$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9ac7679f-d727-44b3-9b13-6e689c3eff61/999baf3d-58b4-3fdf-9b5f-4c0d2801e3f5.roa File: 999baf3d-58b4-3fdf-9b5f-4c0d2801e3f5.roa (raw, json) Hash identifier: UaRTy69sfnPnAVxXT7Zc6yieUYHbqBa7by66LVBgl9o= Subject key identifier: F6:95:67:F0:F6:20:29:24:5B:D3:87:B0:EE:64:A9:09:65:BF:03:38 Certificate issuer: /CN=9ac7679f-d727-44b3-9b13-6e689c3eff61 Certificate serial: 010D0C9F4328584A5CFB2EA0486A4906201D2280 Authority key identifier: DC:0E:3A:0B:5D:E5:64:DB:67:5C:6B:12:6A:02:C5:BB:63:D7:41:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9ac7679f-d727-44b3-9b13-6e689c3eff61.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9ac7679f-d727-44b3-9b13-6e689c3eff61/999baf3d-58b4-3fdf-9b5f-4c0d2801e3f5.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 399385 IP address blocks: 205.137.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9ac7679f-d727-44b3-9b13-6e689c3eff61/9ac7679f-d727-44b3-9b13-6e689c3eff61.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9ac7679f-d727-44b3-9b13-6e689c3eff61/9ac7679f-d727-44b3-9b13-6e689c3eff61.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9ac7679f-d727-44b3-9b13-6e689c3eff61.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:2e:a0:48:6a:49:06:20:1d:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ac7679f-d727-44b3-9b13-6e689c3eff61 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=672a338f-80c9-4a6c-af20-5807f89882f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:59:a8:4a:0e:53:45:30:10:54:cf:0f:69:ad: 09:0c:cc:e0:f3:55:91:79:81:8a:70:68:f5:13:92: ad:16:eb:f8:7a:56:20:a4:30:f1:e1:90:cd:38:09: a2:65:aa:ec:90:02:f8:43:84:3e:38:db:a9:8b:9f: 22:05:f1:48:c0:ae:38:86:80:be:81:5d:70:75:67: 83:b1:c7:aa:ba:ff:c9:88:d2:60:4f:ea:46:b8:a0: cf:5c:4f:3a:97:8f:fe:5a:ed:fe:96:ae:c0:6d:f1: 3e:b4:33:20:73:a1:4e:7e:f7:c2:ea:3d:f3:71:bd: a5:5f:99:ef:bb:3a:c1:e5:26:d9:9c:c2:ab:6d:56: 57:5d:f2:a5:92:58:4b:8c:8f:c7:43:81:17:dd:5a: c5:0d:48:4d:de:c7:bf:2b:b1:03:8c:b6:64:8f:9c: aa:bc:9f:eb:64:11:46:71:b6:0a:99:bc:a1:7d:06: a7:12:67:f8:0b:61:d1:3a:ac:82:47:00:93:47:ef: a1:9b:b4:19:70:e5:4d:03:1c:32:64:75:4c:4d:90: 58:ad:2e:bb:29:a3:93:4b:2e:02:af:b8:aa:ac:08: ab:4c:c4:02:3b:49:14:50:55:ba:bd:31:9c:74:48: a3:a5:d2:a0:4a:18:a9:d1:f8:34:97:18:c0:b2:8f: c3:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:95:67:F0:F6:20:29:24:5B:D3:87:B0:EE:64:A9:09:65:BF:03:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9ac7679f-d727-44b3-9b13-6e689c3eff61/999baf3d-58b4-3fdf-9b5f-4c0d2801e3f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9ac7679f-d727-44b3-9b13-6e689c3eff61/9ac7679f-d727-44b3-9b13-6e689c3eff61.crl X509v3 Authority Key Identifier: keyid:DC:0E:3A:0B:5D:E5:64:DB:67:5C:6B:12:6A:02:C5:BB:63:D7:41:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9ac7679f-d727-44b3-9b13-6e689c3eff61.cer sbgp-ipAddrBlock: critical IPv4: 205.137.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:f9:9c:fc:1e:4a:97:e2:f4:6c:52:46:a7:47:a3:15:21:2f: a4:1e:99:23:8e:f5:a0:98:7c:19:17:a5:38:74:c1:15:7f:0a: 26:59:59:70:d7:4e:7b:9a:4f:06:e8:24:48:fd:61:3c:be:e1: bd:6f:44:1e:fe:8f:a7:39:53:ac:55:34:cf:95:9f:7f:fa:a3: 6f:2d:a7:c5:5d:ea:2b:24:61:2c:62:3b:b8:43:df:f2:76:b3: 4d:2e:1b:e4:7d:08:11:19:7e:12:30:33:75:d7:3c:99:8d:6b: d6:51:de:89:89:29:ba:a9:6e:b9:db:4a:29:cb:df:95:e7:95: ed:6b:f5:d7:aa:4b:23:4b:97:13:40:c6:c2:b2:06:d5:e5:ef: 68:d4:57:ed:94:4c:af:2d:7f:5c:da:43:49:b8:ed:a9:84:a0: fe:c1:6a:ca:1c:73:35:e7:f1:6f:24:ec:1e:ac:28:38:59:3e: b9:74:0d:8e:b9:a1:7d:f2:62:c0:9b:b1:2c:6d:e9:f5:db:9d: 9c:18:cb:74:4c:8e:3f:56:55:8f:ab:f9:f3:0b:59:a6:63:73: 55:ce:ef:8f:5a:e8:80:b7:ea:3a:e9:21:26:d6:d9:e7:a5:28: 17:cf:80:79:a4:39:2c:31:5f:34:37:32:77:98:fb:1a:2c:91: 1d:f6:59:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+y6gSGpJBiAdIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWFjNzY3OWYtZDcyNy00NGIzLTliMTMtNmU2ODljM2Vm ZjYxMB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk NjcyYTMzOGYtODBjOS00YTZjLWFmMjAtNTgwN2Y4OTg4MmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1moSg5TRTAQVM8Paa0JDMzg81WReYGKcGj1 E5KtFuv4elYgpDDx4ZDNOAmiZarskAL4Q4Q+ONupi58iBfFIwK44hoC+gV1wdWeD scequv/JiNJgT+pGuKDPXE86l4/+Wu3+lq7AbfE+tDMgc6FOfvfC6j3zcb2lX5nv uzrB5SbZnMKrbVZXXfKlklhLjI/HQ4EX3VrFDUhN3se/K7EDjLZkj5yqvJ/rZBFG cbYKmbyhfQanEmf4C2HROqyCRwCTR++hm7QZcOVNAxwyZHVMTZBYrS67KaOTSy4C r7iqrAirTMQCO0kUUFW6vTGcdEijpdKgShip0fg0lxjAso/DdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPaVZ/D2ICkkW9OHsO5kqQllvwM4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YWM3 Njc5Zi1kNzI3LTQ0YjMtOWIxMy02ZTY4OWMzZWZmNjEvOTk5YmFmM2QtNThiNC0z ZmRmLTliNWYtNGMwZDI4MDFlM2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWFjNzY3OWYtZDcyNy00NGIzLTli MTMtNmU2ODljM2VmZjYxLzlhYzc2NzlmLWQ3MjctNDRiMy05YjEzLTZlNjg5YzNl ZmY2MS5jcmwwHwYDVR0jBBgwFoAU3A46C13lZNtnXGsSagLFu2PXQWAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YWM3Njc5Zi1kNzI3LTQ0YjMtOWIxMy02ZTY4 OWMzZWZmNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzYn5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIT5nPweSpfi9GxSRqdHoxUhL6QemSOO9aCYfBkXpTh0wRV/CiZZWXDX TnuaTwboJEj9YTy+4b1vRB7+j6c5U6xVNM+Vn3/6o28tp8Vd6iskYSxiO7hD3/J2 s00uG+R9CBEZfhIwM3XXPJmNa9ZR3omJKbqpbrnbSinL35Xnle1r9deqSyNLlxNA xsKyBtXl72jUV+2UTK8tf1zaQ0m47amEoP7BasocczXn8W8k7B6sKDhZPrl0DY65 oX3yYsCbsSxt6fXbnZwYy3RMjj9WVY+r+fMLWaZjc1XO749a6IC36jrpISbW2eel KBfPgHmkOSwxXzQ3MneY+xoskR32Wc4= -----END CERTIFICATE-----Generated at Tue Jul 1 05:13:43 2025 by rpki-client