$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/564dab34-32c7-3d2a-89a2-0f3e970ee2e5.roa File: 564dab34-32c7-3d2a-89a2-0f3e970ee2e5.roa (raw, json) Hash identifier: r+Ma5LNghZmWOgjdqag4quMl5M0gxuLkAQGqwpWs63E= Subject key identifier: 78:75:17:94:1F:A7:28:B8:06:58:9D:8E:16:B0:8F:46:71:DD:33:04 Certificate issuer: /CN=1380a44d-7851-4eb6-8887-413917dcdc12 Certificate serial: 010D0C9F4328584A4C3B19EABE52BB6741C89D60 Authority key identifier: 6C:37:E1:61:68:B4:CF:88:64:11:CB:68:E9:4A:65:72:4A:96:54:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/564dab34-32c7-3d2a-89a2-0f3e970ee2e5.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 132369 IP address blocks: 199.101.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/1380a44d-7851-4eb6-8887-413917dcdc12.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/1380a44d-7851-4eb6-8887-413917dcdc12.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:19:ea:be:52:bb:67:41:c8:9d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1380a44d-7851-4eb6-8887-413917dcdc12 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=572c3eb4-b481-4176-90f9-1c1ea6d60ee3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a6:e3:c6:66:1b:bc:d7:18:ea:40:30:f4:a7: 6a:a4:c6:fc:d9:6f:b7:64:74:0b:46:74:da:84:d6: 55:9f:56:b7:5e:ac:b3:d0:d3:e1:a6:c6:a2:99:63: c1:8d:aa:a1:3c:db:f9:c9:28:f7:e5:c3:83:57:1e: c5:68:ae:23:53:14:da:d7:1c:61:be:cd:08:ba:68: de:aa:d7:2c:a1:4f:86:66:b4:97:5c:e8:9e:0b:41: eb:f8:0c:96:a3:9a:d2:fb:09:e2:f7:e9:a3:4f:91: 41:50:1c:61:2e:b8:4c:94:0e:f3:4d:a2:0a:1a:0a: 0a:ef:92:40:4f:51:68:94:3b:f1:24:4b:be:a7:28: 32:dc:fd:26:7e:c3:04:12:7d:35:b0:79:c0:07:51: b8:de:96:04:77:4a:75:df:66:20:4b:bd:e0:c9:cd: cf:8c:94:ab:da:5b:0f:be:c2:c2:95:d6:5d:5e:a1: 13:3c:8b:c7:33:cd:0f:09:b2:ee:c7:f4:c0:07:c5: 13:b6:40:ba:e7:e2:a6:4d:02:1e:8a:bc:0e:f9:d2: 19:09:cf:c4:98:2f:e7:3a:ae:68:77:ab:37:f0:a6: 2b:92:a2:2e:bc:8c:9b:c3:10:59:c9:b2:35:db:42: 95:a1:92:da:a3:52:0d:6e:09:c9:73:55:8f:0f:47: 3d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:75:17:94:1F:A7:28:B8:06:58:9D:8E:16:B0:8F:46:71:DD:33:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/564dab34-32c7-3d2a-89a2-0f3e970ee2e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/1380a44d-7851-4eb6-8887-413917dcdc12.crl X509v3 Authority Key Identifier: keyid:6C:37:E1:61:68:B4:CF:88:64:11:CB:68:E9:4A:65:72:4A:96:54:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12.cer sbgp-ipAddrBlock: critical IPv4: 199.101.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:d1:68:d4:bd:18:aa:5e:1f:e9:a6:66:50:65:f1:03:5e:a9: c9:08:fc:87:38:e8:b8:81:ab:01:23:44:ac:3a:30:44:4d:e6: 80:1f:3f:b9:9c:90:9b:8d:f4:f2:ee:3a:7c:a8:62:99:84:be: 6f:95:35:3c:33:53:91:40:25:68:f0:2f:33:af:6f:0e:d4:de: 3f:9d:91:37:1a:da:63:17:54:3c:29:2d:f1:5a:4d:e0:6b:9b: f8:0b:ec:05:e1:97:ba:b7:b1:94:e0:94:e4:0e:99:38:02:13: 74:2c:4c:87:73:c0:be:91:ac:da:7d:76:f0:e4:dc:67:c7:a5: ec:60:9f:d6:d4:10:a4:0c:21:57:eb:e8:a1:3d:0c:bd:56:01: f3:35:f0:25:a7:bd:3b:60:ca:c3:3a:f3:58:d5:b3:8f:f9:42: 44:59:d6:71:6a:2b:a5:9b:22:13:bd:2e:bc:52:93:aa:c6:4f: 55:d2:f3:7d:70:2b:ce:59:70:7d:1a:5d:d9:27:ae:ba:51:09: 6a:f5:69:5d:10:e4:98:b7:4b:bf:e1:1f:cc:74:a3:d4:bb:a7: 71:a0:cd:b0:d0:b1:c1:22:81:1a:e6:57:b9:a9:67:35:4b:be: d7:41:d5:1e:9a:5f:59:07:bd:9f:e3:6f:3f:9a:ad:19:92:a8: 90:d7:b6:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMOxnqvlK7Z0HInWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTM4MGE0NGQtNzg1MS00ZWI2LTg4ODctNDEzOTE3ZGNk YzEyMB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk NTcyYzNlYjQtYjQ4MS00MTc2LTkwZjktMWMxZWE2ZDYwZWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KbjxmYbvNcY6kAw9KdqpMb82W+3ZHQLRnTa hNZVn1a3Xqyz0NPhpsaimWPBjaqhPNv5ySj35cODVx7FaK4jUxTa1xxhvs0Iumje qtcsoU+GZrSXXOieC0Hr+AyWo5rS+wni9+mjT5FBUBxhLrhMlA7zTaIKGgoK75JA T1FolDvxJEu+pygy3P0mfsMEEn01sHnAB1G43pYEd0p132YgS73gyc3PjJSr2lsP vsLCldZdXqETPIvHM80PCbLux/TAB8UTtkC65+KmTQIeirwO+dIZCc/EmC/nOq5o d6s38KYrkqIuvIybwxBZybI120KVoZLao1INbgnJc1WPD0c9OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHh1F5Qfpyi4Blidjhawj0Zx3TMEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xMzgw YTQ0ZC03ODUxLTRlYjYtODg4Ny00MTM5MTdkY2RjMTIvNTY0ZGFiMzQtMzJjNy0z ZDJhLTg5YTItMGYzZTk3MGVlMmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMTM4MGE0NGQtNzg1MS00ZWI2LTg4 ODctNDEzOTE3ZGNkYzEyLzEzODBhNDRkLTc4NTEtNGViNi04ODg3LTQxMzkxN2Rj ZGMxMi5jcmwwHwYDVR0jBBgwFoAUbDfhYWi0z4hkEcto6UplckqWVJMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xMzgwYTQ0ZC03ODUxLTRlYjYtODg4Ny00MTM5 MTdkY2RjMTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx2V0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrRaNS9GKpeH+mmZlBl8QNeqckI/Ic46LiBqwEjRKw6MERN5oAfP7mc kJuN9PLuOnyoYpmEvm+VNTwzU5FAJWjwLzOvbw7U3j+dkTca2mMXVDwpLfFaTeBr m/gL7AXhl7q3sZTglOQOmTgCE3QsTIdzwL6RrNp9dvDk3GfHpexgn9bUEKQMIVfr 6KE9DL1WAfM18CWnvTtgysM681jVs4/5QkRZ1nFqK6WbIhO9LrxSk6rGT1XS831w K85ZcH0aXdknrrpRCWr1aV0Q5Ji3S7/hH8x0o9S7p3GgzbDQscEigRrmV7mpZzVL vtdB1R6aX1kHvZ/jbz+arRmSqJDXtn8= -----END CERTIFICATE-----Generated at Tue Jul 1 15:59:32 2025 by rpki-client