$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/4cc687d1-bbac-31a6-9cc3-4ba41f78e1e5.roa File: 4cc687d1-bbac-31a6-9cc3-4ba41f78e1e5.roa (raw, json) Hash identifier: SR0wEe8a6V9GpFEG20+6t1bCoD0BKqBndE7sFntM29c= Subject key identifier: 41:56:50:9D:84:DB:44:E8:06:36:66:2A:F3:A2:75:9B:10:E0:80:A7 Certificate issuer: /CN=1f0496a8-0ca9-45ec-820f-8e88c36e58b0 Certificate serial: 010D0C9F4328584A4C3B1327CF53D9612A2604A0 Authority key identifier: 05:D9:B2:96:82:27:BD:F9:0D:F7:EF:51:3A:A8:D0:AB:C5:A1:D5:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/4cc687d1-bbac-31a6-9cc3-4ba41f78e1e5.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 394840 IP address blocks: 199.34.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:13:27:cf:53:d9:61:2a:26:04:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f0496a8-0ca9-45ec-820f-8e88c36e58b0 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=d61a1010-1971-4f10-b978-33f1d4ca1209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:46:a7:f0:30:00:dd:f5:5d:92:2a:5f:27:c6: 87:ed:51:e1:c4:5f:74:77:64:9f:5a:a2:4c:9f:a9: 99:e4:d7:ef:97:8e:23:2f:c5:6e:9c:7c:89:f8:a8: 27:f5:ad:b6:6d:8b:e7:2b:97:04:b3:93:3e:98:e9: b9:14:93:5f:6e:d1:64:4e:46:51:9c:a5:89:9a:13: e5:eb:11:9a:22:a7:e9:7a:e6:9b:16:46:f0:cd:be: cf:7b:ef:86:cc:47:9b:f3:d4:7a:d2:b5:0f:01:8b: b5:ae:c0:d8:c3:d5:e0:d4:6f:32:87:33:3a:0a:14: b0:24:94:e2:d2:22:bd:f2:ff:50:11:72:81:06:10: aa:b1:37:b8:6f:e0:1f:aa:3a:e6:49:9d:d9:bf:b6: 60:49:0a:84:f7:ec:d9:8b:45:2a:71:d4:88:76:aa: d5:9e:80:a3:3d:7b:32:84:9c:1f:49:e2:dd:f9:d9: ee:37:0b:0c:69:bb:2b:1d:94:0f:5d:a2:68:2f:84: 67:35:ca:ce:bb:2c:13:b1:95:a0:a5:f6:6b:2e:23: 73:63:bc:9d:2d:32:4f:e6:32:db:ea:31:4d:ff:84: 56:42:3d:c9:fa:c2:5a:ac:9a:f3:be:36:23:52:c4: b3:b4:79:8f:0a:a0:f3:e1:a1:da:17:a3:c8:9c:09: e6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:56:50:9D:84:DB:44:E8:06:36:66:2A:F3:A2:75:9B:10:E0:80:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/4cc687d1-bbac-31a6-9cc3-4ba41f78e1e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.crl X509v3 Authority Key Identifier: keyid:05:D9:B2:96:82:27:BD:F9:0D:F7:EF:51:3A:A8:D0:AB:C5:A1:D5:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.cer sbgp-ipAddrBlock: critical IPv4: 199.34.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:5d:52:0d:6b:56:96:bd:21:a2:43:84:8f:9e:4f:04:93:37: 78:af:e7:dc:6a:e0:4c:3a:02:38:a6:58:b7:8b:b3:bc:87:2b: 6c:d9:03:23:15:a0:e7:4f:ff:6b:6e:f2:c4:b9:6b:c0:a2:dd: 96:9e:36:8b:4d:fe:1d:c7:8e:49:58:b3:ae:d8:1f:c8:7d:4e: 6e:9b:58:fa:5d:fc:24:1d:f7:94:d5:1b:c5:e1:e3:c1:00:cb: 48:31:46:7e:c3:86:43:54:33:d2:de:f6:83:2b:51:dc:68:f8: 67:87:4b:e2:fd:22:63:7e:db:29:aa:5a:15:3b:2a:55:df:e5: c6:57:7b:aa:78:32:2a:69:06:0e:f3:20:9b:b1:3e:64:21:d1: 72:70:e0:ee:0b:3a:21:ab:86:0a:5c:b4:66:10:dd:39:21:b7: d5:2f:fa:b3:ad:90:b7:a9:c3:30:e8:f5:1f:00:e9:a0:4e:1b: d3:2d:03:95:ad:f7:22:94:18:0f:71:e3:58:6e:70:de:db:90: 41:82:e4:b8:42:c5:1d:f4:e4:38:b2:8d:f9:4e:0b:1c:3e:3c: 39:45:f0:91:13:18:f6:ef:02:15:e9:23:f9:22:25:67:4f:32: c9:27:12:3a:9d:ec:95:12:36:45:c0:76:9b:e5:95:2a:28:09: 75:e5:e6:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMOxMnz1PZYSomBKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWYwNDk2YTgtMGNhOS00NWVjLTgyMGYtOGU4OGMzNmU1 OGIwMB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk ZDYxYTEwMTAtMTk3MS00ZjEwLWI5NzgtMzNmMWQ0Y2ExMjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUan8DAA3fVdkipfJ8aH7VHhxF90d2SfWqJM n6mZ5Nfvl44jL8VunHyJ+Kgn9a22bYvnK5cEs5M+mOm5FJNfbtFkTkZRnKWJmhPl 6xGaIqfpeuabFkbwzb7Pe++GzEeb89R60rUPAYu1rsDYw9Xg1G8yhzM6ChSwJJTi 0iK98v9QEXKBBhCqsTe4b+AfqjrmSZ3Zv7ZgSQqE9+zZi0UqcdSIdqrVnoCjPXsy hJwfSeLd+dnuNwsMabsrHZQPXaJoL4RnNcrOuywTsZWgpfZrLiNzY7ydLTJP5jLb 6jFN/4RWQj3J+sJarJrzvjYjUsSztHmPCqDz4aHaF6PInAnmPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEFWUJ2E20ToBjZmKvOidZsQ4ICnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xZjA0 OTZhOC0wY2E5LTQ1ZWMtODIwZi04ZTg4YzM2ZTU4YjAvNGNjNjg3ZDEtYmJhYy0z MWE2LTljYzMtNGJhNDFmNzhlMWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWYwNDk2YTgtMGNhOS00NWVjLTgy MGYtOGU4OGMzNmU1OGIwLzFmMDQ5NmE4LTBjYTktNDVlYy04MjBmLThlODhjMzZl NThiMC5jcmwwHwYDVR0jBBgwFoAUBdmyloInvfkN9+9ROqjQq8Wh1YwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xZjA0OTZhOC0wY2E5LTQ1ZWMtODIwZi04ZTg4 YzM2ZTU4YjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxyIMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAddUg1rVpa9IaJDhI+eTwSTN3iv59xq4Ew6AjimWLeLs7yHK2zZAyMV oOdP/2tu8sS5a8Ci3ZaeNotN/h3HjklYs67YH8h9Tm6bWPpd/CQd95TVG8Xh48EA y0gxRn7DhkNUM9Le9oMrUdxo+GeHS+L9ImN+2ymqWhU7KlXf5cZXe6p4MippBg7z IJuxPmQh0XJw4O4LOiGrhgpctGYQ3Tkht9Uv+rOtkLepwzDo9R8A6aBOG9MtA5Wt 9yKUGA9x41hucN7bkEGC5LhCxR305DiyjflOCxw+PDlF8JETGPbvAhXpI/kiJWdP MsknEjqd7JUSNkXAdpvllSooCXXl5mc= -----END CERTIFICATE-----Generated at Mon Jun 30 10:37:26 2025 by rpki-client