$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fdca01e9-81e7-3210-98f0-00a4f2706b84.roa File: fdca01e9-81e7-3210-98f0-00a4f2706b84.roa (raw, json) Hash identifier: NSEIlJQ2en46fQhNIOB/NU8HKwcWkhzVW2kb5UJ/9ng= Subject key identifier: A3:4B:98:F0:B6:A5:6C:D9:E3:76:39:19:27:27:0D:97:6D:6A:6A:31 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A2ABAEB0780316562E4FEE3C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fdca01e9-81e7-3210-98f0-00a4f2706b84.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 0 IP address blocks: 199.7.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:eb:07:80:31:65:62:e4:fe:e3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=67cdb1dc-86a9-4b6e-8fd4-29d2bc51ee4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:13:cb:ba:c0:4e:00:35:57:84:8e:69:99:8c: 3d:64:24:d9:28:9f:ec:7f:02:87:bb:bc:aa:dc:de: 89:f1:a0:2d:c9:ae:96:eb:04:53:b4:a8:ba:7d:32: 6d:c2:ef:0b:64:6d:07:bd:0f:68:93:14:9d:4f:e0: 10:9c:93:ba:4e:16:18:74:57:16:23:4f:da:26:c1: f0:a5:d6:f4:c2:e7:1c:98:18:3f:af:d1:96:d4:10: 8a:11:d9:ac:77:b7:06:68:6c:d2:56:3e:7d:00:28: b7:fe:41:ba:56:29:31:bf:9c:8c:fb:87:86:d2:87: eb:f0:03:18:40:20:10:c4:5f:34:74:a3:75:85:bf: 55:77:a1:f2:e3:55:e4:f1:f0:c7:04:19:16:37:86: 1a:c9:7b:0c:e4:b0:06:f3:da:11:a3:eb:fb:84:8f: f9:88:f5:ab:81:fc:bc:18:ff:a7:25:42:73:3b:f8: d4:af:48:d9:40:30:ef:9a:d4:e0:de:d1:00:77:cb: 80:0e:aa:43:20:fd:f2:28:16:c3:33:ec:02:f4:f1: 2e:91:04:d6:73:11:d3:01:58:b1:24:df:00:66:54: 94:66:5e:94:d3:39:27:99:a6:e9:54:f5:5d:20:42: 0c:bb:b5:a7:db:ae:0e:d5:7f:f1:a9:ce:fa:af:00: c9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:4B:98:F0:B6:A5:6C:D9:E3:76:39:19:27:27:0D:97:6D:6A:6A:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fdca01e9-81e7-3210-98f0-00a4f2706b84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:13:f6:fc:fd:f1:4c:f1:74:75:15:3d:38:e0:68:f2:89:0a: 7f:6b:75:2d:1d:1e:97:fe:ca:e4:2c:05:e5:95:3f:8a:37:19: 6c:9c:27:75:0a:de:cc:71:38:16:32:b5:28:1f:95:80:11:d7: 36:1f:14:4f:f7:95:52:9d:94:9f:c1:47:45:78:c4:09:b9:e8: 33:7b:ac:66:7b:a8:b6:9d:9f:05:41:51:ff:5b:5b:36:ea:19: 99:8e:8e:1c:7f:79:91:4e:ba:a4:ba:2a:6c:d1:0d:96:08:8a: b3:7e:97:d0:e7:8a:67:92:ed:e0:e6:f0:5c:32:ea:53:fd:0a: 61:4a:e0:f0:4a:ef:68:7a:74:a6:f0:33:af:b2:3f:13:94:cc: 3b:a3:20:01:73:7e:9f:91:84:33:9f:d1:c6:57:6b:9f:63:00: 40:a4:6b:24:fb:24:2a:ca:82:1b:b4:bd:a4:69:6c:7d:00:29: 35:46:bb:c5:30:86:a7:5f:a7:94:88:dd:a5:45:9a:e9:c0:f1: 82:c9:60:1b:35:09:c3:97:38:5e:8e:ae:52:99:06:7a:e6:50: c0:0d:84:65:6f:ba:d2:c6:11:b6:59:b6:07:24:57:a1:0a:d6: 1c:cc:67:59:7b:4d:c8:b4:65:db:dc:f9:7b:22:55:4b:d3:71: 24:cc:d7:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoquusHgDFlYuT+48AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk NjdjZGIxZGMtODZhOS00YjZlLThmZDQtMjlkMmJjNTFlZTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBPLusBOADVXhI5pmYw9ZCTZKJ/sfwKHu7yq 3N6J8aAtya6W6wRTtKi6fTJtwu8LZG0HvQ9okxSdT+AQnJO6ThYYdFcWI0/aJsHw pdb0wuccmBg/r9GW1BCKEdmsd7cGaGzSVj59ACi3/kG6Vikxv5yM+4eG0ofr8AMY QCAQxF80dKN1hb9Vd6Hy41Xk8fDHBBkWN4YayXsM5LAG89oRo+v7hI/5iPWrgfy8 GP+nJUJzO/jUr0jZQDDvmtTg3tEAd8uADqpDIP3yKBbDM+wC9PEukQTWcxHTAVix JN8AZlSUZl6U0zknmabpVPVdIEIMu7Wn264O1X/xqc76rwDJOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKNLmPC2pWzZ43Y5GScnDZdtamoxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmRjYTAxZTktODFlNy0z MjEwLTk4ZjAtMDBhNGYyNzA2Yjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwc6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEsT9vz98UzxdHUVPTjgaPKJCn9rdS0dHpf+yuQsBeWVP4o3GWycJ3UK 3sxxOBYytSgflYAR1zYfFE/3lVKdlJ/BR0V4xAm56DN7rGZ7qLadnwVBUf9bWzbq GZmOjhx/eZFOuqS6KmzRDZYIirN+l9DnimeS7eDm8Fwy6lP9CmFK4PBK72h6dKbw M6+yPxOUzDujIAFzfp+RhDOf0cZXa59jAECkayT7JCrKghu0vaRpbH0AKTVGu8Uw hqdfp5SI3aVFmunA8YLJYBs1CcOXOF6OrlKZBnrmUMANhGVvutLGEbZZtgckV6EK 1hzMZ1l7Tci0Zdvc+XsiVUvTcSTM1xg= -----END CERTIFICATE-----Generated at Sun Jun 15 13:23:08 2025 by rpki-client