$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/5a0ae7fa-e747-3e80-bbce-2e0f5ad57f24.roa File: 5a0ae7fa-e747-3e80-bbce-2e0f5ad57f24.roa (raw, json) Hash identifier: cgZiNxSvB7idH1oYv20hnfp81dBgx663u5q3phazv2g= Subject key identifier: 54:CA:66:1F:A1:6F:7F:64:58:D9:35:DB:3E:2F:20:4D:89:0A:D6:81 Certificate issuer: /CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Certificate serial: 010D0C9F43285849DF5A5AF5662E9031E29CF440 Authority key identifier: 5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/5a0ae7fa-e747-3e80-bbce-2e0f5ad57f24.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 21766 IP address blocks: 199.189.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:5a:f5:66:2e:90:31:e2:9c:f4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=aa88c648-1577-46a4-a07c-72245759bf5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9b:0e:ba:55:ad:f6:58:08:a6:2c:20:f6:17: 55:62:1f:9f:a2:7c:20:4a:0f:37:52:8d:39:c4:bf: 9a:d6:0e:80:5d:3b:1c:55:ee:be:ec:de:e4:15:93: 5c:71:8b:fd:14:c7:57:35:02:75:11:70:03:20:e2: 90:f2:08:4c:a6:60:5a:58:bc:ac:1e:2d:6a:81:bd: 0f:8b:f6:b2:d7:16:b0:f3:0f:bc:a9:d7:53:78:3f: 1f:44:e4:05:df:7d:aa:9a:25:ac:0f:93:61:a2:31: 05:d9:5d:24:25:9b:52:b9:a7:a8:33:96:64:ed:e1: bd:8f:0b:ff:c7:a0:f5:16:14:95:dd:bb:45:01:16: a0:f3:e7:f5:60:03:f4:80:8e:ae:30:e4:0a:2b:3b: 3e:f3:2b:f0:88:7f:9a:17:d7:a4:8a:03:f4:ba:3d: 83:b4:f5:e0:1c:14:5c:84:78:3c:f5:fa:94:51:cf: b7:77:dd:1c:f3:5b:ea:79:21:40:c6:a0:04:d1:86: 6e:97:c9:a0:45:76:d7:2f:69:a0:5c:b3:e6:ad:a7: cb:71:2d:da:2c:64:20:01:bf:4b:88:90:16:30:8c: c1:b8:dd:7f:f4:a9:49:39:d3:b4:4d:6d:c1:e6:64: b3:76:14:c1:4f:c3:84:68:71:cc:ec:b1:8e:0c:2d: 84:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:CA:66:1F:A1:6F:7F:64:58:D9:35:DB:3E:2F:20:4D:89:0A:D6:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/5a0ae7fa-e747-3e80-bbce-2e0f5ad57f24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl X509v3 Authority Key Identifier: keyid:5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer sbgp-ipAddrBlock: critical IPv4: 199.189.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:aa:4e:2d:f3:ed:cd:d1:d7:f6:1e:54:ec:da:6e:87:94:4f: 35:bb:b9:e4:78:0d:a8:53:bf:6d:66:53:77:bd:48:4b:4d:4f: 4d:fe:2a:d8:73:2a:af:a5:2e:51:bf:71:f4:f6:eb:6c:82:a4: ba:65:c0:51:86:35:0b:2a:97:aa:5d:79:e5:ec:dc:80:41:ff: ac:9a:ab:cb:0d:01:5e:ac:f6:f5:ab:a8:c5:2d:9b:5c:68:d4: 93:8c:1f:0a:28:80:22:8e:11:fe:00:6e:66:9d:f7:02:1a:85: ac:8d:40:7f:f9:41:87:b7:06:3f:3f:cb:4e:8a:36:f2:85:58: 4c:28:4f:cf:7e:00:f8:58:47:d4:d9:8b:b8:6b:e2:6f:1a:a0: 12:61:ce:86:2e:cf:dc:78:f0:cd:d7:fd:7f:fc:bd:ed:0a:56: 5a:96:82:61:17:33:2a:c1:ef:13:29:65:01:86:0e:e4:68:fb: c9:bc:7d:b3:b9:d8:3f:f1:b0:5f:99:f3:d7:e1:e2:da:02:25: d7:ed:e2:60:4c:4b:51:ae:db:54:be:49:c7:db:79:4f:b9:10: 09:9d:44:9e:06:07:29:f3:cc:bb:ad:7c:7d:0a:e4:ec:91:4a: bc:c1:05:f8:4c:e5:06:1d:bb:d3:d7:6d:e7:a7:ba:fa:9a:7f: 97:27:41:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfWlr1Zi6QMeKc9EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTdkN2YxNGUtNzJjNC00N2U0LWFkMDYtYTFiNzJmOTRj N2IxMB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk YWE4OGM2NDgtMTU3Ny00NmE0LWEwN2MtNzIyNDU3NTliZjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZsOulWt9lgIpiwg9hdVYh+fonwgSg83Uo05 xL+a1g6AXTscVe6+7N7kFZNccYv9FMdXNQJ1EXADIOKQ8ghMpmBaWLysHi1qgb0P i/ay1xaw8w+8qddTeD8fROQF332qmiWsD5NhojEF2V0kJZtSuaeoM5Zk7eG9jwv/ x6D1FhSV3btFARag8+f1YAP0gI6uMOQKKzs+8yvwiH+aF9ekigP0uj2DtPXgHBRc hHg89fqUUc+3d90c81vqeSFAxqAE0YZul8mgRXbXL2mgXLPmrafLcS3aLGQgAb9L iJAWMIzBuN1/9KlJOdO0TW3B5mSzdhTBT8OEaHHM7LGODC2EnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFTKZh+hb39kWNk12z4vIE2JCtaBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3 ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3MmY5NGM3YjEvNWEwYWU3ZmEtZTc0Ny0z ZTgwLWJiY2UtMmUwZjVhZDU3ZjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTdkN2YxNGUtNzJjNC00N2U0LWFk MDYtYTFiNzJmOTRjN2IxL2E3ZDdmMTRlLTcyYzQtNDdlNC1hZDA2LWExYjcyZjk0 YzdiMS5jcmwwHwYDVR0jBBgwFoAUXtwOAtpu5BW/4iOR5NyjJ1ELeg0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3 MmY5NGM3YjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx73wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGqTi3z7c3R1/YeVOzaboeUTzW7ueR4DahTv21mU3e9SEtNT03+Kthz Kq+lLlG/cfT262yCpLplwFGGNQsql6pdeeXs3IBB/6yaq8sNAV6s9vWrqMUtm1xo 1JOMHwoogCKOEf4Abmad9wIahayNQH/5QYe3Bj8/y06KNvKFWEwoT89+APhYR9TZ i7hr4m8aoBJhzoYuz9x48M3X/X/8ve0KVlqWgmEXMyrB7xMpZQGGDuRo+8m8fbO5 2D/xsF+Z89fh4toCJdft4mBMS1Gu21S+ScfbeU+5EAmdRJ4GBynzzLutfH0K5OyR SrzBBfhM5QYdu9PXbeenuvqaf5cnQf8= -----END CERTIFICATE-----Generated at Mon Jun 30 03:58:43 2025 by rpki-client