$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/81c1cdfa-7b7e-39b5-968c-770c5c8f32f8.roa File: 81c1cdfa-7b7e-39b5-968c-770c5c8f32f8.roa (raw, json) Hash identifier: xG4yVYOeiWNEHc40tCjz9qQVIph/uXUnEMkgi/IFKbg= Subject key identifier: 41:67:88:9A:C0:D9:E6:06:B8:CA:2B:58:C2:1D:77:27:18:A9:3A:D7 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584A17300A64535669E01DC77200 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/81c1cdfa-7b7e-39b5-968c-770c5c8f32f8.roa Signing time: Thu 05 Jun 2025 13:01:03 +0000 ROA not before: Thu 05 Jun 2025 13:01:03 +0000 ROA not after: Wed 03 Sep 2025 13:01:03 +0000 asID: 16509 IP address blocks: 199.36.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:17:30:0a:64:53:56:69:e0:1d:c7:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Jun 5 13:01:03 2025 GMT Not After : Sep 3 13:01:03 2025 GMT Subject: CN=c8d41d93-fc23-4f4b-8875-351e6368c2a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:96:7e:f0:5d:9a:58:97:4a:9f:11:92:34:13: 3a:f3:af:e8:01:cb:ad:1b:13:1c:6e:5f:b9:9e:24: 4d:e5:66:1e:eb:61:4f:5d:e8:a7:19:2c:68:9c:b9: 59:30:ad:42:6c:f7:12:dd:6b:9b:09:36:e5:59:51: b2:c4:26:f1:50:f4:47:a6:04:b2:fc:bf:9b:ce:da: 82:02:17:96:7d:cb:e1:41:6c:ae:12:9d:9c:f0:4c: 52:a8:91:b3:82:21:5f:5b:61:8d:ae:fe:e2:ef:9c: 3d:e1:01:1c:ac:a5:56:66:8f:36:a3:2d:32:5c:00: 25:08:00:ed:94:31:a9:1b:28:a5:b1:5f:12:a4:0b: 6b:15:41:52:1a:a2:df:17:33:32:11:3c:1b:b4:4d: 74:43:08:da:cf:ad:a7:84:93:be:22:7d:f8:da:42: 4e:4b:b9:1d:94:fb:f5:e8:de:a6:d0:70:17:70:77: f0:8d:c5:ff:c0:8d:f2:59:9b:5a:04:62:d4:b5:dc: 0a:1a:c5:17:66:b6:b2:f2:3d:55:8a:66:9a:1e:cc: 0d:77:64:d3:95:a2:ed:4f:00:4d:ce:b8:10:12:cb: e9:51:95:d7:7e:20:c7:11:d9:5a:47:ed:35:62:fa: 08:be:a1:80:a8:d0:42:4d:79:26:4d:f6:c9:d7:34: 56:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:67:88:9A:C0:D9:E6:06:B8:CA:2B:58:C2:1D:77:27:18:A9:3A:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/81c1cdfa-7b7e-39b5-968c-770c5c8f32f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 199.36.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:64:55:e9:da:4f:4f:82:ce:b6:cd:69:cf:eb:e0:e8:4f:5c: ab:8c:db:e4:08:a2:bf:42:64:e1:74:b4:46:77:40:70:14:61: 9d:e3:23:29:b4:8b:2a:f1:68:24:a8:ad:e0:88:78:e2:9d:32: 15:e0:60:49:5e:fc:97:6b:ea:ee:7c:88:64:49:f1:cd:dd:df: 78:34:74:21:d6:3f:be:70:4d:71:7e:28:a4:ee:01:37:2c:25: 23:1a:33:c1:d3:91:26:56:32:bb:6b:74:91:cb:47:1d:5e:7d: 5f:17:26:ad:af:d0:62:00:4b:49:83:52:c9:86:f0:d3:29:91: e3:e4:5b:d5:a6:db:25:2a:e0:da:f3:c4:3c:b1:f6:f6:85:ab: 15:cc:33:47:f2:f7:fe:86:7f:55:1c:7e:21:16:37:b9:e0:e2: 3e:b4:f5:3c:1e:84:4f:23:de:2e:13:ab:cb:30:6c:11:b8:34: 3f:16:bf:09:b1:c6:16:b8:8b:cc:bc:50:85:c0:54:c4:97:ac: e5:6d:3a:c3:ca:77:12:13:49:f4:fe:53:d0:6b:f3:f2:3d:ac: 36:bf:a5:87:78:a2:bf:5e:09:82:54:ef:68:08:84:9f:b9:28: d6:1e:17:0a:9d:89:0d:6a:1c:ac:d4:18:d5:c8:03:a1:63:81: bd:10:f1:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoXMApkU1Zp4B3HcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDYwNTEzMDEwM1oXDTI1MDkwMzEzMDEwM1owLzEtMCsGA1UEAxMk YzhkNDFkOTMtZmMyMy00ZjRiLTg4NzUtMzUxZTYzNjhjMmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJZ+8F2aWJdKnxGSNBM686/oAcutGxMcbl+5 niRN5WYe62FPXeinGSxonLlZMK1CbPcS3WubCTblWVGyxCbxUPRHpgSy/L+bztqC AheWfcvhQWyuEp2c8ExSqJGzgiFfW2GNrv7i75w94QEcrKVWZo82oy0yXAAlCADt lDGpGyilsV8SpAtrFUFSGqLfFzMyETwbtE10Qwjaz62nhJO+In342kJOS7kdlPv1 6N6m0HAXcHfwjcX/wI3yWZtaBGLUtdwKGsUXZray8j1VimaaHswNd2TTlaLtTwBN zrgQEsvpUZXXfiDHEdlaR+01YvoIvqGAqNBCTXkmTfbJ1zRWSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEFniJrA2eYGuMorWMIddycYqTrXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvODFjMWNkZmEtN2I3ZS0z OWI1LTk2OGMtNzcwYzVjOGYzMmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyT4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhkVenaT0+CzrbNac/r4OhPXKuM2+QIor9CZOF0tEZ3QHAUYZ3jIym0 iyrxaCSoreCIeOKdMhXgYEle/Jdr6u58iGRJ8c3d33g0dCHWP75wTXF+KKTuATcs JSMaM8HTkSZWMrtrdJHLRx1efV8XJq2v0GIAS0mDUsmG8NMpkePkW9Wm2yUq4Nrz xDyx9vaFqxXMM0fy9/6Gf1UcfiEWN7ng4j609TwehE8j3i4Tq8swbBG4ND8Wvwmx xha4i8y8UIXAVMSXrOVtOsPKdxITSfT+U9Br8/I9rDa/pYd4or9eCYJU72gIhJ+5 KNYeFwqdiQ1qHKzUGNXIA6Fjgb0Q8Rk= -----END CERTIFICATE-----Generated at Sun Jun 29 08:50:17 2025 by rpki-client