$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/198c7e87-9641-4652-a9eb-2296a876b143/d9d6f00c-eafc-3eb9-bd54-47962f1c682c.roa File: d9d6f00c-eafc-3eb9-bd54-47962f1c682c.roa (raw, json) Hash identifier: Oli+ZormTz/Mw1YvAyvLOxNv1CPvrZKEhes9kRUSsJ4= Subject key identifier: E0:40:44:33:4B:91:29:17:2E:1F:86:E7:42:CD:4A:AF:63:0D:F5:79 Certificate issuer: /CN=198c7e87-9641-4652-a9eb-2296a876b143 Certificate serial: 010D0C9F4328584A5335998CA2D00752AEFB2900 Authority key identifier: 9E:66:B6:41:57:ED:E5:DF:56:DA:ED:F4:52:C7:A3:B1:EC:53:B2:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/198c7e87-9641-4652-a9eb-2296a876b143.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/198c7e87-9641-4652-a9eb-2296a876b143/d9d6f00c-eafc-3eb9-bd54-47962f1c682c.roa Signing time: Fri 27 Jun 2025 01:00:50 +0000 ROA not before: Fri 27 Jun 2025 01:00:50 +0000 ROA not after: Thu 25 Sep 2025 01:00:50 +0000 asID: 8075 IP address blocks: 199.34.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/198c7e87-9641-4652-a9eb-2296a876b143/198c7e87-9641-4652-a9eb-2296a876b143.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/198c7e87-9641-4652-a9eb-2296a876b143/198c7e87-9641-4652-a9eb-2296a876b143.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/198c7e87-9641-4652-a9eb-2296a876b143.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:53:35:99:8c:a2:d0:07:52:ae:fb:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=198c7e87-9641-4652-a9eb-2296a876b143 Validity Not Before: Jun 27 01:00:50 2025 GMT Not After : Sep 25 01:00:50 2025 GMT Subject: CN=64d5a8bd-eb48-42a9-9d14-8cdc2adcee14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:21:b7:ce:4d:53:4d:ec:08:e6:92:05:53:0f: 09:6a:38:21:33:e2:0f:39:e8:3a:95:40:b0:1c:60: 40:22:6c:cb:82:ea:cc:88:cf:6b:d6:a4:2e:03:0d: d4:3d:1d:9f:a8:8f:fb:28:65:d2:16:f4:2c:b3:96: 44:ec:be:44:77:1d:5f:5d:99:bb:75:47:a0:f1:99: e4:a1:8f:dd:e8:05:f9:6d:35:e7:46:b4:7e:ab:64: ee:4b:e1:2a:61:98:62:b4:9f:58:53:ab:3e:48:51: a1:a8:0d:46:7d:e6:e3:df:6c:dd:5a:aa:44:70:10: be:8f:d7:80:3c:68:83:1f:3d:f3:76:39:1f:91:53: 1f:19:25:75:77:3b:f6:32:75:fe:0c:ed:f3:06:98: c5:0f:57:7e:11:b3:18:03:b4:da:1f:9b:68:3d:5f: dd:51:52:03:d4:93:5c:28:72:90:3a:41:c0:2e:92: 80:4d:ea:70:0e:8e:f5:70:12:6b:17:5d:08:93:48: c0:f5:09:0e:65:0f:8c:a8:a4:89:04:80:b5:a2:c7: 6d:4b:9a:66:93:3b:c8:c1:fe:d8:a3:22:10:90:c9: 41:80:9a:de:2c:1b:37:66:a7:60:90:6d:1e:1b:df: 8d:d3:39:a1:95:a5:aa:74:19:90:15:cd:38:7b:a8: 56:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:40:44:33:4B:91:29:17:2E:1F:86:E7:42:CD:4A:AF:63:0D:F5:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/198c7e87-9641-4652-a9eb-2296a876b143/d9d6f00c-eafc-3eb9-bd54-47962f1c682c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/198c7e87-9641-4652-a9eb-2296a876b143/198c7e87-9641-4652-a9eb-2296a876b143.crl X509v3 Authority Key Identifier: keyid:9E:66:B6:41:57:ED:E5:DF:56:DA:ED:F4:52:C7:A3:B1:EC:53:B2:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/198c7e87-9641-4652-a9eb-2296a876b143.cer sbgp-ipAddrBlock: critical IPv4: 199.34.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:f7:dd:6e:e1:34:2b:df:4e:48:4a:f2:f2:b4:33:41:d5:3a: c2:9b:c4:5d:7e:de:ae:4b:bb:ec:dc:bc:e9:58:fe:30:29:4e: 2a:da:56:2b:26:b2:77:1f:9f:d4:a5:b8:40:16:02:63:79:1f: 0c:b8:c4:29:f2:2d:d2:f9:4a:0e:a6:85:f6:d1:07:34:a3:d7: ae:aa:b2:a6:09:69:c5:63:ad:60:e7:45:87:c0:80:d0:31:8b: 27:22:75:dc:3f:78:c8:9d:f1:8f:0a:8b:8a:d9:ca:52:08:25: 48:13:ea:8e:fd:aa:78:80:c0:77:c2:85:9b:25:09:cd:27:49: ed:b4:49:69:e6:40:9a:f7:29:d8:e7:37:09:23:74:3c:03:90: 86:e8:c2:12:51:bf:98:3b:f0:4b:9c:3e:74:99:1f:a0:78:5a: 67:78:98:b8:5f:6a:f6:f9:a9:f6:6c:58:8a:94:cf:83:18:9e: 29:a0:e2:7a:1e:54:68:77:f1:b2:a6:56:a9:99:98:3f:55:52: 96:bc:8c:b9:2b:64:71:62:03:94:19:7c:32:01:70:b5:d5:b5: 4f:ea:6d:62:6b:a6:23:7c:4b:f5:fa:26:17:ae:69:b7:90:4f: 05:0c:63:86:cb:92:52:c4:fa:d9:be:b6:ca:2a:f7:dc:cf:93: c9:b2:8b:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpTNZmMotAHUq77KQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTk4YzdlODctOTY0MS00NjUyLWE5ZWItMjI5NmE4NzZi MTQzMB4XDTI1MDYyNzAxMDA1MFoXDTI1MDkyNTAxMDA1MFowLzEtMCsGA1UEAxMk NjRkNWE4YmQtZWI0OC00MmE5LTlkMTQtOGNkYzJhZGNlZTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyG3zk1TTewI5pIFUw8JajghM+IPOeg6lUCw HGBAImzLgurMiM9r1qQuAw3UPR2fqI/7KGXSFvQss5ZE7L5Edx1fXZm7dUeg8Znk oY/d6AX5bTXnRrR+q2TuS+EqYZhitJ9YU6s+SFGhqA1Gfebj32zdWqpEcBC+j9eA PGiDHz3zdjkfkVMfGSV1dzv2MnX+DO3zBpjFD1d+EbMYA7TaH5toPV/dUVID1JNc KHKQOkHALpKATepwDo71cBJrF10Ik0jA9QkOZQ+MqKSJBIC1osdtS5pmkzvIwf7Y oyIQkMlBgJreLBs3ZqdgkG0eG9+N0zmhlaWqdBmQFc04e6hWiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOBARDNLkSkXLh+G50LNSq9jDfV5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8xOThj N2U4Ny05NjQxLTQ2NTItYTllYi0yMjk2YTg3NmIxNDMvZDlkNmYwMGMtZWFmYy0z ZWI5LWJkNTQtNDc5NjJmMWM2ODJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMTk4YzdlODctOTY0MS00NjUyLWE5 ZWItMjI5NmE4NzZiMTQzLzE5OGM3ZTg3LTk2NDEtNDY1Mi1hOWViLTIyOTZhODc2 YjE0My5jcmwwHwYDVR0jBBgwFoAUnma2QVft5d9W2u30UsejsexTsm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8xOThjN2U4Ny05NjQxLTQ2NTItYTllYi0yMjk2 YTg3NmIxNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyJ6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIv33W7hNCvfTkhK8vK0M0HVOsKbxF1+3q5Lu+zcvOlY/jApTiraVism sncfn9SluEAWAmN5Hwy4xCnyLdL5Sg6mhfbRBzSj166qsqYJacVjrWDnRYfAgNAx iyciddw/eMid8Y8Ki4rZylIIJUgT6o79qniAwHfChZslCc0nSe20SWnmQJr3Kdjn NwkjdDwDkIbowhJRv5g78EucPnSZH6B4Wmd4mLhfavb5qfZsWIqUz4MYnimg4noe VGh38bKmVqmZmD9VUpa8jLkrZHFiA5QZfDIBcLXVtU/qbWJrpiN8S/X6JheuabeQ TwUMY4bLklLE+tm+tsoq99zPk8myi4s= -----END CERTIFICATE-----Generated at Tue Jul 1 18:19:57 2025 by rpki-client