$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/fbd06ea1-275a-3df9-b485-451d3dee4a1b.roa File: fbd06ea1-275a-3df9-b485-451d3dee4a1b.roa (raw, json) Hash identifier: 9ZheWBEhO8YOgMaZnoGF3OzGjjTiZpGfdIEcY4ei5Qo= Subject key identifier: 2F:2B:BE:9A:0C:62:A0:34:0B:2E:DA:FA:D2:CE:2A:B9:08:8C:FB:DD Certificate issuer: /CN=58520fc1-e07b-4b1b-ad59-5756198c9756 Certificate serial: 010D0C9F4328584A348019D431581B6EAB42DC78 Authority key identifier: 8B:68:5A:47:96:D3:96:D1:F9:A1:5F:E7:38:95:E0:29:83:E6:D4:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/fbd06ea1-275a-3df9-b485-451d3dee4a1b.roa Signing time: Mon 16 Jun 2025 01:00:49 +0000 ROA not before: Mon 16 Jun 2025 01:00:49 +0000 ROA not after: Sun 14 Sep 2025 01:00:49 +0000 asID: 8075 IP address blocks: 199.181.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/58520fc1-e07b-4b1b-ad59-5756198c9756.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/58520fc1-e07b-4b1b-ad59-5756198c9756.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:34:80:19:d4:31:58:1b:6e:ab:42:dc:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58520fc1-e07b-4b1b-ad59-5756198c9756 Validity Not Before: Jun 16 01:00:49 2025 GMT Not After : Sep 14 01:00:49 2025 GMT Subject: CN=8f3c085a-0281-4d82-a94f-db1172da8863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e1:b1:63:99:25:7a:01:2f:2c:f7:b9:25:27: c7:19:6b:8d:33:14:09:27:d3:1c:01:6a:c0:6a:52: 14:05:c7:0d:d1:29:4d:00:48:e1:11:ec:1e:30:e1: c3:26:b6:71:fb:7e:b3:a2:86:39:70:60:72:5c:6a: 89:3a:e7:e5:1e:45:2c:c4:49:b8:4a:72:86:1f:82: 60:17:f3:d8:86:80:35:ce:41:2f:a5:dc:5b:e7:23: 88:ee:20:97:af:8f:cc:a6:9d:30:d5:fa:ba:15:a8: dc:7d:a8:26:71:08:0f:7f:59:a7:d2:e3:47:43:0d: d6:09:ef:a1:0c:eb:cd:bb:0c:9b:0a:a4:ff:0e:fa: e4:49:bf:b3:5e:96:8e:b5:6d:2a:0f:ef:ce:a7:22: ec:c6:2c:93:a6:dc:b1:57:69:aa:68:0d:63:0f:fd: 61:90:53:08:b1:05:2c:b2:b1:78:cb:66:21:14:61: 89:2e:1c:0a:24:2e:14:66:96:43:11:f5:ff:85:b0: 70:20:0c:7d:ed:e2:e9:3d:46:8d:68:ef:49:55:16: a1:f0:c2:b8:21:d0:a4:05:e2:d4:77:a7:d8:ed:8f: 42:b1:9f:77:e4:48:0d:11:e3:89:aa:f8:cc:9c:b4: 81:a2:39:f6:f6:e5:43:ec:18:40:ff:8a:42:47:52: b7:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:2B:BE:9A:0C:62:A0:34:0B:2E:DA:FA:D2:CE:2A:B9:08:8C:FB:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/fbd06ea1-275a-3df9-b485-451d3dee4a1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/58520fc1-e07b-4b1b-ad59-5756198c9756.crl X509v3 Authority Key Identifier: keyid:8B:68:5A:47:96:D3:96:D1:F9:A1:5F:E7:38:95:E0:29:83:E6:D4:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756.cer sbgp-ipAddrBlock: critical IPv4: 199.181.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:00:c1:98:4d:5b:50:de:4a:e8:b3:2d:98:53:57:b4:70:d3: da:fa:e0:1c:b0:1c:b8:77:4c:07:ee:7f:b6:18:70:f7:1f:84: 42:9b:42:7a:14:bf:16:eb:47:cd:f6:77:03:61:01:3c:35:02: 4c:67:b9:bd:72:94:35:83:f2:c6:0c:f8:c8:e5:5e:63:d8:f3: 5e:71:9f:be:8c:b9:c7:cf:3f:fe:85:10:79:1c:1b:16:30:9c: ea:20:ba:31:33:aa:03:8d:75:a2:22:d5:c9:65:65:63:37:2c: 29:af:ba:77:ac:ae:28:ee:e3:f8:d3:36:77:1b:e0:04:a9:ad: 43:20:42:81:72:9d:ce:87:a6:3b:f1:9d:e4:6b:a0:15:c5:dd: 86:30:4d:a7:16:77:0c:52:ed:a0:07:92:d4:30:fa:04:7f:a4: 81:9c:29:45:a5:12:fa:b8:ca:81:03:cc:58:e9:1e:b1:b5:ec: f1:e3:ba:3f:dc:7d:d8:d3:7d:04:48:d5:32:ad:c4:75:6b:3e: c6:6b:38:68:14:3b:9e:ff:66:7f:44:a6:81:48:0b:e2:29:25: 86:10:f9:11:a9:b2:2b:0b:c0:76:c6:0b:b1:68:00:83:70:eb: 66:72:e0:c9:bd:86:26:2d:c7:ee:8e:6b:e9:ae:31:e0:90:d6: 8d:c9:46:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo0gBnUMVgbbqtC3HgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTg1MjBmYzEtZTA3Yi00YjFiLWFkNTktNTc1NjE5OGM5 NzU2MB4XDTI1MDYxNjAxMDA0OVoXDTI1MDkxNDAxMDA0OVowLzEtMCsGA1UEAxMk OGYzYzA4NWEtMDI4MS00ZDgyLWE5NGYtZGIxMTcyZGE4ODYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOGxY5klegEvLPe5JSfHGWuNMxQJJ9McAWrA alIUBccN0SlNAEjhEeweMOHDJrZx+36zooY5cGByXGqJOuflHkUsxEm4SnKGH4Jg F/PYhoA1zkEvpdxb5yOI7iCXr4/Mpp0w1fq6FajcfagmcQgPf1mn0uNHQw3WCe+h DOvNuwybCqT/DvrkSb+zXpaOtW0qD+/OpyLsxiyTptyxV2mqaA1jD/1hkFMIsQUs srF4y2YhFGGJLhwKJC4UZpZDEfX/hbBwIAx97eLpPUaNaO9JVRah8MK4IdCkBeLU d6fY7Y9CsZ935EgNEeOJqvjMnLSBojn29uVD7BhA/4pCR1K30QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC8rvpoMYqA0Cy7a+tLOKrkIjPvdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81ODUy MGZjMS1lMDdiLTRiMWItYWQ1OS01NzU2MTk4Yzk3NTYvZmJkMDZlYTEtMjc1YS0z ZGY5LWI0ODUtNDUxZDNkZWU0YTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNTg1MjBmYzEtZTA3Yi00YjFiLWFk NTktNTc1NjE5OGM5NzU2LzU4NTIwZmMxLWUwN2ItNGIxYi1hZDU5LTU3NTYxOThj OTc1Ni5jcmwwHwYDVR0jBBgwFoAUi2haR5bTltH5oV/nOJXgKYPm1AUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81ODUyMGZjMS1lMDdiLTRiMWItYWQ1OS01NzU2 MTk4Yzk3NTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7UhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8AwZhNW1DeSuizLZhTV7Rw09r64BywHLh3TAfuf7YYcPcfhEKbQnoU vxbrR832dwNhATw1Akxnub1ylDWD8sYM+MjlXmPY815xn76MucfPP/6FEHkcGxYw nOogujEzqgONdaIi1cllZWM3LCmvunesriju4/jTNncb4ASprUMgQoFync6Hpjvx neRroBXF3YYwTacWdwxS7aAHktQw+gR/pIGcKUWlEvq4yoEDzFjpHrG17PHjuj/c fdjTfQRI1TKtxHVrPsZrOGgUO57/Zn9EpoFIC+IpJYYQ+RGpsisLwHbGC7FoAINw 62Zy4Mm9hiYtx+6Oa+muMeCQ1o3JRsU= -----END CERTIFICATE-----Generated at Mon Jun 30 03:35:32 2025 by rpki-client