$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/4adad03b-afb7-37aa-b32f-c3fc097b8abe.roa File: 4adad03b-afb7-37aa-b32f-c3fc097b8abe.roa (raw, json) Hash identifier: lvuJz7ksMWHpn1scYIEmtfWySUqDl77sELdFuxuqr0o= Subject key identifier: 59:8B:C7:B8:7E:D9:46:0D:17:2F:70:4F:9F:F4:B5:0C:84:A4:7D:60 Certificate issuer: /CN=688a78fa-2d94-478e-900a-a1fec661b769 Certificate serial: 010D0C9F43285849F87A7C87C2B0CF1AAF523CC0 Authority key identifier: 90:5B:E8:2C:10:72:9B:04:06:F5:CA:5A:16:4C:22:B2:DF:64:86:B9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/4adad03b-afb7-37aa-b32f-c3fc097b8abe.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 13649 IP address blocks: 199.101.110.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:7c:87:c2:b0:cf:1a:af:52:3c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688a78fa-2d94-478e-900a-a1fec661b769 Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=23c3c793-b8a3-41af-8439-128b3b701871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:20:08:c0:f6:51:d4:2e:4c:37:15:0e:85:03: 16:e4:2c:23:d6:fb:1b:c0:f2:8f:a2:b9:a7:75:ad: 87:e8:a6:78:0a:16:06:f6:dc:9d:85:73:9d:c3:cf: 35:10:97:ff:46:37:48:8e:39:e3:b5:0e:97:9e:20: 87:04:96:78:bb:b6:b7:fd:14:79:a0:55:b9:11:6b: 42:ad:fb:51:67:5f:9c:81:b5:00:95:d5:bc:26:ba: 7f:31:96:7f:a7:aa:0d:00:b5:cd:e1:fe:ee:e4:09: df:5c:1d:d3:51:3a:f6:f1:b4:b3:de:eb:0f:33:3d: 1a:96:ae:a0:bb:fd:f9:c5:bc:15:c0:b7:a3:1a:4a: a2:02:72:f8:82:57:21:ba:07:09:60:30:27:96:91: 45:b6:b9:56:ac:5d:1c:6a:6f:f2:d2:55:3f:0f:1a: 74:ac:7d:58:e1:d7:72:67:77:e1:bc:50:81:48:83: f0:37:8a:dc:85:6f:3a:f2:12:bc:ad:21:47:86:2b: 2f:00:40:5f:09:56:aa:53:db:f3:f9:be:9d:25:72: d4:b6:e8:e3:f0:79:2b:ad:e1:e5:9d:85:44:02:d8: 28:dd:e9:da:e5:68:87:e1:c9:22:6b:ce:1e:00:e4: 65:4a:a5:61:aa:bb:00:cb:78:86:2b:78:dd:7a:04: b8:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:8B:C7:B8:7E:D9:46:0D:17:2F:70:4F:9F:F4:B5:0C:84:A4:7D:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/4adad03b-afb7-37aa-b32f-c3fc097b8abe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.crl X509v3 Authority Key Identifier: keyid:90:5B:E8:2C:10:72:9B:04:06:F5:CA:5A:16:4C:22:B2:DF:64:86:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer sbgp-ipAddrBlock: critical IPv4: 199.101.110.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:9d:75:78:60:1e:36:12:69:18:cf:97:e7:bb:51:7f:79:41: 14:4a:a0:1a:9d:db:58:70:3e:e2:30:56:77:72:51:25:f9:4c: ed:37:5f:81:8a:8d:59:53:3d:39:36:fa:a0:a9:6e:55:dc:22: 8b:4c:de:6f:ea:9e:14:e2:d5:20:dc:a1:05:c6:41:7f:06:44: bd:5d:df:b4:74:48:b4:4f:3e:e5:28:07:26:f1:a2:f2:65:ae: c8:52:d2:72:7a:ae:a8:35:01:3f:8a:aa:67:27:23:9a:55:1a: 19:fb:95:e3:76:9a:51:9b:63:00:82:c2:07:58:69:18:e2:60: b1:41:e2:31:49:65:1c:22:14:2b:ee:4a:8a:67:ce:49:35:fb: a2:cd:75:03:40:bd:a6:d3:bb:b0:e4:0e:ef:a3:d8:69:c1:ab: 17:75:74:bf:67:59:c5:ca:ad:22:bf:2a:9a:c7:11:7d:a4:f0: cd:19:7e:99:f0:41:b6:ec:c5:73:7d:57:3f:65:54:d5:1b:f6: b0:66:ae:36:bb:25:a4:a5:53:5e:af:68:cc:25:5e:85:9c:80: be:0a:0f:ef:7c:a4:c8:4b:90:cc:e2:25:b4:6f:4b:22:50:86: 3c:f5:28:2f:fb:54:f4:1f:d4:77:a5:67:d8:55:fb:f5:ee:3c: 2a:f4:8a:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn4enyHwrDPGq9SPMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjg4YTc4ZmEtMmQ5NC00NzhlLTkwMGEtYTFmZWM2NjFi NzY5MB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk MjNjM2M3OTMtYjhhMy00MWFmLTg0MzktMTI4YjNiNzAxODcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCAIwPZR1C5MNxUOhQMW5Cwj1vsbwPKPormn da2H6KZ4ChYG9tydhXOdw881EJf/RjdIjjnjtQ6XniCHBJZ4u7a3/RR5oFW5EWtC rftRZ1+cgbUAldW8Jrp/MZZ/p6oNALXN4f7u5AnfXB3TUTr28bSz3usPMz0alq6g u/35xbwVwLejGkqiAnL4glchugcJYDAnlpFFtrlWrF0cam/y0lU/Dxp0rH1Y4ddy Z3fhvFCBSIPwN4rchW868hK8rSFHhisvAEBfCVaqU9vz+b6dJXLUtujj8HkrreHl nYVEAtgo3ena5WiH4ckia84eAORlSqVhqrsAy3iGK3jdegS4ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFmLx7h+2UYNFy9wT5/0tQyEpH1gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ODhh NzhmYS0yZDk0LTQ3OGUtOTAwYS1hMWZlYzY2MWI3NjkvNGFkYWQwM2ItYWZiNy0z N2FhLWIzMmYtYzNmYzA5N2I4YWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjg4YTc4ZmEtMmQ5NC00NzhlLTkw MGEtYTFmZWM2NjFiNzY5LzY4OGE3OGZhLTJkOTQtNDc4ZS05MDBhLWExZmVjNjYx Yjc2OS5jcmwwHwYDVR0jBBgwFoAUkFvoLBBymwQG9cpaFkwist9khrkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ODhhNzhmYS0yZDk0LTQ3OGUtOTAwYS1hMWZl YzY2MWI3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx2VuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKddXhgHjYSaRjPl+e7UX95QRRKoBqd21hwPuIwVndyUSX5TO03X4GK jVlTPTk2+qCpblXcIotM3m/qnhTi1SDcoQXGQX8GRL1d37R0SLRPPuUoBybxovJl rshS0nJ6rqg1AT+KqmcnI5pVGhn7leN2mlGbYwCCwgdYaRjiYLFB4jFJZRwiFCvu Sopnzkk1+6LNdQNAvabTu7DkDu+j2GnBqxd1dL9nWcXKrSK/KprHEX2k8M0Zfpnw QbbsxXN9Vz9lVNUb9rBmrja7JaSlU16vaMwlXoWcgL4KD+98pMhLkMziJbRvSyJQ hjz1KC/7VPQf1HelZ9hV+/XuPCr0ioc= -----END CERTIFICATE-----Generated at Mon Jun 16 02:30:24 2025 by rpki-client