FsFQVgTpVgZoFlfpd8hYhR0gqKGT hdd6jlGOW8i1OdAIOru0CKpq20ATN07tEuC15+TicVkEB6wN2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF0/Kvit29cr6OYpmgQ8hWqQVS+oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80Yzdh ZjY4NS05ZTY0LTQ0ZTQtYWMzNi03MTlhZDViOGJmNjgvMGE0ZWE0N2MtMTE1MS0z NmUxLTlmMWYtNTFmZmY2MjllYTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGM3YWY2ODUtOWU2NC00NGU0LWFj MzYtNzE5YWQ1YjhiZjY4LzRjN2FmNjg1LTllNjQtNDRlNC1hYzM2LTcxOWFkNWI4 YmY2OC5jcmwwHwYDVR0jBBgwFoAUgx/6ReETQHUnLybdGCEJrfzIml8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80YzdhZjY4NS05ZTY0LTQ0ZTQtYWMzNi03MTlh ZDViOGJmNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzvwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwajxHI3hGTUD5UZjwh4yuOf3RvqUAAXG87HVV7hEu0bkdf9tKoDG/T 0KRq/yA3A1Z8EZSscRS8xQwtjw/Ap0xwise3kL4d35MGxQOk6ZlWi7CLc17evtw/ LSgJzuG6hTm63F3yYzuTvyUU5tbwj3nCJQNI3+7C/8kk1yJ26B4EY0IXxrp5q6vr UmyLIci0ljzBuBKKLItUtbsE6CLi5vWR8cEfmaEsuX57S/d4VEa94ZhpF0Zda1cx aT+5gwkFUQT0UV/rkcz8QXPOadf/1dMn6LXpc/uUP9quO8/PMDVmRgqJOcEiT/fd P0slU6HhwxShg0QuRiUw2yVrOdX3Guw= -----END CERTIFICATE-----Generated at Tue Jul 1 03:48:09 2025 by rpki-client