$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/86835d99-6480-31d7-9ee1-ae9b52b891c7.roa File: 86835d99-6480-31d7-9ee1-ae9b52b891c7.roa (raw, json) Hash identifier: BdC3iMAI30C0dDB20KlJcIqsMfi/MNRwW45v1AWAuzM= Subject key identifier: 06:23:D2:FF:82:5A:3B:E8:2B:73:C7:43:41:9D:17:EF:74:C3:02:FF Certificate issuer: /CN=6f64cc24-ef62-4498-b9ab-965375ea0e8e Certificate serial: 010D0C9F4328584A268AC6E6142BF217858D31F0 Authority key identifier: A9:6A:9A:E3:3D:66:0D:C4:7C:C8:A4:02:58:D8:FD:15:E1:90:61:0F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/86835d99-6480-31d7-9ee1-ae9b52b891c7.roa Signing time: Wed 11 Jun 2025 01:00:50 +0000 ROA not before: Wed 11 Jun 2025 01:00:50 +0000 ROA not after: Tue 09 Sep 2025 01:00:50 +0000 asID: 52423 IP address blocks: 199.33.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/6f64cc24-ef62-4498-b9ab-965375ea0e8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/6f64cc24-ef62-4498-b9ab-965375ea0e8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:26:8a:c6:e6:14:2b:f2:17:85:8d:31:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f64cc24-ef62-4498-b9ab-965375ea0e8e Validity Not Before: Jun 11 01:00:50 2025 GMT Not After : Sep 9 01:00:50 2025 GMT Subject: CN=3ccf9d12-f91d-4f34-83c7-e343986d6dfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:bb:c5:68:94:1e:38:b6:d2:be:35:e7:86:03: 0c:68:3a:92:3e:39:23:b2:ab:6c:79:95:10:46:d2: 97:8c:12:e8:3d:a6:90:3d:b4:27:2d:32:7f:71:05: 88:41:92:a3:fc:c7:aa:3c:1c:30:ab:c1:19:33:b9: 65:28:8a:74:37:60:a5:0f:00:9a:1b:e7:c5:3b:f1: 76:e1:cc:71:54:32:31:d1:ac:b4:73:20:91:05:c7: 10:09:c3:8b:be:a0:ac:0c:1a:56:19:58:65:9b:c1: 28:82:9b:dd:49:5b:e6:a2:f1:58:6c:fd:18:84:8e: d4:4e:be:e8:1a:ee:b8:66:84:77:e3:88:33:92:a4: 86:16:c3:b3:21:b9:ca:99:1d:e7:8e:34:c3:2f:55: 96:2a:21:5b:f4:9d:5a:84:3b:4c:ee:c0:66:14:3e: 47:23:68:ae:30:29:d3:71:e5:da:bc:58:5a:c8:05: 8e:2f:25:c4:f9:f6:9c:74:ee:7d:0a:98:5d:d2:13: fd:1a:a7:ad:26:c1:dc:a8:b7:4b:09:2b:ab:c9:e1: 07:8f:69:75:cf:26:d0:98:fc:08:40:39:94:8e:39: 20:e8:3c:a7:d1:a6:dc:33:3d:b3:3f:b5:a2:32:aa: 39:4b:6b:b1:c5:ab:6b:6b:49:43:b4:fc:e3:99:42: 0d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:23:D2:FF:82:5A:3B:E8:2B:73:C7:43:41:9D:17:EF:74:C3:02:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/86835d99-6480-31d7-9ee1-ae9b52b891c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/6f64cc24-ef62-4498-b9ab-965375ea0e8e.crl X509v3 Authority Key Identifier: keyid:A9:6A:9A:E3:3D:66:0D:C4:7C:C8:A4:02:58:D8:FD:15:E1:90:61:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e.cer sbgp-ipAddrBlock: critical IPv4: 199.33.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:ef:a8:91:ea:c6:0b:4b:5e:cb:bd:9b:1f:55:9e:e8:3a:fa: bd:e4:b0:d9:e0:24:3c:c1:f0:61:ae:17:cd:61:3f:6e:58:89: c7:f1:bf:d5:99:01:e6:11:93:c4:11:21:34:99:05:fd:0a:4b: 86:05:03:97:87:1c:ac:59:cb:c8:f4:1c:fb:aa:1a:84:bb:c1: 0a:19:53:0a:6e:8b:c7:8c:b5:12:6a:29:45:33:d2:8f:7e:7d: 14:20:6d:56:dc:65:c5:5a:b0:31:19:b9:8d:cf:c2:d4:15:9e: ae:32:63:3e:54:22:2d:f5:0d:1b:89:d4:ce:78:cc:c4:80:54: e0:75:24:1a:43:bb:7e:26:92:d5:31:30:29:f2:37:d9:e4:ea: 78:3c:e2:50:0a:04:c0:71:16:06:9c:05:ab:11:0c:8c:1d:a2: 77:cf:17:ca:63:d3:9e:44:79:05:75:16:1e:24:93:28:c7:fa: ba:1e:f3:b8:c3:f1:fe:cb:9e:81:46:23:c7:f0:69:6d:01:01: e7:10:6f:1d:eb:03:b2:6e:c1:e0:c0:18:61:8c:de:76:02:a7: 98:5c:be:19:67:6f:7c:7e:8a:ac:44:33:5e:a0:0f:72:0e:a0: e0:7c:28:e6:8e:8f:8c:31:bc:19:74:17:da:b6:a9:78:bc:4a: 48:3d:35:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEomisbmFCvyF4WNMfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY2NGNjMjQtZWY2Mi00NDk4LWI5YWItOTY1Mzc1ZWEw ZThlMB4XDTI1MDYxMTAxMDA1MFoXDTI1MDkwOTAxMDA1MFowLzEtMCsGA1UEAxMk M2NjZjlkMTItZjkxZC00ZjM0LTgzYzctZTM0Mzk4NmQ2ZGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7vFaJQeOLbSvjXnhgMMaDqSPjkjsqtseZUQ RtKXjBLoPaaQPbQnLTJ/cQWIQZKj/MeqPBwwq8EZM7llKIp0N2ClDwCaG+fFO/F2 4cxxVDIx0ay0cyCRBccQCcOLvqCsDBpWGVhlm8EogpvdSVvmovFYbP0YhI7UTr7o Gu64ZoR344gzkqSGFsOzIbnKmR3njjTDL1WWKiFb9J1ahDtM7sBmFD5HI2iuMCnT ceXavFhayAWOLyXE+facdO59Cphd0hP9GqetJsHcqLdLCSuryeEHj2l1zybQmPwI QDmUjjkg6Dyn0abcMz2zP7WiMqo5S2uxxatra0lDtPzjmUINNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAYj0v+CWjvoK3PHQ0GdF+90wwL/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82ZjY0 Y2MyNC1lZjYyLTQ0OTgtYjlhYi05NjUzNzVlYTBlOGUvODY4MzVkOTktNjQ4MC0z MWQ3LTllZTEtYWU5YjUyYjg5MWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNmY2NGNjMjQtZWY2Mi00NDk4LWI5 YWItOTY1Mzc1ZWEwZThlLzZmNjRjYzI0LWVmNjItNDQ5OC1iOWFiLTk2NTM3NWVh MGU4ZS5jcmwwHwYDVR0jBBgwFoAUqWqa4z1mDcR8yKQCWNj9FeGQYQ8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82ZjY0Y2MyNC1lZjYyLTQ0OTgtYjlhYi05NjUz NzVlYTBlOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyFEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3vqJHqxgtLXsu9mx9Vnug6+r3ksNngJDzB8GGuF81hP25Yicfxv9WZ AeYRk8QRITSZBf0KS4YFA5eHHKxZy8j0HPuqGoS7wQoZUwpui8eMtRJqKUUz0o9+ fRQgbVbcZcVasDEZuY3PwtQVnq4yYz5UIi31DRuJ1M54zMSAVOB1JBpDu34mktUx MCnyN9nk6ng84lAKBMBxFgacBasRDIwdonfPF8pj055EeQV1Fh4kkyjH+roe87jD 8f7LnoFGI8fwaW0BAecQbx3rA7JuweDAGGGM3nYCp5hcvhlnb3x+iqxEM16gD3IO oOB8KOaOj4wxvBl0F9q2qXi8Skg9NZI= -----END CERTIFICATE-----Generated at Thu Jun 19 11:40:22 2025 by rpki-client