$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/515a67b5-2f6a-3154-891a-51ad1fa47cc0.roa File: 515a67b5-2f6a-3154-891a-51ad1fa47cc0.roa (raw, json) Hash identifier: N4ZVxNdTotsey+NJYajLD1DHUzc6SDy4Qatnrtr50qA= Subject key identifier: 47:AB:D2:D6:20:16:3B:65:70:E0:30:86:3A:AB:31:81:B7:CB:6F:E9 Certificate issuer: /CN=aae4f0de-2296-435c-b411-b16981804498 Certificate serial: 010D0C9F43285849EAD024D1CF8BCB66F5AADB80 Authority key identifier: 1F:D3:27:64:4D:58:B9:AF:C5:7F:44:82:4D:FB:8F:B7:1E:18:CF:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/515a67b5-2f6a-3154-891a-51ad1fa47cc0.roa Signing time: Tue 20 May 2025 15:32:22 +0000 ROA not before: Tue 20 May 2025 15:32:22 +0000 ROA not after: Mon 18 Aug 2025 15:32:22 +0000 asID: 138997 IP address blocks: 199.58.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/aae4f0de-2296-435c-b411-b16981804498.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/aae4f0de-2296-435c-b411-b16981804498.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:d0:24:d1:cf:8b:cb:66:f5:aa:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aae4f0de-2296-435c-b411-b16981804498 Validity Not Before: May 20 15:32:22 2025 GMT Not After : Aug 18 15:32:22 2025 GMT Subject: CN=951f05ba-1504-441f-b841-f6e9142bdb81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:28:2b:f7:45:db:f5:4c:83:61:83:98:fe:dc: 24:0d:81:aa:82:df:af:ac:aa:fb:5d:72:7c:e2:0e: b8:92:47:b4:29:da:c5:69:d4:d5:ee:f3:d6:37:91: 9c:4d:44:81:53:f8:fe:fd:75:84:d1:44:80:6d:b3: ba:24:fd:1f:23:63:8b:0f:27:18:65:ac:43:69:3a: f8:37:cf:b9:9b:3b:50:7a:34:d7:26:0f:22:6d:82: 4d:2c:46:64:d3:ee:9b:eb:db:55:55:72:47:ff:b8: 71:9e:78:27:52:1e:71:33:a2:be:7b:01:f8:2a:c7: d8:f2:16:30:b8:2b:53:a4:6a:9b:68:04:8e:e9:86: 03:a9:1e:7b:f5:e1:ab:07:25:ea:f0:7b:e3:be:38: c8:30:49:fa:e6:85:1e:25:f0:a3:d6:e6:5b:ff:b1: 50:6b:a8:a2:49:05:51:b3:ce:57:03:c6:06:50:12: 66:a7:05:0a:65:89:25:25:3b:64:f9:2e:4e:39:c4: 66:94:ae:8b:4d:3a:f2:dd:78:99:e3:d4:f8:16:7c: f5:e8:68:58:63:ec:20:ba:d0:d7:a1:25:d3:82:76: 09:02:1e:5f:45:1c:e5:26:3c:b0:73:47:21:c9:6c: e7:3e:62:5b:32:27:f9:24:af:58:d5:42:d2:4c:a3: 69:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:AB:D2:D6:20:16:3B:65:70:E0:30:86:3A:AB:31:81:B7:CB:6F:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/515a67b5-2f6a-3154-891a-51ad1fa47cc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/aae4f0de-2296-435c-b411-b16981804498.crl X509v3 Authority Key Identifier: keyid:1F:D3:27:64:4D:58:B9:AF:C5:7F:44:82:4D:FB:8F:B7:1E:18:CF:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498.cer sbgp-ipAddrBlock: critical IPv4: 199.58.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:94:a0:f3:72:bb:61:e0:b4:85:56:b6:c2:af:25:d0:ad:0b: f4:58:34:e5:78:55:9d:c2:8f:74:f3:e8:4b:87:eb:78:be:56: 99:ee:8e:db:4a:d0:1d:8c:39:d0:39:bf:ba:bc:d5:03:65:7d: de:91:7d:50:3d:42:0d:15:b4:a6:b7:38:b5:72:3a:a0:5d:de: e4:eb:20:92:91:d3:0a:01:ca:f4:b9:e6:eb:ff:c5:ec:e9:cb: 71:88:45:37:af:40:78:70:ee:35:6b:91:49:99:3b:6f:d5:42: 95:a9:8d:e3:d9:12:b0:a1:b7:82:46:38:88:b4:e9:51:0e:da: 9a:ad:26:00:04:d9:f4:ea:7d:df:bc:30:ad:87:c3:42:c4:b6: 82:43:8c:97:43:87:c7:09:07:4e:ed:51:eb:1f:e3:18:5c:72: dc:97:aa:d1:34:c8:ed:dd:0d:60:e2:a0:46:0f:cb:28:dd:d6: 32:fb:34:b1:34:7b:9f:e7:09:63:d2:88:b9:e6:4c:0b:fc:d5: 63:34:b3:e7:e8:43:31:39:28:a7:79:89:2b:77:01:1b:48:e9: 6e:b8:98:5f:23:ba:b7:d9:36:a5:ac:31:bb:b3:96:ed:89:32: 35:9c:47:d7:a0:20:f7:02:13:74:bc:18:6c:57:b2:7d:49:15: 12:dd:25:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnq0CTRz4vLZvWq24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFlNGYwZGUtMjI5Ni00MzVjLWI0MTEtYjE2OTgxODA0 NDk4MB4XDTI1MDUyMDE1MzIyMloXDTI1MDgxODE1MzIyMlowLzEtMCsGA1UEAxMk OTUxZjA1YmEtMTUwNC00NDFmLWI4NDEtZjZlOTE0MmJkYjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSgr90Xb9UyDYYOY/twkDYGqgt+vrKr7XXJ8 4g64kke0KdrFadTV7vPWN5GcTUSBU/j+/XWE0USAbbO6JP0fI2OLDycYZaxDaTr4 N8+5mztQejTXJg8ibYJNLEZk0+6b69tVVXJH/7hxnngnUh5xM6K+ewH4KsfY8hYw uCtTpGqbaASO6YYDqR579eGrByXq8HvjvjjIMEn65oUeJfCj1uZb/7FQa6iiSQVR s85XA8YGUBJmpwUKZYklJTtk+S5OOcRmlK6LTTry3XiZ49T4Fnz16GhYY+wgutDX oSXTgnYJAh5fRRzlJjywc0chyWznPmJbMif5JK9Y1ULSTKNptQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEer0tYgFjtlcOAwhjqrMYG3y2/pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hYWU0 ZjBkZS0yMjk2LTQzNWMtYjQxMS1iMTY5ODE4MDQ0OTgvNTE1YTY3YjUtMmY2YS0z MTU0LTg5MWEtNTFhZDFmYTQ3Y2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWFlNGYwZGUtMjI5Ni00MzVjLWI0 MTEtYjE2OTgxODA0NDk4L2FhZTRmMGRlLTIyOTYtNDM1Yy1iNDExLWIxNjk4MTgw NDQ5OC5jcmwwHwYDVR0jBBgwFoAUH9MnZE1Yua/Ff0SCTfuPtx4Yz20wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hYWU0ZjBkZS0yMjk2LTQzNWMtYjQxMS1iMTY5 ODE4MDQ0OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzpYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGUoPNyu2HgtIVWtsKvJdCtC/RYNOV4VZ3Cj3Tz6EuH63i+VpnujttK 0B2MOdA5v7q81QNlfd6RfVA9Qg0VtKa3OLVyOqBd3uTrIJKR0woByvS55uv/xezp y3GIRTevQHhw7jVrkUmZO2/VQpWpjePZErCht4JGOIi06VEO2pqtJgAE2fTqfd+8 MK2Hw0LEtoJDjJdDh8cJB07tUesf4xhcctyXqtE0yO3dDWDioEYPyyjd1jL7NLE0 e5/nCWPSiLnmTAv81WM0s+foQzE5KKd5iSt3ARtI6W64mF8jurfZNqWsMbuzlu2J MjWcR9egIPcCE3S8GGxXsn1JFRLdJWg= -----END CERTIFICATE-----Generated at Tue Jun 17 10:55:33 2025 by rpki-client