$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3dfc906b-f994-3ab9-93fc-f2f49db08aab.roa File: 3dfc906b-f994-3ab9-93fc-f2f49db08aab.roa (raw, json) Hash identifier: JnYBQyt186oV+pv28myf/1WbbNVEAkpdtujBr2+G88U= Subject key identifier: CE:BA:D8:83:C1:6F:EA:4C:57:D2:E0:8C:1B:52:57:52:A4:E4:DB:18 Certificate issuer: /CN=3104c204-288d-4f87-83c2-99a30908dea3 Certificate serial: 010D0C9F4328584A3A1572D9CD20D2D98B321B80 Authority key identifier: 76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3dfc906b-f994-3ab9-93fc-f2f49db08aab.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 394353 IP address blocks: 199.9.14.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:72:d9:cd:20:d2:d9:8b:32:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3104c204-288d-4f87-83c2-99a30908dea3 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=cf63f23c-3339-4fc4-b7fc-0e75b7924f34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:01:53:41:7c:60:32:44:13:e3:b0:5c:b1:0a: 34:fe:c5:5d:61:5a:7d:b4:28:79:cb:96:c7:81:01: cb:3e:9e:7f:57:54:f4:48:45:7c:b5:1e:06:66:b6: ea:f2:78:e3:48:5e:cd:23:02:d8:56:be:76:50:64: b2:b5:dc:e5:9b:7c:e2:63:26:4e:0d:7d:23:d6:90: 37:5b:46:95:0d:2d:36:19:d5:75:8c:a3:e3:eb:03: 99:13:09:dc:32:5d:45:18:1e:78:fc:35:06:8d:23: 12:75:73:14:47:f6:58:17:11:1c:23:fd:fe:36:92: d9:fa:37:df:11:65:06:69:b2:60:f7:36:b5:65:e7: f2:08:2f:2c:04:72:dd:8d:81:8c:21:24:0c:fd:74: 76:d7:d8:18:4b:7b:46:80:85:07:76:b5:64:a2:d5: 76:d8:37:37:1b:6d:d7:0a:c9:48:17:78:1f:be:bf: 55:ce:1d:c2:29:f2:2f:6e:88:82:21:dc:8d:2b:fc: 32:33:f9:fc:62:eb:6b:5d:b4:30:e6:32:40:08:dd: d2:e6:24:f6:08:39:21:6b:aa:b5:c4:95:67:5d:26: 53:07:8c:37:10:e0:b6:25:bf:a6:b0:a4:bc:f6:8e: b9:df:c1:45:17:3b:2b:f8:5c:bf:4e:0f:48:85:bb: 36:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:BA:D8:83:C1:6F:EA:4C:57:D2:E0:8C:1B:52:57:52:A4:E4:DB:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3dfc906b-f994-3ab9-93fc-f2f49db08aab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl X509v3 Authority Key Identifier: keyid:76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer sbgp-ipAddrBlock: critical IPv4: 199.9.14.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:f5:65:f4:be:27:1f:cb:76:fc:7a:75:2c:24:76:08:b3:f2: 7e:84:d9:30:22:56:9f:ec:62:dc:1e:ba:f4:7c:16:44:dd:fd: 5f:40:57:0a:c0:24:00:84:a2:e1:4b:76:02:26:29:fb:fe:ed: 23:0b:4f:64:04:c7:9a:48:0d:08:a6:d9:49:7b:f1:ef:87:d6: 1f:f3:17:e7:56:85:b3:82:d4:12:63:45:48:07:a5:e7:59:c7: a7:4f:f8:f9:50:78:e4:65:d7:d5:43:7f:e8:76:be:6f:4b:aa: 8b:2e:c9:f8:d9:df:54:26:1d:f8:0f:f4:78:59:0b:38:7e:cf: 53:9f:04:b3:94:60:ed:70:93:fe:7c:95:13:9f:70:43:39:73: 60:33:b2:6a:8f:97:de:51:17:86:00:94:9e:a3:66:27:01:bf: f8:e1:96:c1:21:fe:00:c5:3c:f9:74:31:b3:e4:bb:3c:0c:e3: 9b:47:51:36:3e:1e:e9:08:c7:06:be:dd:2d:6e:53:3f:f1:12: 40:2e:9f:e5:28:71:25:ed:43:97:29:fa:f3:fb:90:80:b5:2a: f6:39:80:98:44:02:49:fc:da:29:87:e4:a4:d6:af:58:8f:7c: 24:72:c3:75:81:90:d2:6a:d6:e9:37:0f:f7:d4:b6:24:b2:97: 0b:d8:a7:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FXLZzSDS2YsyG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzEwNGMyMDQtMjg4ZC00Zjg3LTgzYzItOTlhMzA5MDhk ZWEzMB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk Y2Y2M2YyM2MtMzMzOS00ZmM0LWI3ZmMtMGU3NWI3OTI0ZjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwFTQXxgMkQT47BcsQo0/sVdYVp9tCh5y5bH gQHLPp5/V1T0SEV8tR4GZrbq8njjSF7NIwLYVr52UGSytdzlm3ziYyZODX0j1pA3 W0aVDS02GdV1jKPj6wOZEwncMl1FGB54/DUGjSMSdXMUR/ZYFxEcI/3+NpLZ+jff EWUGabJg9za1ZefyCC8sBHLdjYGMISQM/XR219gYS3tGgIUHdrVkotV22Dc3G23X CslIF3gfvr9Vzh3CKfIvboiCIdyNK/wyM/n8YutrXbQw5jJACN3S5iT2CDkha6q1 xJVnXSZTB4w3EOC2Jb+msKS89o6538FFFzsr+Fy/Tg9Ihbs23QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM662IPBb+pMV9LgjBtSV1Kk5NsYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zMTA0 YzIwNC0yODhkLTRmODctODNjMi05OWEzMDkwOGRlYTMvM2RmYzkwNmItZjk5NC0z YWI5LTkzZmMtZjJmNDlkYjA4YWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzEwNGMyMDQtMjg4ZC00Zjg3LTgz YzItOTlhMzA5MDhkZWEzLzMxMDRjMjA0LTI4OGQtNGY4Ny04M2MyLTk5YTMwOTA4 ZGVhMy5jcmwwHwYDVR0jBBgwFoAUdl35PUdKzyPwIOaHcKwrmJkvA+IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zMTA0YzIwNC0yODhkLTRmODctODNjMi05OWEz MDkwOGRlYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxwkOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKf1ZfS+Jx/Ldvx6dSwkdgiz8n6E2TAiVp/sYtweuvR8FkTd/V9AVwrA JACEouFLdgImKfv+7SMLT2QEx5pIDQim2Ul78e+H1h/zF+dWhbOC1BJjRUgHpedZ x6dP+PlQeORl19VDf+h2vm9LqosuyfjZ31QmHfgP9HhZCzh+z1OfBLOUYO1wk/58 lROfcEM5c2AzsmqPl95RF4YAlJ6jZicBv/jhlsEh/gDFPPl0MbPkuzwM45tHUTY+ HukIxwa+3S1uUz/xEkAun+UocSXtQ5cp+vP7kIC1KvY5gJhEAkn82imH5KTWr1iP fCRyw3WBkNJq1uk3D/fUtiSylwvYp0g= -----END CERTIFICATE-----Generated at Mon Jun 30 07:27:11 2025 by rpki-client