$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/5861fc8a-2a76-347e-aeaa-e9f8d8fd8a81.roa File: 5861fc8a-2a76-347e-aeaa-e9f8d8fd8a81.roa (raw, json) Hash identifier: GlfVkWRuHgNcSG7/vPnlYwynNhORknyrByscYEzF8jk= Subject key identifier: 29:A5:E8:90:BA:2E:89:27:89:D7:23:09:65:8B:1C:AE:4B:C0:18:26 Certificate issuer: /CN=399fbcba-412a-4e4c-8856-d893d23bdd7b Certificate serial: 010D0C9F4328584A0D6A897634CABDDC39C99EE0 Authority key identifier: 57:3E:0A:60:D6:16:F9:89:C9:A5:E8:93:58:1A:F9:02:3D:20:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/5861fc8a-2a76-347e-aeaa-e9f8d8fd8a81.roa Signing time: Mon 02 Jun 2025 01:00:49 +0000 ROA not before: Mon 02 Jun 2025 01:00:49 +0000 ROA not after: Sun 31 Aug 2025 01:00:49 +0000 asID: 399409 IP address blocks: 198.203.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/399fbcba-412a-4e4c-8856-d893d23bdd7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/399fbcba-412a-4e4c-8856-d893d23bdd7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0d:6a:89:76:34:ca:bd:dc:39:c9:9e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=399fbcba-412a-4e4c-8856-d893d23bdd7b Validity Not Before: Jun 2 01:00:49 2025 GMT Not After : Aug 31 01:00:49 2025 GMT Subject: CN=ca2b4bfa-8756-436d-a36a-b79481dae431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:73:05:e9:b7:24:d6:6b:aa:7f:86:45:a4:67: 58:a4:98:32:2b:c6:c3:b9:2e:60:61:24:4c:c9:6e: d4:b6:33:8c:24:91:69:d1:df:ee:70:e6:03:d5:1c: 56:cc:5b:20:95:ad:1a:67:b4:de:8f:4a:cd:00:3c: 11:00:85:3a:3b:d5:74:6e:a4:11:c8:7e:f6:ff:1f: 1c:75:9e:4e:f5:5a:97:e9:f0:cf:e8:ef:ff:e2:01: 10:ea:57:9a:03:e1:8b:51:b1:86:00:bc:ac:7c:f5: 85:02:1c:70:52:cc:ac:a3:97:0c:01:16:7e:c1:ac: d8:c2:7f:3d:b6:1f:07:a0:31:e7:5d:87:94:02:67: 26:15:59:b3:e2:ed:7c:69:e6:11:cc:54:bf:01:5c: f4:80:1f:29:1a:ab:c1:f3:1b:e2:c9:c1:25:23:1d: 33:d6:60:b8:f3:7b:bd:3c:4d:9c:ac:e8:fb:fe:d3: ae:d8:95:2b:8a:69:97:30:28:7d:85:5e:c7:fc:2e: ad:e8:04:fc:c8:f6:b5:82:b8:b2:56:e8:26:86:ea: 5a:4a:be:65:cd:e0:86:8c:af:f9:6c:4a:53:fe:96: dc:9b:cf:e7:b7:dc:90:83:01:98:b9:5c:73:47:99: af:1b:fe:f6:f0:9b:d2:be:93:b5:7e:27:c2:1b:75: 9a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:A5:E8:90:BA:2E:89:27:89:D7:23:09:65:8B:1C:AE:4B:C0:18:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/5861fc8a-2a76-347e-aeaa-e9f8d8fd8a81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/399fbcba-412a-4e4c-8856-d893d23bdd7b.crl X509v3 Authority Key Identifier: keyid:57:3E:0A:60:D6:16:F9:89:C9:A5:E8:93:58:1A:F9:02:3D:20:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b.cer sbgp-ipAddrBlock: critical IPv4: 198.203.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:73:f3:da:f4:7b:a8:57:ee:ae:fd:ab:ea:9c:8c:2b:f1:81: 41:e9:44:c9:63:d6:f5:e4:85:ce:4f:8a:65:14:09:97:36:ae: 78:00:15:10:76:5d:83:2f:c6:f9:d8:47:f0:f2:3c:2a:e0:42: 08:4a:7a:04:2a:d4:db:55:be:66:fc:42:3a:58:df:1b:42:6e: b6:f0:a3:fe:04:ef:6e:22:a7:56:50:1d:26:30:96:20:67:cb: 2d:8b:49:19:1f:88:fe:ef:03:61:fc:01:3d:85:b6:fe:fe:28: c7:56:d3:4a:c9:16:b5:56:69:3b:a9:9d:49:77:a7:e7:a9:8d: e7:6f:4e:c4:50:5b:0c:51:37:36:2d:5b:4b:de:80:9f:ad:b1: 37:29:d6:c0:59:c3:e4:63:19:6d:45:f8:b1:4e:b5:51:78:e7: cb:9f:70:b9:da:aa:a3:09:28:a5:a3:2b:16:a3:67:b0:5e:a9: 75:f8:a2:cd:92:39:ad:a0:18:1a:c1:a5:d2:cb:4b:cf:2c:5e: c6:be:3f:37:57:49:7e:94:2d:18:75:d3:fa:a7:94:6f:4f:d3: 42:3c:f4:b6:6c:08:1a:7b:97:c1:aa:73:78:ec:6e:a6:ec:95: 60:4a:88:1a:ab:8f:8b:b2:c4:59:e3:50:fa:50:fd:d3:4e:8a: f2:b1:32:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoNaol2NMq93DnJnuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk5ZmJjYmEtNDEyYS00ZTRjLTg4NTYtZDg5M2QyM2Jk ZDdiMB4XDTI1MDYwMjAxMDA0OVoXDTI1MDgzMTAxMDA0OVowLzEtMCsGA1UEAxMk Y2EyYjRiZmEtODc1Ni00MzZkLWEzNmEtYjc5NDgxZGFlNDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXMF6bck1muqf4ZFpGdYpJgyK8bDuS5gYSRM yW7UtjOMJJFp0d/ucOYD1RxWzFsgla0aZ7Tej0rNADwRAIU6O9V0bqQRyH72/x8c dZ5O9VqX6fDP6O//4gEQ6leaA+GLUbGGALysfPWFAhxwUsyso5cMARZ+wazYwn89 th8HoDHnXYeUAmcmFVmz4u18aeYRzFS/AVz0gB8pGqvB8xviycElIx0z1mC483u9 PE2crOj7/tOu2JUrimmXMCh9hV7H/C6t6AT8yPa1griyVugmhupaSr5lzeCGjK/5 bEpT/pbcm8/nt9yQgwGYuVxzR5mvG/728JvSvpO1fifCG3WaeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCml6JC6LoknidcjCWWLHK5LwBgmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zOTlm YmNiYS00MTJhLTRlNGMtODg1Ni1kODkzZDIzYmRkN2IvNTg2MWZjOGEtMmE3Ni0z NDdlLWFlYWEtZTlmOGQ4ZmQ4YTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzk5ZmJjYmEtNDEyYS00ZTRjLTg4 NTYtZDg5M2QyM2JkZDdiLzM5OWZiY2JhLTQxMmEtNGU0Yy04ODU2LWQ4OTNkMjNi ZGQ3Yi5jcmwwHwYDVR0jBBgwFoAUVz4KYNYW+YnJpeiTWBr5Aj0g5uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zOTlmYmNiYS00MTJhLTRlNGMtODg1Ni1kODkz ZDIzYmRkN2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxsvrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxz89r0e6hX7q79q+qcjCvxgUHpRMlj1vXkhc5PimUUCZc2rngAFRB2 XYMvxvnYR/DyPCrgQghKegQq1NtVvmb8QjpY3xtCbrbwo/4E724ip1ZQHSYwliBn yy2LSRkfiP7vA2H8AT2Ftv7+KMdW00rJFrVWaTupnUl3p+epjedvTsRQWwxRNzYt W0vegJ+tsTcp1sBZw+RjGW1F+LFOtVF458ufcLnaqqMJKKWjKxajZ7BeqXX4os2S Oa2gGBrBpdLLS88sXsa+PzdXSX6ULRh10/qnlG9P00I89LZsCBp7l8Gqc3jsbqbs lWBKiBqrj4uyxFnjUPpQ/dNOivKxMls= -----END CERTIFICATE-----Generated at Wed Jun 18 14:24:30 2025 by rpki-client