$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f243c5da-1962-405d-9607-4c295bcb5015/20b0a2dc-c3d5-3b4c-b04c-c78b1ec7a2a3.roa File: 20b0a2dc-c3d5-3b4c-b04c-c78b1ec7a2a3.roa (raw, json) Hash identifier: 7gcwAvUVQSp3DfunTswus0e8vkIFVZIqx3cIj6Ad83Y= Subject key identifier: 47:CD:D2:50:51:7F:A7:D0:22:80:9C:7B:B8:2E:00:AB:03:5D:98:AD Certificate issuer: /CN=f243c5da-1962-405d-9607-4c295bcb5015 Certificate serial: 010D0C9F4328584A268ABF0C8E418AA3C1EF2800 Authority key identifier: DE:5B:EC:37:4F:D9:9F:51:D9:BD:97:72:05:65:08:5A:8B:10:B3:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f243c5da-1962-405d-9607-4c295bcb5015.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f243c5da-1962-405d-9607-4c295bcb5015/20b0a2dc-c3d5-3b4c-b04c-c78b1ec7a2a3.roa Signing time: Wed 11 Jun 2025 01:00:50 +0000 ROA not before: Wed 11 Jun 2025 01:00:50 +0000 ROA not after: Tue 09 Sep 2025 01:00:50 +0000 asID: 396535 IP address blocks: 199.101.182.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f243c5da-1962-405d-9607-4c295bcb5015/f243c5da-1962-405d-9607-4c295bcb5015.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f243c5da-1962-405d-9607-4c295bcb5015/f243c5da-1962-405d-9607-4c295bcb5015.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f243c5da-1962-405d-9607-4c295bcb5015.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:26:8a:bf:0c:8e:41:8a:a3:c1:ef:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f243c5da-1962-405d-9607-4c295bcb5015 Validity Not Before: Jun 11 01:00:50 2025 GMT Not After : Sep 9 01:00:50 2025 GMT Subject: CN=bf9c4e65-1e8e-40c7-b903-7a7d748c7788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:75:4c:36:bd:6d:a3:c4:ba:c3:07:a7:cb:8f: cf:12:db:d1:eb:5a:a0:c6:0a:5c:0f:81:cf:f6:60: d2:36:24:74:a8:22:50:dc:40:f6:71:13:78:e2:10: fc:9e:f3:59:3b:a6:89:d5:6a:6c:09:78:3b:32:4e: e7:ac:5b:bf:bd:3f:50:2a:6c:e9:38:b8:b9:22:3a: b3:4c:57:41:59:fe:80:e9:77:42:48:f4:14:87:ce: c8:e8:22:b6:f4:15:b9:0e:70:f4:28:a7:59:63:13: b2:bd:8f:3e:d0:82:ef:c4:69:16:06:81:15:5a:3e: a4:dd:09:1c:92:be:c3:0a:7c:fb:76:4f:8f:05:10: 5a:60:3d:9b:15:eb:21:71:8f:ad:f9:5a:8c:eb:51: 88:4d:dd:3c:51:5f:79:38:c7:70:6d:5e:7d:17:a8: c1:81:fa:6b:cf:64:2f:02:ab:34:ff:a2:d8:89:b3: ef:ff:dd:f2:36:04:0d:06:07:e8:9e:4f:f5:6c:a9: 75:41:df:d3:5e:34:f0:fd:7e:6e:55:73:24:ab:8e: 0c:04:46:ad:a8:40:1c:4f:0d:6b:0e:07:87:de:25: 1d:f3:2f:8a:05:d2:f2:bb:94:23:cf:51:39:5c:71: 16:17:cb:59:58:ad:47:6f:4c:cc:27:e8:cc:16:0f: 63:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:CD:D2:50:51:7F:A7:D0:22:80:9C:7B:B8:2E:00:AB:03:5D:98:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f243c5da-1962-405d-9607-4c295bcb5015/20b0a2dc-c3d5-3b4c-b04c-c78b1ec7a2a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f243c5da-1962-405d-9607-4c295bcb5015/f243c5da-1962-405d-9607-4c295bcb5015.crl X509v3 Authority Key Identifier: keyid:DE:5B:EC:37:4F:D9:9F:51:D9:BD:97:72:05:65:08:5A:8B:10:B3:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f243c5da-1962-405d-9607-4c295bcb5015.cer sbgp-ipAddrBlock: critical IPv4: 199.101.182.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:1a:d4:cb:d1:93:04:5d:8b:2d:c2:b0:78:6f:30:9c:4a:4a: 48:95:5d:48:0a:64:16:8e:5e:88:b9:34:07:06:7c:df:e3:c4: 7e:31:70:5a:a2:b8:4d:03:14:ff:97:c4:71:ac:c1:51:7f:53: 57:be:5a:b8:0b:20:98:a1:67:28:74:ce:fb:05:db:73:72:b3: 11:19:fa:8a:91:c5:d6:a7:f6:61:41:e1:33:0e:8b:0a:39:9d: 97:7e:5a:b1:dc:45:0a:8f:71:ff:c4:f8:ac:6c:e7:c0:38:63: 55:48:7c:46:52:27:1b:14:4c:6a:23:69:16:54:64:2f:1d:bb: 13:3f:69:85:3e:ef:04:d3:bc:74:dc:e9:d1:0d:7d:3a:35:94: 18:bc:a6:4f:4f:8c:d3:69:e2:80:95:cc:86:49:68:4e:a8:48: b6:a3:5b:53:a9:e2:54:e2:c1:94:b1:69:b3:3e:c1:37:40:72: 6c:63:80:40:6c:da:ae:4e:2d:00:c8:77:ed:ce:39:80:8a:90: a9:e9:d4:39:88:de:d7:8c:07:13:83:ce:6b:29:52:88:89:d5: 76:91:d6:31:f2:26:fc:38:88:43:df:0e:fc:6f:38:b7:5c:cb: 1d:a9:f4:47:22:3b:4f:c3:4c:6a:39:5a:7e:78:bf:bb:4a:58: af:3c:6a:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEomir8MjkGKo8HvKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjI0M2M1ZGEtMTk2Mi00MDVkLTk2MDctNGMyOTViY2I1 MDE1MB4XDTI1MDYxMTAxMDA1MFoXDTI1MDkwOTAxMDA1MFowLzEtMCsGA1UEAxMk YmY5YzRlNjUtMWU4ZS00MGM3LWI5MDMtN2E3ZDc0OGM3Nzg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHVMNr1to8S6wweny4/PEtvR61qgxgpcD4HP 9mDSNiR0qCJQ3ED2cRN44hD8nvNZO6aJ1WpsCXg7Mk7nrFu/vT9QKmzpOLi5Ijqz TFdBWf6A6XdCSPQUh87I6CK29BW5DnD0KKdZYxOyvY8+0ILvxGkWBoEVWj6k3Qkc kr7DCnz7dk+PBRBaYD2bFeshcY+t+VqM61GITd08UV95OMdwbV59F6jBgfprz2Qv Aqs0/6LYibPv/93yNgQNBgfonk/1bKl1Qd/TXjTw/X5uVXMkq44MBEatqEAcTw1r DgeH3iUd8y+KBdLyu5Qjz1E5XHEWF8tZWK1Hb0zMJ+jMFg9jXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEfN0lBRf6fQIoCce7guAKsDXZitMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMjQz YzVkYS0xOTYyLTQwNWQtOTYwNy00YzI5NWJjYjUwMTUvMjBiMGEyZGMtYzNkNS0z YjRjLWIwNGMtYzc4YjFlYzdhMmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjI0M2M1ZGEtMTk2Mi00MDVkLTk2 MDctNGMyOTViY2I1MDE1L2YyNDNjNWRhLTE5NjItNDA1ZC05NjA3LTRjMjk1YmNi NTAxNS5jcmwwHwYDVR0jBBgwFoAU3lvsN0/Zn1HZvZdyBWUIWosQsxgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMjQzYzVkYS0xOTYyLTQwNWQtOTYwNy00YzI5 NWJjYjUwMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx2W2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGga1MvRkwRdiy3CsHhvMJxKSkiVXUgKZBaOXoi5NAcGfN/jxH4xcFqi uE0DFP+XxHGswVF/U1e+WrgLIJihZyh0zvsF23NysxEZ+oqRxdan9mFB4TMOiwo5 nZd+WrHcRQqPcf/E+Kxs58A4Y1VIfEZSJxsUTGojaRZUZC8duxM/aYU+7wTTvHTc 6dENfTo1lBi8pk9PjNNp4oCVzIZJaE6oSLajW1Op4lTiwZSxabM+wTdAcmxjgEBs 2q5OLQDId+3OOYCKkKnp1DmI3teMBxODzmspUoiJ1XaR1jHyJvw4iEPfDvxvOLdc yx2p9EciO0/DTGo5Wn54v7tKWK88asE= -----END CERTIFICATE-----Generated at Tue Jul 1 23:23:04 2025 by rpki-client