$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd/9b028df0-ef35-3987-ae87-6cfc3001a9f7.roa File: 9b028df0-ef35-3987-ae87-6cfc3001a9f7.roa (raw, json) Hash identifier: 42PIKdjyMYrcgQjpJl4b+dKmEfkFZanjmX2ie6nHz7c= Subject key identifier: 3A:84:52:E9:28:3B:55:EA:BA:F6:AE:37:3E:1E:20:2A:48:A0:A3:DE Certificate issuer: /CN=ecc87e4f-7e3a-437b-9f59-2f2863b974dd Certificate serial: 010D0C9F4328584A2D8585A3A7071F50DCA8FAC0 Authority key identifier: B4:C5:18:9D:6C:7A:9B:3C:C8:5B:75:A6:6D:C3:8A:A2:F0:F1:C0:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd/9b028df0-ef35-3987-ae87-6cfc3001a9f7.roa Signing time: Fri 13 Jun 2025 13:01:04 +0000 ROA not before: Fri 13 Jun 2025 13:01:04 +0000 ROA not after: Thu 11 Sep 2025 13:01:04 +0000 asID: 16509 IP address blocks: 199.43.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd/ecc87e4f-7e3a-437b-9f59-2f2863b974dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd/ecc87e4f-7e3a-437b-9f59-2f2863b974dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2d:85:85:a3:a7:07:1f:50:dc:a8:fa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecc87e4f-7e3a-437b-9f59-2f2863b974dd Validity Not Before: Jun 13 13:01:04 2025 GMT Not After : Sep 11 13:01:04 2025 GMT Subject: CN=b364abfe-9c4f-4109-a4dd-f08054a1f0ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:9b:d2:db:61:dc:a4:be:40:13:f2:dd:8f:d3: 72:18:1e:1c:a9:67:7f:ad:06:ed:80:78:67:96:5f: 69:49:16:b6:63:9d:3f:26:bb:8f:6a:49:03:95:7d: b1:6b:50:be:2d:60:6d:c2:97:01:41:91:0e:9e:7e: 1d:0e:87:a4:a7:9d:b3:27:f4:b6:ff:ec:f2:91:03: c0:0d:50:68:32:33:ad:69:1a:9b:d5:67:a2:38:8e: fe:cf:d6:6e:fc:d1:3f:f8:a2:7b:11:aa:48:03:19: 20:f7:28:d8:24:eb:d9:b6:2e:9f:81:95:a7:3e:3b: 23:2d:37:fa:24:89:28:75:21:2b:f7:e5:ea:06:6c: 82:84:15:18:b8:c8:46:45:01:a3:76:99:39:95:74: 5b:dc:ab:62:c0:9c:ab:4e:4e:0d:80:8c:fe:90:4a: 37:f9:77:70:a6:c3:12:52:25:31:b1:eb:01:74:0a: 24:8c:73:de:6e:0c:c5:31:5d:37:5a:9f:78:08:91: 19:22:bd:d7:4e:a1:af:56:23:30:31:33:c1:0b:5f: 11:1c:24:92:bb:d4:f0:b9:1b:dd:6f:67:f4:dd:dd: bf:dd:c9:49:4b:15:09:60:5e:00:fd:3a:c7:06:44: 7c:af:a5:9b:ad:d5:f1:e7:15:b6:5f:5c:3d:67:8e: a7:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:84:52:E9:28:3B:55:EA:BA:F6:AE:37:3E:1E:20:2A:48:A0:A3:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd/9b028df0-ef35-3987-ae87-6cfc3001a9f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd/ecc87e4f-7e3a-437b-9f59-2f2863b974dd.crl X509v3 Authority Key Identifier: keyid:B4:C5:18:9D:6C:7A:9B:3C:C8:5B:75:A6:6D:C3:8A:A2:F0:F1:C0:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd.cer sbgp-ipAddrBlock: critical IPv4: 199.43.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:81:1a:0c:6b:c8:77:50:c2:74:74:0e:e8:78:a9:2e:f7:88: 0e:14:75:79:c6:fe:89:30:c0:ee:89:db:eb:85:30:b4:3d:3b: 03:6f:a0:0a:a7:4f:07:af:65:90:b2:c5:23:19:04:8e:fd:7f: 6e:ec:ec:08:5f:16:2c:51:29:c0:95:47:4c:16:76:90:8e:fc: 2a:33:c8:35:ce:9b:7b:67:4c:4d:0b:23:28:ed:6b:25:76:ad: 6a:fc:cd:c6:08:de:7a:82:c4:28:ac:90:b2:6e:38:40:9b:5a: 99:a3:e5:4f:a1:e3:b1:e7:af:1f:1e:f2:b8:c2:7b:0c:b0:04: f3:c6:49:8f:d5:05:f6:b0:bd:15:fa:22:e8:22:a7:b2:58:43: 35:a7:12:1e:4c:ed:14:d4:35:91:5c:fd:3b:12:a3:50:ef:05: 67:f5:fd:53:8a:1c:be:3e:10:12:5b:31:5d:8b:61:7f:1c:0e: f6:c6:9e:e8:db:e5:2f:a8:1c:d9:3d:81:35:c9:2a:e8:42:53: 53:fa:aa:e2:1f:b1:dd:86:93:08:82:20:8c:04:c8:9e:f7:9d: c3:12:51:00:54:06:e9:54:7b:38:04:70:65:b5:27:66:5d:92: 89:cb:56:87:57:99:9f:ab:bf:a0:13:74:f5:a0:17:75:19:15: 28:5a:84:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEothYWjpwcfUNyo+sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWNjODdlNGYtN2UzYS00MzdiLTlmNTktMmYyODYzYjk3 NGRkMB4XDTI1MDYxMzEzMDEwNFoXDTI1MDkxMTEzMDEwNFowLzEtMCsGA1UEAxMk YjM2NGFiZmUtOWM0Zi00MTA5LWE0ZGQtZjA4MDU0YTFmMGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipvS22HcpL5AE/Ldj9NyGB4cqWd/rQbtgHhn ll9pSRa2Y50/JruPakkDlX2xa1C+LWBtwpcBQZEOnn4dDoekp52zJ/S2/+zykQPA DVBoMjOtaRqb1WeiOI7+z9Zu/NE/+KJ7EapIAxkg9yjYJOvZti6fgZWnPjsjLTf6 JIkodSEr9+XqBmyChBUYuMhGRQGjdpk5lXRb3KtiwJyrTk4NgIz+kEo3+XdwpsMS UiUxsesBdAokjHPebgzFMV03Wp94CJEZIr3XTqGvViMwMTPBC18RHCSSu9TwuRvd b2f03d2/3clJSxUJYF4A/TrHBkR8r6WbrdXx5xW2X1w9Z46nyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDqEUukoO1XquvauNz4eICpIoKPeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lY2M4 N2U0Zi03ZTNhLTQzN2ItOWY1OS0yZjI4NjNiOTc0ZGQvOWIwMjhkZjAtZWYzNS0z OTg3LWFlODctNmNmYzMwMDFhOWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZWNjODdlNGYtN2UzYS00MzdiLTlm NTktMmYyODYzYjk3NGRkL2VjYzg3ZTRmLTdlM2EtNDM3Yi05ZjU5LTJmMjg2M2I5 NzRkZC5jcmwwHwYDVR0jBBgwFoAUtMUYnWx6mzzIW3WmbcOKovDxwOswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lY2M4N2U0Zi03ZTNhLTQzN2ItOWY1OS0yZjI4 NjNiOTc0ZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyu6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALaBGgxryHdQwnR0Duh4qS73iA4UdXnG/okwwO6J2+uFMLQ9OwNvoAqn TwevZZCyxSMZBI79f27s7AhfFixRKcCVR0wWdpCO/CozyDXOm3tnTE0LIyjtayV2 rWr8zcYI3nqCxCiskLJuOECbWpmj5U+h47Hnrx8e8rjCewywBPPGSY/VBfawvRX6 Iugip7JYQzWnEh5M7RTUNZFc/TsSo1DvBWf1/VOKHL4+EBJbMV2LYX8cDvbGnujb 5S+oHNk9gTXJKuhCU1P6quIfsd2GkwiCIIwEyJ73ncMSUQBUBulUezgEcGW1J2Zd konLVodXmZ+rv6ATdPWgF3UZFShahIo= -----END CERTIFICATE-----Generated at Wed Jun 18 16:34:21 2025 by rpki-client