$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087/9fd81086-d2ab-3b69-873f-c043d5f1123e.roa File: 9fd81086-d2ab-3b69-873f-c043d5f1123e.roa (raw, json) Hash identifier: 09CbfWsvCQ9nV510zbdNMN1dpbXDI3uWdPHC7ozOcmc= Subject key identifier: 5C:C1:66:93:A9:49:AF:74:13:97:A4:23:5F:88:5C:D6:72:0C:F0:C1 Certificate issuer: /CN=576c64a5-3cd2-44d5-80c3-626ccc84e087 Certificate serial: 010D0C9F4328584A27F01C28501506F114299800 Authority key identifier: 93:40:CE:B6:71:96:DA:3E:FD:16:0C:87:23:2E:E0:A8:3B:C7:1C:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087/9fd81086-d2ab-3b69-873f-c043d5f1123e.roa Signing time: Wed 11 Jun 2025 13:01:04 +0000 ROA not before: Wed 11 Jun 2025 13:01:04 +0000 ROA not after: Tue 09 Sep 2025 13:01:04 +0000 asID: 14497 IP address blocks: 199.168.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087/576c64a5-3cd2-44d5-80c3-626ccc84e087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087/576c64a5-3cd2-44d5-80c3-626ccc84e087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:27:f0:1c:28:50:15:06:f1:14:29:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=576c64a5-3cd2-44d5-80c3-626ccc84e087 Validity Not Before: Jun 11 13:01:04 2025 GMT Not After : Sep 9 13:01:04 2025 GMT Subject: CN=87f0dcd0-ce01-4890-88a9-4aebc5386aa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:26:e2:cd:9c:3a:23:56:c6:be:25:51:1b:be: 70:eb:fd:ce:bf:f8:0e:f2:92:f6:78:64:f9:fc:70: 00:67:bc:24:ea:7d:9f:48:dc:1e:3e:85:55:d2:a9: 28:1e:72:71:e3:47:0c:a3:9b:2e:07:4a:68:1e:89: b5:2e:29:8d:4a:a0:f3:34:bf:1b:bd:47:c9:ec:57: de:cd:50:f6:b3:e9:a0:95:30:c4:91:36:1c:49:7b: c2:eb:07:5e:80:d9:83:17:b2:77:73:86:f8:e6:52: 18:fc:cd:d9:cc:18:58:4d:67:57:f7:0a:66:71:2e: 0b:f4:04:ab:54:35:28:2d:cd:08:25:0c:ab:95:84: f2:a2:df:a8:48:16:2c:03:68:70:69:c9:31:cc:ac: 71:d3:da:5f:8f:7c:db:46:b6:3a:7b:61:c2:25:4a: 27:85:02:2c:bb:a6:64:0d:a0:47:33:39:b6:38:bc: 29:38:f6:11:d3:cd:78:3b:c4:f8:3e:80:71:db:7a: c1:e1:1f:ad:c3:21:91:c6:01:93:cc:9b:17:b0:9f: c9:72:6c:bf:1c:43:48:e6:9f:7e:02:2a:98:a5:70: 64:97:f1:48:22:78:2b:9e:cf:22:54:5c:d1:77:9f: 2b:22:87:c7:f8:9f:fe:66:4a:8c:bb:ce:de:87:c7: 11:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:C1:66:93:A9:49:AF:74:13:97:A4:23:5F:88:5C:D6:72:0C:F0:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087/9fd81086-d2ab-3b69-873f-c043d5f1123e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087/576c64a5-3cd2-44d5-80c3-626ccc84e087.crl X509v3 Authority Key Identifier: keyid:93:40:CE:B6:71:96:DA:3E:FD:16:0C:87:23:2E:E0:A8:3B:C7:1C:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087.cer sbgp-ipAddrBlock: critical IPv4: 199.168.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:f4:24:9e:71:55:71:6c:35:03:ed:0d:dd:2d:92:67:e6:76: 0a:f0:98:fb:73:2a:27:dd:f5:f2:3c:aa:e6:10:15:d5:26:b3: b0:92:53:35:ee:4c:54:78:52:ab:4b:73:25:33:ee:63:c1:96: ee:e4:ab:ee:47:e6:b0:f1:9e:0b:db:93:33:7a:48:31:b4:a7: e7:07:a3:68:58:92:46:ce:05:02:4f:5e:68:6c:d8:3e:d1:9b: 4a:15:4e:f8:1e:26:00:21:00:e6:ca:1e:7d:de:f0:bf:94:64: 38:a0:68:f3:d9:fa:60:e0:76:62:83:28:b8:7f:f8:2c:6d:55: d8:e0:72:d1:a9:29:8f:69:20:46:3e:91:bd:a2:77:cd:e1:25: 13:8f:fc:ce:9e:a1:bb:9c:e2:1a:6b:01:ce:ad:45:11:b5:35: af:fe:af:10:7f:02:9c:5a:e4:f4:c9:d5:38:dd:5d:7d:3b:51: 41:6d:17:c7:d6:8c:77:c7:e6:c4:94:4b:d4:b8:3d:d3:e2:1f: e7:56:70:9e:ae:07:e3:e0:1c:59:70:9e:a8:22:84:59:25:9a: 2a:84:30:42:55:93:6d:50:61:e6:53:1b:e7:37:1e:c2:8c:6c: 49:92:74:a5:50:eb:9f:18:ed:9b:b1:65:a9:0f:79:6f:91:48: 7f:7f:89:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEon8BwoUBUG8RQpmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTc2YzY0YTUtM2NkMi00NGQ1LTgwYzMtNjI2Y2NjODRl MDg3MB4XDTI1MDYxMTEzMDEwNFoXDTI1MDkwOTEzMDEwNFowLzEtMCsGA1UEAxMk ODdmMGRjZDAtY2UwMS00ODkwLTg4YTktNGFlYmM1Mzg2YWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuybizZw6I1bGviVRG75w6/3Ov/gO8pL2eGT5 /HAAZ7wk6n2fSNwePoVV0qkoHnJx40cMo5suB0poHom1LimNSqDzNL8bvUfJ7Ffe zVD2s+mglTDEkTYcSXvC6wdegNmDF7J3c4b45lIY/M3ZzBhYTWdX9wpmcS4L9ASr VDUoLc0IJQyrlYTyot+oSBYsA2hwackxzKxx09pfj3zbRrY6e2HCJUonhQIsu6Zk DaBHMzm2OLwpOPYR0814O8T4PoBx23rB4R+twyGRxgGTzJsXsJ/Jcmy/HENI5p9+ AiqYpXBkl/FIIngrns8iVFzRd58rIofH+J/+ZkqMu87eh8cR3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFzBZpOpSa90E5ekI1+IXNZyDPDBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81NzZj NjRhNS0zY2QyLTQ0ZDUtODBjMy02MjZjY2M4NGUwODcvOWZkODEwODYtZDJhYi0z YjY5LTg3M2YtYzA0M2Q1ZjExMjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTc2YzY0YTUtM2NkMi00NGQ1LTgw YzMtNjI2Y2NjODRlMDg3LzU3NmM2NGE1LTNjZDItNDRkNS04MGMzLTYyNmNjYzg0 ZTA4Ny5jcmwwHwYDVR0jBBgwFoAUk0DOtnGW2j79FgyHIy7gqDvHHIkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81NzZjNjRhNS0zY2QyLTQ0ZDUtODBjMy02MjZj Y2M4NGUwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx6gcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAv0JJ5xVXFsNQPtDd0tkmfmdgrwmPtzKifd9fI8quYQFdUms7CSUzXu TFR4UqtLcyUz7mPBlu7kq+5H5rDxngvbkzN6SDG0p+cHo2hYkkbOBQJPXmhs2D7R m0oVTvgeJgAhAObKHn3e8L+UZDigaPPZ+mDgdmKDKLh/+CxtVdjgctGpKY9pIEY+ kb2id83hJROP/M6eobuc4hprAc6tRRG1Na/+rxB/Apxa5PTJ1TjdXX07UUFtF8fW jHfH5sSUS9S4PdPiH+dWcJ6uB+PgHFlwnqgihFklmiqEMEJVk21QYeZTG+c3HsKM bEmSdKVQ658Y7ZuxZakPeW+RSH9/ibk= -----END CERTIFICATE-----Generated at Sun Jun 15 18:00:19 2025 by rpki-client