$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/b6a6a961-f4e2-3515-a3e3-44a9b8433460.roa File: b6a6a961-f4e2-3515-a3e3-44a9b8433460.roa (raw, json) Hash identifier: xnVe8BFnCVgxykc6XlMlT5vjaWXZrJr8XppAlUT7K1A= Subject key identifier: 6A:EE:52:10:36:BE:2E:7D:70:44:5D:1E:6F:05:40:0A:B8:E6:FA:B5 Certificate issuer: /CN=a2ca3b16-f470-4287-8db9-b28e0667efdb Certificate serial: 010D0C9F4328584A5335A80BCFE782A1802DD7BC Authority key identifier: 4A:DD:6A:82:2A:1B:35:7E:F1:5B:84:25:E5:84:55:50:F9:42:68:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/b6a6a961-f4e2-3515-a3e3-44a9b8433460.roa Signing time: Fri 27 Jun 2025 01:00:50 +0000 ROA not before: Fri 27 Jun 2025 01:00:50 +0000 ROA not after: Thu 25 Sep 2025 01:00:50 +0000 asID: 32931 IP address blocks: 199.91.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/a2ca3b16-f470-4287-8db9-b28e0667efdb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/a2ca3b16-f470-4287-8db9-b28e0667efdb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:53:35:a8:0b:cf:e7:82:a1:80:2d:d7:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2ca3b16-f470-4287-8db9-b28e0667efdb Validity Not Before: Jun 27 01:00:50 2025 GMT Not After : Sep 25 01:00:50 2025 GMT Subject: CN=be6102a0-a543-4798-bb85-f453be8321ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1a:62:54:7a:0c:be:ff:91:e0:f2:9e:99:69: 37:96:ba:4c:50:f4:63:0c:be:4f:c6:cf:ce:5e:92: e1:44:e4:53:92:a1:ef:f1:68:8d:17:56:18:f6:5e: 70:24:30:50:1b:bf:fa:76:da:c8:4d:53:d6:3d:c8: 60:c0:6b:2b:bf:60:08:d4:9b:e7:31:12:fb:72:22: 7f:2b:e0:d1:7b:1d:8b:95:ef:1e:69:cb:56:8d:f6: 1a:64:98:73:2b:2a:41:66:86:7b:fd:ba:41:ab:5d: f8:48:bb:15:fc:cc:54:bb:2c:cf:6d:5c:56:09:be: 7f:ff:d1:dd:12:00:31:ce:a6:3d:2a:f1:ba:bd:a0: 28:c4:56:c6:ee:4c:a0:87:15:33:46:e9:e7:2a:91: b3:09:e3:ec:34:e8:b2:8f:b9:55:b3:08:f7:bd:f2: cd:9b:03:a9:b4:13:e8:e1:91:f9:82:c1:c8:67:51: 5c:e5:e1:ba:1d:6d:6b:0a:b6:e9:87:71:62:fe:d9: 15:ea:8c:74:a1:4c:0c:d5:ca:54:01:2a:5e:d9:b6: 8f:98:37:69:d0:72:84:8e:57:d8:e3:99:66:ce:a9: ca:fb:95:6e:8a:4d:d3:79:06:f4:54:f8:3a:08:b4: de:74:d9:8f:77:2b:6c:0a:4d:97:58:f8:33:b4:5a: f2:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:EE:52:10:36:BE:2E:7D:70:44:5D:1E:6F:05:40:0A:B8:E6:FA:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/b6a6a961-f4e2-3515-a3e3-44a9b8433460.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/a2ca3b16-f470-4287-8db9-b28e0667efdb.crl X509v3 Authority Key Identifier: keyid:4A:DD:6A:82:2A:1B:35:7E:F1:5B:84:25:E5:84:55:50:F9:42:68:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb.cer sbgp-ipAddrBlock: critical IPv4: 199.91.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:58:ed:7b:3d:ea:1a:4a:c7:cd:6f:f1:96:d0:16:a3:fd:60: f3:b7:56:4c:d3:1a:05:fe:a3:ef:8a:1a:b5:15:1a:fd:85:fb: 29:36:dd:ed:59:77:87:29:0e:8f:fa:13:a9:53:45:e7:a3:8c: b6:9d:93:59:3a:69:aa:d5:d1:db:1a:49:24:d2:1f:bc:8b:61: b3:c3:3c:e3:63:37:47:99:b2:12:fd:31:db:d9:47:50:85:8a: 0c:d9:2d:b9:cb:c2:f3:63:5d:22:72:90:c1:7a:2e:4c:eb:49: c0:24:44:ea:b4:1c:85:79:cf:ab:7b:2f:1a:5a:2f:ac:50:a1: 67:6a:b4:72:a7:ec:df:ee:d4:c6:21:ca:7c:95:94:92:5d:d8: 8a:3e:be:2d:12:a5:6b:d7:9b:30:4a:14:a0:dd:93:57:a4:b9: af:88:cd:11:bc:01:cc:2c:46:c6:65:d1:c0:75:d7:81:fc:40: 1c:b8:12:87:12:b7:64:4e:2b:f9:01:b8:d9:67:38:c5:56:8a: 5e:de:a3:c1:c9:22:ae:45:9a:45:af:a5:9a:91:73:51:2c:43: 1e:d9:3a:2d:ed:1f:2e:6f:87:04:6f:54:34:f1:8b:f4:5b:21: fd:11:1f:e7:4a:49:78:c0:86:07:3c:33:53:4c:58:f1:08:9e: 11:2e:51:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpTNagLz+eCoYAt17wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTJjYTNiMTYtZjQ3MC00Mjg3LThkYjktYjI4ZTA2Njdl ZmRiMB4XDTI1MDYyNzAxMDA1MFoXDTI1MDkyNTAxMDA1MFowLzEtMCsGA1UEAxMk YmU2MTAyYTAtYTU0My00Nzk4LWJiODUtZjQ1M2JlODMyMWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRpiVHoMvv+R4PKemWk3lrpMUPRjDL5Pxs/O XpLhRORTkqHv8WiNF1YY9l5wJDBQG7/6dtrITVPWPchgwGsrv2AI1JvnMRL7ciJ/ K+DRex2Lle8eactWjfYaZJhzKypBZoZ7/bpBq134SLsV/MxUuyzPbVxWCb5//9Hd EgAxzqY9KvG6vaAoxFbG7kyghxUzRunnKpGzCePsNOiyj7lVswj3vfLNmwOptBPo 4ZH5gsHIZ1Fc5eG6HW1rCrbph3Fi/tkV6ox0oUwM1cpUASpe2baPmDdp0HKEjlfY 45lmzqnK+5Vuik3TeQb0VPg6CLTedNmPdytsCk2XWPgztFryyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGruUhA2vi59cERdHm8FQAq45vq1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMmNh M2IxNi1mNDcwLTQyODctOGRiOS1iMjhlMDY2N2VmZGIvYjZhNmE5NjEtZjRlMi0z NTE1LWEzZTMtNDRhOWI4NDMzNDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTJjYTNiMTYtZjQ3MC00Mjg3LThk YjktYjI4ZTA2NjdlZmRiL2EyY2EzYjE2LWY0NzAtNDI4Ny04ZGI5LWIyOGUwNjY3 ZWZkYi5jcmwwHwYDVR0jBBgwFoAUSt1qgiobNX7xW4Ql5YRVUPlCaK0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hMmNhM2IxNi1mNDcwLTQyODctOGRiOS1iMjhl MDY2N2VmZGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx1toMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRY7Xs96hpKx81v8ZbQFqP9YPO3VkzTGgX+o++KGrUVGv2F+yk23e1Z d4cpDo/6E6lTReejjLadk1k6aarV0dsaSSTSH7yLYbPDPONjN0eZshL9MdvZR1CF igzZLbnLwvNjXSJykMF6LkzrScAkROq0HIV5z6t7LxpaL6xQoWdqtHKn7N/u1MYh ynyVlJJd2Io+vi0SpWvXmzBKFKDdk1ekua+IzRG8AcwsRsZl0cB114H8QBy4EocS t2ROK/kBuNlnOMVWil7eo8HJIq5FmkWvpZqRc1EsQx7ZOi3tHy5vhwRvVDTxi/Rb If0RH+dKSXjAhgc8M1NMWPEInhEuUZs= -----END CERTIFICATE-----Generated at Fri Jul 4 06:09:55 2025 by rpki-client