$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/6efd3a08-acde-3bdd-85b5-4eba533e50f3.roa File: 6efd3a08-acde-3bdd-85b5-4eba533e50f3.roa (raw, json) Hash identifier: cvR+OnZrGaes38tsJXlIaGtEspILx1XDiXJ3LjsxJlw= Subject key identifier: 97:B5:93:4F:30:45:E2:56:CA:0F:61:AB:9C:A3:E4:13:DB:1C:D5:56 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F43285849FE0FE801C288B07F72FD6320 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/6efd3a08-acde-3bdd-85b5-4eba533e50f3.roa Signing time: Tue 27 May 2025 13:01:05 +0000 ROA not before: Tue 27 May 2025 13:01:05 +0000 ROA not after: Mon 25 Aug 2025 13:01:05 +0000 asID: 13414 IP address blocks: 199.59.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:0f:e8:01:c2:88:b0:7f:72:fd:63:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: May 27 13:01:05 2025 GMT Not After : Aug 25 13:01:05 2025 GMT Subject: CN=8bc836f5-239c-4e7f-9758-0d07f81f59fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:01:04:1e:9f:45:85:53:df:2a:f5:95:e7:7e: 29:a3:0a:cf:af:b4:57:fa:66:89:c7:aa:58:0f:df: 02:e4:20:0b:90:a8:a7:32:8a:88:38:80:b8:72:e6: af:d2:79:cd:c8:20:4e:b6:b8:4f:2b:af:23:17:7a: 00:59:7b:cb:3d:08:33:e4:8d:c7:a7:6e:20:86:50: 76:f3:85:c5:f7:78:3d:64:e7:c4:7b:fa:6f:d6:b1: f0:4c:ec:06:e5:25:55:b4:4e:5b:6d:bb:74:7e:9f: 6a:65:c1:fb:08:32:df:71:89:d9:4f:7b:f8:f7:04: dd:38:44:ad:f3:c1:b9:54:9b:f0:82:40:7b:f7:95: e2:f4:1f:cc:df:bb:7b:96:c7:a6:20:1d:4d:5e:d6: a6:db:27:ab:e9:92:2f:76:7d:af:d6:69:4c:f8:71: fa:48:61:70:ae:70:a9:d0:8a:fb:f4:a2:ac:fe:bb: b0:5d:85:12:94:1f:9e:bb:4f:36:e1:9c:14:c8:6a: fe:33:a0:8c:2d:53:ac:c5:41:7d:94:b1:46:7d:78: 94:02:07:9a:aa:82:4e:f2:8b:7a:89:ac:af:4f:a8: 45:73:ce:17:98:15:1a:77:01:90:50:7b:eb:48:c7: 67:a1:de:d8:d9:19:a2:95:48:2c:0f:21:6e:e0:2a: 69:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:B5:93:4F:30:45:E2:56:CA:0F:61:AB:9C:A3:E4:13:DB:1C:D5:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/6efd3a08-acde-3bdd-85b5-4eba533e50f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 199.59.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:4f:83:d6:c1:68:a1:c2:74:f5:d5:9d:1f:ab:a1:eb:18:73: 7d:81:f9:7e:4c:f8:35:aa:aa:66:52:e3:41:c9:8a:d5:fc:b6: d8:da:0f:46:2d:10:ef:fa:eb:8c:eb:f0:24:c6:ed:d3:f9:e7: 8b:32:bf:83:e5:8b:56:87:c2:cb:42:d0:d4:9d:e4:8b:8d:b3: 4e:a7:74:57:2f:0d:cb:c1:20:db:c5:52:da:ec:29:93:e2:66: 22:c1:63:55:fd:bf:16:f0:12:3a:f9:24:ad:af:74:7e:01:d5: aa:0f:2c:e1:71:66:92:be:80:dc:ba:7e:80:97:d2:f5:40:4d: 8d:ee:e0:83:1c:1f:a3:de:b4:69:39:f6:33:44:5d:f3:0e:e1: 94:0b:bb:ff:e9:8c:c2:82:5c:46:c4:5b:6d:98:b7:a6:a5:22: 20:6e:61:b7:f7:8a:eb:70:a7:23:22:66:89:09:17:33:15:be: 72:d4:c3:5f:2f:17:ee:70:95:9a:8f:cf:74:f6:cf:9f:01:0e: 41:eb:f0:75:1f:62:b0:51:b2:f4:bd:d0:0e:b4:14:5b:39:d7: 33:45:ba:e6:c6:84:39:50:89:a1:32:f8:eb:cb:3d:42:f3:0c: b6:2b:27:a3:de:f4:d0:66:06:72:50:07:2c:a9:2b:aa:a9:0a: 68:55:e3:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn+D+gBwoiwf3L9YyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk OGJjODM2ZjUtMjM5Yy00ZTdmLTk3NTgtMGQwN2Y4MWY1OWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQEEHp9FhVPfKvWV534powrPr7RX+maJx6pY D98C5CALkKinMoqIOIC4cuav0nnNyCBOtrhPK68jF3oAWXvLPQgz5I3Hp24ghlB2 84XF93g9ZOfEe/pv1rHwTOwG5SVVtE5bbbt0fp9qZcH7CDLfcYnZT3v49wTdOESt 88G5VJvwgkB795Xi9B/M37t7lsemIB1NXtam2yer6ZIvdn2v1mlM+HH6SGFwrnCp 0Ir79KKs/ruwXYUSlB+eu0824ZwUyGr+M6CMLVOsxUF9lLFGfXiUAgeaqoJO8ot6 iayvT6hFc84XmBUadwGQUHvrSMdnod7Y2RmilUgsDyFu4CppIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJe1k08wReJWyg9hq5yj5BPbHNVWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvNmVmZDNhMDgtYWNkZS0z YmRkLTg1YjUtNGViYTUzM2U1MGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxzuUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKJPg9bBaKHCdPXVnR+roesYc32B+X5M+DWqqmZS40HJitX8ttjaD0Yt EO/664zr8CTG7dP554syv4Pli1aHwstC0NSd5IuNs06ndFcvDcvBINvFUtrsKZPi ZiLBY1X9vxbwEjr5JK2vdH4B1aoPLOFxZpK+gNy6foCX0vVATY3u4IMcH6PetGk5 9jNEXfMO4ZQLu//pjMKCXEbEW22Yt6alIiBuYbf3iutwpyMiZokJFzMVvnLUw18v F+5wlZqPz3T2z58BDkHr8HUfYrBRsvS90A60FFs51zNFuubGhDlQiaEy+OvLPULz DLYrJ6Pe9NBmBnJQByypK6qpCmhV48M= -----END CERTIFICATE-----Generated at Tue Jun 17 20:59:42 2025 by rpki-client