$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/5c321eb2-77c0-3367-a9c5-6d1e9f4412a8.roa File: 5c321eb2-77c0-3367-a9c5-6d1e9f4412a8.roa (raw, json) Hash identifier: Q/RAB1TskgDnuXKa9TjRqsx3g2/UYtBXeiMTIFsRZuE= Subject key identifier: 69:D5:06:E1:89:77:96:14:B1:D4:E3:F4:FB:4B:1E:9B:BA:44:F0:15 Certificate issuer: /CN=fd9ab029-fead-4e1c-b7cc-3aedf23a797f Certificate serial: 010D0C9F4328584A5765CDF52565B91442345240 Authority key identifier: 91:C7:D6:BD:DC:41:CD:1D:2A:AE:C6:8E:26:AF:B6:FA:74:7E:B0:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/5c321eb2-77c0-3367-a9c5-6d1e9f4412a8.roa Signing time: Sat 28 Jun 2025 13:01:02 +0000 ROA not before: Sat 28 Jun 2025 13:01:02 +0000 ROA not after: Fri 26 Sep 2025 13:01:02 +0000 asID: 398395 IP address blocks: 172.99.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:57:65:cd:f5:25:65:b9:14:42:34:52:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd9ab029-fead-4e1c-b7cc-3aedf23a797f Validity Not Before: Jun 28 13:01:02 2025 GMT Not After : Sep 26 13:01:02 2025 GMT Subject: CN=63766123-6b67-42c0-8229-05fdb8dbb1f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:89:4d:46:75:8a:fb:0a:c5:ce:3e:30:21:c3: ae:53:66:4b:b7:8e:a9:c2:2c:02:49:30:45:91:46: a2:1a:df:e6:45:a9:65:b5:72:fc:a7:ab:5c:47:18: 26:22:cd:b0:e2:71:cd:54:e1:93:1a:56:f8:3d:02: 91:2a:68:c1:97:14:23:74:5b:ea:e0:88:44:31:dd: 73:d2:ec:89:d9:dd:60:85:d4:35:22:83:c4:e3:ac: c6:8a:22:2d:d4:82:8e:c4:83:cf:23:26:fc:95:2e: bd:a0:03:70:5a:e3:be:ea:86:81:90:55:62:23:c9: 7d:e4:ab:a6:1f:8d:e0:d6:d6:4c:58:22:a3:84:a5: 07:d0:b9:cf:13:86:b0:de:c8:e3:42:4f:50:1a:74: 45:77:2c:e6:23:23:7a:38:1e:05:40:da:92:ae:e3: f7:89:50:92:c9:fa:11:0a:2b:6b:a5:6f:37:b5:e4: 46:4d:73:70:57:f1:05:7e:22:00:36:b0:7f:fb:e9: e8:c8:1e:ac:7c:dd:f9:7f:b5:dc:57:a3:dd:8d:46: da:3b:d1:f7:7e:23:48:64:52:b1:3a:14:7d:80:59: 1e:5c:50:ae:24:e3:47:75:48:f9:59:b0:0a:0a:dd: eb:80:fb:f7:b2:77:3d:d6:a9:43:a2:7a:9f:1b:57: df:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:D5:06:E1:89:77:96:14:B1:D4:E3:F4:FB:4B:1E:9B:BA:44:F0:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/5c321eb2-77c0-3367-a9c5-6d1e9f4412a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.crl X509v3 Authority Key Identifier: keyid:91:C7:D6:BD:DC:41:CD:1D:2A:AE:C6:8E:26:AF:B6:FA:74:7E:B0:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.cer sbgp-ipAddrBlock: critical IPv4: 172.99.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:08:53:71:e4:09:28:5b:69:de:67:02:51:18:aa:60:1a:c9: 2d:6c:37:24:1a:e6:e7:6f:90:ad:a8:8f:48:49:ed:f8:74:cf: 2d:31:80:c9:76:ea:f4:47:66:9b:e0:75:9c:03:a5:30:a9:ce: c9:ed:5b:ad:dd:9a:7a:31:84:68:45:52:69:ee:fa:ad:c6:8f: 33:91:20:c8:f0:14:dd:4f:aa:6b:d8:a0:9f:03:a1:52:de:62: 75:6e:2a:80:56:90:9f:b6:0f:d2:67:27:11:9f:9a:ce:f7:c6: 14:83:47:c4:55:66:90:00:f9:14:5c:b2:c5:ca:a6:51:ea:bf: 2a:b7:9e:d1:56:d9:7a:bb:e0:82:16:5f:41:62:1a:0c:02:af: be:f1:c3:9f:54:f5:81:e1:49:4a:82:a8:c1:4f:41:9f:2e:7e: 96:93:0c:5b:dd:2c:8f:7f:d3:29:c8:7e:e7:1f:7f:f0:68:67: 70:fa:44:8e:44:c9:06:d6:45:b9:c3:9c:c3:eb:ca:85:9a:4f: 32:d8:7a:46:0c:6e:ba:88:5b:23:9b:d9:ab:ca:c5:7b:5d:fc: 68:4f:83:4b:bc:a6:1b:5c:4a:f4:78:73:39:ac:78:48:36:1b: 73:e6:c9:5c:33:d0:c5:fc:c2:63:a0:ba:f8:aa:9f:53:cb:e4: 46:2f:3d:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpXZc31JWW5FEI0UkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQ5YWIwMjktZmVhZC00ZTFjLWI3Y2MtM2FlZGYyM2E3 OTdmMB4XDTI1MDYyODEzMDEwMloXDTI1MDkyNjEzMDEwMlowLzEtMCsGA1UEAxMk NjM3NjYxMjMtNmI2Ny00MmMwLTgyMjktMDVmZGI4ZGJiMWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4lNRnWK+wrFzj4wIcOuU2ZLt46pwiwCSTBF kUaiGt/mRalltXL8p6tcRxgmIs2w4nHNVOGTGlb4PQKRKmjBlxQjdFvq4IhEMd1z 0uyJ2d1ghdQ1IoPE46zGiiIt1IKOxIPPIyb8lS69oANwWuO+6oaBkFViI8l95Kum H43g1tZMWCKjhKUH0LnPE4aw3sjjQk9QGnRFdyzmIyN6OB4FQNqSruP3iVCSyfoR CitrpW83teRGTXNwV/EFfiIANrB/++noyB6sfN35f7XcV6PdjUbaO9H3fiNIZFKx OhR9gFkeXFCuJONHdUj5WbAKCt3rgPv3snc91qlDonqfG1ffNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGnVBuGJd5YUsdTj9PtLHpu6RPAVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mZDlh YjAyOS1mZWFkLTRlMWMtYjdjYy0zYWVkZjIzYTc5N2YvNWMzMjFlYjItNzdjMC0z MzY3LWE5YzUtNmQxZTlmNDQxMmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZmQ5YWIwMjktZmVhZC00ZTFjLWI3 Y2MtM2FlZGYyM2E3OTdmL2ZkOWFiMDI5LWZlYWQtNGUxYy1iN2NjLTNhZWRmMjNh Nzk3Zi5jcmwwHwYDVR0jBBgwFoAUkcfWvdxBzR0qrsaOJq+2+nR+sJIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mZDlhYjAyOS1mZWFkLTRlMWMtYjdjYy0zYWVk ZjIzYTc5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGOUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQIU3HkCShbad5nAlEYqmAayS1sNyQa5udvkK2oj0hJ7fh0zy0xgMl2 6vRHZpvgdZwDpTCpzsntW63dmnoxhGhFUmnu+q3GjzORIMjwFN1PqmvYoJ8DoVLe YnVuKoBWkJ+2D9JnJxGfms73xhSDR8RVZpAA+RRcssXKplHqvyq3ntFW2Xq74IIW X0FiGgwCr77xw59U9YHhSUqCqMFPQZ8ufpaTDFvdLI9/0ynIfucff/BoZ3D6RI5E yQbWRbnDnMPryoWaTzLYekYMbrqIWyOb2avKxXtd/GhPg0u8phtcSvR4czmseEg2 G3PmyVwz0MX8wmOguviqn1PL5EYvPTI= -----END CERTIFICATE-----Generated at Sun Jun 29 22:25:41 2025 by rpki-client