$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e66840c2-72e8-367f-bff1-3dc2a9b0557d.roa File: e66840c2-72e8-367f-bff1-3dc2a9b0557d.roa (raw, json) Hash identifier: 1VItbH4+p7ReEoNtGtW1k7kTyhZcOvq4AQwpDmVwes8= Subject key identifier: 93:36:59:02:64:B1:D6:6D:4A:A2:2A:F4:1E:F9:01:06:EA:E5:8A:9A Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584A41104D8E5BE1BB580500DC80 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e66840c2-72e8-367f-bff1-3dc2a9b0557d.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 14618 IP address blocks: 199.255.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:4d:8e:5b:e1:bb:58:05:00:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=45532a09-9766-462b-bf19-3fbfe1cd93c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ce:90:de:cc:06:51:4e:22:35:dd:85:c2:4a: 87:1c:87:e8:3b:78:c5:61:e7:57:50:87:e3:d3:b0: 06:33:a3:e8:24:78:ed:eb:de:d0:e3:43:a9:73:cd: e3:86:8a:20:ed:18:bd:68:f6:a1:69:85:be:30:64: ee:cf:c8:27:6c:ff:90:94:25:83:09:2f:d1:8e:43: 9a:03:fd:51:ba:85:8c:8c:4d:34:d6:da:a5:d4:0e: bd:39:59:4c:20:04:4c:f8:66:c6:1d:5d:19:5f:c3: e2:af:7c:82:44:f0:85:cc:13:e5:44:e1:c0:1f:20: cf:13:10:f9:07:e7:11:0b:2b:c1:93:1a:6b:8a:eb: e4:a0:79:59:c2:76:d4:af:f8:2d:b8:37:fd:e4:52: 76:8f:5f:68:1c:ed:8a:55:26:78:a3:3f:0f:10:25: 3b:f2:ae:b2:40:6f:14:7a:64:0c:1d:03:b9:3d:1a: ee:f2:50:ad:f8:c8:8d:28:82:85:ec:c2:43:f5:d8: 6f:56:dd:b0:93:4e:33:03:d5:7a:dd:ad:25:58:c0: b2:a0:a0:de:74:01:ba:41:b5:ff:51:12:c9:59:39: 31:b9:c6:93:a9:12:13:56:c4:2e:a4:3e:68:57:78: be:71:45:69:e6:f8:56:24:1b:d6:86:49:74:e0:96: f5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:36:59:02:64:B1:D6:6D:4A:A2:2A:F4:1E:F9:01:06:EA:E5:8A:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e66840c2-72e8-367f-bff1-3dc2a9b0557d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 199.255.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:89:96:2c:04:ba:d7:3b:ed:23:72:7f:1d:a2:1c:f2:5b:cf: 11:c5:36:21:5f:e7:04:af:9a:96:57:39:f5:f7:84:34:44:d9: 14:af:18:4c:d0:f3:e3:cc:39:2a:cc:60:3f:03:4f:cc:80:35: 03:ca:d7:bb:90:8f:6f:b6:c3:cf:55:4e:ab:35:de:38:31:46: ad:0d:29:29:26:b9:2d:03:b8:a9:78:c1:a1:22:4e:9e:79:5f: 20:c6:8c:30:c6:e8:08:99:f5:7c:12:81:c9:6a:e1:d7:c1:c8: e2:9c:62:24:54:12:0f:5e:66:5c:6e:a8:cd:be:97:0e:16:cf: cf:7d:dc:4b:bd:99:de:71:58:b1:17:88:97:67:e9:f0:3a:71: 1e:2a:51:fc:27:cd:26:45:6b:39:d6:f9:01:00:39:21:4a:94: 95:eb:a9:00:0a:44:b3:5b:90:10:8c:cb:e2:92:b7:4f:e1:11: 3b:87:df:ec:1a:09:f6:d6:0a:35:f6:28:a2:62:96:b4:53:a5: 9c:0d:b7:c8:f9:fc:c0:e2:f6:95:08:80:fa:65:9d:a3:14:26: ce:07:a7:e8:4d:98:af:a0:e9:d9:ad:0d:25:ae:73:e4:e3:45: 74:43:75:f9:27:3f:af:69:ca:41:0e:5d:24:5c:6c:64:62:dd: d9:07:f1:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpBEE2OW+G7WAUA3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk NDU1MzJhMDktOTc2Ni00NjJiLWJmMTktM2ZiZmUxY2Q5M2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsM6Q3swGUU4iNd2FwkqHHIfoO3jFYedXUIfj 07AGM6PoJHjt697Q40Opc83jhoog7Ri9aPahaYW+MGTuz8gnbP+QlCWDCS/RjkOa A/1RuoWMjE001tql1A69OVlMIARM+GbGHV0ZX8Pir3yCRPCFzBPlROHAHyDPExD5 B+cRCyvBkxpriuvkoHlZwnbUr/gtuDf95FJ2j19oHO2KVSZ4oz8PECU78q6yQG8U emQMHQO5PRru8lCt+MiNKIKF7MJD9dhvVt2wk04zA9V63a0lWMCyoKDedAG6QbX/ URLJWTkxucaTqRITVsQupD5oV3i+cUVp5vhWJBvWhkl04Jb1XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJM2WQJksdZtSqIq9B75AQbq5YqaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvZTY2ODQwYzItNzJlOC0z NjdmLWJmZjEtM2RjMmE5YjA1NTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/8gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABuJliwEutc77SNyfx2iHPJbzxHFNiFf5wSvmpZXOfX3hDRE2RSvGEzQ 8+PMOSrMYD8DT8yANQPK17uQj2+2w89VTqs13jgxRq0NKSkmuS0DuKl4waEiTp55 XyDGjDDG6AiZ9XwSgclq4dfByOKcYiRUEg9eZlxuqM2+lw4Wz8993Eu9md5xWLEX iJdn6fA6cR4qUfwnzSZFaznW+QEAOSFKlJXrqQAKRLNbkBCMy+KSt0/hETuH3+wa CfbWCjX2KKJilrRTpZwNt8j5/MDi9pUIgPplnaMUJs4Hp+hNmK+g6dmtDSWuc+Tj RXRDdfknP69pykEOXSRcbGRi3dkH8TY= -----END CERTIFICATE-----Generated at Sun Jun 29 01:39:56 2025 by rpki-client