$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/7549f4eb-a195-37d4-8a22-0ebd9481cadb.roa File: 7549f4eb-a195-37d4-8a22-0ebd9481cadb.roa (raw, json) Hash identifier: jsz9yFboHbu1ApT4WXWr0vlHmj6Q2jgM9YHgB27L8Jw= Subject key identifier: 66:87:6A:93:20:3F:01:09:9D:A7:8F:B5:0F:E2:21:63:45:1B:48:AF Certificate issuer: /CN=45fe4043-69f6-4f38-9003-897cd909fb3b Certificate serial: 010D0C9F4328584A480ADE78D96B75176B5E2080 Authority key identifier: D0:31:C8:68:F7:13:5C:D1:51:FE:FC:08:83:5F:D5:29:CD:A3:16:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/7549f4eb-a195-37d4-8a22-0ebd9481cadb.roa Signing time: Mon 23 Jun 2025 01:00:49 +0000 ROA not before: Mon 23 Jun 2025 01:00:49 +0000 ROA not after: Sun 21 Sep 2025 01:00:49 +0000 asID: 13445 IP address blocks: 199.59.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/45fe4043-69f6-4f38-9003-897cd909fb3b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/45fe4043-69f6-4f38-9003-897cd909fb3b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:48:0a:de:78:d9:6b:75:17:6b:5e:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45fe4043-69f6-4f38-9003-897cd909fb3b Validity Not Before: Jun 23 01:00:49 2025 GMT Not After : Sep 21 01:00:49 2025 GMT Subject: CN=c1536e5f-e508-4d74-85ff-808917456168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c7:27:0d:83:68:6b:44:46:c6:9d:2f:fc:47: e4:f6:8b:bb:02:bc:f2:61:00:eb:7b:8f:8f:bd:33: a6:3a:d5:4e:7b:38:6f:1c:9b:2d:4c:d0:35:68:a9: 75:22:ab:b5:df:3a:e6:cf:db:ab:ea:92:e1:da:04: 49:06:2f:8d:f3:d2:2c:f6:41:85:3b:29:68:66:a8: 02:7b:41:6d:99:5c:df:d4:7c:89:f6:90:2c:e9:23: b9:63:8e:77:bc:f8:74:40:f2:02:c8:2c:a5:1b:5a: fa:7c:74:50:a5:74:57:12:5c:f4:6c:c3:81:7d:ae: 32:23:f4:9f:a4:9d:df:b0:08:68:89:08:2f:c3:d5: 63:7e:31:7b:09:8a:f2:b6:17:62:fe:82:8c:94:ad: 6b:39:1e:22:46:bf:33:07:60:86:83:7b:12:82:eb: dc:b4:2d:9c:fc:bc:4c:be:06:d7:1e:72:77:08:49: ef:5c:10:78:b6:3c:38:19:e9:d5:8b:d3:73:aa:db: 53:ab:7a:09:9a:4d:c6:d7:02:53:2f:6b:a6:f8:e1: 11:2b:1b:03:1d:7b:2f:9e:67:52:34:80:34:dc:db: 4f:b1:94:74:5d:cc:3e:4a:12:a0:21:0a:8c:17:c3: 93:a6:a3:aa:5c:ca:7d:af:3f:be:6f:66:89:1d:19: bf:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:87:6A:93:20:3F:01:09:9D:A7:8F:B5:0F:E2:21:63:45:1B:48:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/7549f4eb-a195-37d4-8a22-0ebd9481cadb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/45fe4043-69f6-4f38-9003-897cd909fb3b.crl X509v3 Authority Key Identifier: keyid:D0:31:C8:68:F7:13:5C:D1:51:FE:FC:08:83:5F:D5:29:CD:A3:16:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b.cer sbgp-ipAddrBlock: critical IPv4: 199.59.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:6d:6a:9f:b0:ab:8d:1b:5a:df:3d:20:c4:14:ad:a8:eb:5e: 98:34:e5:44:df:e5:9a:df:65:1a:51:7f:ec:37:d0:07:dd:2c: c7:04:de:f4:ec:82:1f:ab:4c:52:12:5c:06:05:73:52:3b:f7: dd:44:22:c2:d4:7e:74:3e:3e:9d:48:48:8b:61:a7:62:55:0a: 6d:93:b9:d7:1d:55:a7:7f:e8:94:00:d0:1d:9d:8c:9c:c6:cc: f5:d8:7a:99:d5:2a:a6:e9:9c:93:f1:51:18:46:45:8a:64:0b: 93:52:dc:79:87:01:e9:6f:f1:62:ba:24:99:87:03:9e:43:d3: 5b:39:99:a3:0f:3d:7e:db:2c:45:73:a4:27:76:a2:b1:02:b1: 5f:42:2a:4f:1d:8d:6e:68:a5:bb:b1:e8:41:4e:85:b6:c2:25: 29:ec:76:3e:a9:e3:be:7f:b1:c8:39:5b:f6:12:0a:ee:d9:92: 69:00:a8:64:bc:09:6f:73:d0:6c:0c:cf:c3:66:4b:e7:a9:b1: d1:f5:86:25:f5:80:97:ab:57:04:7f:c4:1e:cf:1d:96:2f:c8: 15:1b:b7:37:75:ba:cd:af:e6:ba:87:b3:95:f6:2b:fb:a4:9e: 71:63:e3:db:de:2f:29:9a:fc:98:39:61:f7:90:fb:fc:cd:1e: c8:66:1d:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpICt542Wt1F2teIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVmZTQwNDMtNjlmNi00ZjM4LTkwMDMtODk3Y2Q5MDlm YjNiMB4XDTI1MDYyMzAxMDA0OVoXDTI1MDkyMTAxMDA0OVowLzEtMCsGA1UEAxMk YzE1MzZlNWYtZTUwOC00ZDc0LTg1ZmYtODA4OTE3NDU2MTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8cnDYNoa0RGxp0v/Efk9ou7ArzyYQDre4+P vTOmOtVOezhvHJstTNA1aKl1Iqu13zrmz9ur6pLh2gRJBi+N89Is9kGFOyloZqgC e0FtmVzf1HyJ9pAs6SO5Y453vPh0QPICyCylG1r6fHRQpXRXElz0bMOBfa4yI/Sf pJ3fsAhoiQgvw9VjfjF7CYrythdi/oKMlK1rOR4iRr8zB2CGg3sSguvctC2c/LxM vgbXHnJ3CEnvXBB4tjw4GenVi9NzqttTq3oJmk3G1wJTL2um+OERKxsDHXsvnmdS NIA03NtPsZR0Xcw+ShKgIQqMF8OTpqOqXMp9rz++b2aJHRm/NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGaHapMgPwEJnaePtQ/iIWNFG0ivMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80NWZl NDA0My02OWY2LTRmMzgtOTAwMy04OTdjZDkwOWZiM2IvNzU0OWY0ZWItYTE5NS0z N2Q0LThhMjItMGViZDk0ODFjYWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDVmZTQwNDMtNjlmNi00ZjM4LTkw MDMtODk3Y2Q5MDlmYjNiLzQ1ZmU0MDQzLTY5ZjYtNGYzOC05MDAzLTg5N2NkOTA5 ZmIzYi5jcmwwHwYDVR0jBBgwFoAU0DHIaPcTXNFR/vwIg1/VKc2jFhQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80NWZlNDA0My02OWY2LTRmMzgtOTAwMy04OTdj ZDkwOWZiM2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxztEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJtap+wq40bWt89IMQUrajrXpg05UTf5ZrfZRpRf+w30AfdLMcE3vTs gh+rTFISXAYFc1I7991EIsLUfnQ+Pp1ISIthp2JVCm2TudcdVad/6JQA0B2djJzG zPXYepnVKqbpnJPxURhGRYpkC5NS3HmHAelv8WK6JJmHA55D01s5maMPPX7bLEVz pCd2orECsV9CKk8djW5opbux6EFOhbbCJSnsdj6p475/scg5W/YSCu7ZkmkAqGS8 CW9z0GwMz8NmS+epsdH1hiX1gJerVwR/xB7PHZYvyBUbtzd1us2v5rqHs5X2K/uk nnFj49veLyma/Jg5YfeQ+/zNHshmHWE= -----END CERTIFICATE-----Generated at Mon Jun 30 19:49:26 2025 by rpki-client