$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/bde6caf6-34f5-3393-bdeb-2462afa7133e.roa File: bde6caf6-34f5-3393-bdeb-2462afa7133e.roa (raw, json) Hash identifier: SGJudhBy9sGr66/G3JFo1n7RLEcX0fIZ8VzfZRiUzs8= Subject key identifier: 6B:57:A6:B5:8E:07:D2:C7:37:BC:AC:76:C0:25:7C:FE:0D:42:90:91 Certificate issuer: /CN=1bd97e7a-c31d-417a-bc07-1ecdb96be09f Certificate serial: 010D0C9F4328584A4AD592DA592E7E8A73C5CD00 Authority key identifier: E0:BC:46:6D:8F:5F:DC:23:84:62:42:1C:22:C8:6C:C1:EE:EB:CB:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/bde6caf6-34f5-3393-bdeb-2462afa7133e.roa Signing time: Tue 24 Jun 2025 01:00:50 +0000 ROA not before: Tue 24 Jun 2025 01:00:50 +0000 ROA not after: Mon 22 Sep 2025 01:00:50 +0000 asID: 21743 IP address blocks: 173.0.104.0/23 maxlen: 24 199.189.148.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4a:d5:92:da:59:2e:7e:8a:73:c5:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bd97e7a-c31d-417a-bc07-1ecdb96be09f Validity Not Before: Jun 24 01:00:50 2025 GMT Not After : Sep 22 01:00:50 2025 GMT Subject: CN=c83a0bf3-3f46-47c1-8df6-0ab97cf864ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c5:a1:73:24:e7:e3:7b:5e:95:d2:63:70:47: 59:e3:e6:23:93:bf:1a:5d:56:65:4d:12:ad:f6:c5: 68:76:48:2b:3e:af:2e:99:a6:f8:0e:09:b1:0c:30: 8f:bb:37:d1:63:be:08:29:65:f2:dc:dc:ee:59:42: 22:15:3f:5c:95:78:c0:34:1e:f1:2f:5a:ff:13:b5: b6:62:ac:7a:5d:44:bc:20:0e:5b:37:bf:dd:54:63: fe:26:74:c7:57:38:97:61:ac:84:6e:0d:e4:cd:52: a2:3a:02:d4:5e:27:80:3d:5f:52:e5:f4:12:9e:d1: e8:e7:e3:9f:12:8a:7d:67:89:89:8b:ee:6a:4d:d1: 85:44:06:e5:3f:33:2b:b0:21:5d:e4:b8:b3:25:c4: 19:24:54:a8:d5:eb:28:bb:d9:91:77:51:e7:4c:a7: d2:1a:1a:d2:17:a4:2b:15:91:e3:14:43:f4:e4:e7: 8b:08:47:0f:68:20:1f:96:68:8d:5f:50:98:21:1c: a0:ac:10:c8:66:54:b5:26:75:a5:cb:f7:53:dd:44: 5d:66:0f:d7:3c:81:1d:0f:40:0a:f3:ad:1c:e6:86: ed:8a:be:81:dd:0b:75:9b:dd:83:43:74:18:4f:39: 3e:1a:db:c2:2f:5c:eb:26:f6:cc:75:c8:a6:ac:dd: 33:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:57:A6:B5:8E:07:D2:C7:37:BC:AC:76:C0:25:7C:FE:0D:42:90:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/bde6caf6-34f5-3393-bdeb-2462afa7133e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.crl X509v3 Authority Key Identifier: keyid:E0:BC:46:6D:8F:5F:DC:23:84:62:42:1C:22:C8:6C:C1:EE:EB:CB:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.cer sbgp-ipAddrBlock: critical IPv4: 173.0.104.0/23 199.189.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:28:b2:29:75:0b:44:56:2b:4d:b7:30:27:38:60:45:f7:8d: 7b:ae:50:e1:ab:75:f5:42:b5:b4:fd:ad:32:8b:fc:28:71:81: 3f:34:88:90:49:d5:43:05:5e:00:c2:db:90:3f:dc:eb:29:d6: 03:ab:9f:29:ad:1e:19:63:0a:71:e5:78:be:ce:6f:aa:71:4b: 77:9a:e3:fd:13:e4:b7:60:af:5e:14:3e:8f:6b:f7:82:fd:50: ec:00:0b:0c:e3:7f:25:19:3a:c0:95:01:9c:50:d0:94:f9:2d: c3:5d:a0:e1:f0:d2:f7:f1:2a:03:a7:f3:9c:61:e3:80:ae:af: 80:58:0f:47:5a:76:4a:b2:55:e3:8e:10:89:aa:88:3f:62:35: ce:d0:06:8b:f5:f2:16:33:44:54:77:4b:53:8b:f9:d4:88:c5: a8:51:50:50:29:f0:cb:c5:e3:a5:94:74:b3:e3:47:78:d1:82: d5:9c:ef:db:b6:fb:f4:c0:b9:bc:32:97:e2:bd:e0:3f:1f:e0: d3:2f:9b:fc:5e:b6:01:78:98:94:52:ff:e7:6f:fe:ca:03:ae: e5:37:df:06:47:a0:25:14:61:82:28:b1:f2:cf:58:e9:3f:1c: e5:34:e1:42:e8:7a:64:9d:4b:38:ff:7a:9b:a7:18:91:c8:c6: 3c:a5:bf:39 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEpK1ZLaWS5+inPFzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWJkOTdlN2EtYzMxZC00MTdhLWJjMDctMWVjZGI5NmJl MDlmMB4XDTI1MDYyNDAxMDA1MFoXDTI1MDkyMjAxMDA1MFowLzEtMCsGA1UEAxMk YzgzYTBiZjMtM2Y0Ni00N2MxLThkZjYtMGFiOTdjZjg2NGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8WhcyTn43teldJjcEdZ4+Yjk78aXVZlTRKt 9sVodkgrPq8umab4DgmxDDCPuzfRY74IKWXy3NzuWUIiFT9clXjANB7xL1r/E7W2 Yqx6XUS8IA5bN7/dVGP+JnTHVziXYayEbg3kzVKiOgLUXieAPV9S5fQSntHo5+Of Eop9Z4mJi+5qTdGFRAblPzMrsCFd5LizJcQZJFSo1esou9mRd1HnTKfSGhrSF6Qr FZHjFEP05OeLCEcPaCAflmiNX1CYIRygrBDIZlS1JnWly/dT3URdZg/XPIEdD0AK 860c5obtir6B3Qt1m92DQ3QYTzk+GtvCL1zrJvbMdcimrN0zvwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFGtXprWOB9LHN7ysdsAlfP4NQpCRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xYmQ5 N2U3YS1jMzFkLTQxN2EtYmMwNy0xZWNkYjk2YmUwOWYvYmRlNmNhZjYtMzRmNS0z MzkzLWJkZWItMjQ2MmFmYTcxMzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMWJkOTdlN2EtYzMxZC00MTdhLWJj MDctMWVjZGI5NmJlMDlmLzFiZDk3ZTdhLWMzMWQtNDE3YS1iYzA3LTFlY2RiOTZi ZTA5Zi5jcmwwHwYDVR0jBBgwFoAU4LxGbY9f3COEYkIcIshswe7ry44wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xYmQ5N2U3YS1jMzFkLTQxN2EtYmMwNy0xZWNk Yjk2YmUwOWYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBrQBoAwQB x72UMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACcosil1C0RWK023MCc4YEX3jXuuUOGrdfVCtbT9rTKL/Chx gT80iJBJ1UMFXgDC25A/3Osp1gOrnymtHhljCnHleL7Ob6pxS3ea4/0T5Ldgr14U Po9r94L9UOwACwzjfyUZOsCVAZxQ0JT5LcNdoOHw0vfxKgOn85xh44Cur4BYD0da dkqyVeOOEImqiD9iNc7QBov18hYzRFR3S1OL+dSIxahRUFAp8MvF46WUdLPjR3jR gtWc79u2+/TAubwyl+K94D8f4NMvm/xetgF4mJRS/+dv/soDruU33wZHoCUUYYIo sfLPWOk/HOU04ULoemSdSzj/epunGJHIxjylvzk= -----END CERTIFICATE-----Generated at Sun Jun 29 13:36:15 2025 by rpki-client