$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/8f41887f-e02f-3b1f-9011-a36a71b35c82.roa File: 8f41887f-e02f-3b1f-9011-a36a71b35c82.roa (raw, json) Hash identifier: mMhoNWjBeEtrrF1ipg03xmD2D7IoBZrL7KxwgPqZgQw= Subject key identifier: 4E:E7:05:DE:96:C4:E6:08:FF:31:10:AE:3C:EA:1E:D9:FE:FF:0B:3B Certificate issuer: /CN=688a78fa-2d94-478e-900a-a1fec661b769 Certificate serial: 010D0C9F43285849DF5A60635B9F85F4AD0A4B00 Authority key identifier: 90:5B:E8:2C:10:72:9B:04:06:F5:CA:5A:16:4C:22:B2:DF:64:86:B9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/8f41887f-e02f-3b1f-9011-a36a71b35c82.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 58580 IP address blocks: 199.101.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:60:63:5b:9f:85:f4:ad:0a:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688a78fa-2d94-478e-900a-a1fec661b769 Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=51e05078-59e3-4ac6-abbd-00fb0fa91b47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:36:75:4d:c5:24:44:5b:6b:47:5d:ad:99:70: d1:34:d1:2a:16:28:38:a7:93:5b:b2:fc:8e:a8:d1: a2:82:8a:90:c9:7a:d5:e7:6a:4b:75:9f:c3:fa:e6: 69:9a:db:c0:10:38:7f:2b:d4:d8:07:64:22:04:26: 90:9d:9d:d5:4f:e4:33:19:c9:c1:e7:a9:b3:9d:5b: 35:10:b9:5a:2b:a4:d6:c9:d7:bf:a0:da:11:0b:2b: 84:a8:58:5a:5a:19:dc:91:66:3d:23:c6:a4:ea:1b: 54:ea:a5:49:91:1f:57:0b:bb:dd:6f:0c:5a:71:6b: e8:2d:32:b8:70:73:33:5c:af:d5:10:b7:6d:8c:89: 4e:6d:33:4a:ad:7a:3b:07:64:7f:e8:3c:28:5b:be: 69:c2:a0:1a:c1:a7:5f:0c:3d:35:15:02:0b:4b:65: 78:d9:22:e2:ea:33:8e:ea:d3:03:29:c5:01:3b:9d: 67:d3:cd:e2:66:f7:17:cc:a9:b7:48:97:35:9e:fa: 38:a5:3d:57:05:76:3a:98:e7:67:61:e4:c5:b9:e9: 40:61:eb:2c:5f:d7:c2:0a:b5:34:97:bf:da:3c:76: a3:4f:24:8b:f8:bd:a7:35:a5:38:33:f0:f0:31:dc: 7c:ca:6e:25:f2:b1:7e:4a:fc:26:2b:fe:20:cc:28: 87:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:E7:05:DE:96:C4:E6:08:FF:31:10:AE:3C:EA:1E:D9:FE:FF:0B:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/8f41887f-e02f-3b1f-9011-a36a71b35c82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.crl X509v3 Authority Key Identifier: keyid:90:5B:E8:2C:10:72:9B:04:06:F5:CA:5A:16:4C:22:B2:DF:64:86:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer sbgp-ipAddrBlock: critical IPv4: 199.101.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:2c:48:83:9e:ff:1b:2d:4e:e5:d0:72:f9:d2:a4:3c:c6:f1: 0d:99:50:60:2b:74:6e:cf:ac:6a:29:19:0f:13:6c:e7:b4:e8: 4f:48:1e:72:4c:40:e0:f5:ed:f5:03:1f:5d:4b:77:33:b7:24: 1e:52:90:16:50:ad:9a:39:73:2e:35:d6:e2:96:46:00:7f:f8: 7d:d4:f6:51:67:0e:41:93:05:8d:ac:15:02:8b:b2:26:19:a6: a4:5a:fc:9b:60:3f:e7:8e:d9:44:bc:d0:98:9e:04:82:e0:c5: ca:81:b4:d8:6c:3a:50:64:80:4f:01:aa:81:0a:28:aa:b6:90: 68:82:36:43:90:c0:84:d2:bf:d9:ce:0c:70:b4:04:86:7f:b0: 18:7b:a1:83:3d:0d:69:fb:1b:f7:e8:01:0c:da:4d:49:75:32: 95:1a:b2:6c:b9:fc:cf:e7:86:9f:3e:ca:e9:85:f8:20:c5:2b: 11:9e:49:70:be:ea:d8:d3:23:31:34:39:a0:87:49:f3:3e:d7: 17:b5:86:aa:39:1b:ee:b5:7b:b4:9b:c7:10:69:41:36:a4:ec: fc:41:bd:6a:b9:69:56:d3:26:b5:a6:1a:3b:87:8b:a3:be:fc: b5:47:af:3a:11:bc:33:f3:d5:a2:1e:ac:91:43:1c:61:a5:fb: 73:e4:1c:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfWmBjW5+F9K0KSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjg4YTc4ZmEtMmQ5NC00NzhlLTkwMGEtYTFmZWM2NjFi NzY5MB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk NTFlMDUwNzgtNTllMy00YWM2LWFiYmQtMDBmYjBmYTkxYjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzZ1TcUkRFtrR12tmXDRNNEqFig4p5NbsvyO qNGigoqQyXrV52pLdZ/D+uZpmtvAEDh/K9TYB2QiBCaQnZ3VT+QzGcnB56mznVs1 ELlaK6TWyde/oNoRCyuEqFhaWhnckWY9I8ak6htU6qVJkR9XC7vdbwxacWvoLTK4 cHMzXK/VELdtjIlObTNKrXo7B2R/6DwoW75pwqAawadfDD01FQILS2V42SLi6jOO 6tMDKcUBO51n083iZvcXzKm3SJc1nvo4pT1XBXY6mOdnYeTFuelAYessX9fCCrU0 l7/aPHajTySL+L2nNaU4M/DwMdx8ym4l8rF+SvwmK/4gzCiHcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE7nBd6WxOYI/zEQrjzqHtn+/ws7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ODhh NzhmYS0yZDk0LTQ3OGUtOTAwYS1hMWZlYzY2MWI3NjkvOGY0MTg4N2YtZTAyZi0z YjFmLTkwMTEtYTM2YTcxYjM1YzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjg4YTc4ZmEtMmQ5NC00NzhlLTkw MGEtYTFmZWM2NjFiNzY5LzY4OGE3OGZhLTJkOTQtNDc4ZS05MDBhLWExZmVjNjYx Yjc2OS5jcmwwHwYDVR0jBBgwFoAUkFvoLBBymwQG9cpaFkwist9khrkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ODhhNzhmYS0yZDk0LTQ3OGUtOTAwYS1hMWZl YzY2MWI3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx2VsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8sSIOe/xstTuXQcvnSpDzG8Q2ZUGArdG7PrGopGQ8TbOe06E9IHnJM QOD17fUDH11LdzO3JB5SkBZQrZo5cy411uKWRgB/+H3U9lFnDkGTBY2sFQKLsiYZ pqRa/JtgP+eO2US80JieBILgxcqBtNhsOlBkgE8BqoEKKKq2kGiCNkOQwITSv9nO DHC0BIZ/sBh7oYM9DWn7G/foAQzaTUl1MpUasmy5/M/nhp8+yumF+CDFKxGeSXC+ 6tjTIzE0OaCHSfM+1xe1hqo5G+61e7SbxxBpQTak7PxBvWq5aVbTJrWmGjuHi6O+ /LVHrzoRvDPz1aIerJFDHGGl+3PkHJc= -----END CERTIFICATE-----Generated at Mon Jun 16 19:15:06 2025 by rpki-client