$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/025bf991-a5ca-3bcb-b9e8-901f2125ef88.roa File: 025bf991-a5ca-3bcb-b9e8-901f2125ef88.roa (raw, json) Hash identifier: VOGved4wKuGbzefVfJYW8R1G7F8YVxiDjZEtmwNbnnI= Subject key identifier: 55:AB:01:69:26:9B:0A:ED:2E:A3:82:DE:91:80:F5:37:DA:90:CB:92 Certificate issuer: /CN=c4668147-a71b-4fb3-9ed9-e1e04061bbdd Certificate serial: 010D0C9F4328584A23C01D9C1C192AAC14362B40 Authority key identifier: 25:2C:65:D1:2B:2B:E5:A6:80:45:38:98:E0:6B:67:DB:F5:0A:EE:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/025bf991-a5ca-3bcb-b9e8-901f2125ef88.roa Signing time: Tue 10 Jun 2025 01:00:50 +0000 ROA not before: Tue 10 Jun 2025 01:00:50 +0000 ROA not after: Mon 08 Sep 2025 01:00:50 +0000 asID: 62246 IP address blocks: 199.188.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:23:c0:1d:9c:1c:19:2a:ac:14:36:2b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4668147-a71b-4fb3-9ed9-e1e04061bbdd Validity Not Before: Jun 10 01:00:50 2025 GMT Not After : Sep 8 01:00:50 2025 GMT Subject: CN=4540ef2c-f8bb-4ffe-af98-c5aee34f3e30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:17:86:48:be:59:c6:8c:2b:fd:91:70:4a:50: 57:90:fa:31:e3:9e:3c:e2:94:1c:29:ba:8d:a0:1e: 72:b4:35:a0:9f:3d:e0:32:c7:66:38:7b:08:36:58: 2d:21:e3:58:18:a6:c5:8a:54:4b:a3:4d:e0:f1:44: 0d:47:38:ff:ed:fe:b6:f0:e6:a4:78:80:b6:75:5e: 13:e2:6b:b5:0f:b3:05:7a:36:56:d7:4c:f2:98:c4: 15:7c:71:e3:d9:99:12:96:37:5c:b1:d0:70:6e:fe: c6:bc:72:26:a0:7f:f5:6e:28:a1:7a:44:9e:df:5e: 14:cf:b5:e1:5f:2f:5c:52:be:ee:77:0a:58:e9:34: 4f:bd:01:5b:71:82:0e:69:60:3e:a3:38:56:a6:36: 2c:92:44:06:37:22:cd:41:6b:84:ac:23:d9:bf:e8: b5:1e:02:36:37:14:e4:8b:dd:a1:bb:48:6b:59:9e: f8:e9:71:c9:78:6a:bb:06:89:4c:71:89:00:cd:44: 63:55:f7:15:3f:82:9c:b4:c2:28:d1:36:d9:68:89: 9a:f5:f6:9e:f3:b1:1d:a4:7b:49:da:fa:f4:9f:7e: a8:14:ea:3b:da:8d:ea:dd:95:12:52:b4:db:47:8f: 6d:d3:ad:1a:ef:c4:41:2f:37:26:9c:45:4a:02:66: ef:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:AB:01:69:26:9B:0A:ED:2E:A3:82:DE:91:80:F5:37:DA:90:CB:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/025bf991-a5ca-3bcb-b9e8-901f2125ef88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.crl X509v3 Authority Key Identifier: keyid:25:2C:65:D1:2B:2B:E5:A6:80:45:38:98:E0:6B:67:DB:F5:0A:EE:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer sbgp-ipAddrBlock: critical IPv4: 199.188.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:23:cc:fb:01:48:0a:a0:0d:a4:f9:ac:ca:e0:38:d7:90:30: e0:d2:6a:eb:08:78:d9:01:7c:5c:0e:c1:04:cc:70:88:56:58: b8:9a:e9:8e:56:a0:b8:55:ac:a9:57:d1:d1:db:2b:ad:e5:ab: 9b:dc:fc:dc:bc:c5:73:a2:e3:59:29:90:ad:26:3b:2b:d6:16: f2:3d:27:4e:5a:82:97:d1:54:bb:54:e5:39:5b:bd:f5:c3:07: 09:b5:bb:9c:40:96:d9:f6:07:ce:65:28:fb:67:0d:18:be:6d: 83:64:69:3f:5e:80:e1:df:f3:70:73:33:b1:34:46:d9:07:f2: 5a:fc:93:cf:0b:f9:6d:da:f4:67:8c:2b:52:bc:0e:72:16:7c: 8b:d0:93:5d:75:ca:5b:5a:b0:7d:f2:1a:86:a3:3d:6b:13:92: a8:90:4d:e8:46:a0:f1:01:a1:82:09:59:d7:e2:f7:29:2b:8e: b0:bb:e4:1a:c1:e0:be:c2:0a:d2:91:30:8d:b4:e4:ca:3b:cf: 8c:ad:47:ee:73:47:dd:6d:05:48:d3:86:d0:dd:e7:08:18:47: ca:39:12:80:df:ff:c9:62:be:8c:75:48:09:fa:4b:69:d8:b1: 18:a9:4a:ae:2f:e0:95:b4:5a:48:07:e3:73:08:6c:38:a5:92: 80:95:91:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEojwB2cHBkqrBQ2K0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQ2NjgxNDctYTcxYi00ZmIzLTllZDktZTFlMDQwNjFi YmRkMB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk NDU0MGVmMmMtZjhiYi00ZmZlLWFmOTgtYzVhZWUzNGYzZTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBeGSL5Zxowr/ZFwSlBXkPox45484pQcKbqN oB5ytDWgnz3gMsdmOHsINlgtIeNYGKbFilRLo03g8UQNRzj/7f628OakeIC2dV4T 4mu1D7MFejZW10zymMQVfHHj2ZkSljdcsdBwbv7GvHImoH/1biihekSe314Uz7Xh Xy9cUr7udwpY6TRPvQFbcYIOaWA+ozhWpjYskkQGNyLNQWuErCPZv+i1HgI2NxTk i92hu0hrWZ746XHJeGq7BolMcYkAzURjVfcVP4KctMIo0TbZaIma9fae87EdpHtJ 2vr0n36oFOo72o3q3ZUSUrTbR49t060a78RBLzcmnEVKAmbvSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFWrAWkmmwrtLqOC3pGA9TfakMuSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jNDY2 ODE0Ny1hNzFiLTRmYjMtOWVkOS1lMWUwNDA2MWJiZGQvMDI1YmY5OTEtYTVjYS0z YmNiLWI5ZTgtOTAxZjIxMjVlZjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzQ2NjgxNDctYTcxYi00ZmIzLTll ZDktZTFlMDQwNjFiYmRkL2M0NjY4MTQ3LWE3MWItNGZiMy05ZWQ5LWUxZTA0MDYx YmJkZC5jcmwwHwYDVR0jBBgwFoAUJSxl0Ssr5aaARTiY4Gtn2/UK7jgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jNDY2ODE0Ny1hNzFiLTRmYjMtOWVkOS1lMWUw NDA2MWJiZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7zHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALYjzPsBSAqgDaT5rMrgONeQMODSausIeNkBfFwOwQTMcIhWWLia6Y5W oLhVrKlX0dHbK63lq5vc/Ny8xXOi41kpkK0mOyvWFvI9J05agpfRVLtU5TlbvfXD Bwm1u5xAltn2B85lKPtnDRi+bYNkaT9egOHf83BzM7E0RtkH8lr8k88L+W3a9GeM K1K8DnIWfIvQk111yltasH3yGoajPWsTkqiQTehGoPEBoYIJWdfi9ykrjrC75BrB 4L7CCtKRMI205Mo7z4ytR+5zR91tBUjThtDd5wgYR8o5EoDf/8livox1SAn6S2nY sRipSq4v4JW0WkgH43MIbDilkoCVkZ8= -----END CERTIFICATE-----Generated at Tue Jul 1 01:08:05 2025 by rpki-client