$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/194f605c-f45e-385a-9de9-b8b69c6bd841.roa File: 194f605c-f45e-385a-9de9-b8b69c6bd841.roa (raw, json) Hash identifier: 0TkMFgq2jedcwBYnYixsSUOnc10l0jCPGyNzPKBIU58= Subject key identifier: 51:71:68:CD:68:50:E8:21:D7:C7:3C:0F:CE:B6:30:60:93:BC:85:F6 Certificate issuer: /CN=1fe4e29c-f3ca-4ee5-92da-4443969e3deb Certificate serial: 010D0C9F4328584A146570F8D2434B09789BDA60 Authority key identifier: 09:B5:C9:F4:9A:DD:E7:D5:0E:E8:DB:6E:F5:11:49:5E:86:E6:16:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/194f605c-f45e-385a-9de9-b8b69c6bd841.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 65224 IP address blocks: 199.212.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:70:f8:d2:43:4b:09:78:9b:da:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fe4e29c-f3ca-4ee5-92da-4443969e3deb Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=10907ae3-ad88-4773-96ec-103a7577a3ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:24:40:ef:4d:00:58:a5:89:34:a4:2b:5e:f7: 96:a7:af:21:4d:1e:d7:54:93:d9:e0:91:5d:14:87: 86:cf:4b:28:64:f9:bf:79:aa:89:38:71:ce:30:eb: 83:0c:3f:17:f3:ce:a6:ad:b7:be:3b:f4:b5:85:8e: 28:69:9f:db:90:26:09:c4:aa:b4:e7:d1:53:08:6c: f3:1e:1c:8c:10:f6:12:fb:b5:80:e6:11:39:ca:f7: e8:fe:2f:66:ef:86:f7:e0:d6:07:04:e2:b9:08:27: d6:14:88:92:7c:39:b3:13:b2:76:78:48:22:f5:aa: 87:67:96:9c:8d:1b:a9:28:11:3a:30:03:50:8d:e6: f3:91:0b:f2:bc:2b:bb:99:e9:9f:2b:47:1a:6b:be: 16:e8:fa:f4:d9:cf:8f:94:8b:11:3f:98:b0:61:0b: 6b:89:5b:44:40:f4:2e:63:2b:cf:e2:42:8b:39:ba: 71:a9:e8:08:f9:03:9c:ac:1f:4e:75:4e:48:0e:e3: bf:cd:97:09:e1:fb:ee:25:64:c8:68:8c:eb:5e:0b: 3c:c6:b7:6c:b3:36:90:73:70:26:91:78:64:c0:a5: 83:dc:9e:04:f0:b3:81:6f:88:e5:fa:cd:95:b6:3f: 26:3d:23:41:2d:75:e8:de:71:28:82:68:ee:b4:36: 87:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:71:68:CD:68:50:E8:21:D7:C7:3C:0F:CE:B6:30:60:93:BC:85:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/194f605c-f45e-385a-9de9-b8b69c6bd841.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.crl X509v3 Authority Key Identifier: keyid:09:B5:C9:F4:9A:DD:E7:D5:0E:E8:DB:6E:F5:11:49:5E:86:E6:16:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.cer sbgp-ipAddrBlock: critical IPv4: 199.212.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:84:04:d7:a7:46:c9:ed:f4:20:2c:3b:db:d4:51:78:c6:f3: d2:5f:a8:11:9b:96:ca:d2:bb:b9:08:cd:78:b1:86:e4:6b:f9: 53:ee:ad:31:35:9e:95:27:d6:40:20:7a:65:9d:aa:0e:3a:11: 98:04:a3:e8:40:3b:29:fe:b9:c5:03:38:ff:84:b2:5b:d4:ea: 7a:c3:e0:f7:34:c0:2b:cd:2f:69:eb:b1:c8:2f:85:2d:f7:e1: 5c:89:d8:ba:a2:f9:90:3f:fe:53:13:b3:ca:01:81:e9:ec:d7: 84:79:c5:aa:a5:b4:b6:bd:ce:a3:e3:f1:bd:62:99:ae:50:d3: bc:33:6e:2e:8d:cc:53:2d:60:72:29:1d:ce:5b:39:ad:15:8f: e6:87:65:96:25:8a:a4:e0:4a:08:96:4c:b7:30:d2:1f:b0:7e: aa:96:81:45:4d:3d:63:94:fe:70:68:95:01:93:d1:3a:5c:3d: c5:f2:2a:ca:db:46:88:aa:fe:8d:dd:75:e5:ec:04:34:74:f9: 2b:89:dc:61:25:fe:24:08:e0:7e:75:d0:63:16:d5:6c:88:13: 05:8e:2e:39:21:b1:23:61:34:a9:43:51:3c:78:4e:64:38:a8: e1:33:29:dc:6f:62:a8:dd:68:03:c3:f5:74:1c:43:54:f9:84: d9:4b:58:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZXD40kNLCXib2mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZlNGUyOWMtZjNjYS00ZWU1LTkyZGEtNDQ0Mzk2OWUz ZGViMB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk MTA5MDdhZTMtYWQ4OC00NzczLTk2ZWMtMTAzYTc1NzdhM2ZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSRA700AWKWJNKQrXveWp68hTR7XVJPZ4JFd FIeGz0soZPm/eaqJOHHOMOuDDD8X886mrbe+O/S1hY4oaZ/bkCYJxKq059FTCGzz HhyMEPYS+7WA5hE5yvfo/i9m74b34NYHBOK5CCfWFIiSfDmzE7J2eEgi9aqHZ5ac jRupKBE6MANQjebzkQvyvCu7memfK0caa74W6Pr02c+PlIsRP5iwYQtriVtEQPQu YyvP4kKLObpxqegI+QOcrB9OdU5IDuO/zZcJ4fvuJWTIaIzrXgs8xrdsszaQc3Am kXhkwKWD3J4E8LOBb4jl+s2Vtj8mPSNBLXXo3nEogmjutDaHwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFFxaM1oUOgh18c8D862MGCTvIX2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xZmU0 ZTI5Yy1mM2NhLTRlZTUtOTJkYS00NDQzOTY5ZTNkZWIvMTk0ZjYwNWMtZjQ1ZS0z ODVhLTlkZTktYjhiNjljNmJkODQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMWZlNGUyOWMtZjNjYS00ZWU1LTky ZGEtNDQ0Mzk2OWUzZGViLzFmZTRlMjljLWYzY2EtNGVlNS05MmRhLTQ0NDM5Njll M2RlYi5jcmwwHwYDVR0jBBgwFoAUCbXJ9Jrd59UO6Ntu9RFJXobmFlwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xZmU0ZTI5Yy1mM2NhLTRlZTUtOTJkYS00NDQz OTY5ZTNkZWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx9T8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEeEBNenRsnt9CAsO9vUUXjG89JfqBGblsrSu7kIzXixhuRr+VPurTE1 npUn1kAgemWdqg46EZgEo+hAOyn+ucUDOP+EslvU6nrD4Pc0wCvNL2nrscgvhS33 4VyJ2Lqi+ZA//lMTs8oBgens14R5xaqltLa9zqPj8b1ima5Q07wzbi6NzFMtYHIp Hc5bOa0Vj+aHZZYliqTgSgiWTLcw0h+wfqqWgUVNPWOU/nBolQGT0TpcPcXyKsrb Roiq/o3ddeXsBDR0+SuJ3GEl/iQI4H510GMW1WyIEwWOLjkhsSNhNKlDUTx4TmQ4 qOEzKdxvYqjdaAPD9XQcQ1T5hNlLWCo= -----END CERTIFICATE-----Generated at Sun Jun 15 14:10:41 2025 by rpki-client