$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e0947a7c-1e3a-48a5-a2af-030e41842fe1/deaddd0c-23be-39fe-80e3-73d846dab668.roa File: deaddd0c-23be-39fe-80e3-73d846dab668.roa (raw, json) Hash identifier: pwwuLzVWTtLNO31r8GXBmGm/IyRy5aER8WxwTombRvM= Subject key identifier: 77:F4:2A:46:C2:C4:F9:7D:CD:54:70:98:A9:AF:7D:C6:01:14:C9:C3 Certificate issuer: /CN=e0947a7c-1e3a-48a5-a2af-030e41842fe1 Certificate serial: 010D0C9F4328584A5CFB20B1C88D62C55E8BB000 Authority key identifier: 0A:C3:E6:F4:4A:D2:76:83:C6:B4:18:58:D7:55:62:7D:38:F6:24:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e0947a7c-1e3a-48a5-a2af-030e41842fe1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e0947a7c-1e3a-48a5-a2af-030e41842fe1/deaddd0c-23be-39fe-80e3-73d846dab668.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 396192 IP address blocks: 199.5.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e0947a7c-1e3a-48a5-a2af-030e41842fe1/e0947a7c-1e3a-48a5-a2af-030e41842fe1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e0947a7c-1e3a-48a5-a2af-030e41842fe1/e0947a7c-1e3a-48a5-a2af-030e41842fe1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e0947a7c-1e3a-48a5-a2af-030e41842fe1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:20:b1:c8:8d:62:c5:5e:8b:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0947a7c-1e3a-48a5-a2af-030e41842fe1 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=88e04a8c-d0ee-4689-af34-5d259604f931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:be:c8:57:1a:a6:7f:a3:84:fa:b4:4a:90:cd: 38:84:4d:c8:eb:c5:4a:e3:d9:9c:be:cb:c3:f3:b3: 2f:a2:bc:83:28:39:91:ec:ae:a6:1f:ec:f2:51:72: 43:d2:c3:66:4f:d7:06:33:fa:a1:ec:c0:d3:82:24: 79:32:4c:4b:ce:e1:ff:b5:d4:df:c2:e3:a0:b5:1c: 7e:7b:06:ee:83:1e:98:62:0f:bd:04:b0:bf:7c:0c: 05:74:00:0d:e2:d2:d1:41:ab:97:76:61:bd:f8:bd: 93:b5:da:49:09:81:48:87:ab:95:70:f6:3a:cd:51: 73:be:d1:10:44:72:97:1f:71:74:87:bd:60:64:5c: 30:46:6e:23:a0:46:ca:7d:a5:2f:50:73:fa:f2:db: f5:1b:4d:29:7a:7c:05:a5:2b:32:8c:1c:67:42:2f: 69:c8:95:60:df:78:78:41:0e:1e:16:00:9b:29:6d: 0e:39:4d:c5:25:2c:30:7c:04:d5:49:cf:ab:99:0b: ba:68:56:ab:de:75:10:4e:a1:50:2b:08:7b:b3:0a: b8:9b:7f:89:e0:b8:da:c5:b9:82:8a:cf:bf:3a:71: 87:de:fd:98:35:c1:b4:63:0e:a8:fb:1d:b0:65:fb: 97:15:77:2b:fc:43:2c:54:1e:89:98:94:86:78:33: f0:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:F4:2A:46:C2:C4:F9:7D:CD:54:70:98:A9:AF:7D:C6:01:14:C9:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e0947a7c-1e3a-48a5-a2af-030e41842fe1/deaddd0c-23be-39fe-80e3-73d846dab668.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e0947a7c-1e3a-48a5-a2af-030e41842fe1/e0947a7c-1e3a-48a5-a2af-030e41842fe1.crl X509v3 Authority Key Identifier: keyid:0A:C3:E6:F4:4A:D2:76:83:C6:B4:18:58:D7:55:62:7D:38:F6:24:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e0947a7c-1e3a-48a5-a2af-030e41842fe1.cer sbgp-ipAddrBlock: critical IPv4: 199.5.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:c5:2b:12:16:0f:73:07:9a:18:03:96:23:ad:80:7b:f0:2c: 51:68:0d:27:93:67:99:09:84:8e:e6:50:c6:19:03:e7:17:0f: 2a:60:4b:02:5a:08:49:58:29:c6:75:ea:58:ec:c2:0c:cc:d5: db:67:62:ea:1f:d8:33:b0:92:62:25:98:00:a1:b6:49:2b:b0: 28:06:a6:83:ee:31:8b:fd:a9:ec:18:bb:d4:04:28:f7:14:d8: 96:bf:63:cc:0e:d4:11:ab:f0:53:ad:60:6f:f1:c5:39:52:27: 68:90:70:e1:10:27:23:ec:a2:7e:0f:e2:80:10:a2:62:2e:dd: b6:d3:df:ac:a1:8e:27:11:5d:fe:ef:7e:89:a9:84:da:49:e4: d8:90:7f:8d:b3:19:c9:b8:31:d4:b1:0a:14:13:27:5e:57:74: 08:85:62:a9:21:35:d3:ae:0d:e2:f4:1c:89:c8:5f:a6:88:a2: 3e:69:4a:45:36:c6:c1:19:9a:ff:6d:81:1a:71:8d:81:a2:cb: 06:7d:27:b5:b0:3f:de:e5:57:56:55:d5:d0:82:07:25:59:5d: 28:78:9f:8f:a9:1f:87:64:2c:6c:8e:5c:4d:af:e0:d9:71:2e: de:57:e2:ff:21:98:95:fd:03:6f:75:7d:a7:01:d0:41:9d:57: d4:5e:fc:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+yCxyI1ixV6LsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTA5NDdhN2MtMWUzYS00OGE1LWEyYWYtMDMwZTQxODQy ZmUxMB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk ODhlMDRhOGMtZDBlZS00Njg5LWFmMzQtNWQyNTk2MDRmOTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhr7IVxqmf6OE+rRKkM04hE3I68VK49mcvsvD 87MvoryDKDmR7K6mH+zyUXJD0sNmT9cGM/qh7MDTgiR5MkxLzuH/tdTfwuOgtRx+ ewbugx6YYg+9BLC/fAwFdAAN4tLRQauXdmG9+L2TtdpJCYFIh6uVcPY6zVFzvtEQ RHKXH3F0h71gZFwwRm4joEbKfaUvUHP68tv1G00penwFpSsyjBxnQi9pyJVg33h4 QQ4eFgCbKW0OOU3FJSwwfATVSc+rmQu6aFar3nUQTqFQKwh7swq4m3+J4LjaxbmC is+/OnGH3v2YNcG0Yw6o+x2wZfuXFXcr/EMsVB6JmJSGeDPw4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHf0KkbCxPl9zVRwmKmvfcYBFMnDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lMDk0 N2E3Yy0xZTNhLTQ4YTUtYTJhZi0wMzBlNDE4NDJmZTEvZGVhZGRkMGMtMjNiZS0z OWZlLTgwZTMtNzNkODQ2ZGFiNjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZTA5NDdhN2MtMWUzYS00OGE1LWEy YWYtMDMwZTQxODQyZmUxL2UwOTQ3YTdjLTFlM2EtNDhhNS1hMmFmLTAzMGU0MTg0 MmZlMS5jcmwwHwYDVR0jBBgwFoAUCsPm9ErSdoPGtBhY11VifTj2JNAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9lMDk0N2E3Yy0xZTNhLTQ4YTUtYTJhZi0wMzBl NDE4NDJmZTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwXEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEjFKxIWD3MHmhgDliOtgHvwLFFoDSeTZ5kJhI7mUMYZA+cXDypgSwJa CElYKcZ16ljswgzM1dtnYuof2DOwkmIlmAChtkkrsCgGpoPuMYv9qewYu9QEKPcU 2Ja/Y8wO1BGr8FOtYG/xxTlSJ2iQcOEQJyPson4P4oAQomIu3bbT36yhjicRXf7v fomphNpJ5NiQf42zGcm4MdSxChQTJ15XdAiFYqkhNdOuDeL0HInIX6aIoj5pSkU2 xsEZmv9tgRpxjYGiywZ9J7WwP97lV1ZV1dCCByVZXSh4n4+pH4dkLGyOXE2v4Nlx Lt5X4v8hmJX9A291facB0EGdV9Re/NE= -----END CERTIFICATE-----Generated at Fri Jul 4 21:10:52 2025 by rpki-client