$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/1f29933b-b006-3391-ad1f-1b3796f37510.roa File: 1f29933b-b006-3391-ad1f-1b3796f37510.roa (raw, json) Hash identifier: DIBdgx0bqfDrDOlfiapMMYF7v3fnjMpUqTo+AYynI4w= Subject key identifier: 2A:35:57:BC:BF:88:20:47:53:91:3E:CC:B8:4F:91:8B:8E:4C:20:78 Certificate issuer: /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a Certificate serial: 010D0C9F4328584A5335A6BD5C70EC9E05F1C3C0 Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/1f29933b-b006-3391-ad1f-1b3796f37510.roa Signing time: Fri 27 Jun 2025 01:00:50 +0000 ROA not before: Fri 27 Jun 2025 01:00:50 +0000 ROA not after: Thu 25 Sep 2025 01:00:50 +0000 asID: 7018 IP address blocks: 199.58.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:53:35:a6:bd:5c:70:ec:9e:05:f1:c3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a Validity Not Before: Jun 27 01:00:50 2025 GMT Not After : Sep 25 01:00:50 2025 GMT Subject: CN=074e12ea-596e-45a2-8ed2-e741f76ac6f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3c:eb:3a:0a:92:61:3d:28:3e:35:6f:82:8e: a4:a6:6b:fd:91:7f:7d:a9:02:72:d5:0f:c6:21:91: e2:d3:b4:13:f6:85:f2:6f:a8:fc:bd:fe:81:9b:31: f0:2b:a2:5c:75:47:e4:05:bf:e4:8b:99:d9:f5:55: 7b:dc:bb:5e:0a:53:41:bc:13:8b:e6:e6:eb:5a:78: c6:3b:a1:59:56:09:75:07:ef:8d:c3:a7:ef:17:5c: fc:27:1b:a3:f6:4b:3d:7d:30:40:39:4f:90:23:ea: 9a:9a:76:bb:4a:e5:5c:74:60:89:da:10:82:0a:07: 3d:1b:c3:fa:a4:a2:4e:ce:1a:20:82:85:f8:a7:68: e9:60:40:b0:49:00:af:21:0e:30:c3:a6:9f:b1:95: 52:cf:dc:13:02:46:bb:27:27:ac:7c:c3:d3:21:66: 3d:e2:89:08:b3:51:3f:2b:cc:b8:e7:5f:73:5e:53: d5:94:bc:25:94:22:b0:fc:b2:73:89:dd:b9:62:33: 5b:98:a3:f1:f6:c4:46:8c:5e:2a:d1:92:c8:21:f3: 1c:46:29:63:82:89:c3:c4:6d:fd:4f:a5:69:b4:00: 56:04:90:e9:fc:94:20:e1:0f:b0:f7:65:d2:fd:89: fe:e3:e9:b7:37:b7:1b:12:64:61:0b:34:5d:0d:10: 20:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:35:57:BC:BF:88:20:47:53:91:3E:CC:B8:4F:91:8B:8E:4C:20:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/1f29933b-b006-3391-ad1f-1b3796f37510.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl X509v3 Authority Key Identifier: keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer sbgp-ipAddrBlock: critical IPv4: 199.58.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:a9:b5:db:10:3b:33:e8:32:68:51:3b:a0:3a:f9:40:d4:f8: 2b:f3:cb:96:16:24:01:b8:db:1c:fb:97:93:3f:36:10:79:ac: fd:4d:43:3e:83:6a:06:e8:7e:84:bc:8a:cf:91:a0:c3:74:ac: ee:0c:ce:d6:0d:cc:59:98:fd:b5:ff:1e:5b:2d:31:7c:8d:f9: 9d:05:cc:86:fb:96:99:e5:73:4d:7b:f6:9e:dc:3c:79:d7:d8: 2e:56:f2:02:44:dd:05:29:79:34:cc:90:fa:e6:60:ad:44:e8: 49:3e:20:22:fb:47:89:a4:93:73:c3:9c:3c:f4:cd:b1:8d:a9: 92:98:20:20:84:fb:57:22:fa:2a:b5:08:78:35:c2:b7:be:a2: e8:87:1e:c2:ef:9b:74:5c:4c:b5:60:bd:58:41:b1:b7:2f:95: 8f:a1:f2:00:0b:59:00:cb:b0:ec:c5:94:55:c8:ff:02:db:fa: a3:90:00:90:bd:b9:70:ba:6b:9c:17:6c:d8:48:5f:b8:fb:8c: e0:9d:73:8d:fb:48:85:f3:cb:70:c1:6f:e8:99:0f:51:ef:f6: ee:28:23:90:23:8b:37:93:27:ab:fd:7f:fd:fc:f7:11:0e:ef: 11:f6:79:97:ae:85:8b:42:fe:eb:8d:05:e7:cc:32:a2:e4:ea: 2d:f7:34:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpTNaa9XHDsngXxw8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVkYWUyYTAtMGNiNy00NmU4LWFlMTctYWJlYjA2MDA3 ZTFhMB4XDTI1MDYyNzAxMDA1MFoXDTI1MDkyNTAxMDA1MFowLzEtMCsGA1UEAxMk MDc0ZTEyZWEtNTk2ZS00NWEyLThlZDItZTc0MWY3NmFjNmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzzrOgqSYT0oPjVvgo6kpmv9kX99qQJy1Q/G IZHi07QT9oXyb6j8vf6BmzHwK6JcdUfkBb/ki5nZ9VV73LteClNBvBOL5ubrWnjG O6FZVgl1B++Nw6fvF1z8Jxuj9ks9fTBAOU+QI+qamna7SuVcdGCJ2hCCCgc9G8P6 pKJOzhoggoX4p2jpYECwSQCvIQ4ww6afsZVSz9wTAka7JyesfMPTIWY94okIs1E/ K8y4519zXlPVlLwllCKw/LJzid25YjNbmKPx9sRGjF4q0ZLIIfMcRiljgonDxG39 T6VptABWBJDp/JQg4Q+w92XS/Yn+4+m3N7cbEmRhCzRdDRAg5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCo1V7y/iCBHU5E+zLhPkYuOTCB4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82NWRh ZTJhMC0wY2I3LTQ2ZTgtYWUxNy1hYmViMDYwMDdlMWEvMWYyOTkzM2ItYjAwNi0z MzkxLWFkMWYtMWIzNzk2ZjM3NTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjVkYWUyYTAtMGNiNy00NmU4LWFl MTctYWJlYjA2MDA3ZTFhLzY1ZGFlMmEwLTBjYjctNDZlOC1hZTE3LWFiZWIwNjAw N2UxYS5jcmwwHwYDVR0jBBgwFoAUGkmdi3ejOt8fzU66Ucwao/qj9iUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82NWRhZTJhMC0wY2I3LTQ2ZTgtYWUxNy1hYmVi MDYwMDdlMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzr8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCptdsQOzPoMmhRO6A6+UDU+Cvzy5YWJAG42xz7l5M/NhB5rP1NQz6D agbofoS8is+RoMN0rO4MztYNzFmY/bX/HlstMXyN+Z0FzIb7lpnlc0179p7cPHnX 2C5W8gJE3QUpeTTMkPrmYK1E6Ek+ICL7R4mkk3PDnDz0zbGNqZKYICCE+1ci+iq1 CHg1wre+ouiHHsLvm3RcTLVgvVhBsbcvlY+h8gALWQDLsOzFlFXI/wLb+qOQAJC9 uXC6a5wXbNhIX7j7jOCdc437SIXzy3DBb+iZD1Hv9u4oI5AjizeTJ6v9f/389xEO 7xH2eZeuhYtC/uuNBefMMqLk6i33NI0= -----END CERTIFICATE-----Generated at Mon Jun 30 05:21:09 2025 by rpki-client