$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/1404fac3-bbc2-308f-8af1-df72ff2c55be.roa File: 1404fac3-bbc2-308f-8af1-df72ff2c55be.roa (raw, json) Hash identifier: dvyqsV5W+7CvW2xOcwqYPKrrYkhVLzmZMHXvO2S/NpE= Subject key identifier: 37:27:72:A3:C6:E0:40:73:C9:14:65:9B:5D:EC:21:6D:6D:1B:CC:3A Certificate issuer: /CN=c85f3b2c-c391-49e3-a3a5-ea430235cc6b Certificate serial: 010D0C9F4328584A0C055247FFBF57CE20376840 Authority key identifier: C2:DF:64:13:C2:71:06:45:4E:F0:7E:E8:47:99:22:CE:62:E4:86:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/1404fac3-bbc2-308f-8af1-df72ff2c55be.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 393444 IP address blocks: 199.33.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:52:47:ff:bf:57:ce:20:37:68:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c85f3b2c-c391-49e3-a3a5-ea430235cc6b Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=56df2f54-d88a-4940-bcfd-d76a7c2b55b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b8:26:28:44:09:f6:59:d1:3f:5a:43:58:5a: 76:ef:85:4f:44:5f:79:e3:8c:f8:77:9d:10:87:39: a7:48:90:36:68:2b:ca:05:cd:24:22:cc:21:e4:7b: ef:08:2c:44:3e:8d:83:5b:b9:8c:b7:c0:a0:7e:4d: 0c:48:9d:51:de:5a:7c:d7:ca:36:35:cb:10:11:dd: a2:13:17:1f:5a:55:df:f9:06:9f:22:00:1b:e4:c5: 2e:43:4a:2e:bb:8a:c2:15:40:a1:92:80:cf:61:af: de:8a:a0:03:8c:9a:14:e8:1f:c9:9f:95:30:c1:96: 09:b3:0b:ef:a6:58:32:d0:c5:44:bf:c8:35:81:87: 26:35:b5:44:be:5f:ff:34:61:0a:bb:b2:2f:41:de: 86:82:d0:0c:97:90:f4:d9:22:fd:8b:10:6e:96:46: 4e:e6:3f:3c:2a:7e:9f:ba:8b:3f:ba:39:39:4f:52: 2d:7b:31:bb:33:6e:b5:71:83:2d:07:22:47:ee:40: fc:28:fd:d7:99:58:7f:71:fd:d4:7e:a0:1c:ac:31: 9b:00:cb:bd:f3:d4:78:a3:3a:4a:f7:9b:af:48:29: 9b:63:3e:d9:26:1f:be:99:80:b0:f8:e0:34:f7:1f: a2:0e:84:58:56:9e:21:34:0e:41:e2:a6:1d:21:9b: 46:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:27:72:A3:C6:E0:40:73:C9:14:65:9B:5D:EC:21:6D:6D:1B:CC:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/1404fac3-bbc2-308f-8af1-df72ff2c55be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.crl X509v3 Authority Key Identifier: keyid:C2:DF:64:13:C2:71:06:45:4E:F0:7E:E8:47:99:22:CE:62:E4:86:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.cer sbgp-ipAddrBlock: critical IPv4: 199.33.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:e9:2f:e1:0d:22:b5:42:dd:92:07:51:2c:0c:e8:3f:27:5d: 23:4c:73:38:67:27:08:80:10:06:f5:73:ec:5a:c3:a7:3d:30: d6:dc:fc:0c:b7:33:b6:4f:0b:39:36:43:0a:0f:57:aa:b9:b0: ca:0c:e2:4b:36:dd:cf:91:1f:6e:1c:5a:e7:59:b8:05:55:c8: 0c:78:56:d5:80:e0:e9:ba:2e:73:4e:47:5f:ea:dc:ee:a8:60: 77:ac:37:8a:23:a3:24:d8:6f:07:75:a6:71:a2:fe:58:16:de: 72:f9:4a:d7:9e:34:26:8d:1e:4b:ee:27:62:9a:6b:af:35:34: 2f:be:7c:79:4e:d2:2c:a9:ab:db:e3:f7:75:4e:cd:c0:2e:5f: 0b:f4:ca:0f:d4:e3:9b:f2:34:fc:24:70:09:80:cd:1b:12:62: 10:3f:52:ce:b0:d2:08:b4:34:30:04:b8:4c:77:53:f5:c0:e9: f6:ab:df:7e:61:a7:74:53:ed:e0:de:52:8d:3e:45:34:6b:56: 04:12:39:97:53:d3:5b:f6:28:39:5f:f7:45:95:b3:13:5e:21: 32:ae:c3:10:86:a4:b0:dd:e6:3f:31:56:eb:d7:18:d4:1d:fa: 37:5e:0c:7e:da:47:59:27:5d:4d:24:ac:07:00:bd:d3:b5:a4: a7:65:5d:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBVJH/79XziA3aEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg1ZjNiMmMtYzM5MS00OWUzLWEzYTUtZWE0MzAyMzVj YzZiMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk NTZkZjJmNTQtZDg4YS00OTQwLWJjZmQtZDc2YTdjMmI1NWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrgmKEQJ9lnRP1pDWFp274VPRF9544z4d50Q hzmnSJA2aCvKBc0kIswh5HvvCCxEPo2DW7mMt8Cgfk0MSJ1R3lp818o2NcsQEd2i ExcfWlXf+QafIgAb5MUuQ0ouu4rCFUChkoDPYa/eiqADjJoU6B/Jn5UwwZYJswvv plgy0MVEv8g1gYcmNbVEvl//NGEKu7IvQd6GgtAMl5D02SL9ixBulkZO5j88Kn6f uos/ujk5T1ItezG7M261cYMtByJH7kD8KP3XmVh/cf3UfqAcrDGbAMu989R4ozpK 95uvSCmbYz7ZJh++mYCw+OA09x+iDoRYVp4hNA5B4qYdIZtGHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDcncqPG4EBzyRRlm13sIW1tG8w6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jODVm M2IyYy1jMzkxLTQ5ZTMtYTNhNS1lYTQzMDIzNWNjNmIvMTQwNGZhYzMtYmJjMi0z MDhmLThhZjEtZGY3MmZmMmM1NWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzg1ZjNiMmMtYzM5MS00OWUzLWEz YTUtZWE0MzAyMzVjYzZiL2M4NWYzYjJjLWMzOTEtNDllMy1hM2E1LWVhNDMwMjM1 Y2M2Yi5jcmwwHwYDVR0jBBgwFoAUwt9kE8JxBkVO8H7oR5kizmLkhpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jODVmM2IyYy1jMzkxLTQ5ZTMtYTNhNS1lYTQz MDIzNWNjNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyHSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALrpL+ENIrVC3ZIHUSwM6D8nXSNMczhnJwiAEAb1c+xaw6c9MNbc/Ay3 M7ZPCzk2QwoPV6q5sMoM4ks23c+RH24cWudZuAVVyAx4VtWA4Om6LnNOR1/q3O6o YHesN4ojoyTYbwd1pnGi/lgW3nL5SteeNCaNHkvuJ2Kaa681NC++fHlO0iypq9vj 93VOzcAuXwv0yg/U45vyNPwkcAmAzRsSYhA/Us6w0gi0NDAEuEx3U/XA6far335h p3RT7eDeUo0+RTRrVgQSOZdT01v2KDlf90WVsxNeITKuwxCGpLDd5j8xVuvXGNQd +jdeDH7aR1knXU0krAcAvdO1pKdlXXI= -----END CERTIFICATE-----Generated at Sun Jun 15 17:55:21 2025 by rpki-client