$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/ba0578d9-926a-35fa-a460-8eae2d199b7f.roa File: ba0578d9-926a-35fa-a460-8eae2d199b7f.roa (raw, json) Hash identifier: JbsxyRWhl9Kgk1aYDDsNSv9O0EqEvJHcjeUCzfyr5BU= Subject key identifier: 01:0D:FB:5A:63:22:1B:A2:38:95:8D:ED:F4:30:65:15:C0:E9:22:D1 Certificate issuer: /CN=4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7 Certificate serial: 010D0C9F43285849F87A83D834905E6EB1C4D800 Authority key identifier: F7:C8:46:F1:D6:FE:04:68:EA:AC:40:E7:0B:41:CA:28:F8:25:DA:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/ba0578d9-926a-35fa-a460-8eae2d199b7f.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 53589 IP address blocks: 199.59.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:83:d8:34:90:5e:6e:b1:c4:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7 Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=f9e50f75-f0f2-408d-9dc8-4f79dd8a8353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:21:3e:76:53:00:c8:5e:40:30:fb:7c:95:8e: 0d:66:05:50:39:15:a1:30:33:df:68:eb:3e:d9:e3: 47:d1:96:9f:2f:ee:3c:68:1b:ce:9c:c1:b3:4d:44: 34:72:e7:4c:30:6e:8d:6e:88:b1:d2:82:fc:f2:b9: 65:95:7a:50:05:fc:d7:e3:8e:e3:72:fb:a0:cc:20: ef:66:29:1f:5c:63:b9:ce:73:d8:d8:7d:16:13:ff: 97:c8:28:a8:12:84:2e:d8:6b:cf:42:20:4d:9e:42: 27:26:28:73:89:c2:c6:6f:cf:7a:75:07:b2:3c:67: 66:34:02:63:f1:c7:64:e0:bd:8e:81:07:4f:06:89: c8:41:83:e2:7c:7c:7e:ca:ba:8e:bd:f4:15:14:e3: 90:5c:43:fb:af:1e:3b:67:e1:5a:f7:0b:e5:2b:ea: 13:03:cb:29:1e:ba:07:e2:e6:a1:b3:5b:24:e4:19: 15:9c:40:cc:bc:b6:05:83:b6:f8:aa:8c:84:e9:4e: e5:02:7e:a6:54:0c:0a:d2:1d:26:e9:d3:da:5b:71: 9a:36:35:a5:1a:7b:9c:b4:74:32:5e:43:34:70:38: 9b:2f:02:e9:45:93:3a:32:2f:e1:7a:c9:10:c1:77: b6:04:1e:e0:31:9f:2a:f7:13:dd:1a:ce:f2:78:a6: 14:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:0D:FB:5A:63:22:1B:A2:38:95:8D:ED:F4:30:65:15:C0:E9:22:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/ba0578d9-926a-35fa-a460-8eae2d199b7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.crl X509v3 Authority Key Identifier: keyid:F7:C8:46:F1:D6:FE:04:68:EA:AC:40:E7:0B:41:CA:28:F8:25:DA:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.cer sbgp-ipAddrBlock: critical IPv4: 199.59.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:d4:7c:c3:0c:87:55:58:8c:54:f6:a7:3d:ab:5a:d3:20:b4: e1:0a:f1:ce:0c:8f:a2:b5:8e:48:81:62:67:89:21:39:76:5c: 23:e4:8f:ab:66:ca:5a:f1:e3:b8:dd:db:4a:8e:c9:13:94:94: 3f:d7:dd:a0:8d:05:da:5d:07:1c:45:a4:12:05:73:5b:f2:a8: b7:57:c6:0f:6c:70:e8:fa:e4:1b:67:64:52:d4:5c:2b:21:09: c2:ef:07:64:1b:3d:41:3b:bd:fd:c0:47:9b:af:e4:af:ad:92: 7f:cf:77:fd:f8:06:b6:26:62:b4:c0:08:9a:54:11:7b:c9:2c: d6:cc:58:88:54:ad:fe:59:f6:af:0c:a0:ba:ae:b8:e6:c9:70: 00:f3:c1:65:1a:70:67:c4:a9:49:53:f9:cd:46:4e:42:fb:e0: d0:e4:70:92:54:8d:55:82:14:91:19:af:d0:5d:1c:b2:ea:38: 65:77:2e:db:45:b1:20:7c:66:9b:8f:52:b0:a9:ae:50:cd:fd: e2:22:d2:df:84:48:a6:f4:69:cf:83:df:94:ad:5a:c8:b7:28: b7:8d:6c:18:a6:35:af:0e:89:f0:4b:e5:ba:2d:36:8b:8d:3c: b4:5d:35:d4:25:8e:51:f9:77:54:cd:27:ab:91:b9:b7:3f:46: be:fc:75:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn4eoPYNJBebrHE2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJlNTFlODItN2NjNS00NTAwLWEwZmYtY2MzYTlkNWUz ZmI3MB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk ZjllNTBmNzUtZjBmMi00MDhkLTlkYzgtNGY3OWRkOGE4MzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSE+dlMAyF5AMPt8lY4NZgVQORWhMDPfaOs+ 2eNH0ZafL+48aBvOnMGzTUQ0cudMMG6Nboix0oL88rlllXpQBfzX447jcvugzCDv ZikfXGO5znPY2H0WE/+XyCioEoQu2GvPQiBNnkInJihzicLGb896dQeyPGdmNAJj 8cdk4L2OgQdPBonIQYPifHx+yrqOvfQVFOOQXEP7rx47Z+Fa9wvlK+oTA8spHroH 4uahs1sk5BkVnEDMvLYFg7b4qoyE6U7lAn6mVAwK0h0m6dPaW3GaNjWlGnuctHQy XkM0cDibLwLpRZM6Mi/heskQwXe2BB7gMZ8q9xPdGs7yeKYUewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAEN+1pjIhuiOJWN7fQwZRXA6SLRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YmU1 MWU4Mi03Y2M1LTQ1MDAtYTBmZi1jYzNhOWQ1ZTNmYjcvYmEwNTc4ZDktOTI2YS0z NWZhLWE0NjAtOGVhZTJkMTk5YjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGJlNTFlODItN2NjNS00NTAwLWEw ZmYtY2MzYTlkNWUzZmI3LzRiZTUxZTgyLTdjYzUtNDUwMC1hMGZmLWNjM2E5ZDVl M2ZiNy5jcmwwHwYDVR0jBBgwFoAU98hG8db+BGjqrEDnC0HKKPgl2lkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80YmU1MWU4Mi03Y2M1LTQ1MDAtYTBmZi1jYzNh OWQ1ZTNmYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxzv0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHnUfMMMh1VYjFT2pz2rWtMgtOEK8c4Mj6K1jkiBYmeJITl2XCPkj6tm ylrx47jd20qOyROUlD/X3aCNBdpdBxxFpBIFc1vyqLdXxg9scOj65BtnZFLUXCsh CcLvB2QbPUE7vf3AR5uv5K+tkn/Pd/34BrYmYrTACJpUEXvJLNbMWIhUrf5Z9q8M oLquuObJcADzwWUacGfEqUlT+c1GTkL74NDkcJJUjVWCFJEZr9BdHLLqOGV3LttF sSB8ZpuPUrCprlDN/eIi0t+ESKb0ac+D35StWsi3KLeNbBimNa8OifBL5botNouN PLRdNdQljlH5d1TNJ6uRubc/Rr78dTA= -----END CERTIFICATE-----Generated at Sun Jun 15 15:12:32 2025 by rpki-client