$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/542b7cec-f512-331e-b8ee-c6d5ba0b6520.roa File: 542b7cec-f512-331e-b8ee-c6d5ba0b6520.roa (raw, json) Hash identifier: jkSVvmuiBkn0kPg1iRNOwI9xGd5GfGHtJWWYpc3mT+o= Subject key identifier: CA:BD:0E:86:E8:69:E4:EA:49:F0:EC:9E:31:76:87:24:5B:C6:9C:42 Certificate issuer: /CN=a66a1dc9-26a8-4e01-9916-0d16dd191690 Certificate serial: 010D0C9F4328584A7A4B4AFC992E59ACB05A7CC0 Authority key identifier: 05:2A:1A:AC:C6:03:CD:7E:BC:FC:8C:07:CA:D6:38:03:64:D8:E4:A1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/542b7cec-f512-331e-b8ee-c6d5ba0b6520.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 46307 IP address blocks: 199.26.151.0/24 maxlen: 24 2602:fb3c:81::/48 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/a66a1dc9-26a8-4e01-9916-0d16dd191690.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/a66a1dc9-26a8-4e01-9916-0d16dd191690.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:4a:fc:99:2e:59:ac:b0:5a:7c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a66a1dc9-26a8-4e01-9916-0d16dd191690 Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=2ab8c97c-cb15-4859-b042-c7072753cc8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ed:57:2e:fa:c7:73:a2:52:98:b8:3a:ae:3e: b2:8a:d2:04:33:9d:b1:08:67:28:72:b8:7c:1b:21: e4:e2:62:fd:57:76:4d:b9:a1:53:b6:85:cf:09:f1: 25:81:8d:b4:9d:f3:3b:6a:c8:2a:6e:59:50:27:ef: c9:9b:86:5f:af:bc:ac:d9:9a:80:6c:20:33:9c:d4: 51:88:91:eb:88:67:d7:58:ea:4e:92:35:55:ad:aa: 87:b3:3b:f3:8b:48:ba:0f:54:b0:03:1a:fa:cc:93: 31:13:4f:d8:86:a9:e8:ba:38:78:37:5a:33:30:66: 55:2f:50:ee:96:8d:a6:86:3d:c4:3a:0f:15:00:ea: 4e:94:ea:02:71:19:3c:1c:5c:e3:3a:ef:f4:2f:e7: 47:ab:50:34:4c:23:96:a9:90:9c:e0:cc:b0:30:e9: d0:1b:58:1b:0e:7d:08:5c:a3:10:b1:4b:6a:7e:9a: d8:b7:d5:86:0a:9f:77:14:51:c3:ea:96:63:1f:13: f1:46:0e:c2:63:8a:e7:e0:46:b3:9a:39:84:b8:b8: cb:2a:88:d3:2a:6a:60:24:31:27:72:63:5e:fc:df: 8f:31:7e:91:8c:47:b2:b9:b6:14:61:aa:92:5a:5f: 57:5f:87:e9:be:62:43:61:5d:95:f5:ab:9a:8e:95: 7f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:BD:0E:86:E8:69:E4:EA:49:F0:EC:9E:31:76:87:24:5B:C6:9C:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/542b7cec-f512-331e-b8ee-c6d5ba0b6520.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/a66a1dc9-26a8-4e01-9916-0d16dd191690.crl X509v3 Authority Key Identifier: keyid:05:2A:1A:AC:C6:03:CD:7E:BC:FC:8C:07:CA:D6:38:03:64:D8:E4:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690.cer sbgp-ipAddrBlock: critical IPv4: 199.26.151.0/24 IPv6: 2602:fb3c:81::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:3a:0a:cc:c7:40:48:60:dc:6b:79:2c:9a:a6:3f:0c:16:74: ad:68:8f:5a:b1:06:aa:f3:f2:a5:c8:0d:94:b5:49:60:e7:9d: 83:20:92:ba:38:c0:cd:6c:78:a3:e4:24:49:77:97:71:5d:07: 86:d6:eb:75:37:f2:8e:b8:be:79:5b:63:8d:1a:e0:80:cf:57: 48:ba:b5:97:72:4c:5f:22:22:24:0e:91:f5:e8:3d:28:f7:85: cf:bd:b8:6a:bb:16:c2:71:6f:36:91:13:18:6d:e0:d5:80:28: d5:29:8b:72:14:03:f6:bf:35:99:b1:37:fc:72:4c:9e:a5:ae: 6d:71:bb:89:d6:68:01:df:fa:c7:52:22:36:2b:4e:f8:f2:d5: ae:72:c8:99:ff:c8:89:6e:66:be:06:ed:f2:6a:5c:d2:14:b8: 5b:b3:7e:ad:68:37:11:72:f5:55:db:03:d4:3a:de:05:4a:cb: 7a:d5:51:8d:9b:17:0b:99:6e:ec:f9:6d:86:72:34:6a:3c:e0: 1e:72:51:e7:cc:88:6f:9a:d8:12:f0:6b:ec:92:4a:64:af:4a: 7f:bc:96:44:21:0c:20:62:b5:5e:78:7f:1a:ec:cd:d2:2b:59: eb:51:cf:a9:7f:03:e2:07:d5:07:69:ec:c7:d8:e1:ac:49:45: ef:ad:ff:6c -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEp6S0r8mS5ZrLBafMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTY2YTFkYzktMjZhOC00ZTAxLTk5MTYtMGQxNmRkMTkx NjkwMB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk MmFiOGM5N2MtY2IxNS00ODU5LWIwNDItYzcwNzI3NTNjYzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+1XLvrHc6JSmLg6rj6yitIEM52xCGcocrh8 GyHk4mL9V3ZNuaFTtoXPCfElgY20nfM7asgqbllQJ+/Jm4Zfr7ys2ZqAbCAznNRR iJHriGfXWOpOkjVVraqHszvzi0i6D1SwAxr6zJMxE0/Yhqnoujh4N1ozMGZVL1Du lo2mhj3EOg8VAOpOlOoCcRk8HFzjOu/0L+dHq1A0TCOWqZCc4MywMOnQG1gbDn0I XKMQsUtqfprYt9WGCp93FFHD6pZjHxPxRg7CY4rn4EazmjmEuLjLKojTKmpgJDEn cmNe/N+PMX6RjEeyubYUYaqSWl9XX4fpvmJDYV2V9auajpV//QIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFMq9DoboaeTqSfDsnjF2hyRbxpxCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hNjZh MWRjOS0yNmE4LTRlMDEtOTkxNi0wZDE2ZGQxOTE2OTAvNTQyYjdjZWMtZjUxMi0z MzFlLWI4ZWUtYzZkNWJhMGI2NTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTY2YTFkYzktMjZhOC00ZTAxLTk5 MTYtMGQxNmRkMTkxNjkwL2E2NmExZGM5LTI2YTgtNGUwMS05OTE2LTBkMTZkZDE5 MTY5MC5jcmwwHwYDVR0jBBgwFoAUBSoarMYDzX68/IwHytY4A2TY5KEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hNjZhMWRjOS0yNmE4LTRlMDEtOTkxNi0wZDE2 ZGQxOTE2OTAuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAxxqXMA8E AgACMAkDBwAmAvs8AIEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAmjoKzMdASGDca3ksmqY/DBZ0rWiPWrEG qvPypcgNlLVJYOedgyCSujjAzWx4o+QkSXeXcV0HhtbrdTfyjri+eVtjjRrggM9X SLq1l3JMXyIiJA6R9eg9KPeFz724arsWwnFvNpETGG3g1YAo1SmLchQD9r81mbE3 /HJMnqWubXG7idZoAd/6x1IiNitO+PLVrnLImf/IiW5mvgbt8mpc0hS4W7N+rWg3 EXL1VdsD1DreBUrLetVRjZsXC5lu7PlthnI0ajzgHnJR58yIb5rYEvBr7JJKZK9K f7yWRCEMIGK1Xnh/GuzN0itZ61HPqX8D4gfVB2nsx9jhrElF763/bA== -----END CERTIFICATE-----Generated at Fri Aug 8 10:11:03 2025 by rpki-client