$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/727f5e3c-17f5-4284-ae37-06cc8cada272/532cda7f-ca68-30cf-8989-67baaeec7864.roa File: 532cda7f-ca68-30cf-8989-67baaeec7864.roa (raw, json) Hash identifier: XvmBQ+Ab53iyxJ9PKZcRkrRA1gdhKd3wS5PIEq29yuo= Subject key identifier: 3C:86:02:15:9B:5B:9C:53:0F:AA:31:F7:EB:9C:DB:F5:56:95:9B:70 Certificate issuer: /CN=727f5e3c-17f5-4284-ae37-06cc8cada272 Certificate serial: 010D0C9F43285849D9C4F52D1C1C357193480480 Authority key identifier: 6F:30:E6:02:4E:29:19:DC:BE:E0:FD:E7:24:9B:67:22:7B:80:A5:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/727f5e3c-17f5-4284-ae37-06cc8cada272.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/727f5e3c-17f5-4284-ae37-06cc8cada272/532cda7f-ca68-30cf-8989-67baaeec7864.roa Signing time: Wed 14 May 2025 13:01:03 +0000 ROA not before: Wed 14 May 2025 13:01:03 +0000 ROA not after: Tue 12 Aug 2025 13:01:03 +0000 asID: 7018 IP address blocks: 199.58.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/727f5e3c-17f5-4284-ae37-06cc8cada272/727f5e3c-17f5-4284-ae37-06cc8cada272.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/727f5e3c-17f5-4284-ae37-06cc8cada272/727f5e3c-17f5-4284-ae37-06cc8cada272.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/727f5e3c-17f5-4284-ae37-06cc8cada272.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d9:c4:f5:2d:1c:1c:35:71:93:48:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=727f5e3c-17f5-4284-ae37-06cc8cada272 Validity Not Before: May 14 13:01:03 2025 GMT Not After : Aug 12 13:01:03 2025 GMT Subject: CN=ba0fb65e-fa07-44b2-a826-1367dfe3e412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bb:f6:f9:72:14:30:77:32:fb:70:70:4f:9c: f8:2c:39:40:7f:9b:88:37:95:0b:54:c7:92:05:85: 4d:6e:cb:2f:1f:9e:ff:cb:4a:c6:10:63:34:e5:c1: d5:3b:47:fe:c7:25:ad:aa:6e:be:78:06:66:01:1c: d5:8a:5d:3b:03:d8:78:b3:41:5e:ba:64:da:1f:21: 4b:da:96:fc:22:75:07:ef:be:3a:77:f1:22:1e:5e: 69:e8:dc:a1:12:f0:d9:22:36:68:38:9a:8d:f0:3a: eb:1d:f3:54:7e:1e:68:20:37:e8:d8:97:20:e5:2c: d2:8f:46:96:ef:1e:d8:eb:c6:17:14:41:1f:e1:52: e1:de:28:b3:37:7b:41:0f:d8:ce:94:94:5d:cc:fe: 45:32:47:24:e1:49:70:21:ac:9d:d7:c5:5b:33:c8: e0:55:14:e9:cd:2b:5c:bf:c7:49:8b:13:28:96:d9: f1:54:dc:82:5b:9b:3d:a5:7e:2d:eb:0c:83:85:5d: c9:58:cb:03:07:b9:4f:9d:05:04:ef:07:5e:0b:c7: 8d:90:ec:7c:d6:92:f7:78:84:28:73:3e:4d:ea:47: ac:74:66:4c:68:7a:20:58:f0:e2:84:1f:29:8c:de: dc:3f:ce:b4:55:19:02:60:85:d8:7e:66:94:6f:c7: f8:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:86:02:15:9B:5B:9C:53:0F:AA:31:F7:EB:9C:DB:F5:56:95:9B:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/727f5e3c-17f5-4284-ae37-06cc8cada272/532cda7f-ca68-30cf-8989-67baaeec7864.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/727f5e3c-17f5-4284-ae37-06cc8cada272/727f5e3c-17f5-4284-ae37-06cc8cada272.crl X509v3 Authority Key Identifier: keyid:6F:30:E6:02:4E:29:19:DC:BE:E0:FD:E7:24:9B:67:22:7B:80:A5:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/727f5e3c-17f5-4284-ae37-06cc8cada272.cer sbgp-ipAddrBlock: critical IPv4: 199.58.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:1b:5b:19:55:59:fe:1f:35:72:ee:56:66:1c:13:32:04:6b: 97:6e:3b:37:14:c4:c5:62:5d:05:05:d3:50:46:9d:15:45:f5: 64:ee:44:ee:c9:a4:8e:3f:48:b4:05:09:63:34:61:d7:eb:a6: a1:6c:f7:55:8a:ba:86:55:2d:80:65:1f:e7:42:8a:5e:0d:9c: 39:a3:42:4c:7a:e5:77:2c:2e:b5:1a:cf:8e:c4:a0:68:5a:a7: 28:ce:61:93:cd:c4:21:14:cb:ab:84:9b:a0:38:1d:27:8b:68: d7:b5:a5:a9:96:9f:3e:c1:b3:7f:7c:7f:49:4f:27:03:c4:91: ab:b4:32:1d:b8:a9:96:92:74:7c:81:4d:39:97:c2:c3:5f:3e: 38:47:9a:1d:97:bb:4f:a3:bb:0b:10:c1:51:e4:73:0e:c0:c9: 42:0b:24:5f:f6:d6:f4:1b:c3:bc:3b:65:5e:ca:fa:1c:a1:85: ff:bc:7f:b0:49:d7:47:c1:cd:32:45:2d:e8:c0:6f:37:88:14: a2:30:ee:81:a2:9c:c9:3c:28:4c:82:a2:a4:0b:d6:f5:f2:98: 0d:a8:12:02:68:c3:0e:c5:2e:d0:9e:5b:15:41:49:20:b2:61: c1:3e:43:f3:39:12:3c:98:ee:96:7f:70:5b:96:b2:69:89:13: e7:f4:9c:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnZxPUtHBw1cZNIBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzI3ZjVlM2MtMTdmNS00Mjg0LWFlMzctMDZjYzhjYWRh MjcyMB4XDTI1MDUxNDEzMDEwM1oXDTI1MDgxMjEzMDEwM1owLzEtMCsGA1UEAxMk YmEwZmI2NWUtZmEwNy00NGIyLWE4MjYtMTM2N2RmZTNlNDEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLv2+XIUMHcy+3BwT5z4LDlAf5uIN5ULVMeS BYVNbssvH57/y0rGEGM05cHVO0f+xyWtqm6+eAZmARzVil07A9h4s0FeumTaHyFL 2pb8InUH7746d/EiHl5p6NyhEvDZIjZoOJqN8DrrHfNUfh5oIDfo2Jcg5SzSj0aW 7x7Y68YXFEEf4VLh3iizN3tBD9jOlJRdzP5FMkck4UlwIayd18VbM8jgVRTpzStc v8dJixMoltnxVNyCW5s9pX4t6wyDhV3JWMsDB7lPnQUE7wdeC8eNkOx81pL3eIQo cz5N6kesdGZMaHogWPDihB8pjN7cP860VRkCYIXYfmaUb8f4GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDyGAhWbW5xTD6ox9+uc2/VWlZtwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83Mjdm NWUzYy0xN2Y1LTQyODQtYWUzNy0wNmNjOGNhZGEyNzIvNTMyY2RhN2YtY2E2OC0z MGNmLTg5ODktNjdiYWFlZWM3ODY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNzI3ZjVlM2MtMTdmNS00Mjg0LWFl MzctMDZjYzhjYWRhMjcyLzcyN2Y1ZTNjLTE3ZjUtNDI4NC1hZTM3LTA2Y2M4Y2Fk YTI3Mi5jcmwwHwYDVR0jBBgwFoAUbzDmAk4pGdy+4P3nJJtnInuApWAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi83MjdmNWUzYy0xN2Y1LTQyODQtYWUzNy0wNmNj OGNhZGEyNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxzrkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHEbWxlVWf4fNXLuVmYcEzIEa5duOzcUxMViXQUF01BGnRVF9WTuRO7J pI4/SLQFCWM0YdfrpqFs91WKuoZVLYBlH+dCil4NnDmjQkx65XcsLrUaz47EoGha pyjOYZPNxCEUy6uEm6A4HSeLaNe1pamWnz7Bs398f0lPJwPEkau0Mh24qZaSdHyB TTmXwsNfPjhHmh2Xu0+juwsQwVHkcw7AyUILJF/21vQbw7w7ZV7K+hyhhf+8f7BJ 10fBzTJFLejAbzeIFKIw7oGinMk8KEyCoqQL1vXymA2oEgJoww7FLtCeWxVBSSCy YcE+Q/M5EjyY7pZ/cFuWsmmJE+f0nL8= -----END CERTIFICATE-----Generated at Tue Jul 1 03:43:25 2025 by rpki-client