$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7/58910c8c-d0fa-30e9-a2fd-18e1b80b12ab.roa File: 58910c8c-d0fa-30e9-a2fd-18e1b80b12ab.roa (raw, json) Hash identifier: q2S1VwZxOpx9EYkCo+RPlWIrDfekasLDJAK+ARplzjA= Subject key identifier: 59:0F:5B:A2:13:92:4D:EE:09:DE:5B:0D:CE:92:0D:38:72:06:BC:85 Certificate issuer: /CN=a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7 Certificate serial: 010D0C9F4328584A268AC5C63F7F55AB13C95240 Authority key identifier: 72:97:B1:4E:30:CE:D9:7E:2E:B8:0E:8B:95:8A:B7:1D:37:5D:45:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7/58910c8c-d0fa-30e9-a2fd-18e1b80b12ab.roa Signing time: Wed 11 Jun 2025 01:00:50 +0000 ROA not before: Wed 11 Jun 2025 01:00:50 +0000 ROA not after: Tue 09 Sep 2025 01:00:50 +0000 asID: 271 IP address blocks: 199.9.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:26:8a:c5:c6:3f:7f:55:ab:13:c9:52:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7 Validity Not Before: Jun 11 01:00:50 2025 GMT Not After : Sep 9 01:00:50 2025 GMT Subject: CN=2988bb7a-3cfb-47df-9d60-6a8af12d95e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:60:17:f0:ed:c5:6b:46:01:ca:0f:5c:34:21: 17:f5:b7:64:f7:ba:fa:fb:8a:87:19:d6:94:f6:39: 04:60:2e:77:c6:c1:7f:39:76:fe:f7:23:04:76:b5: a3:fc:07:83:ea:5d:8a:d9:fe:bf:f3:f3:76:11:e5: 5e:ce:ed:24:90:1a:6e:bc:fe:28:fc:59:e8:51:4e: 04:fa:d2:c9:87:93:cb:8e:ed:80:29:95:46:c4:f4: fd:96:16:0e:e4:e8:aa:03:8e:54:d6:f8:52:43:df: c5:71:8c:b5:40:ca:50:d9:92:a2:62:b0:e4:fe:a0: f6:b9:7a:75:87:6a:3d:ab:4a:37:c2:57:85:21:ec: fc:84:38:5e:42:af:4a:96:15:3d:c5:c7:58:49:db: ff:93:08:7f:50:2c:24:fc:0d:0e:2a:7a:3f:64:e4: d2:f5:de:e3:20:1d:96:75:2f:1b:8f:cc:37:66:73: b7:b1:4b:a2:56:04:c2:e1:73:de:11:b3:f0:84:0e: ce:13:9b:81:e4:64:ac:a8:52:e6:21:4c:5e:22:32: b8:5b:13:10:78:5e:14:2e:f6:ec:79:b7:f0:cf:dd: f1:4f:0b:37:8e:06:63:24:92:7b:98:c1:21:1c:e2: 43:69:70:fa:b4:ee:10:a7:24:c9:5c:92:4b:34:47: 07:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:0F:5B:A2:13:92:4D:EE:09:DE:5B:0D:CE:92:0D:38:72:06:BC:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7/58910c8c-d0fa-30e9-a2fd-18e1b80b12ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7.crl X509v3 Authority Key Identifier: keyid:72:97:B1:4E:30:CE:D9:7E:2E:B8:0E:8B:95:8A:B7:1D:37:5D:45:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7.cer sbgp-ipAddrBlock: critical IPv4: 199.9.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:aa:f2:f5:2d:82:c2:44:e0:e4:ff:79:23:31:8d:d0:a5:c1: b7:76:a3:e9:8f:89:32:ed:eb:44:3a:7e:65:96:ce:b1:4e:93: a7:45:d3:5d:fa:dc:04:29:e7:ac:19:e9:27:76:c6:c6:f2:d2: 44:fb:b8:72:cc:28:d0:9a:3b:3c:4c:a3:9e:88:4e:80:34:17: af:71:27:a4:d2:24:2e:36:db:52:c5:a1:53:54:e1:95:25:89: 5f:64:9c:09:f9:d4:6b:3f:9e:2e:5b:a3:a3:f7:49:3f:51:56: d4:05:60:3c:f7:4c:e6:34:52:19:bd:ab:d7:bb:30:b1:a4:bf: 12:31:e3:77:f8:9d:4c:94:cb:fb:82:0b:b8:e6:b8:f8:a1:4a: eb:0d:d5:d5:6e:d7:ad:6b:04:3e:cf:e1:40:f7:85:e5:71:9c: aa:1c:d7:db:c5:42:25:55:de:90:37:af:a9:6a:38:66:e5:25: 61:d5:5e:15:b5:d4:ed:be:65:8d:78:4f:82:88:ae:58:aa:b0: 9c:4b:e6:f6:94:f8:f3:32:62:e3:5c:76:3d:6f:58:6e:2a:2f: 52:6d:4d:94:98:db:96:e6:2c:99:fb:56:5b:b9:3f:62:3b:a9: bd:f8:bf:cc:41:01:4c:66:fa:2e:19:49:ca:41:16:c1:aa:fa: 2c:21:7f:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEomisXGP39VqxPJUkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFiMWZiNDMtZGIwYy00MmU0LWFkNjItNGUwODZjYTJm NGQ3MB4XDTI1MDYxMTAxMDA1MFoXDTI1MDkwOTAxMDA1MFowLzEtMCsGA1UEAxMk Mjk4OGJiN2EtM2NmYi00N2RmLTlkNjAtNmE4YWYxMmQ5NWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWAX8O3Fa0YByg9cNCEX9bdk97r6+4qHGdaU 9jkEYC53xsF/OXb+9yMEdrWj/AeD6l2K2f6/8/N2EeVezu0kkBpuvP4o/FnoUU4E +tLJh5PLju2AKZVGxPT9lhYO5OiqA45U1vhSQ9/FcYy1QMpQ2ZKiYrDk/qD2uXp1 h2o9q0o3wleFIez8hDheQq9KlhU9xcdYSdv/kwh/UCwk/A0OKno/ZOTS9d7jIB2W dS8bj8w3ZnO3sUuiVgTC4XPeEbPwhA7OE5uB5GSsqFLmIUxeIjK4WxMQeF4ULvbs ebfwz93xTws3jgZjJJJ7mMEhHOJDaXD6tO4QpyTJXJJLNEcHcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFkPW6ITkk3uCd5bDc6SDThyBryFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hMWIx ZmI0My1kYjBjLTQyZTQtYWQ2Mi00ZTA4NmNhMmY0ZDcvNTg5MTBjOGMtZDBmYS0z MGU5LWEyZmQtMThlMWI4MGIxMmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYTFiMWZiNDMtZGIwYy00MmU0LWFk NjItNGUwODZjYTJmNGQ3L2ExYjFmYjQzLWRiMGMtNDJlNC1hZDYyLTRlMDg2Y2Ey ZjRkNy5jcmwwHwYDVR0jBBgwFoAUcpexTjDO2X4uuA6LlYq3HTddRdcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hMWIxZmI0My1kYjBjLTQyZTQtYWQ2Mi00ZTA4 NmNhMmY0ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwk5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmq8vUtgsJE4OT/eSMxjdClwbd2o+mPiTLt60Q6fmWWzrFOk6dF0136 3AQp56wZ6Sd2xsby0kT7uHLMKNCaOzxMo56IToA0F69xJ6TSJC4221LFoVNU4ZUl iV9knAn51Gs/ni5bo6P3ST9RVtQFYDz3TOY0Uhm9q9e7MLGkvxIx43f4nUyUy/uC C7jmuPihSusN1dVu161rBD7P4UD3heVxnKoc19vFQiVV3pA3r6lqOGblJWHVXhW1 1O2+ZY14T4KIrliqsJxL5vaU+PMyYuNcdj1vWG4qL1JtTZSY25bmLJn7Vlu5P2I7 qb34v8xBAUxm+i4ZScpBFsGq+iwhfyc= -----END CERTIFICATE-----Generated at Sat Jun 14 12:22:52 2025 by rpki-client