$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/0d31c566-d234-3f99-8c25-5aa651e59579.roa File: 0d31c566-d234-3f99-8c25-5aa651e59579.roa (raw, json) Hash identifier: yo8gEDgJQg+2JnoK9nghEIGZVbnEeaAX3B007U/T85M= Subject key identifier: C4:42:06:CD:12:B8:7A:5B:70:B0:D7:A4:CF:42:04:C7:13:EF:52:D5 Certificate issuer: /CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Certificate serial: 010D0C9F4328584A5335A69F8AF956DAB6061780 Authority key identifier: AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/0d31c566-d234-3f99-8c25-5aa651e59579.roa Signing time: Fri 27 Jun 2025 01:00:50 +0000 ROA not before: Fri 27 Jun 2025 01:00:50 +0000 ROA not after: Thu 25 Sep 2025 01:00:50 +0000 asID: 40342 IP address blocks: 199.47.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:53:35:a6:9f:8a:f9:56:da:b6:06:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Validity Not Before: Jun 27 01:00:50 2025 GMT Not After : Sep 25 01:00:50 2025 GMT Subject: CN=03a93c1b-a399-45ef-a265-4ffb48ce252f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0c:36:43:42:e8:e9:b6:27:bc:7e:f9:a7:69: d8:e7:95:58:6c:34:d3:4f:aa:f2:46:77:8d:92:6a: fc:0c:4d:bd:c7:23:c0:92:e9:6a:2c:8b:78:1c:13: e6:4f:1f:95:34:1a:dd:e8:91:be:e5:f2:70:d1:b7: 09:6f:35:a1:ca:26:ae:a9:61:e5:ca:2f:e1:c3:16: f1:2d:f6:4f:81:57:35:93:3a:83:7d:5a:60:51:01: cc:14:ff:4e:ba:59:17:67:a3:7a:ad:19:16:a7:a6: 58:7f:96:e3:bc:54:d1:6c:79:b7:00:66:77:47:8d: e5:83:e0:90:09:92:45:89:ed:51:97:77:7b:e1:4c: 3d:f9:b4:08:c0:02:4d:4a:ae:88:b3:23:28:48:f2: 8c:25:b2:15:29:4a:ab:36:d5:1c:6f:c0:91:ed:04: e0:ea:85:c3:7d:d7:3b:80:48:ab:89:6a:a0:b0:86: c1:29:e5:4c:70:88:64:d3:52:6a:28:8a:79:ac:5a: cb:79:0a:0f:e5:0a:67:24:f0:2b:e8:98:04:d9:f8: ba:36:31:3f:17:d8:96:d1:6c:cd:78:f4:7a:3a:ee: cb:f4:27:72:f6:63:02:36:49:e8:d6:03:f8:0b:b9: 4b:18:92:59:4c:51:a3:ad:97:d5:4e:84:90:32:cd: df:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:42:06:CD:12:B8:7A:5B:70:B0:D7:A4:CF:42:04:C7:13:EF:52:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/0d31c566-d234-3f99-8c25-5aa651e59579.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl X509v3 Authority Key Identifier: keyid:AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer sbgp-ipAddrBlock: critical IPv4: 199.47.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:aa:a2:b1:a9:3d:63:cf:ab:e1:b1:f3:81:5f:ac:4c:46:c0: 72:73:4d:ed:73:73:e1:9d:56:f3:ea:f7:ee:f0:62:43:46:1a: 11:fd:87:c1:b3:72:7a:aa:5d:10:fd:31:ed:3c:0f:b7:f9:a1: 29:00:02:07:9a:0d:9c:c6:fd:6a:5d:55:da:05:20:01:5e:36: 99:04:88:30:54:63:91:28:7a:c0:7a:f1:f7:75:c7:0c:e3:0d: 2f:ea:2e:fa:d2:1b:55:bd:11:bf:ff:62:bc:f9:d6:1b:3d:ba: f8:8f:61:e1:79:22:b8:3e:13:4f:ff:dc:9e:f0:a8:5b:4e:4b: 18:09:69:ba:38:64:9f:f6:fb:04:a1:d2:1b:11:0a:b7:e0:82: 41:29:83:78:64:22:7e:57:bb:67:ca:2b:f7:07:5f:01:84:e7: 08:e6:c1:5a:86:f1:5f:a5:91:75:40:8a:65:ef:a2:36:40:64: fb:cc:20:4d:69:2d:02:c1:1b:dc:8b:89:aa:ac:01:41:fa:7d: 08:2a:1e:b5:c6:1c:49:37:0a:e0:fb:74:c6:f4:ec:ab:b8:ee: 99:d8:b9:e0:b1:08:37:2f:f9:56:21:98:29:c3:8c:4f:13:e6: 09:3a:c0:ab:47:a0:b0:4d:47:c2:06:56:30:1d:7d:ba:98:36: f0:f6:34:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpTNaafivlW2rYGF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYwYmZjZGUtZDk1OC00ZTkxLWFmNWQtOWZkMWQzM2E1 ODJhMB4XDTI1MDYyNzAxMDA1MFoXDTI1MDkyNTAxMDA1MFowLzEtMCsGA1UEAxMk MDNhOTNjMWItYTM5OS00NWVmLWEyNjUtNGZmYjQ4Y2UyNTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAw2Q0Lo6bYnvH75p2nY55VYbDTTT6ryRneN kmr8DE29xyPAkulqLIt4HBPmTx+VNBrd6JG+5fJw0bcJbzWhyiauqWHlyi/hwxbx LfZPgVc1kzqDfVpgUQHMFP9OulkXZ6N6rRkWp6ZYf5bjvFTRbHm3AGZ3R43lg+CQ CZJFie1Rl3d74Uw9+bQIwAJNSq6IsyMoSPKMJbIVKUqrNtUcb8CR7QTg6oXDfdc7 gEiriWqgsIbBKeVMcIhk01JqKIp5rFrLeQoP5QpnJPAr6JgE2fi6NjE/F9iW0WzN ePR6Ou7L9Cdy9mMCNkno1gP4C7lLGJJZTFGjrZfVToSQMs3fEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMRCBs0SuHpbcLDXpM9CBMcT71LVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84ZjBi ZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQxZDMzYTU4MmEvMGQzMWM1NjYtZDIzNC0z Zjk5LThjMjUtNWFhNjUxZTU5NTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGYwYmZjZGUtZDk1OC00ZTkxLWFm NWQtOWZkMWQzM2E1ODJhLzhmMGJmY2RlLWQ5NTgtNGU5MS1hZjVkLTlmZDFkMzNh NTgyYS5jcmwwHwYDVR0jBBgwFoAUqiyJxCp6uKSVUYPDDM/jsPzjzgswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84ZjBiZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQx ZDMzYTU4MmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxy+KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqqorGpPWPPq+Gx84FfrExGwHJzTe1zc+GdVvPq9+7wYkNGGhH9h8Gz cnqqXRD9Me08D7f5oSkAAgeaDZzG/WpdVdoFIAFeNpkEiDBUY5EoesB68fd1xwzj DS/qLvrSG1W9Eb//Yrz51hs9uviPYeF5Irg+E0//3J7wqFtOSxgJabo4ZJ/2+wSh 0hsRCrfggkEpg3hkIn5Xu2fKK/cHXwGE5wjmwVqG8V+lkXVAimXvojZAZPvMIE1p LQLBG9yLiaqsAUH6fQgqHrXGHEk3CuD7dMb07Ku47pnYueCxCDcv+VYhmCnDjE8T 5gk6wKtHoLBNR8IGVjAdfbqYNvD2NHU= -----END CERTIFICATE-----Generated at Mon Jun 30 22:30:33 2025 by rpki-client