$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/534e5e03-5a54-38cc-a774-6d07f571b6a5.roa File: 534e5e03-5a54-38cc-a774-6d07f571b6a5.roa (raw, json) Hash identifier: aOaIRdlLyckWppqI4Tl1L4HBJw4C6NWJgQ8WWVIj7Ws= Subject key identifier: 10:A0:2E:34:53:59:97:37:D9:49:A8:DF:3E:37:DD:11:93:B0:36:55 Certificate issuer: /CN=3fd37bf6-6955-4ed5-8347-2896767afab0 Certificate serial: 010D0C9F4328584A4DA044E4DAD9DBAF0CDE3280 Authority key identifier: 2C:DA:ED:C1:B2:77:C1:C9:C1:4F:A9:F9:F3:3D:2C:EE:A5:59:DB:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/534e5e03-5a54-38cc-a774-6d07f571b6a5.roa Signing time: Wed 25 Jun 2025 01:00:49 +0000 ROA not before: Wed 25 Jun 2025 01:00:49 +0000 ROA not after: Tue 23 Sep 2025 01:00:49 +0000 asID: 40545 IP address blocks: 199.190.196.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/3fd37bf6-6955-4ed5-8347-2896767afab0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/3fd37bf6-6955-4ed5-8347-2896767afab0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4d:a0:44:e4:da:d9:db:af:0c:de:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd37bf6-6955-4ed5-8347-2896767afab0 Validity Not Before: Jun 25 01:00:49 2025 GMT Not After : Sep 23 01:00:49 2025 GMT Subject: CN=b4100d7e-3aef-4c90-abc4-d452b801034a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:c5:4b:de:d1:cb:89:cc:0b:c7:08:0c:f5:74: 18:c2:0d:f0:3b:58:4e:7f:07:22:25:45:4b:29:5d: 58:cf:93:69:28:c9:56:8d:5d:26:3e:e3:eb:b3:b7: 8c:6c:97:2f:f2:cf:b2:6b:fa:94:a5:54:71:0d:e1: 8b:7a:08:5c:0e:81:c1:9b:ce:2e:c1:99:d1:e2:10: 0a:5b:1f:d2:65:27:39:45:f9:0e:e2:68:d2:3c:e6: 46:18:7c:80:0d:96:ab:6e:8d:a5:32:74:01:99:b9: 3a:af:43:6f:e8:37:26:90:00:6c:40:aa:02:c0:31: 3e:94:c3:9d:0d:1e:b4:28:65:62:21:37:df:d4:03: 41:98:0c:3b:52:ae:98:17:f4:a8:94:70:4d:3e:a8: 4a:25:8c:39:7a:7f:ea:6b:c8:12:27:3f:48:3c:58: 2d:4a:b2:19:cc:3e:20:64:cd:41:3a:e9:c9:e2:3e: 21:98:3e:72:7d:fd:4b:a3:f5:47:bb:3d:80:10:be: 37:fb:92:59:a9:35:74:28:03:ab:9d:83:96:74:07: dc:62:ed:a8:84:b0:c5:d0:2a:ab:5f:94:bb:c5:2a: 82:0a:63:57:58:5c:24:71:5c:19:d0:ba:15:8a:32: f5:c7:42:31:69:eb:d0:12:e0:74:df:08:f6:7b:4f: 3f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:A0:2E:34:53:59:97:37:D9:49:A8:DF:3E:37:DD:11:93:B0:36:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/534e5e03-5a54-38cc-a774-6d07f571b6a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/3fd37bf6-6955-4ed5-8347-2896767afab0.crl X509v3 Authority Key Identifier: keyid:2C:DA:ED:C1:B2:77:C1:C9:C1:4F:A9:F9:F3:3D:2C:EE:A5:59:DB:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0.cer sbgp-ipAddrBlock: critical IPv4: 199.190.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:fa:c0:36:19:88:b1:11:3c:0f:25:66:34:d1:26:75:ec:02: 3e:28:47:dd:5b:e9:c8:ba:3e:7e:9f:7b:f4:d4:2d:3e:cd:e2: 9a:d2:ba:c3:29:55:1e:c2:c9:3a:41:f5:88:d9:3d:e9:33:06: 61:32:df:78:45:15:f3:b6:7d:a3:76:d0:71:00:2f:1e:91:69: dd:3f:ab:36:c7:80:5e:47:d7:88:40:07:a0:7a:28:9a:44:4d: e2:c2:db:48:ad:d5:a5:fa:46:5c:bb:12:54:11:f3:a3:d4:44: e3:d9:63:65:68:88:26:74:ca:91:d1:09:b8:c3:52:79:9d:7c: e4:41:b1:35:2e:0c:e1:d7:f5:ca:5b:33:94:66:2e:b8:bd:4a: 91:e1:3a:0e:8a:0c:e3:5a:4e:3c:9f:03:dd:01:d0:1b:c4:50: ee:74:19:56:b0:ee:8e:c3:89:14:e3:d5:68:68:e7:a1:68:f1: 81:d4:7a:2a:1c:78:da:c0:b5:96:88:4e:c3:6f:d1:f6:da:ae: 8e:64:d8:4b:61:7e:4f:81:c1:ed:77:24:1c:d6:b1:3b:d1:be: 23:b4:be:8f:94:f6:1c:31:b6:4c:4e:0e:03:2c:2d:1c:39:1d: 73:5d:6f:11:a8:7f:dc:ee:57:c3:f8:8a:6d:50:29:06:d4:8a: 9d:c2:08:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpNoETk2tnbrwzeMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ZkMzdiZjYtNjk1NS00ZWQ1LTgzNDctMjg5Njc2N2Fm YWIwMB4XDTI1MDYyNTAxMDA0OVoXDTI1MDkyMzAxMDA0OVowLzEtMCsGA1UEAxMk YjQxMDBkN2UtM2FlZi00YzkwLWFiYzQtZDQ1MmI4MDEwMzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8VL3tHLicwLxwgM9XQYwg3wO1hOfwciJUVL KV1Yz5NpKMlWjV0mPuPrs7eMbJcv8s+ya/qUpVRxDeGLeghcDoHBm84uwZnR4hAK Wx/SZSc5RfkO4mjSPOZGGHyADZarbo2lMnQBmbk6r0Nv6DcmkABsQKoCwDE+lMOd DR60KGViITff1ANBmAw7Uq6YF/SolHBNPqhKJYw5en/qa8gSJz9IPFgtSrIZzD4g ZM1BOunJ4j4hmD5yff1Lo/VHuz2AEL43+5JZqTV0KAOrnYOWdAfcYu2ohLDF0Cqr X5S7xSqCCmNXWFwkcVwZ0LoVijL1x0IxaevQEuB03wj2e08/MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCgLjRTWZc32Umo3z433RGTsDZVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZmQz N2JmNi02OTU1LTRlZDUtODM0Ny0yODk2NzY3YWZhYjAvNTM0ZTVlMDMtNWE1NC0z OGNjLWE3NzQtNmQwN2Y1NzFiNmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2ZkMzdiZjYtNjk1NS00ZWQ1LTgz NDctMjg5Njc2N2FmYWIwLzNmZDM3YmY2LTY5NTUtNGVkNS04MzQ3LTI4OTY3Njdh ZmFiMC5jcmwwHwYDVR0jBBgwFoAULNrtwbJ3wcnBT6n58z0s7qVZ2y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZmQzN2JmNi02OTU1LTRlZDUtODM0Ny0yODk2 NzY3YWZhYjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx77EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGz6wDYZiLERPA8lZjTRJnXsAj4oR91b6ci6Pn6fe/TULT7N4prSusMp VR7CyTpB9YjZPekzBmEy33hFFfO2faN20HEALx6Rad0/qzbHgF5H14hAB6B6KJpE TeLC20it1aX6Rly7ElQR86PUROPZY2VoiCZ0ypHRCbjDUnmdfORBsTUuDOHX9cpb M5RmLri9SpHhOg6KDONaTjyfA90B0BvEUO50GVaw7o7DiRTj1Who56Fo8YHUeioc eNrAtZaITsNv0fbaro5k2Ethfk+Bwe13JBzWsTvRviO0vo+U9hwxtkxODgMsLRw5 HXNdbxGof9zuV8P4im1QKQbUip3CCMI= -----END CERTIFICATE-----Generated at Tue Jul 1 16:00:21 2025 by rpki-client