$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/4116e98b-72e2-3f3b-9506-948edabc5cb7.roa File: 4116e98b-72e2-3f3b-9506-948edabc5cb7.roa (raw, json) Hash identifier: csUGP14EV85UBd4tkra9nBvPFGIsn+XN+cdFexM/5h8= Subject key identifier: ED:D7:E1:35:D5:14:70:DA:D8:98:CE:AB:E1:8B:BD:73:04:D1:FC:93 Certificate issuer: /CN=ad6556d7-60a4-4318-9d11-464fb8396d3e Certificate serial: 010D0C9F4328584A1E2AA1BF4EE409B9BB790F4C Authority key identifier: 5D:C1:FD:9A:63:85:C1:8F:46:52:4A:B8:C4:62:F5:34:24:BC:AF:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/4116e98b-72e2-3f3b-9506-948edabc5cb7.roa Signing time: Sun 08 Jun 2025 01:00:49 +0000 ROA not before: Sun 08 Jun 2025 01:00:49 +0000 ROA not after: Sat 06 Sep 2025 01:00:49 +0000 asID: 393225 IP address blocks: 199.212.0.0/24 maxlen: 24 2001:500:13::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1e:2a:a1:bf:4e:e4:09:b9:bb:79:0f:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad6556d7-60a4-4318-9d11-464fb8396d3e Validity Not Before: Jun 8 01:00:49 2025 GMT Not After : Sep 6 01:00:49 2025 GMT Subject: CN=b9d9a6fa-e391-4eab-81a1-894b1e865f93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ce:bd:bb:1b:96:59:ba:0b:dd:79:e0:8f:0a: e9:d1:91:2f:c3:a1:47:67:c1:c3:10:17:10:4e:50: 02:ab:1b:fe:1a:e6:4d:06:3d:31:88:d9:2e:13:76: 82:63:cb:e0:9d:a4:96:5b:96:9d:56:94:69:53:81: 23:bd:e0:d7:ef:56:1e:52:ef:48:85:9c:78:42:46: 57:94:3c:e6:ff:ec:b9:80:25:69:33:14:32:24:d2: 09:74:e6:6f:13:0d:cb:4a:da:17:3c:f9:e7:ee:d1: 0b:1f:9f:d9:8e:2a:ae:90:11:d5:a5:98:09:1c:64: c6:70:df:74:cd:b9:3e:37:28:3a:3e:da:73:3f:cd: 46:c1:da:5f:31:5b:3f:b4:30:33:66:4d:cb:62:78: f8:11:aa:6c:47:4d:3d:e6:09:80:32:68:c1:d8:48: d6:f0:63:a7:bb:84:b9:a0:99:1a:cb:5a:29:d9:c5: 49:7e:17:81:21:a2:74:a1:09:4a:c2:0f:10:f1:59: 0b:ef:b0:1c:82:08:e8:4a:39:f5:04:97:be:94:63: 0c:cc:99:6f:bc:73:d0:d6:05:59:17:74:fa:b4:a6: 0e:b1:50:af:bf:34:0c:f6:c6:59:20:fa:af:26:61: 84:99:88:02:1d:62:fb:67:46:0c:35:99:a9:65:57: 55:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:D7:E1:35:D5:14:70:DA:D8:98:CE:AB:E1:8B:BD:73:04:D1:FC:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/4116e98b-72e2-3f3b-9506-948edabc5cb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.crl X509v3 Authority Key Identifier: keyid:5D:C1:FD:9A:63:85:C1:8F:46:52:4A:B8:C4:62:F5:34:24:BC:AF:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer sbgp-ipAddrBlock: critical IPv4: 199.212.0.0/24 IPv6: 2001:500:13::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:57:fb:d5:f6:14:f7:99:42:d0:71:4c:3f:98:b0:79:8f:3f: 64:a2:b4:fa:04:fe:72:a5:da:b6:8f:fe:0f:c7:35:ed:c5:d3: fd:5f:cd:d2:72:20:24:bd:db:e9:8b:60:66:f8:d5:07:94:26: aa:d3:29:e0:36:20:40:90:b9:85:2a:9f:b6:28:51:b8:df:a3: 9a:cf:58:f7:ae:93:be:2d:92:33:b4:5f:8b:2b:2f:68:bc:1b: 56:e8:fb:6a:1a:49:b1:c8:2b:aa:3a:47:3f:5f:7e:ce:96:5d: e4:55:3a:b1:ea:14:ea:9b:75:b8:78:41:96:ad:af:9d:82:4c: b3:69:13:4e:70:25:d9:5c:29:fa:78:cf:a5:1b:28:07:4f:99: 34:08:54:e9:42:d5:fd:1f:78:7b:8d:8f:0b:a7:79:ed:39:d1: 37:0c:78:0d:9c:ab:bf:9e:78:93:e5:71:81:80:ff:8b:68:41: 25:23:16:c4:2b:18:4d:22:b5:aa:50:9a:de:b7:b2:3d:18:3d: 49:6e:2b:b5:a7:3c:ab:ff:91:3e:b1:9e:5e:9e:26:8d:50:c1: 93:e6:88:d6:9a:9e:66:fd:8d:c2:26:32:57:ed:42:92:cb:95: 8b:97:6c:c1:20:51:0b:d8:e7:70:0f:65:fc:ce:47:52:d5:a6: c1:ca:82:9a -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEoeKqG/TuQJubt5D0wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWQ2NTU2ZDctNjBhNC00MzE4LTlkMTEtNDY0ZmI4Mzk2 ZDNlMB4XDTI1MDYwODAxMDA0OVoXDTI1MDkwNjAxMDA0OVowLzEtMCsGA1UEAxMk YjlkOWE2ZmEtZTM5MS00ZWFiLTgxYTEtODk0YjFlODY1ZjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmc69uxuWWboL3Xngjwrp0ZEvw6FHZ8HDEBcQ TlACqxv+GuZNBj0xiNkuE3aCY8vgnaSWW5adVpRpU4EjveDX71YeUu9IhZx4QkZX lDzm/+y5gCVpMxQyJNIJdOZvEw3LStoXPPnn7tELH5/ZjiqukBHVpZgJHGTGcN90 zbk+Nyg6PtpzP81GwdpfMVs/tDAzZk3LYnj4EapsR0095gmAMmjB2EjW8GOnu4S5 oJkay1op2cVJfheBIaJ0oQlKwg8Q8VkL77AcggjoSjn1BJe+lGMMzJlvvHPQ1gVZ F3T6tKYOsVCvvzQM9sZZIPqvJmGEmYgCHWL7Z0YMNZmpZVdVewIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFO3X4TXVFHDa2JjOq+GLvXME0fyTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hZDY1 NTZkNy02MGE0LTQzMTgtOWQxMS00NjRmYjgzOTZkM2UvNDExNmU5OGItNzJlMi0z ZjNiLTk1MDYtOTQ4ZWRhYmM1Y2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYWQ2NTU2ZDctNjBhNC00MzE4LTlk MTEtNDY0ZmI4Mzk2ZDNlL2FkNjU1NmQ3LTYwYTQtNDMxOC05ZDExLTQ2NGZiODM5 NmQzZS5jcmwwHwYDVR0jBBgwFoAUXcH9mmOFwY9GUkq4xGL1NCS8r44wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hZDY1NTZkNy02MGE0LTQzMTgtOWQxMS00NjRm YjgzOTZkM2UuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAx9QAMA8E AgACMAkDBwAgAQUAABMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAJVf71fYU95lC0HFMP5iweY8/ZKK0+gT+ cqXato/+D8c17cXT/V/N0nIgJL3b6YtgZvjVB5QmqtMp4DYgQJC5hSqftihRuN+j ms9Y966Tvi2SM7RfiysvaLwbVuj7ahpJscgrqjpHP19+zpZd5FU6seoU6pt1uHhB lq2vnYJMs2kTTnAl2Vwp+njPpRsoB0+ZNAhU6ULV/R94e42PC6d57TnRNwx4DZyr v554k+VxgYD/i2hBJSMWxCsYTSK1qlCa3reyPRg9SW4rtac8q/+RPrGeXp4mjVDB k+aI1pqeZv2NwiYyV+1CksuVi5dswSBRC9jncA9l/M5HUtWmwcqCmg== -----END CERTIFICATE-----Generated at Wed Jun 18 19:32:26 2025 by rpki-client