$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12e662f6-4810-4bf7-8722-8635fb0c7747/412f1ed7-2b8b-3407-94f1-9e1096b8381d.roa File: 412f1ed7-2b8b-3407-94f1-9e1096b8381d.roa (raw, json) Hash identifier: j4/HAtKOkuhbNv78bXKcz38mMq6lb/1CO9Kp4iVQN1w= Subject key identifier: C3:19:1B:BD:47:07:41:93:6B:2F:99:ED:C5:2C:01:32:D5:84:79:B2 Certificate issuer: /CN=12e662f6-4810-4bf7-8722-8635fb0c7747 Certificate serial: 010D0C9F43285849FE0FF71C95C6E454D9CA8300 Authority key identifier: 60:DC:22:41:09:D3:E6:9D:BA:A4:51:A9:4E:F3:C6:25:9B:0E:12:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12e662f6-4810-4bf7-8722-8635fb0c7747.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12e662f6-4810-4bf7-8722-8635fb0c7747/412f1ed7-2b8b-3407-94f1-9e1096b8381d.roa Signing time: Tue 27 May 2025 13:01:05 +0000 ROA not before: Tue 27 May 2025 13:01:05 +0000 ROA not after: Mon 25 Aug 2025 13:01:05 +0000 asID: 33403 IP address blocks: 128.254.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12e662f6-4810-4bf7-8722-8635fb0c7747/12e662f6-4810-4bf7-8722-8635fb0c7747.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12e662f6-4810-4bf7-8722-8635fb0c7747/12e662f6-4810-4bf7-8722-8635fb0c7747.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12e662f6-4810-4bf7-8722-8635fb0c7747.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:0f:f7:1c:95:c6:e4:54:d9:ca:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12e662f6-4810-4bf7-8722-8635fb0c7747 Validity Not Before: May 27 13:01:05 2025 GMT Not After : Aug 25 13:01:05 2025 GMT Subject: CN=ca3982f1-98bc-4674-91e9-6ec16ddf0f0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:8a:33:93:5e:bf:06:f0:c5:2a:96:51:23:3f: bb:b4:ad:f8:5f:d3:76:32:df:cc:03:e7:fb:ba:45: f4:e4:ff:c7:8b:07:79:54:82:ae:4b:06:e5:7e:01: 02:04:0f:87:7b:c1:a1:55:82:1f:5c:65:92:76:b1: 5c:28:33:b1:2f:3e:95:8a:8f:16:03:dc:56:76:ba: 9a:d3:95:15:ff:b0:f4:c7:29:c9:38:8a:45:96:09: 2c:9a:82:75:1f:26:95:25:b2:33:ea:b9:ae:0e:fb: 65:ff:30:79:ed:43:ce:5a:f8:05:4a:ca:d5:ad:ff: 06:74:37:06:7d:af:5a:0f:ba:c9:6b:47:ab:4d:78: 04:c0:39:25:41:55:81:ba:13:18:da:1f:05:29:36: 1b:66:81:82:16:87:f5:44:ab:e8:6f:c0:f0:91:1a: 86:e8:cb:b2:61:25:a0:03:94:c7:97:b4:f4:ac:63: 03:aa:a1:d9:e4:3a:db:63:84:88:dd:1d:82:3b:d2: cc:aa:69:b5:29:e7:46:ba:5a:66:43:9a:d2:4a:46: db:fc:32:a3:50:40:7a:44:3a:c4:3d:a8:52:53:18: d8:dc:7c:dc:18:10:17:55:96:c0:4e:53:ec:7b:1a: 1d:e5:f2:c0:86:34:d6:8f:4b:cf:fd:d1:93:8f:1e: 50:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:19:1B:BD:47:07:41:93:6B:2F:99:ED:C5:2C:01:32:D5:84:79:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12e662f6-4810-4bf7-8722-8635fb0c7747/412f1ed7-2b8b-3407-94f1-9e1096b8381d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12e662f6-4810-4bf7-8722-8635fb0c7747/12e662f6-4810-4bf7-8722-8635fb0c7747.crl X509v3 Authority Key Identifier: keyid:60:DC:22:41:09:D3:E6:9D:BA:A4:51:A9:4E:F3:C6:25:9B:0E:12:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12e662f6-4810-4bf7-8722-8635fb0c7747.cer sbgp-ipAddrBlock: critical IPv4: 128.254.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:f2:72:f2:08:dc:13:2e:2d:2e:53:ec:1b:61:ec:71:85:b5: 9e:a0:9a:d6:95:39:9d:1f:da:ee:28:95:e1:81:90:c0:ea:73: ff:67:e5:00:1f:98:84:d9:35:03:a1:33:1f:41:05:97:13:78: d5:18:ab:02:5f:55:04:42:f4:aa:49:ff:07:ff:68:de:4e:8a: 1f:f9:03:a5:83:c6:d0:c2:f4:46:43:4a:b1:1f:3b:24:23:bd: bf:de:4f:f3:be:61:88:bc:61:f1:94:78:6d:0c:14:23:9b:25: 45:0c:05:91:77:fb:27:55:80:6b:3e:c7:71:c6:08:32:4f:9b: 7b:b6:cc:00:83:ad:e9:c4:2c:63:fe:bb:52:ed:b6:54:3f:70: 88:cf:5f:d6:41:ec:c6:25:a1:7a:16:52:ec:79:90:a9:5a:12: a5:82:20:12:12:0c:28:0a:4b:0f:84:1d:87:5d:1d:a6:a4:c4: 79:7c:c7:03:2b:cf:1f:8d:b0:0e:5a:6b:42:e5:e0:8a:9c:13: 90:4d:3d:5b:f1:88:0a:7e:45:3f:d2:6b:1e:f3:c8:51:37:00: 4a:2d:8e:37:d0:4d:4a:6d:00:c2:f5:86:f6:30:33:4a:79:e5: 1d:e9:0f:a8:fb:4f:b3:05:05:68:f1:b9:c6:1a:a6:68:08:10: 54:2f:be:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn+D/cclcbkVNnKgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTJlNjYyZjYtNDgxMC00YmY3LTg3MjItODYzNWZiMGM3 NzQ3MB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk Y2EzOTgyZjEtOThiYy00Njc0LTkxZTktNmVjMTZkZGYwZjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4ozk16/BvDFKpZRIz+7tK34X9N2Mt/MA+f7 ukX05P/Hiwd5VIKuSwblfgECBA+He8GhVYIfXGWSdrFcKDOxLz6Vio8WA9xWdrqa 05UV/7D0xynJOIpFlgksmoJ1HyaVJbIz6rmuDvtl/zB57UPOWvgFSsrVrf8GdDcG fa9aD7rJa0erTXgEwDklQVWBuhMY2h8FKTYbZoGCFof1RKvob8DwkRqG6MuyYSWg A5THl7T0rGMDqqHZ5DrbY4SI3R2CO9LMqmm1KedGulpmQ5rSSkbb/DKjUEB6RDrE PahSUxjY3HzcGBAXVZbATlPsexod5fLAhjTWj0vP/dGTjx5Q7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMMZG71HB0GTay+Z7cUsATLVhHmyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xMmU2 NjJmNi00ODEwLTRiZjctODcyMi04NjM1ZmIwYzc3NDcvNDEyZjFlZDctMmI4Yi0z NDA3LTk0ZjEtOWUxMDk2YjgzODFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTJlNjYyZjYtNDgxMC00YmY3LTg3 MjItODYzNWZiMGM3NzQ3LzEyZTY2MmY2LTQ4MTAtNGJmNy04NzIyLTg2MzVmYjBj Nzc0Ny5jcmwwHwYDVR0jBBgwFoAUYNwiQQnT5p26pFGpTvPGJZsOEqgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xMmU2NjJmNi00ODEwLTRiZjctODcyMi04NjM1 ZmIwYzc3NDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgP7zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJPycvII3BMuLS5T7Bth7HGFtZ6gmtaVOZ0f2u4oleGBkMDqc/9n5QAf mITZNQOhMx9BBZcTeNUYqwJfVQRC9KpJ/wf/aN5Oih/5A6WDxtDC9EZDSrEfOyQj vb/eT/O+YYi8YfGUeG0MFCObJUUMBZF3+ydVgGs+x3HGCDJPm3u2zACDrenELGP+ u1LttlQ/cIjPX9ZB7MYloXoWUux5kKlaEqWCIBISDCgKSw+EHYddHaakxHl8xwMr zx+NsA5aa0Ll4IqcE5BNPVvxiAp+RT/Sax7zyFE3AEotjjfQTUptAML1hvYwM0p5 5R3pD6j7T7MFBWjxucYapmgIEFQvvko= -----END CERTIFICATE-----Generated at Sat Aug 9 14:24:22 2025 by rpki-client