$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8/ce7a6a85-3400-3e97-a6b6-62644fe2fca4.roa File: ce7a6a85-3400-3e97-a6b6-62644fe2fca4.roa (raw, json) Hash identifier: wi/vJ3GyV0ClLqWcETd/sTszvHmrbCB4rYfn0gG2ia4= Subject key identifier: 1A:E4:40:64:6C:AF:1D:DF:C9:9C:88:86:EF:CA:DB:87:0F:B6:81:EB Certificate issuer: /CN=2aa49d03-db4a-4804-82dc-fc2c0fdb94e8 Certificate serial: 010D0C9F4328584A5335A5E0B809C384FCAFECC0 Authority key identifier: 2F:81:83:F2:A8:61:24:55:A8:AD:5D:BA:D3:85:A9:C6:E5:F3:28:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8/ce7a6a85-3400-3e97-a6b6-62644fe2fca4.roa Signing time: Fri 27 Jun 2025 01:00:50 +0000 ROA not before: Fri 27 Jun 2025 01:00:50 +0000 ROA not after: Thu 25 Sep 2025 01:00:50 +0000 asID: 46110 IP address blocks: 199.101.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:53:35:a5:e0:b8:09:c3:84:fc:af:ec:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa49d03-db4a-4804-82dc-fc2c0fdb94e8 Validity Not Before: Jun 27 01:00:50 2025 GMT Not After : Sep 25 01:00:50 2025 GMT Subject: CN=78bc5e74-110a-4e6f-9c27-269e7f27abf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:20:01:52:10:0f:14:e8:cc:93:d0:d8:50:0d: 63:2b:25:2e:b5:e0:aa:8a:b2:d4:b4:ac:5a:0c:cd: ad:dc:2a:d3:b8:c7:d3:a3:68:f0:56:c8:72:b4:80: 9f:19:7b:ce:f0:bb:26:c5:25:48:e5:28:f7:93:ab: ec:08:e5:47:8f:3d:c9:e4:63:6e:87:65:47:40:f3: 08:87:33:55:50:49:a8:34:c2:03:12:4d:01:2d:e1: 93:84:4d:80:93:97:6a:d3:f6:00:fe:dd:dd:00:03: 7e:2b:d9:76:54:96:cb:41:50:d8:c0:b0:46:81:39: 32:be:b8:c7:70:6f:1d:3b:0c:84:97:b0:19:2c:9c: 07:21:7e:57:e7:41:25:f9:df:4a:96:42:85:ac:20: e6:e6:9d:01:27:14:66:5a:97:ee:98:24:e5:4d:84: cb:de:cf:de:b4:3f:19:eb:c7:47:d5:7d:ab:02:f9: df:d6:14:93:17:8f:ab:4b:ee:e8:55:7c:ab:63:c8: d8:d1:79:3d:c2:38:aa:8a:cf:69:0b:59:c0:d9:8f: ed:96:55:ea:2a:39:0b:ad:c6:e9:e4:72:1f:5d:36: 15:a7:1a:60:7d:d3:96:65:f4:76:7f:40:69:c2:64: 2d:07:2e:52:e9:21:04:ef:30:39:28:ac:39:00:73: 3e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:E4:40:64:6C:AF:1D:DF:C9:9C:88:86:EF:CA:DB:87:0F:B6:81:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8/ce7a6a85-3400-3e97-a6b6-62644fe2fca4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8.crl X509v3 Authority Key Identifier: keyid:2F:81:83:F2:A8:61:24:55:A8:AD:5D:BA:D3:85:A9:C6:E5:F3:28:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8.cer sbgp-ipAddrBlock: critical IPv4: 199.101.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:62:0e:d7:d9:08:90:a5:49:9e:d8:62:5f:61:9f:69:f0:98: 30:3d:2b:d8:0e:9c:0b:a3:ec:97:b7:49:9f:9e:87:a7:f9:ab: 58:cf:ee:bc:15:ae:ff:9a:3f:f2:47:3d:36:4d:47:fe:fd:fa: 74:35:0c:ad:4c:b5:44:99:09:1f:23:2d:a4:cb:4c:c1:1a:9d: b7:77:e8:67:14:96:8a:bc:1b:5c:48:d5:21:95:1c:3f:b6:84: 31:f1:03:ba:47:fc:15:dd:19:c8:90:8a:88:bb:9c:9b:b2:ed: 0a:eb:4e:ee:9f:e5:8c:c2:7e:0c:c2:1d:93:d5:17:8d:fc:42: 40:a7:62:c3:58:d9:61:a7:69:0b:56:ae:a5:83:12:07:3b:fb: fe:43:56:7d:6d:4b:11:49:49:30:8c:bf:7c:4b:31:3e:f5:ac: 29:9a:33:99:17:57:73:f2:dd:33:4e:58:93:64:28:54:77:a3: f1:34:b8:e8:6a:c3:b4:e0:39:e2:00:53:d9:6a:9d:cb:fb:12: a0:57:84:fd:b1:3c:18:e1:e8:68:9f:28:36:ca:0c:1d:85:f4: 00:85:f1:b1:b8:2b:6d:e7:b9:22:ca:67:ed:10:7e:15:7b:8a: ef:be:81:81:ae:fe:1f:44:aa:14:72:01:1f:4a:ff:9b:98:b7: c0:9b:5f:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpTNaXguAnDhPyv7MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFhNDlkMDMtZGI0YS00ODA0LTgyZGMtZmMyYzBmZGI5 NGU4MB4XDTI1MDYyNzAxMDA1MFoXDTI1MDkyNTAxMDA1MFowLzEtMCsGA1UEAxMk NzhiYzVlNzQtMTEwYS00ZTZmLTljMjctMjY5ZTdmMjdhYmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiABUhAPFOjMk9DYUA1jKyUuteCqirLUtKxa DM2t3CrTuMfTo2jwVshytICfGXvO8LsmxSVI5Sj3k6vsCOVHjz3J5GNuh2VHQPMI hzNVUEmoNMIDEk0BLeGThE2Ak5dq0/YA/t3dAAN+K9l2VJbLQVDYwLBGgTkyvrjH cG8dOwyEl7AZLJwHIX5X50El+d9KlkKFrCDm5p0BJxRmWpfumCTlTYTL3s/etD8Z 68dH1X2rAvnf1hSTF4+rS+7oVXyrY8jY0Xk9wjiqis9pC1nA2Y/tllXqKjkLrcbp 5HIfXTYVpxpgfdOWZfR2f0BpwmQtBy5S6SEE7zA5KKw5AHM+xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBrkQGRsrx3fyZyIhu/K24cPtoHrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yYWE0 OWQwMy1kYjRhLTQ4MDQtODJkYy1mYzJjMGZkYjk0ZTgvY2U3YTZhODUtMzQwMC0z ZTk3LWE2YjYtNjI2NDRmZTJmY2E0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMmFhNDlkMDMtZGI0YS00ODA0LTgy ZGMtZmMyYzBmZGI5NGU4LzJhYTQ5ZDAzLWRiNGEtNDgwNC04MmRjLWZjMmMwZmRi OTRlOC5jcmwwHwYDVR0jBBgwFoAUL4GD8qhhJFWorV2604WpxuXzKEwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yYWE0OWQwMy1kYjRhLTQ4MDQtODJkYy1mYzJj MGZkYjk0ZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx2UIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZiDtfZCJClSZ7YYl9hn2nwmDA9K9gOnAuj7Je3SZ+eh6f5q1jP7rwV rv+aP/JHPTZNR/79+nQ1DK1MtUSZCR8jLaTLTMEanbd36GcUloq8G1xI1SGVHD+2 hDHxA7pH/BXdGciQioi7nJuy7QrrTu6f5YzCfgzCHZPVF438QkCnYsNY2WGnaQtW rqWDEgc7+/5DVn1tSxFJSTCMv3xLMT71rCmaM5kXV3Py3TNOWJNkKFR3o/E0uOhq w7TgOeIAU9lqncv7EqBXhP2xPBjh6GifKDbKDB2F9ACF8bG4K23nuSLKZ+0QfhV7 iu++gYGu/h9EqhRyAR9K/5uYt8CbX8g= -----END CERTIFICATE-----Generated at Mon Jun 30 01:12:46 2025 by rpki-client