$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/980c27f1-7286-33e6-b287-f2eaef87b326.roa File: 980c27f1-7286-33e6-b287-f2eaef87b326.roa (raw, json) Hash identifier: pB4a1dy5oYVk/yxInBknqBkOIfk7w96LZhV0AHMOCrw= Subject key identifier: D9:DD:A8:13:85:89:83:5D:4A:A1:19:99:0A:DA:3D:0F:BA:60:D6:72 Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F43285849A61F42B5F506832997BDE600 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/980c27f1-7286-33e6-b287-f2eaef87b326.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 22885 IP address blocks: 199.0.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:42:b5:f5:06:83:29:97:bd:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=139bf08a-34c8-4121-aa71-bee417a444f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e6:bc:1f:36:62:61:5e:7a:85:f4:a7:6b:ca: 55:e8:15:31:06:7a:b9:fe:b4:08:90:27:e2:9d:fa: 1b:21:67:1f:46:19:70:04:35:64:7f:13:37:4d:c1: 46:4d:e2:e4:fc:fb:ef:7b:46:9e:7d:d5:e7:48:bc: 78:10:61:8b:1a:97:93:15:2d:7d:a4:5c:9a:2f:fb: ba:ab:25:ce:01:0b:70:f9:c9:1f:eb:77:fe:bc:ba: 09:b6:36:3a:df:98:51:d2:9b:d3:e4:29:02:24:2d: 8a:4f:b2:4e:d3:45:26:2b:fa:9b:60:40:d4:ce:c7: de:b5:df:a9:ba:e6:7e:64:ee:29:b8:be:b2:34:3a: 70:30:69:c3:ff:e7:f0:16:76:71:a4:1f:c5:c5:b5: 2b:f4:98:90:b8:ac:5e:08:ad:6d:4c:fc:fa:92:9f: cf:d2:72:db:c1:2d:b8:4f:ee:0c:cf:6c:6e:08:c3: 45:c5:dc:72:86:6b:8f:ef:62:15:38:9b:7e:40:c1: 37:52:5b:73:d7:18:4b:72:77:cd:5c:6b:47:f1:5b: 4f:45:c6:e0:1e:1f:f0:4b:e7:cb:61:26:87:24:0b: a4:21:b5:7e:d1:a0:c1:b6:f2:f0:87:6a:f6:00:f3: 5e:fc:27:df:d1:c8:cc:f1:b9:4b:41:fd:c7:b9:8f: 65:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:DD:A8:13:85:89:83:5D:4A:A1:19:99:0A:DA:3D:0F:BA:60:D6:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/980c27f1-7286-33e6-b287-f2eaef87b326.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 199.0.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:a2:65:76:07:b8:5b:f1:9f:b3:19:f7:7d:3b:bc:7f:95:18: ee:d0:f4:ad:cd:5f:83:d5:00:bd:ef:b0:ce:66:61:30:8f:0d: 62:de:8c:27:29:22:cc:71:5d:ef:f7:fc:9e:2d:6f:27:05:51: 75:be:a2:5e:7a:d5:58:bc:a5:2c:8b:d0:a9:2a:14:c2:c7:ec: 84:e3:7c:0b:0f:e4:75:9a:7c:0e:6d:96:e0:12:d1:ff:32:35: cd:80:5c:65:e4:35:a8:5c:6a:a9:c6:7c:df:a7:4b:27:25:d3: c3:1f:80:01:06:a4:d6:e6:3e:d0:a0:15:49:75:4f:3c:a0:f7: ce:72:24:96:2c:bf:a4:9c:eb:9d:2b:b2:45:3b:79:f8:54:c0: 04:7b:47:7e:f1:0b:3b:8c:c7:ec:ce:74:34:64:54:6b:85:4f: 5d:c9:5b:59:24:87:b5:fc:36:1f:24:6c:39:49:47:77:d5:7f: f3:93:d1:17:d3:c4:0d:b3:44:29:7a:ca:e5:d0:44:b5:61:c1: cc:b9:95:4f:ff:6d:b3:c7:38:88:77:5e:b3:de:8d:39:d8:a8: 82:68:2a:84:c5:5f:ce:af:c8:27:99:a0:2a:7b:d9:45:d3:44: 07:bc:00:fc:18:93:16:2c:79:97:30:a0:fd:ea:70:d4:ef:4e: 75:00:42:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmH0K19QaDKZe95gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk MTM5YmYwOGEtMzRjOC00MTIxLWFhNzEtYmVlNDE3YTQ0NGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+a8HzZiYV56hfSna8pV6BUxBnq5/rQIkCfi nfobIWcfRhlwBDVkfxM3TcFGTeLk/Pvve0aefdXnSLx4EGGLGpeTFS19pFyaL/u6 qyXOAQtw+ckf63f+vLoJtjY635hR0pvT5CkCJC2KT7JO00UmK/qbYEDUzsfetd+p uuZ+ZO4puL6yNDpwMGnD/+fwFnZxpB/FxbUr9JiQuKxeCK1tTPz6kp/P0nLbwS24 T+4Mz2xuCMNFxdxyhmuP72IVOJt+QME3Ultz1xhLcnfNXGtH8VtPRcbgHh/wS+fL YSaHJAukIbV+0aDBtvLwh2r2APNe/Cff0cjM8blLQf3HuY9l7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNndqBOFiYNdSqEZmQraPQ+6YNZyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvOTgwYzI3ZjEtNzI4Ni0z M2U2LWIyODctZjJlYWVmODdiMzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwC5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqiZXYHuFvxn7MZ9307vH+VGO7Q9K3NX4PVAL3vsM5mYTCPDWLejCcp IsxxXe/3/J4tbycFUXW+ol561Vi8pSyL0KkqFMLH7ITjfAsP5HWafA5tluAS0f8y Nc2AXGXkNahcaqnGfN+nSycl08MfgAEGpNbmPtCgFUl1Tzyg985yJJYsv6Sc650r skU7efhUwAR7R37xCzuMx+zOdDRkVGuFT13JW1kkh7X8Nh8kbDlJR3fVf/OT0RfT xA2zRCl6yuXQRLVhwcy5lU//bbPHOIh3XrPejTnYqIJoKoTFX86vyCeZoCp72UXT RAe8APwYkxYseZcwoP3qcNTvTnUAQs8= -----END CERTIFICATE-----Generated at Mon Jun 16 15:35:30 2025 by rpki-client