$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/bfb7bfe5-406b-32d9-a1ca-a731af76a95c.roa File: bfb7bfe5-406b-32d9-a1ca-a731af76a95c.roa (raw, json) Hash identifier: IdudnK40N2jfPPUe0b5kQkk/FmUnw1Q09xcG1QXLvLQ= Subject key identifier: 55:47:91:46:EF:8A:01:02:24:F1:16:54:87:39:0D:2C:8D:28:CA:FD Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584A41104DE37227CCC2C5F40880 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/bfb7bfe5-406b-32d9-a1ca-a731af76a95c.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 16509 IP address blocks: 199.255.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:4d:e3:72:27:cc:c2:c5:f4:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=2aa60851-f9ab-4817-ba6d-4649109087e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:86:21:94:24:59:cb:d6:4b:14:9c:05:88:8d: f3:88:5e:cf:6a:1b:0e:51:f7:64:e8:ce:91:fe:a0: de:f9:72:3c:88:92:f2:16:41:0e:e1:67:ee:86:1a: e9:9e:c3:f0:91:fa:55:3c:90:94:d2:b7:9d:03:42: c9:5a:2f:5c:7a:3c:02:50:5c:1d:6d:92:f2:37:e1: 16:6a:63:f2:59:42:8d:6b:59:bd:b4:cb:a1:08:27: 26:30:17:7b:a9:a9:f9:16:be:15:df:72:84:ef:3b: af:4a:97:b0:30:6b:c6:5c:c3:ad:cb:51:e0:bb:5f: 9b:16:9d:af:52:e2:ae:1d:23:25:6b:79:25:10:da: cc:66:3c:4d:3d:ce:28:15:f7:55:14:2c:d0:9b:be: 97:9e:0d:19:5e:7c:2a:07:62:4d:a3:01:c9:5c:9f: 52:ca:3e:4b:c6:61:6a:3d:cc:7d:90:0f:e0:ae:96: ae:19:7d:91:b8:be:9c:03:56:ea:bc:94:04:2e:8a: 8e:6a:7c:ba:55:d6:1a:a9:c2:94:c4:99:7b:c8:62: 5d:3f:85:d1:da:29:d4:bf:39:7f:27:48:dc:33:08: 2f:b9:01:73:00:d4:c2:a8:96:bb:56:1c:ca:98:ea: 20:c7:fa:c7:1d:5c:88:f7:73:ed:87:db:3c:ce:76: b8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:47:91:46:EF:8A:01:02:24:F1:16:54:87:39:0D:2C:8D:28:CA:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/bfb7bfe5-406b-32d9-a1ca-a731af76a95c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 199.255.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:b2:46:89:1a:dd:46:e4:ea:0b:40:c2:37:d3:b1:3d:4e:ca: b2:2e:ad:d9:1f:5a:74:99:68:0a:a5:58:16:51:6a:d1:e5:9c: 06:53:c2:2c:ee:64:b0:fa:65:a4:2c:cf:e3:24:93:23:7c:ef: 6c:0b:72:22:f9:7d:5a:29:9c:9a:2b:ed:40:ad:87:10:55:59: f3:45:a0:cc:ce:55:df:af:f4:27:cc:ee:21:c2:23:54:fa:df: ba:48:28:6e:ed:4f:e8:33:84:1d:cb:2e:b0:26:9a:94:80:9a: c2:5d:3f:13:25:be:02:e4:4a:22:ab:e4:7e:4f:3e:06:53:73: e9:e1:fb:47:74:c4:6f:34:14:59:b3:17:8d:14:26:b5:d3:b6: d4:fe:d7:05:62:04:38:4e:83:77:a0:57:88:90:d9:42:53:f5: ad:c0:f6:fc:37:99:63:f2:fe:6e:ad:68:6d:d3:42:7a:f4:81: dc:d8:31:c7:58:e1:a6:7e:af:dc:3c:21:d5:cf:74:34:0f:e8: df:01:ae:4f:e8:73:cd:94:01:a4:37:66:29:e3:de:fb:fc:a6: 8c:d6:94:22:4c:97:8b:b2:07:9b:1a:f8:45:7c:62:9e:be:c2: 78:66:0a:40:cd:b5:43:13:04:0a:e6:d8:fa:cf:e0:ca:a6:a9: 67:e2:33:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpBEE3jcifMwsX0CIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk MmFhNjA4NTEtZjlhYi00ODE3LWJhNmQtNDY0OTEwOTA4N2UwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIYhlCRZy9ZLFJwFiI3ziF7PahsOUfdk6M6R /qDe+XI8iJLyFkEO4WfuhhrpnsPwkfpVPJCU0redA0LJWi9cejwCUFwdbZLyN+EW amPyWUKNa1m9tMuhCCcmMBd7qan5Fr4V33KE7zuvSpewMGvGXMOty1Hgu1+bFp2v UuKuHSMla3klENrMZjxNPc4oFfdVFCzQm76Xng0ZXnwqB2JNowHJXJ9Syj5LxmFq Pcx9kA/grpauGX2RuL6cA1bqvJQELoqOany6VdYaqcKUxJl7yGJdP4XR2inUvzl/ J0jcMwgvuQFzANTCqJa7VhzKmOogx/rHHVyI93Pth9s8zna4VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFVHkUbvigECJPEWVIc5DSyNKMr9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvYmZiN2JmZTUtNDA2Yi0z MmQ5LWExY2EtYTczMWFmNzZhOTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/8hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJWyRoka3Ubk6gtAwjfTsT1OyrIurdkfWnSZaAqlWBZRatHlnAZTwizu ZLD6ZaQsz+MkkyN872wLciL5fVopnJor7UCthxBVWfNFoMzOVd+v9CfM7iHCI1T6 37pIKG7tT+gzhB3LLrAmmpSAmsJdPxMlvgLkSiKr5H5PPgZTc+nh+0d0xG80FFmz F40UJrXTttT+1wViBDhOg3egV4iQ2UJT9a3A9vw3mWPy/m6taG3TQnr0gdzYMcdY 4aZ+r9w8IdXPdDQP6N8Brk/oc82UAaQ3Zinj3vv8pozWlCJMl4uyB5sa+EV8Yp6+ wnhmCkDNtUMTBArm2PrP4MqmqWfiMws= -----END CERTIFICATE-----Generated at Sun Jun 29 04:35:15 2025 by rpki-client