$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/8744a343-8462-3d3c-a810-4a745fb72a2f.roa File: 8744a343-8462-3d3c-a810-4a745fb72a2f.roa (raw, json) Hash identifier: T3oN2Oz68KjNjIvXkudTXRVIP/Rt4D1RRrqnKKDUTRg= Subject key identifier: 66:65:E1:7B:73:D5:C8:A4:30:E9:8A:A6:EC:0D:14:C7:DF:82:CF:86 Certificate issuer: /CN=1f0496a8-0ca9-45ec-820f-8e88c36e58b0 Certificate serial: 010D0C9F4328584A4C3B0E7D9BF6D71307366C80 Authority key identifier: 05:D9:B2:96:82:27:BD:F9:0D:F7:EF:51:3A:A8:D0:AB:C5:A1:D5:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/8744a343-8462-3d3c-a810-4a745fb72a2f.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 394840 IP address blocks: 199.34.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:0e:7d:9b:f6:d7:13:07:36:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f0496a8-0ca9-45ec-820f-8e88c36e58b0 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=9c380160-9f6d-4646-8bdd-f9232ae869c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:52:33:96:4f:9c:8e:3a:02:5f:d4:85:48:e7: 52:09:1d:ce:0b:53:ac:33:73:b2:1a:fc:9b:0a:4c: 86:8d:48:3e:27:36:c7:a9:ef:cc:7e:70:45:dd:7c: 62:6d:49:b1:f2:4e:75:78:db:28:fe:ec:14:12:fa: d9:9e:85:8a:72:d4:04:f3:ef:71:cb:a4:d6:02:53: 47:26:84:9c:d6:c8:60:71:9d:62:16:12:a8:a5:77: c5:80:dc:d9:31:9d:49:69:3e:88:5e:05:94:aa:67: 73:e4:d3:e6:65:0a:fe:81:a5:7b:fb:5a:af:35:4d: 08:7a:f0:00:cf:8f:1f:80:22:14:74:b3:70:39:d6: 1f:34:92:9f:9d:86:3b:62:5b:3b:b8:c4:5a:5c:23: 22:13:08:8e:7a:10:7f:41:aa:f4:4c:91:c9:b2:3a: 18:3d:89:0e:8c:79:7b:7a:5c:cd:c7:c0:e2:2b:2d: 47:a7:65:72:91:c1:72:9c:e8:ba:ae:6d:66:e8:c6: 82:92:56:b7:a2:f5:64:41:22:55:42:46:92:32:d3: 8f:e3:5d:8d:f5:c1:c1:9b:92:c1:9b:8a:01:3a:dd: 4c:da:31:46:17:68:45:1d:57:af:f2:dc:25:2a:b8: f2:15:4f:e6:01:ed:75:2e:74:bd:14:c3:0d:bb:26: ac:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:65:E1:7B:73:D5:C8:A4:30:E9:8A:A6:EC:0D:14:C7:DF:82:CF:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/8744a343-8462-3d3c-a810-4a745fb72a2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.crl X509v3 Authority Key Identifier: keyid:05:D9:B2:96:82:27:BD:F9:0D:F7:EF:51:3A:A8:D0:AB:C5:A1:D5:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.cer sbgp-ipAddrBlock: critical IPv4: 199.34.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:66:46:a2:6a:99:56:73:07:84:91:7a:98:13:e3:41:22:40: 1d:5b:38:89:1e:77:08:1c:63:60:58:30:fe:ab:6e:94:1d:09: f1:8d:d5:45:c9:be:e6:39:2a:35:47:7d:5b:c6:ee:52:99:3b: 8c:d9:80:77:1f:e6:82:aa:87:cf:ae:53:2f:0e:46:1a:d4:e6: e8:7a:b6:b5:25:ba:85:a7:6d:40:8c:90:fb:bd:07:41:fc:3e: 41:32:4e:20:3e:f4:0e:7f:af:8e:ad:82:97:61:d2:12:d5:ba: ab:fd:7d:fa:9e:ea:0e:e4:df:c4:a6:e9:8d:21:99:b0:77:a0: a1:c8:33:d0:b2:9f:bd:93:ae:cb:3b:cb:21:96:79:4a:e1:71: 5e:dc:a8:bd:90:84:0c:26:93:e7:d3:7f:ec:35:4c:e9:4a:7e: 7f:db:6d:2e:7e:10:00:56:c8:c9:f7:82:ea:ca:66:dc:20:fa: aa:9a:2b:27:fd:f3:34:01:dc:4a:80:d6:24:02:2b:71:b2:9f: 43:57:c8:74:83:3e:3b:f2:c2:46:0f:4d:18:52:58:52:dd:94: 0a:9b:27:31:5c:14:79:73:40:8a:37:31:12:26:a4:e9:a4:41: 6a:7a:22:e9:bf:c4:c9:36:6c:ae:3d:27:e8:4e:1b:d8:1f:c3: f2:0e:a1:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMOw59m/bXEwc2bIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWYwNDk2YTgtMGNhOS00NWVjLTgyMGYtOGU4OGMzNmU1 OGIwMB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk OWMzODAxNjAtOWY2ZC00NjQ2LThiZGQtZjkyMzJhZTg2OWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1Izlk+cjjoCX9SFSOdSCR3OC1OsM3OyGvyb CkyGjUg+JzbHqe/MfnBF3XxibUmx8k51eNso/uwUEvrZnoWKctQE8+9xy6TWAlNH JoSc1shgcZ1iFhKopXfFgNzZMZ1JaT6IXgWUqmdz5NPmZQr+gaV7+1qvNU0IevAA z48fgCIUdLNwOdYfNJKfnYY7Yls7uMRaXCMiEwiOehB/Qar0TJHJsjoYPYkOjHl7 elzNx8DiKy1Hp2VykcFynOi6rm1m6MaCkla3ovVkQSJVQkaSMtOP412N9cHBm5LB m4oBOt1M2jFGF2hFHVev8twlKrjyFU/mAe11LnS9FMMNuyaslwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZl4Xtz1cikMOmKpuwNFMffgs+GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xZjA0 OTZhOC0wY2E5LTQ1ZWMtODIwZi04ZTg4YzM2ZTU4YjAvODc0NGEzNDMtODQ2Mi0z ZDNjLWE4MTAtNGE3NDVmYjcyYTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWYwNDk2YTgtMGNhOS00NWVjLTgy MGYtOGU4OGMzNmU1OGIwLzFmMDQ5NmE4LTBjYTktNDVlYy04MjBmLThlODhjMzZl NThiMC5jcmwwHwYDVR0jBBgwFoAUBdmyloInvfkN9+9ROqjQq8Wh1YwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xZjA0OTZhOC0wY2E5LTQ1ZWMtODIwZi04ZTg4 YzM2ZTU4YjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyINMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALdmRqJqmVZzB4SRepgT40EiQB1bOIkedwgcY2BYMP6rbpQdCfGN1UXJ vuY5KjVHfVvG7lKZO4zZgHcf5oKqh8+uUy8ORhrU5uh6trUluoWnbUCMkPu9B0H8 PkEyTiA+9A5/r46tgpdh0hLVuqv9ffqe6g7k38Sm6Y0hmbB3oKHIM9Cyn72Trss7 yyGWeUrhcV7cqL2QhAwmk+fTf+w1TOlKfn/bbS5+EABWyMn3gurKZtwg+qqaKyf9 8zQB3EqA1iQCK3Gyn0NXyHSDPjvywkYPTRhSWFLdlAqbJzFcFHlzQIo3MRImpOmk QWp6Ium/xMk2bK49J+hOG9gfw/IOoYQ= -----END CERTIFICATE-----Generated at Mon Jun 30 10:38:55 2025 by rpki-client