$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/3d224895-501e-3aed-857c-97ee5700de82.roa File: 3d224895-501e-3aed-857c-97ee5700de82.roa (raw, json) Hash identifier: 8MhrYdXYQs/RA61dTSm3IyHzcoJZ0ycWbKkB1zg6/pY= Subject key identifier: 36:51:2C:10:C8:23:F7:F7:2C:44:39:87:8D:33:F6:14:92:3E:96:5E Certificate issuer: /CN=21dd6860-719e-46c0-8b7c-89b9e8d88da6 Certificate serial: 010D0C9F4328584A23C003E333FEE212FABB2D40 Authority key identifier: 42:79:8D:AA:08:72:7C:74:A2:5D:C9:91:AD:DB:EA:CA:2E:FC:A5:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/3d224895-501e-3aed-857c-97ee5700de82.roa Signing time: Tue 10 Jun 2025 01:00:50 +0000 ROA not before: Tue 10 Jun 2025 01:00:50 +0000 ROA not after: Mon 08 Sep 2025 01:00:50 +0000 asID: 30242 IP address blocks: 199.167.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:23:c0:03:e3:33:fe:e2:12:fa:bb:2d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21dd6860-719e-46c0-8b7c-89b9e8d88da6 Validity Not Before: Jun 10 01:00:50 2025 GMT Not After : Sep 8 01:00:50 2025 GMT Subject: CN=48f1d4fc-dbcf-403c-b1e7-546a6928d313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:de:80:1b:0a:f5:74:30:6b:9d:ca:7d:ee:af: df:75:3e:eb:47:12:bd:82:a0:04:64:d1:04:96:9c: 45:fe:fb:7b:6b:ee:71:66:45:a9:e4:94:e4:ef:61: ad:02:4e:93:2d:5a:35:a8:ac:63:28:23:db:73:f9: 53:47:4d:24:1b:b7:cd:5c:48:fb:63:45:10:b4:09: 9f:74:5d:ec:84:dc:bc:63:8d:e5:b2:33:61:47:e9: 99:63:1f:e5:3d:62:fb:89:4e:c4:52:4e:0e:0c:1c: 34:15:f4:a1:5d:95:c3:f1:59:f9:1f:c2:ea:eb:b5: 4b:7f:62:af:b9:60:e7:bc:e7:d8:33:96:91:22:a8: f4:06:c7:74:aa:fd:d4:00:ae:17:ca:69:65:21:99: 3f:3f:68:06:e1:1f:79:31:0a:3d:c3:0d:db:04:ad: 00:9a:fd:95:4c:44:dd:06:af:47:2f:e8:4e:8d:03: 0c:cc:af:01:84:dc:ac:ce:7a:90:a4:14:34:53:7d: 45:06:84:93:b4:fb:ec:ef:3e:6e:04:ee:18:c9:dc: 1d:5a:2c:40:d7:8f:35:09:87:46:a5:67:e0:57:77: 8a:a4:19:8f:cc:a0:96:f4:2a:e5:31:82:2c:38:8b: 6e:e6:e5:3f:2c:9a:b0:85:32:cd:8d:75:d2:57:78: 95:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:51:2C:10:C8:23:F7:F7:2C:44:39:87:8D:33:F6:14:92:3E:96:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/3d224895-501e-3aed-857c-97ee5700de82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.crl X509v3 Authority Key Identifier: keyid:42:79:8D:AA:08:72:7C:74:A2:5D:C9:91:AD:DB:EA:CA:2E:FC:A5:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer sbgp-ipAddrBlock: critical IPv4: 199.167.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:da:7b:ba:68:24:72:aa:f9:c8:31:a8:93:85:d7:b6:0e:4a: 98:6b:40:49:fb:aa:95:fe:f7:58:7b:4e:e3:47:b2:94:21:c9: 39:50:45:d1:26:51:11:2c:ab:57:0e:30:43:8d:c1:7b:28:a0: 42:a2:e9:64:40:69:40:54:a3:7d:b1:ff:b9:f6:a0:e1:ea:0f: 30:df:b0:1c:5c:3c:2e:b3:d8:96:23:7c:7e:2a:b2:9a:71:09: 2f:06:89:f5:d8:f1:3b:ba:04:6a:09:79:31:b6:93:7d:92:a5: f2:aa:e5:a5:ce:1d:6b:a6:37:f7:63:de:00:ba:60:8a:b5:d6: aa:08:de:2e:98:f2:ca:51:ad:bd:2e:57:eb:f1:52:19:3a:85: 3d:ae:76:23:73:1f:49:55:8e:b4:43:d8:92:78:f9:92:17:5d: 13:2e:27:f9:8d:9d:fc:fa:5a:28:76:34:5f:66:90:35:7f:4e: 85:f1:fb:2b:59:c3:6a:2b:92:16:f7:3b:64:e9:3e:9f:f8:c0: d2:41:d5:a3:1b:ab:f3:7f:9c:05:12:d8:83:03:18:e6:79:dc: 68:84:0e:5d:13:50:ed:8f:cc:b6:85:2d:de:52:62:1b:d1:82: c1:42:fd:94:4e:0c:29:cb:09:9d:c7:cf:28:34:cb:da:96:da: 06:eb:e9:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEojwAPjM/7iEvq7LUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFkZDY4NjAtNzE5ZS00NmMwLThiN2MtODliOWU4ZDg4 ZGE2MB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk NDhmMWQ0ZmMtZGJjZi00MDNjLWIxZTctNTQ2YTY5MjhkMzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmd6AGwr1dDBrncp97q/fdT7rRxK9gqAEZNEE lpxF/vt7a+5xZkWp5JTk72GtAk6TLVo1qKxjKCPbc/lTR00kG7fNXEj7Y0UQtAmf dF3shNy8Y43lsjNhR+mZYx/lPWL7iU7EUk4ODBw0FfShXZXD8Vn5H8Lq67VLf2Kv uWDnvOfYM5aRIqj0Bsd0qv3UAK4XymllIZk/P2gG4R95MQo9ww3bBK0Amv2VTETd Bq9HL+hOjQMMzK8BhNysznqQpBQ0U31FBoSTtPvs7z5uBO4YydwdWixA1481CYdG pWfgV3eKpBmPzKCW9CrlMYIsOItu5uU/LJqwhTLNjXXSV3iVKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDZRLBDII/f3LEQ5h40z9hSSPpZeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMWRk Njg2MC03MTllLTQ2YzAtOGI3Yy04OWI5ZThkODhkYTYvM2QyMjQ4OTUtNTAxZS0z YWVkLTg1N2MtOTdlZTU3MDBkZTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjFkZDY4NjAtNzE5ZS00NmMwLThi N2MtODliOWU4ZDg4ZGE2LzIxZGQ2ODYwLTcxOWUtNDZjMC04YjdjLTg5YjllOGQ4 OGRhNi5jcmwwHwYDVR0jBBgwFoAUQnmNqghyfHSiXcmRrdvqyi78pSgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMWRkNjg2MC03MTllLTQ2YzAtOGI3Yy04OWI5 ZThkODhkYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx6f8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALvae7poJHKq+cgxqJOF17YOSphrQEn7qpX+91h7TuNHspQhyTlQRdEm UREsq1cOMEONwXsooEKi6WRAaUBUo32x/7n2oOHqDzDfsBxcPC6z2JYjfH4qsppx CS8GifXY8Tu6BGoJeTG2k32SpfKq5aXOHWumN/dj3gC6YIq11qoI3i6Y8spRrb0u V+vxUhk6hT2udiNzH0lVjrRD2JJ4+ZIXXRMuJ/mNnfz6Wih2NF9mkDV/ToXx+ytZ w2orkhb3O2TpPp/4wNJB1aMbq/N/nAUS2IMDGOZ53GiEDl0TUO2PzLaFLd5SYhvR gsFC/ZRODCnLCZ3Hzyg0y9qW2gbr6UQ= -----END CERTIFICATE-----Generated at Tue Jun 17 21:09:51 2025 by rpki-client