$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/09023f97-e944-3d62-a33e-406827f9d76d.roa File: 09023f97-e944-3d62-a33e-406827f9d76d.roa (raw, json) Hash identifier: VgMsm4/fC+scKp+I9YVCePsudpSROx0LKPSXajoryOA= Subject key identifier: 5C:5A:42:8F:84:FD:A9:B0:88:D2:C5:E9:3F:2A:FA:2E:9E:A8:13:4E Certificate issuer: /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b Certificate serial: 010D0C9F43285849D594D2D906E29FC63A2791C0 Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/09023f97-e944-3d62-a33e-406827f9d76d.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 16904 IP address blocks: 199.96.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:d2:d9:06:e2:9f:c6:3a:27:91:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=c71ffc61-ef8e-4c7b-a3ec-0224931aefcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:10:e4:f3:3b:4e:f7:73:5c:14:e7:d1:93:2e: c6:15:5a:01:ac:77:6a:55:87:a4:57:fc:a6:da:ed: cc:c3:75:60:ff:bd:63:a0:be:dd:72:5c:35:44:15: cc:23:98:61:7a:9b:5a:cd:de:ce:61:01:ff:9d:6a: 26:a2:78:6d:0a:c3:86:f5:9d:11:1d:4a:35:b1:45: 27:5e:90:1f:23:81:14:0c:a9:9e:1e:9d:54:35:e8: ec:0f:09:b5:9f:b8:a4:8a:62:77:7a:de:cb:c7:a4: e4:4e:79:31:48:24:ae:02:6c:8d:d7:84:30:a9:92: 6d:95:17:b6:81:85:d7:c7:df:47:03:6a:f0:94:a0: d9:50:4b:62:71:6b:f1:9c:ba:49:cf:10:c3:c7:a2: 6d:12:e1:b8:64:2e:73:a6:03:72:9c:88:ff:d7:e2: b4:47:4d:4e:d2:d5:ac:24:80:14:21:45:b7:af:ba: ac:85:7c:65:f3:37:bf:61:07:f8:91:a2:45:4b:77: 82:67:41:f6:29:d6:fc:d2:ce:cb:ae:a7:6f:ac:92: fd:33:88:bb:72:f7:71:13:be:4c:52:11:2f:c8:af: 32:1b:c6:77:80:37:76:f3:0b:fa:46:31:d4:2e:ed: 70:4e:a3:d9:50:1c:5b:e0:fa:70:65:67:c3:67:f6: 91:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:5A:42:8F:84:FD:A9:B0:88:D2:C5:E9:3F:2A:FA:2E:9E:A8:13:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/09023f97-e944-3d62-a33e-406827f9d76d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl X509v3 Authority Key Identifier: keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer sbgp-ipAddrBlock: critical IPv4: 199.96.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:79:9e:34:fd:0a:f7:23:c4:a1:37:21:cf:34:bb:46:cf:c2: fc:4e:3f:20:04:aa:df:ee:0c:d3:f7:48:b1:f6:fd:12:8f:dc: 3a:70:13:c1:98:ba:b3:d9:c8:f9:d1:87:f3:60:17:fe:ed:ed: 37:73:62:12:55:08:92:5e:de:0b:19:fd:63:90:90:91:33:f3: d4:7c:2e:f8:c1:f6:d8:4b:0f:5e:66:12:87:f7:65:72:ba:ef: 61:7f:a4:36:de:c4:3b:65:4b:68:86:a6:f2:df:b2:33:f2:8b: e7:c4:bd:71:44:3c:50:17:6b:83:23:88:2b:a2:02:46:e7:a4: b9:6a:09:57:51:7d:12:e8:e0:ce:09:13:59:45:8a:59:b5:ef: a2:88:a0:04:93:b6:81:90:7f:2f:1c:85:7c:c5:01:f9:21:1e: 42:2a:18:ef:de:9f:df:1a:67:76:40:a1:6a:c6:a9:92:21:8e: e9:d4:0b:f9:e1:51:98:8d:69:1a:e1:f9:85:ff:6c:45:a2:99: 3b:4f:ff:b7:9e:2f:3c:17:0c:c6:7d:ed:a4:37:c0:db:64:6b: 0f:63:52:45:ad:88:12:c4:3f:8f:68:5b:32:b4:33:13:1d:c4: c4:52:cb:e4:8b:11:e4:5c:ab:e8:1d:39:c8:d7:0f:9d:a3:26: f1:41:bf:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnVlNLZBuKfxjonkcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA0NWMyNWEtMDVlMy00MGJhLWEyZGMtNWM1YmRhYjAx MzFiMB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk YzcxZmZjNjEtZWY4ZS00YzdiLWEzZWMtMDIyNDkzMWFlZmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhDk8ztO93NcFOfRky7GFVoBrHdqVYekV/ym 2u3Mw3Vg/71joL7dclw1RBXMI5hheptazd7OYQH/nWomonhtCsOG9Z0RHUo1sUUn XpAfI4EUDKmeHp1UNejsDwm1n7ikimJ3et7Lx6TkTnkxSCSuAmyN14QwqZJtlRe2 gYXXx99HA2rwlKDZUEticWvxnLpJzxDDx6JtEuG4ZC5zpgNynIj/1+K0R01O0tWs JIAUIUW3r7qshXxl8ze/YQf4kaJFS3eCZ0H2Kdb80s7LrqdvrJL9M4i7cvdxE75M UhEvyK8yG8Z3gDd28wv6RjHULu1wTqPZUBxb4PpwZWfDZ/aRZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFxaQo+E/amwiNLF6T8q+i6eqBNOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDQ1 YzI1YS0wNWUzLTQwYmEtYTJkYy01YzViZGFiMDEzMWIvMDkwMjNmOTctZTk0NC0z ZDYyLWEzM2UtNDA2ODI3ZjlkNzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA0NWMyNWEtMDVlMy00MGJhLWEy ZGMtNWM1YmRhYjAxMzFiLzAwNDVjMjVhLTA1ZTMtNDBiYS1hMmRjLTVjNWJkYWIw MTMxYi5jcmwwHwYDVR0jBBgwFoAUbbgrxbTjT35CXDlBEzNufGgjfl8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDQ1YzI1YS0wNWUzLTQwYmEtYTJkYy01YzVi ZGFiMDEzMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx2DsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABF5njT9CvcjxKE3Ic80u0bPwvxOPyAEqt/uDNP3SLH2/RKP3DpwE8GY urPZyPnRh/NgF/7t7TdzYhJVCJJe3gsZ/WOQkJEz89R8LvjB9thLD15mEof3ZXK6 72F/pDbexDtlS2iGpvLfsjPyi+fEvXFEPFAXa4MjiCuiAkbnpLlqCVdRfRLo4M4J E1lFilm176KIoASTtoGQfy8chXzFAfkhHkIqGO/en98aZ3ZAoWrGqZIhjunUC/nh UZiNaRrh+YX/bEWimTtP/7eeLzwXDMZ97aQ3wNtkaw9jUkWtiBLEP49oWzK0MxMd xMRSy+SLEeRcq+gdOcjXD52jJvFBv3Q= -----END CERTIFICATE-----Generated at Sun Jun 15 04:48:53 2025 by rpki-client