$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/5a4e9076-7290-35a8-8b34-3b7d9fefff76.roa File: 5a4e9076-7290-35a8-8b34-3b7d9fefff76.roa (raw, json) Hash identifier: uwyQMpyHkcqIfgN9+pn6y3rwDwzRvLbWh1xiYy8TNAo= Subject key identifier: 9F:A2:0C:87:54:75:24:C9:9A:F6:63:B2:59:80:FE:82:82:8D:2B:E7 Certificate issuer: /CN=48f8534f-57cd-45ba-bfa4-ce60842463a4 Certificate serial: 010D0C9F4328584A5765BE043738EDA3E2689580 Authority key identifier: E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/5a4e9076-7290-35a8-8b34-3b7d9fefff76.roa Signing time: Sat 28 Jun 2025 13:01:02 +0000 ROA not before: Sat 28 Jun 2025 13:01:02 +0000 ROA not after: Fri 26 Sep 2025 13:01:02 +0000 asID: 3280 IP address blocks: 199.119.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:57:65:be:04:37:38:ed:a3:e2:68:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48f8534f-57cd-45ba-bfa4-ce60842463a4 Validity Not Before: Jun 28 13:01:02 2025 GMT Not After : Sep 26 13:01:02 2025 GMT Subject: CN=8f789159-7da3-4f5a-8ee0-d2c3e787ed4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4a:0e:dd:ec:b4:03:58:4a:10:0d:b5:70:2a: 95:e9:a9:4f:93:32:60:fa:60:aa:a9:a8:af:ce:1f: 62:64:e5:9d:ad:50:1d:af:82:98:a7:34:d8:da:fa: 78:2f:f1:06:92:6a:1f:15:b6:90:00:7c:2e:ad:91: a4:cb:4c:f2:c7:30:f1:0c:42:7a:2f:ec:8b:e5:0b: 3c:45:64:f7:72:81:51:b9:ff:b4:23:a0:9c:0b:ac: 39:08:10:cc:bb:a6:b8:ee:c8:e9:ce:b1:ff:75:7f: e5:df:e8:40:76:43:e2:47:e8:9b:2e:45:99:fd:53: e8:43:0b:aa:03:9f:4b:ed:f6:dc:58:44:76:fb:9f: 5a:b7:2a:7b:af:c4:5f:c5:65:88:a9:28:0d:77:61: c5:78:44:06:83:f8:7b:dc:10:51:d6:b8:a0:8e:6f: ba:28:39:a0:9d:d1:8d:84:5b:c3:e4:f1:0c:b4:e2: 01:39:3b:20:ab:fe:94:a3:6d:15:7c:f6:a4:d8:ae: 80:34:df:1d:01:c1:ff:24:7d:07:05:fe:03:94:39: d8:2a:49:a9:2c:8d:87:e5:26:32:0f:84:38:4c:76: 89:61:0e:42:cc:b7:3d:1e:26:5c:b4:26:33:3c:06: c9:e5:40:18:b6:89:ea:57:37:f6:03:9e:7f:b0:35: 35:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:A2:0C:87:54:75:24:C9:9A:F6:63:B2:59:80:FE:82:82:8D:2B:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/5a4e9076-7290-35a8-8b34-3b7d9fefff76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.crl X509v3 Authority Key Identifier: keyid:E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer sbgp-ipAddrBlock: critical IPv4: 199.119.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:91:e1:7d:0c:d7:7c:47:1b:a8:24:7e:e8:38:1b:2e:36:0e: 20:d7:51:29:e9:56:5d:c9:33:de:3c:5b:c9:88:88:ca:e6:e3: 32:09:a7:ca:27:ff:19:cf:ef:92:66:f0:7e:d9:23:32:eb:42: 92:01:75:a8:6a:aa:1f:97:07:7d:89:ff:6d:6b:ba:cb:5d:f8: e6:6a:14:0b:c0:7c:4d:74:d0:21:3e:1d:0b:de:f8:15:90:7c: 5a:76:52:98:3c:36:95:83:bc:cd:b1:42:b2:02:bb:40:52:b3: 0f:69:b6:f2:1a:12:31:b7:67:98:3a:35:4c:e3:83:7a:b2:dd: 06:b4:64:ca:94:f1:8e:67:02:32:05:d8:42:6b:99:1e:ef:3d: ce:7b:60:fe:4e:49:55:43:3f:e5:97:4e:61:17:8c:7b:bd:24: be:07:da:c3:4b:86:22:c9:96:aa:da:77:ab:1a:b8:61:97:e2: 1d:8b:48:8a:7f:2f:62:7a:bf:42:38:0a:b6:55:af:39:a1:c1: 53:53:87:04:7d:bd:04:ec:1b:3d:df:8b:25:9c:86:92:df:85: b8:8a:fe:c1:8c:eb:4f:89:a3:77:da:6c:74:1e:05:74:91:57: b7:4c:07:78:b5:45:9b:2e:77:28:4a:c2:f7:85:b9:52:1a:e6: 64:bc:fa:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpXZb4ENzjto+JolYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDhmODUzNGYtNTdjZC00NWJhLWJmYTQtY2U2MDg0MjQ2 M2E0MB4XDTI1MDYyODEzMDEwMloXDTI1MDkyNjEzMDEwMlowLzEtMCsGA1UEAxMk OGY3ODkxNTktN2RhMy00ZjVhLThlZTAtZDJjM2U3ODdlZDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkoO3ey0A1hKEA21cCqV6alPkzJg+mCqqaiv zh9iZOWdrVAdr4KYpzTY2vp4L/EGkmofFbaQAHwurZGky0zyxzDxDEJ6L+yL5Qs8 RWT3coFRuf+0I6CcC6w5CBDMu6a47sjpzrH/dX/l3+hAdkPiR+ibLkWZ/VPoQwuq A59L7fbcWER2+59atyp7r8RfxWWIqSgNd2HFeEQGg/h73BBR1rigjm+6KDmgndGN hFvD5PEMtOIBOTsgq/6Uo20VfPak2K6ANN8dAcH/JH0HBf4DlDnYKkmpLI2H5SYy D4Q4THaJYQ5CzLc9HiZctCYzPAbJ5UAYtonqVzf2A55/sDU15wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ+iDIdUdSTJmvZjslmA/oKCjSvnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80OGY4 NTM0Zi01N2NkLTQ1YmEtYmZhNC1jZTYwODQyNDYzYTQvNWE0ZTkwNzYtNzI5MC0z NWE4LThiMzQtM2I3ZDlmZWZmZjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDhmODUzNGYtNTdjZC00NWJhLWJm YTQtY2U2MDg0MjQ2M2E0LzQ4Zjg1MzRmLTU3Y2QtNDViYS1iZmE0LWNlNjA4NDI0 NjNhNC5jcmwwHwYDVR0jBBgwFoAU6FPdCXJVOiBqm33uUEZSal9iZggwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80OGY4NTM0Zi01N2NkLTQ1YmEtYmZhNC1jZTYw ODQyNDYzYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx3eIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6R4X0M13xHG6gkfug4Gy42DiDXUSnpVl3JM948W8mIiMrm4zIJp8on /xnP75Jm8H7ZIzLrQpIBdahqqh+XB32J/21rustd+OZqFAvAfE100CE+HQve+BWQ fFp2Upg8NpWDvM2xQrICu0BSsw9ptvIaEjG3Z5g6NUzjg3qy3Qa0ZMqU8Y5nAjIF 2EJrmR7vPc57YP5OSVVDP+WXTmEXjHu9JL4H2sNLhiLJlqrad6sauGGX4h2LSIp/ L2J6v0I4CrZVrzmhwVNThwR9vQTsGz3fiyWchpLfhbiK/sGM60+Jo3fabHQeBXSR V7dMB3i1RZsudyhKwveFuVIa5mS8+rk= -----END CERTIFICATE-----Generated at Mon Jun 30 14:48:39 2025 by rpki-client