$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec/f8fc8eab-ec6d-3ba7-b446-fd13c2acf3e7.roa File: f8fc8eab-ec6d-3ba7-b446-fd13c2acf3e7.roa (raw, json) Hash identifier: rkxUJ5GLoqyX/GJpxRbsjEPRios9kygprenhQicQizw= Subject key identifier: 1F:4E:7A:3F:71:74:A0:E1:84:65:F0:4E:4D:98:92:C6:E8:C2:3D:04 Certificate issuer: /CN=9179e4ff-328d-4753-b8f9-9149f799cfec Certificate serial: 010D0C9F4328584A34801FDB0A0E43788CB98480 Authority key identifier: 65:75:5C:AB:1B:D8:C1:B4:32:0D:B7:E7:BE:2B:40:A9:D7:97:B7:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec/f8fc8eab-ec6d-3ba7-b446-fd13c2acf3e7.roa Signing time: Mon 16 Jun 2025 01:00:49 +0000 ROA not before: Mon 16 Jun 2025 01:00:49 +0000 ROA not after: Sun 14 Sep 2025 01:00:49 +0000 asID: 400298 IP address blocks: 172.99.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec/9179e4ff-328d-4753-b8f9-9149f799cfec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec/9179e4ff-328d-4753-b8f9-9149f799cfec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:34:80:1f:db:0a:0e:43:78:8c:b9:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9179e4ff-328d-4753-b8f9-9149f799cfec Validity Not Before: Jun 16 01:00:49 2025 GMT Not After : Sep 14 01:00:49 2025 GMT Subject: CN=7b970fa8-5cfd-4d37-9810-f9c971f980d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:85:92:c5:1f:a7:4f:7a:ae:8d:49:dd:57:aa: 39:22:08:f2:a6:10:03:e3:bf:d5:5b:70:22:d9:57: a9:31:61:d1:e5:a2:6b:0d:3f:cc:c8:17:e8:66:2a: 01:23:2c:3d:ea:25:b5:19:50:96:3e:18:f4:aa:2b: 6c:1c:f4:71:e1:a1:4d:a7:e0:5d:76:ac:61:2f:63: b7:1d:e0:ae:65:52:66:e1:ab:d8:01:0d:46:76:d6: d2:0b:8d:8c:12:53:86:b5:46:82:61:f8:aa:2f:76: 20:74:3a:72:23:b4:f9:39:e0:7c:15:82:ff:b8:83: 29:32:ae:b5:f1:19:84:73:5c:b1:87:c0:9c:42:35: c4:d6:14:94:7c:60:e0:3a:f1:2b:ac:5b:7f:68:b7: 9d:89:59:4f:f3:8f:e3:09:08:cc:b1:c8:0b:27:de: 5e:35:50:c6:55:7e:be:c2:d7:2d:bf:d8:43:a4:68: 81:90:e2:03:73:fa:8f:d1:a1:bf:ab:71:36:0f:81: af:1a:64:ba:c5:57:de:99:cc:e2:38:4f:66:9b:3f: cb:cb:33:ad:94:6b:10:82:23:cb:94:be:59:10:32: 83:10:55:b7:db:b3:a0:62:74:cd:5a:38:21:7d:7c: c9:37:70:1e:8b:81:2a:75:4e:86:36:7a:a9:39:84: 6a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:4E:7A:3F:71:74:A0:E1:84:65:F0:4E:4D:98:92:C6:E8:C2:3D:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec/f8fc8eab-ec6d-3ba7-b446-fd13c2acf3e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec/9179e4ff-328d-4753-b8f9-9149f799cfec.crl X509v3 Authority Key Identifier: keyid:65:75:5C:AB:1B:D8:C1:B4:32:0D:B7:E7:BE:2B:40:A9:D7:97:B7:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9179e4ff-328d-4753-b8f9-9149f799cfec.cer sbgp-ipAddrBlock: critical IPv4: 172.99.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:94:d9:da:1a:19:e4:98:80:bf:e5:39:c1:7c:0c:6a:ea:a3: 05:86:e6:9b:20:8e:9a:9e:c3:59:ec:a7:b6:b1:2e:3c:82:80: 01:ab:ec:f2:21:e8:e2:a7:4e:4a:f4:35:91:40:50:4a:3c:66: ef:d2:d7:1e:52:d8:c6:dd:6d:6b:94:e7:37:2b:87:75:85:8d: 67:86:90:1e:03:cf:bc:23:0b:68:2c:37:f3:fc:14:b9:d7:45: b0:a3:a1:81:a1:40:1a:c1:fc:31:cd:77:dd:fa:20:96:83:72: 3b:76:0a:44:98:3d:81:e2:40:b1:64:c7:23:15:24:49:05:cf: e8:1a:95:43:27:fc:2a:44:78:a2:ee:6a:1e:69:25:a5:04:57: 6e:c3:cb:da:fc:ad:b8:2b:fd:3b:ca:7a:a8:af:ab:de:9f:46: 06:b4:a6:88:ce:15:88:17:78:c0:61:23:b6:f6:8f:fd:a3:55: 2e:81:1f:08:ca:04:20:7a:11:43:3f:d7:13:d1:71:f8:88:77: 0b:f9:14:22:5f:70:2a:7d:82:92:03:91:d9:d0:c4:14:70:e3: 00:34:52:20:f6:85:a8:1f:27:c7:b3:5d:30:97:70:d4:b7:6a: d2:23:75:82:b0:b0:b9:82:b4:20:86:03:57:ac:8f:89:1f:a7: 1f:84:32:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo0gB/bCg5DeIy5hIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE3OWU0ZmYtMzI4ZC00NzUzLWI4ZjktOTE0OWY3OTlj ZmVjMB4XDTI1MDYxNjAxMDA0OVoXDTI1MDkxNDAxMDA0OVowLzEtMCsGA1UEAxMk N2I5NzBmYTgtNWNmZC00ZDM3LTk4MTAtZjljOTcxZjk4MGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIWSxR+nT3qujUndV6o5IgjyphAD47/VW3Ai 2VepMWHR5aJrDT/MyBfoZioBIyw96iW1GVCWPhj0qitsHPRx4aFNp+BddqxhL2O3 HeCuZVJm4avYAQ1GdtbSC42MElOGtUaCYfiqL3YgdDpyI7T5OeB8FYL/uIMpMq61 8RmEc1yxh8CcQjXE1hSUfGDgOvErrFt/aLediVlP84/jCQjMscgLJ95eNVDGVX6+ wtctv9hDpGiBkOIDc/qP0aG/q3E2D4GvGmS6xVfemcziOE9mmz/LyzOtlGsQgiPL lL5ZEDKDEFW327OgYnTNWjghfXzJN3Aei4EqdU6GNnqpOYRqbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB9Oej9xdKDhhGXwTk2Yksbowj0EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85MTc5 ZTRmZi0zMjhkLTQ3NTMtYjhmOS05MTQ5Zjc5OWNmZWMvZjhmYzhlYWItZWM2ZC0z YmE3LWI0NDYtZmQxM2MyYWNmM2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTE3OWU0ZmYtMzI4ZC00NzUzLWI4 ZjktOTE0OWY3OTljZmVjLzkxNzllNGZmLTMyOGQtNDc1My1iOGY5LTkxNDlmNzk5 Y2ZlYy5jcmwwHwYDVR0jBBgwFoAUZXVcqxvYwbQyDbfnvitAqdeXtxwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85MTc5ZTRmZi0zMjhkLTQ3NTMtYjhmOS05MTQ5 Zjc5OWNmZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGP5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALmU2doaGeSYgL/lOcF8DGrqowWG5psgjpqew1nsp7axLjyCgAGr7PIh 6OKnTkr0NZFAUEo8Zu/S1x5S2MbdbWuU5zcrh3WFjWeGkB4Dz7wjC2gsN/P8FLnX RbCjoYGhQBrB/DHNd936IJaDcjt2CkSYPYHiQLFkxyMVJEkFz+galUMn/CpEeKLu ah5pJaUEV27Dy9r8rbgr/TvKeqivq96fRga0pojOFYgXeMBhI7b2j/2jVS6BHwjK BCB6EUM/1xPRcfiIdwv5FCJfcCp9gpIDkdnQxBRw4wA0UiD2hagfJ8ezXTCXcNS3 atIjdYKwsLmCtCCGA1esj4kfpx+EMr8= -----END CERTIFICATE-----Generated at Mon Jun 30 05:15:52 2025 by rpki-client