$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/f2983f60-df74-3593-83d6-9699aa4424c4.roa File: f2983f60-df74-3593-83d6-9699aa4424c4.roa (raw, json) Hash identifier: y37qxxlHQXdpAZfe92ixF4YUdizjbks+poTP7Gx8VXM= Subject key identifier: 02:88:9F:C3:26:A6:A6:2E:AC:A7:F8:E0:FF:F9:C6:E9:C6:CB:AB:F4 Certificate issuer: /CN=687c869a-fd9c-4db9-8dab-54b737103513 Certificate serial: 010D0C9F4328584A1F9023CD2731698852DFAE00 Authority key identifier: E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/f2983f60-df74-3593-83d6-9699aa4424c4.roa Signing time: Sun 08 Jun 2025 13:01:01 +0000 ROA not before: Sun 08 Jun 2025 13:01:01 +0000 ROA not after: Sat 06 Sep 2025 13:01:01 +0000 asID: 33392 IP address blocks: 199.101.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1f:90:23:cd:27:31:69:88:52:df:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=687c869a-fd9c-4db9-8dab-54b737103513 Validity Not Before: Jun 8 13:01:01 2025 GMT Not After : Sep 6 13:01:01 2025 GMT Subject: CN=c6937de5-a3b2-41f4-a0d7-fe52d35e6dc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:bb:a0:a0:37:ed:6b:4b:f7:2a:71:52:61:94: 41:2c:be:19:d6:2d:39:e2:7b:f5:05:98:20:6b:75: 24:71:af:a5:5a:d5:43:f5:05:f9:e7:c3:90:df:6a: bd:15:03:a4:8e:66:c6:69:7c:d0:17:50:bb:1b:b8: 51:5b:54:58:a7:a7:aa:2e:a3:53:99:d9:bc:dd:58: 51:c0:10:4e:f1:73:51:49:40:a8:00:82:16:9d:4f: 30:83:2e:d4:78:57:aa:9c:41:80:ae:dc:b8:9e:0b: 84:50:c6:ab:8a:1f:e3:5e:c5:62:4a:c4:00:a6:a8: 72:a1:4e:4b:15:99:04:73:ea:38:6c:03:ea:13:5b: 16:30:bd:4d:e7:f0:e9:8c:97:51:bc:59:0e:c6:f1: c8:f9:1d:a3:8b:4a:0f:0b:ec:5b:d1:6b:c8:c5:cd: b3:4a:fd:33:da:c5:dd:0a:55:b8:d8:e4:da:a1:db: 45:eb:c8:33:dc:4f:d4:bf:dd:55:af:37:a0:32:f5: 36:0d:f6:8b:2e:bd:79:ff:b3:86:66:c9:0b:c0:54: 3b:06:8f:db:5b:08:76:1d:af:61:94:05:85:df:8c: 98:cd:de:c5:25:54:e1:20:07:a4:e4:db:c5:7b:42: 5e:90:95:5f:a0:04:f5:c8:4c:98:bc:fc:46:a6:9a: 0f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:88:9F:C3:26:A6:A6:2E:AC:A7:F8:E0:FF:F9:C6:E9:C6:CB:AB:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/f2983f60-df74-3593-83d6-9699aa4424c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.crl X509v3 Authority Key Identifier: keyid:E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer sbgp-ipAddrBlock: critical IPv4: 199.101.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:6b:c1:49:b5:65:e8:4b:d8:5b:ef:f6:f7:ad:9c:9f:13:64: f3:b5:4d:b1:1b:1f:42:77:4f:4c:aa:63:01:d4:f6:4a:2d:55: 63:91:1e:51:47:0d:17:45:50:7c:58:3e:21:75:b1:52:27:75: bd:f3:e8:f7:9d:7e:c1:3d:f1:06:e0:4f:93:dd:f7:da:81:c2: 6e:5f:17:69:f3:f4:0a:57:ee:b1:23:aa:c8:6b:7a:a7:d2:18: 96:98:a2:2a:71:2f:a6:ec:79:13:f4:9d:25:91:6e:f3:ae:46: 70:22:83:89:b5:ee:da:25:8a:87:ff:09:92:f5:79:4f:6e:c9: 51:f8:5f:4f:12:71:e0:64:54:2a:64:5e:e8:5a:73:28:af:44: a5:26:54:35:8e:87:65:d2:94:3f:18:e9:78:b1:c6:86:2c:19: 3e:18:18:76:99:c2:5f:f4:7a:84:b8:01:af:71:d2:fd:c6:b6: 18:c9:ed:ec:8d:dc:64:92:be:0d:1b:20:84:46:c9:90:93:36: 32:d7:95:28:d9:de:87:91:07:d7:63:72:07:55:b9:28:2e:99: 34:b5:a4:db:99:4c:b3:72:42:7d:b5:30:b3:27:5d:55:07:23: 78:b0:c9:cf:cd:ab:bd:0b:2b:4a:be:08:0e:ff:ff:49:8d:1a: 15:a5:75:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEofkCPNJzFpiFLfrgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjg3Yzg2OWEtZmQ5Yy00ZGI5LThkYWItNTRiNzM3MTAz NTEzMB4XDTI1MDYwODEzMDEwMVoXDTI1MDkwNjEzMDEwMVowLzEtMCsGA1UEAxMk YzY5MzdkZTUtYTNiMi00MWY0LWEwZDctZmU1MmQzNWU2ZGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrugoDfta0v3KnFSYZRBLL4Z1i054nv1BZgg a3Ukca+lWtVD9QX558OQ32q9FQOkjmbGaXzQF1C7G7hRW1RYp6eqLqNTmdm83VhR wBBO8XNRSUCoAIIWnU8wgy7UeFeqnEGArty4nguEUMarih/jXsViSsQApqhyoU5L FZkEc+o4bAPqE1sWML1N5/DpjJdRvFkOxvHI+R2ji0oPC+xb0WvIxc2zSv0z2sXd ClW42OTaodtF68gz3E/Uv91VrzegMvU2DfaLLr15/7OGZskLwFQ7Bo/bWwh2Ha9h lAWF34yYzd7FJVThIAek5NvFe0JekJVfoAT1yEyYvPxGppoP/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAKIn8MmpqYurKf44P/5xunGy6v0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82ODdj ODY5YS1mZDljLTRkYjktOGRhYi01NGI3MzcxMDM1MTMvZjI5ODNmNjAtZGY3NC0z NTkzLTgzZDYtOTY5OWFhNDQyNGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjg3Yzg2OWEtZmQ5Yy00ZGI5LThk YWItNTRiNzM3MTAzNTEzLzY4N2M4NjlhLWZkOWMtNGRiOS04ZGFiLTU0YjczNzEw MzUxMy5jcmwwHwYDVR0jBBgwFoAU4uiNCUXNrgKVNNtusLIBOCL3Hl4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC82ODdjODY5YS1mZDljLTRkYjktOGRhYi01NGI3 MzcxMDM1MTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx2W8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNrwUm1ZehL2Fvv9vetnJ8TZPO1TbEbH0J3T0yqYwHU9kotVWORHlFH DRdFUHxYPiF1sVIndb3z6PedfsE98QbgT5Pd99qBwm5fF2nz9ApX7rEjqshreqfS GJaYoipxL6bseRP0nSWRbvOuRnAig4m17toliof/CZL1eU9uyVH4X08SceBkVCpk XuhacyivRKUmVDWOh2XSlD8Y6XixxoYsGT4YGHaZwl/0eoS4Aa9x0v3GthjJ7eyN 3GSSvg0bIIRGyZCTNjLXlSjZ3oeRB9djcgdVuSgumTS1pNuZTLNyQn21MLMnXVUH I3iwyc/Nq70LK0q+CA7//0mNGhWldRQ= -----END CERTIFICATE-----Generated at Sun Jun 15 05:53:41 2025 by rpki-client