$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/bc60d7b4-d6be-35cb-80fc-16177325cc06.roa File: bc60d7b4-d6be-35cb-80fc-16177325cc06.roa (raw, json) Hash identifier: cRyvjw+srQ4+aDHiDRG2gP0fHuiNk03MM+WGNYHfIA0= Subject key identifier: 91:12:B5:E2:56:04:7D:21:C1:CC:C8:5B:3E:A3:7F:3C:A9:6C:17:20 Certificate issuer: /CN=09c51633-340e-4eac-820c-a36b33746085 Certificate serial: 010D0C9F4328584A0C055EAFA81A1A6DD05A8D80 Authority key identifier: 58:DB:44:5B:64:54:08:69:7A:39:63:68:B1:69:F1:A2:F8:8A:C1:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/bc60d7b4-d6be-35cb-80fc-16177325cc06.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 13928 IP address blocks: 199.21.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/09c51633-340e-4eac-820c-a36b33746085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/09c51633-340e-4eac-820c-a36b33746085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:5e:af:a8:1a:1a:6d:d0:5a:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09c51633-340e-4eac-820c-a36b33746085 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=56939cf2-fd59-458f-a3bd-e24423ba3edb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:27:91:6a:89:cd:8f:d5:6d:39:95:dd:d8:b4: 40:18:9b:e6:ae:0f:43:20:8a:a9:ad:65:a7:f2:d3: d2:b2:fb:0b:f5:7e:2d:a4:83:1c:e2:a2:87:13:33: 07:62:99:91:8e:94:d4:52:5e:45:92:62:30:9b:88: a6:ba:64:92:b3:61:ea:ce:ed:41:37:18:ea:28:9e: fd:0a:82:25:b4:1e:34:7c:3b:51:39:8b:a2:0d:e6: 41:ae:2e:26:95:b8:e3:59:2f:44:ba:5f:5a:5b:81: c5:dd:a2:55:a8:e1:e9:4d:cf:0a:09:6a:68:16:b3: 1c:fa:83:4d:4b:3a:a2:ba:82:ee:26:5e:98:8d:71: 3b:f0:99:e0:e0:3d:dc:40:72:87:a3:03:23:19:83: 3d:5e:48:72:5c:9c:e5:19:5f:8d:13:f1:53:93:71: 1b:47:d7:d8:d9:14:f7:40:19:03:b9:40:77:82:87: 8e:bb:c6:2f:4c:63:44:9c:e7:78:49:bb:bc:f8:cf: 39:5d:5c:fd:80:1e:08:03:7a:d5:ab:b8:8c:6a:3e: 38:ab:f0:dd:c8:51:1d:9f:eb:73:53:0a:aa:e9:ec: 81:f8:43:19:dd:ff:62:53:01:12:ea:94:23:8c:ca: 96:5a:f2:d0:f7:63:a3:c4:e4:0a:28:ee:85:3b:1e: 0a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:12:B5:E2:56:04:7D:21:C1:CC:C8:5B:3E:A3:7F:3C:A9:6C:17:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/bc60d7b4-d6be-35cb-80fc-16177325cc06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/09c51633-340e-4eac-820c-a36b33746085.crl X509v3 Authority Key Identifier: keyid:58:DB:44:5B:64:54:08:69:7A:39:63:68:B1:69:F1:A2:F8:8A:C1:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085.cer sbgp-ipAddrBlock: critical IPv4: 199.21.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:cf:26:e9:6b:38:5d:22:d2:61:ca:1a:4a:ed:f5:e8:24:6e: fa:a5:cf:dd:28:ea:25:d7:e7:b8:4b:2d:0f:e6:25:df:18:18: e3:50:dc:52:3e:a0:5f:f6:44:d9:19:c5:c1:7b:df:8b:d2:57: 7a:d9:ea:68:eb:33:51:3b:00:aa:1a:62:70:f8:c5:85:5b:0d: aa:ca:0c:ee:9c:a5:18:4b:0d:1f:aa:58:91:a1:96:33:17:e6: 80:30:35:e1:6f:85:8e:ae:39:ba:4f:36:1f:bf:f8:41:3f:e7: 2f:bc:e9:a5:be:17:36:65:3d:45:6a:f1:0b:55:a5:68:ff:a7: 35:ec:31:60:d8:e6:f4:d2:62:31:91:46:26:a4:2f:33:c6:03: 97:9e:8a:77:a1:50:0c:8b:3b:a0:10:bd:48:84:cc:da:17:98: 75:be:bb:27:58:32:25:42:a3:66:91:e9:db:2c:28:92:d5:f0: 8b:3b:5e:fb:bc:f7:3f:0b:39:7b:83:0c:29:90:10:85:49:a8: 58:a6:ac:9c:ef:a8:f9:5d:4c:7e:eb:83:eb:10:f9:7d:d0:91: 6b:fa:0b:d7:f7:af:3e:11:be:62:88:29:e3:b9:4a:18:7d:62: 94:39:7f:52:75:e4:1b:1f:4b:5b:49:49:da:cd:db:5f:75:6f: d6:cc:5d:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBV6vqBoabdBajYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDljNTE2MzMtMzQwZS00ZWFjLTgyMGMtYTM2YjMzNzQ2 MDg1MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk NTY5MzljZjItZmQ1OS00NThmLWEzYmQtZTI0NDIzYmEzZWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvieRaonNj9VtOZXd2LRAGJvmrg9DIIqprWWn 8tPSsvsL9X4tpIMc4qKHEzMHYpmRjpTUUl5FkmIwm4imumSSs2Hqzu1BNxjqKJ79 CoIltB40fDtROYuiDeZBri4mlbjjWS9Eul9aW4HF3aJVqOHpTc8KCWpoFrMc+oNN SzqiuoLuJl6YjXE78Jng4D3cQHKHowMjGYM9XkhyXJzlGV+NE/FTk3EbR9fY2RT3 QBkDuUB3goeOu8YvTGNEnOd4Sbu8+M85XVz9gB4IA3rVq7iMaj44q/DdyFEdn+tz Uwqq6eyB+EMZ3f9iUwES6pQjjMqWWvLQ92OjxOQKKO6FOx4KPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJESteJWBH0hwczIWz6jfzypbBcgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wOWM1 MTYzMy0zNDBlLTRlYWMtODIwYy1hMzZiMzM3NDYwODUvYmM2MGQ3YjQtZDZiZS0z NWNiLTgwZmMtMTYxNzczMjVjYzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMDljNTE2MzMtMzQwZS00ZWFjLTgy MGMtYTM2YjMzNzQ2MDg1LzA5YzUxNjMzLTM0MGUtNGVhYy04MjBjLWEzNmIzMzc0 NjA4NS5jcmwwHwYDVR0jBBgwFoAUWNtEW2RUCGl6OWNosWnxoviKwTQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wOWM1MTYzMy0zNDBlLTRlYWMtODIwYy1hMzZi MzM3NDYwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxxWCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbPJulrOF0i0mHKGkrt9egkbvqlz90o6iXX57hLLQ/mJd8YGONQ3FI+ oF/2RNkZxcF734vSV3rZ6mjrM1E7AKoaYnD4xYVbDarKDO6cpRhLDR+qWJGhljMX 5oAwNeFvhY6uObpPNh+/+EE/5y+86aW+FzZlPUVq8QtVpWj/pzXsMWDY5vTSYjGR RiakLzPGA5eeinehUAyLO6AQvUiEzNoXmHW+uydYMiVCo2aR6dssKJLV8Is7Xvu8 9z8LOXuDDCmQEIVJqFimrJzvqPldTH7rg+sQ+X3QkWv6C9f3rz4RvmKIKeO5Shh9 YpQ5f1J15BsfS1tJSdrN2191b9bMXQg= -----END CERTIFICATE-----Generated at Sun Jun 15 14:44:55 2025 by rpki-client