$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/a4d572d7-4e1a-3495-99a5-851c0396c090.roa File: a4d572d7-4e1a-3495-99a5-851c0396c090.roa (raw, json) Hash identifier: ufs3u2VfHWllu28+7csKlczAcYRVY08s97nQ4ZkuZG8= Subject key identifier: C2:66:D4:16:60:27:E2:3E:C3:4D:29:AE:2A:6C:7A:C1:3F:00:A3:DC Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584A4110537CC526C3E73B7FDA40 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/a4d572d7-4e1a-3495-99a5-851c0396c090.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 14618 IP address blocks: 199.255.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:53:7c:c5:26:c3:e7:3b:7f:da:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=e23ed70b-c29b-4cf9-abab-6a48a0dc72b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:06:38:63:5c:e5:65:dc:e3:66:3e:39:2e:3d: 0f:d9:1a:13:60:57:5d:88:74:20:a9:b6:66:93:13: e8:ce:08:91:ff:ec:0a:b6:e7:ee:b1:ff:8c:dc:b8: 68:2f:d3:a7:d8:7f:bc:ce:fe:c2:eb:e4:ff:06:22: e3:12:9e:a6:25:09:6e:54:af:30:70:a9:ca:71:af: 02:fb:e8:bb:a1:b6:91:3c:2e:ff:2c:d9:1b:ae:ed: 49:3f:7a:2c:e8:43:75:37:27:40:5e:73:d8:61:70: 8c:85:de:ef:48:c6:d5:f7:7b:c8:e2:f5:6e:1a:9b: 7c:78:ea:87:17:a9:9e:f1:9c:a6:60:17:03:7a:74: 6b:2f:af:4b:fe:9d:67:69:ad:ca:af:8a:97:04:26: 4a:d6:22:01:20:21:48:ac:d6:89:9d:ae:0b:11:7b: 31:b4:4e:13:1c:c3:56:e1:e7:a7:98:d2:8c:d0:72: 90:d0:1d:da:89:bf:a3:c8:88:37:bd:50:91:0d:72: 56:90:18:01:ef:0c:c7:fa:1c:55:5c:dc:38:5e:c1: 1b:45:8d:6a:ac:7d:56:5b:7f:6a:48:04:9d:65:e6: e3:2e:0d:f1:1c:70:b1:a1:2b:e7:27:9c:93:ed:cf: c2:0b:58:01:b7:6e:4e:3a:cf:af:da:78:5c:92:25: dc:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:66:D4:16:60:27:E2:3E:C3:4D:29:AE:2A:6C:7A:C1:3F:00:A3:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/a4d572d7-4e1a-3495-99a5-851c0396c090.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 199.255.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:4c:9a:f8:ad:bc:8a:e8:1a:06:88:6e:44:db:9b:e7:fd:ac: cb:93:e0:db:5b:99:48:99:ca:79:fe:32:33:84:3d:3f:9e:a6: b8:ce:99:a2:40:e0:1f:61:a3:1d:a5:85:79:f9:e6:c5:f5:ae: e0:9a:96:37:75:d2:2f:ab:90:4b:8a:e0:4f:13:e4:44:67:60: f4:16:c7:80:a5:32:9d:80:f5:39:7a:89:10:bc:ad:b0:5b:80: 78:dd:c8:0a:14:1e:a0:81:db:c7:32:78:b8:c3:5f:04:90:21: 62:9f:7a:fa:9c:8b:00:fa:60:65:3a:4a:19:58:9a:3f:10:0d: c8:ce:b8:98:0e:74:ef:a8:06:46:46:f2:2c:c2:15:f3:8b:d6: 7b:eb:c7:53:98:68:d7:64:7c:b9:40:c2:72:c5:e1:fb:dc:4b: 41:1f:34:00:c8:9f:c6:05:86:c1:7a:34:58:8c:bd:81:a1:92: af:38:66:ee:25:7e:c2:63:ca:7d:30:62:2c:56:9b:5a:96:ec: 9a:25:96:51:e0:39:17:33:37:74:7c:5a:7f:40:f7:f8:1c:94: ad:58:cc:55:e7:aa:4d:bf:b3:b5:2b:f8:52:b3:20:78:a8:cb: a5:c5:df:d5:ce:c0:41:a8:60:0a:00:5b:c3:7a:ad:76:c3:80: cd:d9:51:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpBEFN8xSbD5zt/2kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk ZTIzZWQ3MGItYzI5Yi00Y2Y5LWFiYWItNmE0OGEwZGM3MmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwY4Y1zlZdzjZj45Lj0P2RoTYFddiHQgqbZm kxPozgiR/+wKtufusf+M3LhoL9On2H+8zv7C6+T/BiLjEp6mJQluVK8wcKnKca8C ++i7obaRPC7/LNkbru1JP3os6EN1NydAXnPYYXCMhd7vSMbV93vI4vVuGpt8eOqH F6me8ZymYBcDenRrL69L/p1naa3Kr4qXBCZK1iIBICFIrNaJna4LEXsxtE4THMNW 4eenmNKM0HKQ0B3aib+jyIg3vVCRDXJWkBgB7wzH+hxVXNw4XsEbRY1qrH1WW39q SASdZebjLg3xHHCxoSvnJ5yT7c/CC1gBt25OOs+v2nhckiXc2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMJm1BZgJ+I+w00pripsesE/AKPcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvYTRkNTcyZDctNGUxYS0z NDk1LTk5YTUtODUxYzAzOTZjMDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/8hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExMmvitvIroGgaIbkTbm+f9rMuT4NtbmUiZynn+MjOEPT+eprjOmaJA 4B9hox2lhXn55sX1ruCaljd10i+rkEuK4E8T5ERnYPQWx4ClMp2A9Tl6iRC8rbBb gHjdyAoUHqCB28cyeLjDXwSQIWKfevqciwD6YGU6ShlYmj8QDcjOuJgOdO+oBkZG 8izCFfOL1nvrx1OYaNdkfLlAwnLF4fvcS0EfNADIn8YFhsF6NFiMvYGhkq84Zu4l fsJjyn0wYixWm1qW7JolllHgORczN3R8Wn9A9/gclK1YzFXnqk2/s7Ur+FKzIHio y6XF39XOwEGoYAoAW8N6rXbDgM3ZUcE= -----END CERTIFICATE-----Generated at Sun Jun 29 09:10:37 2025 by rpki-client