$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/3c020dec-3b81-3384-8f84-fc8fb8ef0865.roa File: 3c020dec-3b81-3384-8f84-fc8fb8ef0865.roa (raw, json) Hash identifier: 2+P3VXP23uMvXDGgfKX2cuSqqr9bZs6JLOu45d4nOFY= Subject key identifier: D3:4E:EA:80:B5:8E:00:4F:C5:A8:D5:A0:CF:30:36:81:1E:C0:EE:38 Certificate issuer: /CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Certificate serial: 010D0C9F4328584A5335A67C51A58469AEB4F200 Authority key identifier: AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/3c020dec-3b81-3384-8f84-fc8fb8ef0865.roa Signing time: Fri 27 Jun 2025 01:00:50 +0000 ROA not before: Fri 27 Jun 2025 01:00:50 +0000 ROA not after: Thu 25 Sep 2025 01:00:50 +0000 asID: 40342 IP address blocks: 199.47.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:53:35:a6:7c:51:a5:84:69:ae:b4:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Validity Not Before: Jun 27 01:00:50 2025 GMT Not After : Sep 25 01:00:50 2025 GMT Subject: CN=f7287233-2ee2-4e14-9743-cedf726c75b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:dc:fe:e7:de:7b:c1:13:8e:23:f8:86:2c:c3: 69:3e:68:0b:3a:27:49:c0:0b:fe:58:b4:17:02:e8: 0a:de:fa:ff:a0:48:dc:a1:3a:46:c2:1a:af:89:cb: 7d:d1:11:2a:f7:fa:a2:6d:51:32:ad:3c:9c:97:61: 2b:4a:26:86:07:52:4f:2d:58:cc:5e:34:78:7d:14: 2f:ac:1c:26:8b:3b:19:ba:ed:af:5d:c2:ab:7a:00: c6:ae:7c:a5:c9:4a:51:8b:52:93:e5:58:75:ea:85: f7:1e:2f:e3:9c:1d:85:87:65:f7:97:ef:fc:00:5d: cb:08:c1:e0:d1:65:f7:5b:27:eb:8b:71:77:c2:d3: a8:43:51:bc:64:7f:90:99:5a:07:69:db:d0:37:1f: 97:7e:f0:a6:eb:49:8f:d0:53:b5:58:05:ca:df:14: c7:70:d2:1a:93:44:90:da:6f:3e:37:40:11:7a:65: 78:05:f6:a9:a7:75:49:eb:ff:14:aa:2e:ff:dd:d4: ed:f9:5a:85:57:6f:2b:a5:82:df:dd:46:ab:a0:de: fd:7c:5d:c9:84:47:7a:c4:05:11:70:cf:40:80:83: 52:be:af:c4:90:2d:e6:59:79:f8:0a:36:7b:60:0c: 75:90:a9:98:9a:7d:53:7e:f3:07:ad:16:7a:ce:d2: 57:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:4E:EA:80:B5:8E:00:4F:C5:A8:D5:A0:CF:30:36:81:1E:C0:EE:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/3c020dec-3b81-3384-8f84-fc8fb8ef0865.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl X509v3 Authority Key Identifier: keyid:AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer sbgp-ipAddrBlock: critical IPv4: 199.47.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:7f:dd:32:20:a6:db:5a:0c:0b:d9:90:f8:62:75:00:d7:88: e7:33:79:91:55:98:a8:c4:5f:f3:5d:1d:43:4f:08:77:67:4d: 4e:75:d0:33:84:c1:b8:1c:f6:5b:95:d0:21:07:2d:66:98:98: 9a:88:bd:b4:c9:41:b3:a1:3b:16:66:4b:58:be:d8:98:29:df: f7:31:b5:f3:bc:c5:f2:a1:63:80:d3:cc:1d:61:f3:a2:70:c2: 09:53:11:4b:90:60:e7:12:0d:46:fb:0b:25:65:df:18:9e:15: 58:4c:25:d0:79:c1:ff:e5:c6:c1:a3:64:2b:1a:1f:e0:4a:27: 14:ac:59:5b:36:3f:40:36:7e:7c:56:05:fc:cc:37:c2:8c:98: 60:75:35:43:51:61:8a:6e:d0:5d:3d:ab:99:04:c6:b8:4e:b1: 81:f3:4b:99:26:74:eb:25:df:59:70:23:f5:eb:0a:2c:30:3b: 19:69:9d:67:06:32:60:03:fe:cb:03:5f:e0:98:cb:5b:07:7f: ff:6b:37:c1:17:50:44:c2:e4:62:ce:8b:5b:c3:70:1b:c4:94: 76:eb:c3:d1:96:c2:c3:86:26:09:cd:50:7c:0b:c2:4c:ac:0c: e7:94:5b:67:bb:7f:60:6c:c6:50:db:2c:2a:68:92:e3:f9:9f: 91:75:72:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpTNaZ8UaWEaa608gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYwYmZjZGUtZDk1OC00ZTkxLWFmNWQtOWZkMWQzM2E1 ODJhMB4XDTI1MDYyNzAxMDA1MFoXDTI1MDkyNTAxMDA1MFowLzEtMCsGA1UEAxMk ZjcyODcyMzMtMmVlMi00ZTE0LTk3NDMtY2VkZjcyNmM3NWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdz+5957wROOI/iGLMNpPmgLOidJwAv+WLQX AugK3vr/oEjcoTpGwhqvict90REq9/qibVEyrTycl2ErSiaGB1JPLVjMXjR4fRQv rBwmizsZuu2vXcKregDGrnylyUpRi1KT5Vh16oX3Hi/jnB2Fh2X3l+/8AF3LCMHg 0WX3Wyfri3F3wtOoQ1G8ZH+QmVoHadvQNx+XfvCm60mP0FO1WAXK3xTHcNIak0SQ 2m8+N0ARemV4Bfapp3VJ6/8Uqi7/3dTt+VqFV28rpYLf3UaroN79fF3JhEd6xAUR cM9AgINSvq/EkC3mWXn4CjZ7YAx1kKmYmn1TfvMHrRZ6ztJXjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNNO6oC1jgBPxajVoM8wNoEewO44MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84ZjBi ZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQxZDMzYTU4MmEvM2MwMjBkZWMtM2I4MS0z Mzg0LThmODQtZmM4ZmI4ZWYwODY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGYwYmZjZGUtZDk1OC00ZTkxLWFm NWQtOWZkMWQzM2E1ODJhLzhmMGJmY2RlLWQ5NTgtNGU5MS1hZjVkLTlmZDFkMzNh NTgyYS5jcmwwHwYDVR0jBBgwFoAUqiyJxCp6uKSVUYPDDM/jsPzjzgswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84ZjBiZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQx ZDMzYTU4MmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxy+JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJ/3TIgpttaDAvZkPhidQDXiOczeZFVmKjEX/NdHUNPCHdnTU510DOE wbgc9luV0CEHLWaYmJqIvbTJQbOhOxZmS1i+2Jgp3/cxtfO8xfKhY4DTzB1h86Jw wglTEUuQYOcSDUb7CyVl3xieFVhMJdB5wf/lxsGjZCsaH+BKJxSsWVs2P0A2fnxW BfzMN8KMmGB1NUNRYYpu0F09q5kExrhOsYHzS5kmdOsl31lwI/XrCiwwOxlpnWcG MmAD/ssDX+CYy1sHf/9rN8EXUETC5GLOi1vDcBvElHbrw9GWwsOGJgnNUHwLwkys DOeUW2e7f2BsxlDbLCpokuP5n5F1cuI= -----END CERTIFICATE-----Generated at Fri Jul 4 06:09:54 2025 by rpki-client