$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/04baf0fa-6a1d-3766-a496-ca289440ff8c.roa File: 04baf0fa-6a1d-3766-a496-ca289440ff8c.roa (raw, json) Hash identifier: VQ3+stFPWpMZBeojnnqOWIuPRmRD5qJpGyuz2mXjBxQ= Subject key identifier: 82:9A:C7:79:58:9D:9E:22:D8:10:C3:8F:25:F1:1C:9F:77:C2:DA:83 Certificate issuer: /CN=f9441892-5f50-4eb3-a218-8dada1be8f65 Certificate serial: 010D0C9F4328584A3E3D938879E6B98A96394FC0 Authority key identifier: 5A:12:BF:4D:73:FD:98:40:60:30:56:D7:B6:3C:BC:9E:37:AA:B3:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/04baf0fa-6a1d-3766-a496-ca289440ff8c.roa Signing time: Thu 19 Jun 2025 12:44:57 +0000 ROA not before: Thu 19 Jun 2025 12:44:57 +0000 ROA not after: Wed 17 Sep 2025 12:44:57 +0000 asID: 29900 IP address blocks: 162.218.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/f9441892-5f50-4eb3-a218-8dada1be8f65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/f9441892-5f50-4eb3-a218-8dada1be8f65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:3d:93:88:79:e6:b9:8a:96:39:4f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9441892-5f50-4eb3-a218-8dada1be8f65 Validity Not Before: Jun 19 12:44:57 2025 GMT Not After : Sep 17 12:44:57 2025 GMT Subject: CN=23ebcf81-50a5-46da-9983-2854b41f2655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7d:db:e3:64:0a:ab:82:1d:c5:8b:9e:44:78: fc:e7:76:67:ae:87:49:01:5e:14:40:20:a5:cd:d6: 2e:9e:b5:68:18:ce:54:6d:cc:be:1d:d8:cf:b3:78: 23:f1:04:05:37:7c:bd:66:3e:85:c7:72:ce:53:5a: 22:a3:53:b5:b4:b6:73:ce:b9:c3:08:5d:cf:5f:53: 68:44:fd:d5:11:b7:6e:c6:90:41:58:a7:8b:d0:63: a3:4c:9b:28:7d:23:66:d9:86:9f:1a:bb:08:1e:a1: 19:55:b6:ed:bb:db:e7:25:14:e3:d0:c1:09:74:56: 2b:5b:6c:fe:d2:a0:36:30:bf:b5:da:e7:63:5f:6f: ac:51:4e:c0:ca:47:e7:d3:20:57:d4:0c:42:53:a4: 48:95:ef:d9:60:a1:0b:d4:30:48:e9:e7:30:04:b5: 41:74:d9:d7:ba:03:e2:3d:87:7a:89:77:68:8b:f2: ca:8d:cd:c8:fe:b6:7e:f9:36:09:8d:b0:fc:19:d1: 32:a3:0c:fb:e6:f8:0f:33:1c:a1:e5:eb:1c:bb:c7: da:77:3c:49:05:92:e8:e1:b6:ad:f6:89:a4:8e:88: 41:fa:57:87:61:66:ed:64:5c:96:f0:7f:33:1f:9c: c3:1a:b0:c6:30:81:58:81:cc:f4:3e:07:23:20:fd: a5:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:9A:C7:79:58:9D:9E:22:D8:10:C3:8F:25:F1:1C:9F:77:C2:DA:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/04baf0fa-6a1d-3766-a496-ca289440ff8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/f9441892-5f50-4eb3-a218-8dada1be8f65.crl X509v3 Authority Key Identifier: keyid:5A:12:BF:4D:73:FD:98:40:60:30:56:D7:B6:3C:BC:9E:37:AA:B3:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65.cer sbgp-ipAddrBlock: critical IPv4: 162.218.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:35:c1:02:ff:9b:4e:cb:8a:55:a2:b8:16:81:8b:b5:fe:73: 11:97:96:ca:32:a2:ed:ca:c9:ce:4c:7a:6a:f7:c0:c1:24:f0: 29:78:fe:ca:a8:34:07:be:7c:d2:0e:35:d0:a1:7d:a6:eb:63: 39:d3:34:41:79:03:28:44:8b:90:d0:42:40:0c:8e:b9:c8:62: 68:f0:2b:b4:e8:fa:d2:26:5e:2d:34:58:df:c9:ca:b8:0a:e3: ee:6c:10:d5:b8:0e:ca:4a:4b:32:ca:bc:fa:a9:62:f9:b2:86: f1:68:4d:36:46:d4:f7:f0:1a:fe:00:36:56:4a:72:cb:f1:45: 51:c4:ab:79:21:06:13:8a:de:12:8e:b9:42:c3:1c:54:72:16: 3b:51:16:55:b7:55:46:5d:b1:1a:8d:12:7a:60:ff:91:a3:ff: 91:20:f9:b9:b9:d2:ea:2e:12:fd:3e:ae:50:7a:76:7e:0f:62: 85:77:26:b5:f7:78:63:5a:6b:89:ae:31:fc:f7:47:ab:e3:53: 94:0d:ce:75:a8:43:80:30:92:2a:aa:79:74:20:14:04:6c:c7: 3f:9d:7c:66:ba:69:25:62:cb:b2:8b:91:ff:d5:e4:cd:f5:44: e6:02:c9:c2:41:ef:c1:11:7d:b4:5b:9a:81:fb:d0:bd:c4:79: c3:6d:9f:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+PZOIeea5ipY5T8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk0NDE4OTItNWY1MC00ZWIzLWEyMTgtOGRhZGExYmU4 ZjY1MB4XDTI1MDYxOTEyNDQ1N1oXDTI1MDkxNzEyNDQ1N1owLzEtMCsGA1UEAxMk MjNlYmNmODEtNTBhNS00NmRhLTk5ODMtMjg1NGI0MWYyNjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzX3b42QKq4IdxYueRHj853ZnrodJAV4UQCCl zdYunrVoGM5Ubcy+HdjPs3gj8QQFN3y9Zj6Fx3LOU1oio1O1tLZzzrnDCF3PX1No RP3VEbduxpBBWKeL0GOjTJsofSNm2YafGrsIHqEZVbbtu9vnJRTj0MEJdFYrW2z+ 0qA2ML+12udjX2+sUU7Aykfn0yBX1AxCU6RIle/ZYKEL1DBI6ecwBLVBdNnXugPi PYd6iXdoi/LKjc3I/rZ++TYJjbD8GdEyowz75vgPMxyh5escu8fadzxJBZLo4bat 9omkjohB+leHYWbtZFyW8H8zH5zDGrDGMIFYgcz0PgcjIP2lDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIKax3lYnZ4i2BDDjyXxHJ93wtqDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mOTQ0 MTg5Mi01ZjUwLTRlYjMtYTIxOC04ZGFkYTFiZThmNjUvMDRiYWYwZmEtNmExZC0z NzY2LWE0OTYtY2EyODk0NDBmZjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjk0NDE4OTItNWY1MC00ZWIzLWEy MTgtOGRhZGExYmU4ZjY1L2Y5NDQxODkyLTVmNTAtNGViMy1hMjE4LThkYWRhMWJl OGY2NS5jcmwwHwYDVR0jBBgwFoAUWhK/TXP9mEBgMFbXtjy8njeqs8kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mOTQ0MTg5Mi01ZjUwLTRlYjMtYTIxOC04ZGFk YTFiZThmNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAotrHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFg1wQL/m07LilWiuBaBi7X+cxGXlsoyou3Kyc5Memr3wMEk8Cl4/sqo NAe+fNIONdChfabrYznTNEF5AyhEi5DQQkAMjrnIYmjwK7To+tImXi00WN/JyrgK 4+5sENW4DspKSzLKvPqpYvmyhvFoTTZG1PfwGv4ANlZKcsvxRVHEq3khBhOK3hKO uULDHFRyFjtRFlW3VUZdsRqNEnpg/5Gj/5Eg+bm50uouEv0+rlB6dn4PYoV3JrX3 eGNaa4muMfz3R6vjU5QNznWoQ4AwkiqqeXQgFARsxz+dfGa6aSViy7KLkf/V5M31 ROYCycJB78ERfbRbmoH70L3EecNtn4I= -----END CERTIFICATE-----Generated at Mon Jun 30 13:43:21 2025 by rpki-client