$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/8121cb2b-c296-3758-85cb-3ad314cf60c1.roa File: 8121cb2b-c296-3758-85cb-3ad314cf60c1.roa (raw, json) Hash identifier: +MQ5+nf9Y87sok7mAJOlSeGfofSnp/fcZOHxpxjv2ZQ= Subject key identifier: FC:5E:2B:8E:FC:3D:A1:9B:58:2B:58:A5:9B:5F:9A:05:4F:DF:02:4D Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584A41104DF80CECD0FBED40CD80 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/8121cb2b-c296-3758-85cb-3ad314cf60c1.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 14618 IP address blocks: 199.255.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:4d:f8:0c:ec:d0:fb:ed:40:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=41ba1266-b456-43b3-b58c-29f1b81eedfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:75:3d:46:17:89:3b:bb:43:1d:58:d4:8e:e1: f3:88:8a:87:c3:03:f5:d7:49:27:fe:15:1a:68:15: f3:4a:25:a6:76:1e:00:74:21:b8:ca:ff:dd:8c:fc: 6e:5c:a4:73:55:7b:23:fe:e5:0c:84:f4:3c:39:3c: 02:31:21:13:fd:76:7e:04:81:aa:e0:b7:44:69:bb: d0:36:3f:ad:c3:9a:92:2f:84:cf:35:20:10:85:7b: 30:6a:3e:59:40:9a:0d:38:a4:cf:ac:43:dd:4d:28: 4f:68:3c:07:ec:c4:e9:fe:cc:08:d9:30:37:4d:7a: 06:e1:c0:d2:ae:1e:fd:b7:55:d6:6d:93:7d:b5:68: b1:c9:c8:a4:db:35:25:c5:d8:0f:c2:02:8a:1a:9e: 0d:9b:ba:b8:da:95:b1:32:49:1e:f9:8e:59:29:b2: 00:1c:cd:b6:5c:4e:e6:60:89:33:9c:53:0b:ae:6f: e1:82:7c:78:98:71:c6:e5:0b:35:42:08:9a:13:1b: b2:03:44:93:fb:fc:c9:37:da:c4:28:f0:f1:1c:76: 09:35:a6:39:bd:3b:13:9b:c6:7a:85:e1:d0:7b:c1: 3e:cd:2b:d6:80:c7:b0:67:ed:e9:c2:f2:f5:b7:42: 91:18:c6:e4:85:37:16:d2:0e:de:bf:2e:85:02:cf: 02:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:5E:2B:8E:FC:3D:A1:9B:58:2B:58:A5:9B:5F:9A:05:4F:DF:02:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/8121cb2b-c296-3758-85cb-3ad314cf60c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 199.255.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:78:9e:12:ab:af:6b:d4:e3:3e:70:69:64:e3:da:57:75:22: 84:85:d9:23:80:ab:e2:e4:53:01:1a:21:e4:6f:74:b6:d3:63: 03:6c:40:0f:52:65:ee:ec:d4:ae:51:6a:e3:04:a6:96:d1:cd: 66:d7:6f:b3:c0:6d:28:11:ec:da:6f:09:96:01:f7:62:e6:df: c2:35:9d:e9:f3:44:06:6f:33:41:0a:ca:ab:e6:f0:3d:28:92: 1c:43:23:46:57:74:5d:ee:80:7e:44:86:32:d2:3d:f2:e4:b5: 5b:aa:a0:8e:fa:0e:2b:d5:bd:9b:2e:ea:08:ec:a8:d3:2c:75: 92:fe:2e:3d:19:66:28:c0:cf:3f:0f:94:8a:23:f0:04:a6:7b: 5f:17:0a:59:ae:c1:bd:39:c7:24:24:60:69:a3:13:ee:23:a1: ad:1d:82:12:31:47:15:a7:ea:89:e8:00:59:10:2f:f0:bf:31: 1d:55:08:9c:1e:08:03:a0:6b:a6:50:d3:ca:9b:3d:95:46:c0: 15:b8:f2:ee:50:4e:2b:01:1d:1b:66:f9:6c:c0:21:9e:2a:fb: 4f:95:2f:5b:ef:9b:a1:dc:83:f6:aa:86:d5:0a:0b:68:c6:3a: 99:96:08:7a:f0:d0:07:d8:2b:b7:8f:a5:ee:ff:f2:22:ac:c0: 11:72:b4:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpBEE34DOzQ++1AzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk NDFiYTEyNjYtYjQ1Ni00M2IzLWI1OGMtMjlmMWI4MWVlZGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXU9RheJO7tDHVjUjuHziIqHwwP110kn/hUa aBXzSiWmdh4AdCG4yv/djPxuXKRzVXsj/uUMhPQ8OTwCMSET/XZ+BIGq4LdEabvQ Nj+tw5qSL4TPNSAQhXswaj5ZQJoNOKTPrEPdTShPaDwH7MTp/swI2TA3TXoG4cDS rh79t1XWbZN9tWixycik2zUlxdgPwgKKGp4Nm7q42pWxMkke+Y5ZKbIAHM22XE7m YIkznFMLrm/hgnx4mHHG5Qs1QgiaExuyA0ST+/zJN9rEKPDxHHYJNaY5vTsTm8Z6 heHQe8E+zSvWgMewZ+3pwvL1t0KRGMbkhTcW0g7evy6FAs8CwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPxeK478PaGbWCtYpZtfmgVP3wJNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvODEyMWNiMmItYzI5Ni0z NzU4LTg1Y2ItM2FkMzE0Y2Y2MGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/8iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACd4nhKrr2vU4z5waWTj2ld1IoSF2SOAq+LkUwEaIeRvdLbTYwNsQA9S Ze7s1K5RauMEppbRzWbXb7PAbSgR7NpvCZYB92Lm38I1nenzRAZvM0EKyqvm8D0o khxDI0ZXdF3ugH5EhjLSPfLktVuqoI76DivVvZsu6gjsqNMsdZL+Lj0ZZijAzz8P lIoj8ASme18XClmuwb05xyQkYGmjE+4joa0dghIxRxWn6onoAFkQL/C/MR1VCJwe CAOga6ZQ08qbPZVGwBW48u5QTisBHRtm+WzAIZ4q+0+VL1vvm6Hcg/aqhtUKC2jG OpmWCHrw0AfYK7ePpe7/8iKswBFytNM= -----END CERTIFICATE-----Generated at Sun Jun 29 21:09:37 2025 by rpki-client