$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/2c8c6ad3-e963-3175-a096-858ac3ef6191.roa File: 2c8c6ad3-e963-3175-a096-858ac3ef6191.roa (raw, json) Hash identifier: EspEsM15M1qlsjZTNbQfViM7Ri2MkVCn0FCCpEIopDQ= Subject key identifier: 85:48:C3:A4:AE:5D:4A:EB:C4:D3:B5:EA:6B:84:02:1A:7C:6E:D7:C9 Certificate issuer: /CN=e35c7007-7a33-480f-a32e-40481f8f1792 Certificate serial: 010D0C9F4328584A07D52610DB50A61CAF05D2C0 Authority key identifier: 69:C5:93:B3:CB:4A:4F:6B:F2:C7:1E:19:B2:7A:66:85:BA:C2:EA:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/2c8c6ad3-e963-3175-a096-858ac3ef6191.roa Signing time: Sat 31 May 2025 01:00:50 +0000 ROA not before: Sat 31 May 2025 01:00:50 +0000 ROA not after: Fri 29 Aug 2025 01:00:50 +0000 asID: 53636 IP address blocks: 199.47.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/e35c7007-7a33-480f-a32e-40481f8f1792.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/e35c7007-7a33-480f-a32e-40481f8f1792.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:d5:26:10:db:50:a6:1c:af:05:d2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e35c7007-7a33-480f-a32e-40481f8f1792 Validity Not Before: May 31 01:00:50 2025 GMT Not After : Aug 29 01:00:50 2025 GMT Subject: CN=37fee074-47f5-47a3-a5a9-235dee2ce8e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2f:a6:0e:6f:93:90:18:9d:db:f1:d7:a6:7c: 4b:a5:96:df:47:cd:4f:9a:9c:bf:96:0f:1f:33:d3: 71:ad:8d:17:eb:1a:84:3d:bc:8b:d7:f0:c1:62:94: b0:c3:8d:d5:99:fd:27:22:b4:dd:f3:b5:b3:ce:e9: 8b:b3:77:b2:2b:5e:57:18:fd:a8:3c:4b:39:37:31: b3:56:f2:45:cf:39:bd:55:ad:b1:aa:8e:a6:2e:39: 8e:0d:15:4f:f5:31:e2:02:1f:b3:33:e3:80:f9:94: d6:52:1d:6d:94:e9:7c:d6:a9:41:1e:7c:22:ef:87: 26:20:7c:88:15:57:27:fe:8f:00:7b:8a:f5:9a:92: fa:94:c9:02:a0:a6:d8:db:f0:62:14:e4:c5:83:18: 45:09:74:53:14:76:8b:c6:2e:b1:ee:48:48:67:38: 5e:04:65:c6:a6:fb:03:06:7b:5a:40:f2:78:48:3b: e9:a9:ec:70:24:a6:ea:28:18:d6:ec:92:5d:78:cb: 91:ad:81:b4:dd:89:37:04:b1:0f:2b:6a:96:16:1a: ec:ce:bc:cf:eb:6d:52:85:13:ca:5c:59:87:ab:f2: 75:61:f6:98:49:45:34:32:61:15:dd:b1:14:a4:77: 65:eb:9a:ef:d9:07:13:df:81:c8:6f:e3:bb:53:c0: b6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:48:C3:A4:AE:5D:4A:EB:C4:D3:B5:EA:6B:84:02:1A:7C:6E:D7:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/2c8c6ad3-e963-3175-a096-858ac3ef6191.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/e35c7007-7a33-480f-a32e-40481f8f1792.crl X509v3 Authority Key Identifier: keyid:69:C5:93:B3:CB:4A:4F:6B:F2:C7:1E:19:B2:7A:66:85:BA:C2:EA:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792.cer sbgp-ipAddrBlock: critical IPv4: 199.47.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:53:83:0d:c7:15:63:97:77:6c:97:33:57:19:7f:80:78:ca: 95:54:5c:bb:9f:17:48:8a:e5:1b:e7:19:08:f3:67:9f:f9:5a: eb:d6:fb:15:6b:6a:e9:a4:91:a0:1d:ab:f0:20:47:3f:e9:1b: 18:50:55:a4:cc:a4:9d:32:00:00:76:19:53:3a:fd:06:a0:5d: 08:aa:13:14:ff:a1:b6:71:8c:7b:35:fa:55:69:86:66:41:96: 77:64:6e:96:60:81:63:44:52:04:b2:5e:33:6c:11:25:40:dd: 82:2a:e0:ab:9d:12:1b:72:f1:3d:dd:50:72:b8:bc:13:1b:e5: 82:a1:cf:b7:8f:3b:5c:6a:6c:44:db:78:e8:61:79:44:8d:05: e1:f2:2a:0d:d7:7b:d7:bd:e8:d3:85:4c:dd:4e:9f:e7:73:cf: 5e:a9:16:b1:93:ee:82:0b:a0:5d:73:80:fe:53:6d:df:c7:07: 8a:64:48:44:cb:93:e2:4f:76:e4:35:73:9c:19:51:92:ea:25: f8:a8:72:04:61:e6:f0:4c:2e:a0:93:3b:0c:ef:27:81:5a:75: 95:e6:79:9b:f4:c1:00:b5:3e:3f:6f:2d:75:ff:e3:d9:63:91: 99:ba:3e:19:0b:a5:3a:11:10:67:f9:60:34:b6:b6:69:65:84: 04:6a:28:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoH1SYQ21CmHK8F0sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM1YzcwMDctN2EzMy00ODBmLWEzMmUtNDA0ODFmOGYx NzkyMB4XDTI1MDUzMTAxMDA1MFoXDTI1MDgyOTAxMDA1MFowLzEtMCsGA1UEAxMk MzdmZWUwNzQtNDdmNS00N2EzLWE1YTktMjM1ZGVlMmNlOGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzi+mDm+TkBid2/HXpnxLpZbfR81Pmpy/lg8f M9NxrY0X6xqEPbyL1/DBYpSww43Vmf0nIrTd87WzzumLs3eyK15XGP2oPEs5NzGz VvJFzzm9Va2xqo6mLjmODRVP9THiAh+zM+OA+ZTWUh1tlOl81qlBHnwi74cmIHyI FVcn/o8Ae4r1mpL6lMkCoKbY2/BiFOTFgxhFCXRTFHaLxi6x7khIZzheBGXGpvsD BntaQPJ4SDvpqexwJKbqKBjW7JJdeMuRrYG03Yk3BLEPK2qWFhrszrzP621ShRPK XFmHq/J1YfaYSUU0MmEV3bEUpHdl65rv2QcT34HIb+O7U8C2YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIVIw6SuXUrrxNO16muEAhp8btfJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lMzVj NzAwNy03YTMzLTQ4MGYtYTMyZS00MDQ4MWY4ZjE3OTIvMmM4YzZhZDMtZTk2My0z MTc1LWEwOTYtODU4YWMzZWY2MTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTM1YzcwMDctN2EzMy00ODBmLWEz MmUtNDA0ODFmOGYxNzkyL2UzNWM3MDA3LTdhMzMtNDgwZi1hMzJlLTQwNDgxZjhm MTc5Mi5jcmwwHwYDVR0jBBgwFoAUacWTs8tKT2vyxx4ZsnpmhbrC6uwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lMzVjNzAwNy03YTMzLTQ4MGYtYTMyZS00MDQ4 MWY4ZjE3OTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxy+XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKlTgw3HFWOXd2yXM1cZf4B4ypVUXLufF0iK5RvnGQjzZ5/5WuvW+xVr aumkkaAdq/AgRz/pGxhQVaTMpJ0yAAB2GVM6/QagXQiqExT/obZxjHs1+lVphmZB lndkbpZggWNEUgSyXjNsESVA3YIq4KudEhty8T3dUHK4vBMb5YKhz7ePO1xqbETb eOhheUSNBeHyKg3Xe9e96NOFTN1On+dzz16pFrGT7oILoF1zgP5Tbd/HB4pkSETL k+JPduQ1c5wZUZLqJfiocgRh5vBMLqCTOwzvJ4FadZXmeZv0wQC1Pj9vLXX/49lj kZm6PhkLpToREGf5YDS2tmllhARqKLg= -----END CERTIFICATE-----Generated at Mon Jun 30 07:27:42 2025 by rpki-client