$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceaf7c2b-544f-4639-a6ad-4b0bac926ab8/8c609069-4384-3695-9ac5-2533f2d92953.roa File: 8c609069-4384-3695-9ac5-2533f2d92953.roa (raw, json) Hash identifier: EYj/HpJ83EWZNUYJyHVT5Qz4+IxTdW01wv8+pKHZYBI= Subject key identifier: E9:3D:62:78:3D:DE:4E:43:C4:B1:E4:38:09:4D:96:E6:8C:10:E6:41 Certificate issuer: /CN=ceaf7c2b-544f-4639-a6ad-4b0bac926ab8 Certificate serial: 010D0C9F4328584A3B7AFAA9088EC2C3E92191C0 Authority key identifier: 9F:30:CF:EA:1B:C7:54:A8:51:5D:E3:99:6A:E1:50:F3:25:1B:99:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceaf7c2b-544f-4639-a6ad-4b0bac926ab8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceaf7c2b-544f-4639-a6ad-4b0bac926ab8/8c609069-4384-3695-9ac5-2533f2d92953.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 46523 IP address blocks: 199.38.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceaf7c2b-544f-4639-a6ad-4b0bac926ab8/ceaf7c2b-544f-4639-a6ad-4b0bac926ab8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceaf7c2b-544f-4639-a6ad-4b0bac926ab8/ceaf7c2b-544f-4639-a6ad-4b0bac926ab8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceaf7c2b-544f-4639-a6ad-4b0bac926ab8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7a:fa:a9:08:8e:c2:c3:e9:21:91:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ceaf7c2b-544f-4639-a6ad-4b0bac926ab8 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=6afc5513-a347-44b8-9ce6-3032cfd2e566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9c:b7:0c:64:4a:64:4e:fb:70:9b:92:9a:e0: 1a:4d:7d:be:84:4c:96:46:17:a3:50:95:5a:74:84: ba:bb:06:5b:05:c9:23:59:dc:1d:84:9e:96:34:ec: 7f:a1:7c:0c:79:2e:47:d7:fb:c8:0b:68:79:04:ce: ad:14:dd:33:b7:8e:fe:bf:df:c4:19:ef:67:85:bc: 26:18:c7:52:7e:1b:3e:ec:07:70:17:78:1d:b4:5c: ec:0a:17:85:f9:06:0b:5c:b3:2d:68:0f:c3:e8:35: 87:eb:91:c5:7b:fb:2a:74:91:68:73:af:9f:f0:68: 56:1d:0c:6e:b5:ef:18:7b:92:2a:22:3d:83:7b:04: 8c:f7:4f:09:db:40:91:b5:04:d3:1e:13:95:7a:22: c4:4c:a9:4c:15:cd:77:ed:3c:58:1e:c1:5a:c4:80: 47:ce:d2:7c:41:b7:44:93:f1:83:d0:69:56:78:84: 20:9b:8c:8f:4e:2e:cb:b1:3b:aa:ed:16:04:18:25: 1f:13:42:62:05:26:dd:1e:22:87:ff:4a:d9:e6:a6: 85:41:df:c0:9b:08:0f:7b:50:bf:85:00:d0:d0:2f: c9:46:fe:eb:04:68:b5:a6:f6:c4:17:5f:3d:b9:a7: 29:cd:59:91:c6:e1:62:58:6d:3b:5f:7f:05:d4:3c: 8f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:3D:62:78:3D:DE:4E:43:C4:B1:E4:38:09:4D:96:E6:8C:10:E6:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceaf7c2b-544f-4639-a6ad-4b0bac926ab8/8c609069-4384-3695-9ac5-2533f2d92953.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceaf7c2b-544f-4639-a6ad-4b0bac926ab8/ceaf7c2b-544f-4639-a6ad-4b0bac926ab8.crl X509v3 Authority Key Identifier: keyid:9F:30:CF:EA:1B:C7:54:A8:51:5D:E3:99:6A:E1:50:F3:25:1B:99:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceaf7c2b-544f-4639-a6ad-4b0bac926ab8.cer sbgp-ipAddrBlock: critical IPv4: 199.38.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:1e:29:4b:bf:29:25:e3:3b:bd:92:f5:2b:d5:38:c9:55:c1: 72:3c:cb:3c:ea:fe:b3:4f:ae:d9:da:40:ae:7e:25:0c:fa:e1: 80:21:cd:1d:89:90:c2:84:82:14:55:c5:2c:28:0b:37:fb:8d: bd:e1:e9:99:75:ba:dc:c3:b4:b8:4a:30:d3:c6:74:5e:91:50: 30:e6:1d:19:42:f0:1a:be:84:01:e9:da:c5:7a:ca:f5:d8:c6: db:87:d1:02:01:ee:86:d4:39:3f:45:a2:be:7c:0f:10:a2:e3: 12:c2:26:8b:3a:ae:2c:74:c3:98:7c:61:7e:79:c3:58:43:dd: 41:17:aa:26:c9:71:97:a8:b0:d8:ca:53:1e:4a:b7:1a:69:c3: d5:ba:0c:1f:34:7c:38:e4:1b:fb:8b:87:6e:cf:78:f9:c5:b6: 72:9f:13:39:12:0f:ce:14:3a:64:5a:f4:7f:1f:33:05:a2:6f: 3f:bb:a2:e7:89:c3:37:62:90:05:34:39:7b:57:c6:15:04:bf: 16:e4:fd:44:8f:06:70:48:2d:03:f3:b2:5c:24:84:b9:7b:05: 44:75:18:a5:c1:35:42:be:77:7a:a8:d6:32:0f:f9:e9:50:72: a4:4e:0f:e4:84:ca:f0:4a:88:da:1a:78:b9:48:aa:f0:89:6a: 0b:52:15:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7evqpCI7Cw+khkcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VhZjdjMmItNTQ0Zi00NjM5LWE2YWQtNGIwYmFjOTI2 YWI4MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk NmFmYzU1MTMtYTM0Ny00NGI4LTljZTYtMzAzMmNmZDJlNTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspy3DGRKZE77cJuSmuAaTX2+hEyWRhejUJVa dIS6uwZbBckjWdwdhJ6WNOx/oXwMeS5H1/vIC2h5BM6tFN0zt47+v9/EGe9nhbwm GMdSfhs+7AdwF3gdtFzsCheF+QYLXLMtaA/D6DWH65HFe/sqdJFoc6+f8GhWHQxu te8Ye5IqIj2DewSM908J20CRtQTTHhOVeiLETKlMFc137TxYHsFaxIBHztJ8QbdE k/GD0GlWeIQgm4yPTi7LsTuq7RYEGCUfE0JiBSbdHiKH/0rZ5qaFQd/AmwgPe1C/ hQDQ0C/JRv7rBGi1pvbEF189uacpzVmRxuFiWG07X38F1DyPLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOk9Yng93k5DxLHkOAlNluaMEOZBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jZWFm N2MyYi01NDRmLTQ2MzktYTZhZC00YjBiYWM5MjZhYjgvOGM2MDkwNjktNDM4NC0z Njk1LTlhYzUtMjUzM2YyZDkyOTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvY2VhZjdjMmItNTQ0Zi00NjM5LWE2 YWQtNGIwYmFjOTI2YWI4L2NlYWY3YzJiLTU0NGYtNDYzOS1hNmFkLTRiMGJhYzky NmFiOC5jcmwwHwYDVR0jBBgwFoAUnzDP6hvHVKhRXeOZauFQ8yUbmcgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9jZWFmN2MyYi01NDRmLTQ2MzktYTZhZC00YjBi YWM5MjZhYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxyY4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUeKUu/KSXjO72S9SvVOMlVwXI8yzzq/rNPrtnaQK5+JQz64YAhzR2J kMKEghRVxSwoCzf7jb3h6Zl1utzDtLhKMNPGdF6RUDDmHRlC8Bq+hAHp2sV6yvXY xtuH0QIB7obUOT9For58DxCi4xLCJos6rix0w5h8YX55w1hD3UEXqibJcZeosNjK Ux5Ktxppw9W6DB80fDjkG/uLh27PePnFtnKfEzkSD84UOmRa9H8fMwWibz+7oueJ wzdikAU0OXtXxhUEvxbk/USPBnBILQPzslwkhLl7BUR1GKXBNUK+d3qo1jIP+elQ cqROD+SEyvBKiNoaeLlIqvCJagtSFQw= -----END CERTIFICATE-----Generated at Tue Jul 1 14:03:25 2025 by rpki-client