$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/1b54a3eb-c57f-38c6-85bb-063509906029.roa File: 1b54a3eb-c57f-38c6-85bb-063509906029.roa (raw, json) Hash identifier: 52NPmIvqpaegd2bTkhgxkkxUZDn9D068XvtEGRQRjpE= Subject key identifier: 1E:48:95:AD:B8:94:B1:0F:0B:E4:BB:50:5C:EC:68:1C:28:98:13:5E Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584A2ABAF011B0A2474D2A1457E0 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/1b54a3eb-c57f-38c6-85bb-063509906029.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 11404 IP address blocks: 199.27.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:f0:11:b0:a2:47:4d:2a:14:57:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=1e360039-11cf-4b04-8146-bdc17a7a041f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b6:4b:97:21:8e:83:3d:60:89:3a:c2:a8:db: 8d:25:aa:f0:f2:0a:7f:1a:33:84:14:a6:c4:34:7a: 63:bf:bc:fe:f4:00:d7:47:28:5c:0e:47:8b:5f:cb: 8c:51:8b:ae:b9:96:a4:ca:6c:90:87:a5:f1:6b:ed: 23:6e:4b:3d:08:77:99:87:40:76:c9:59:4a:5f:24: 4b:7c:98:d6:3d:87:a7:71:b5:f4:80:01:56:76:f1: cf:ee:1a:39:b7:44:2e:9d:72:d6:f5:a1:76:19:88: 25:28:0f:a4:b3:63:da:a8:1d:c8:d7:e9:49:ad:d0: 34:c1:f5:07:f6:ea:0a:9c:dd:01:54:05:77:8a:11: 4b:6e:4d:be:ea:05:8e:62:e2:f4:c5:93:b3:81:82: c1:e2:07:c0:e1:93:98:57:94:c5:60:b9:a9:ae:47: f2:67:ef:13:4d:b6:af:c5:3b:04:90:2d:5f:4b:cf: 1b:40:cf:2f:6d:24:f7:2f:82:7d:ad:90:0f:21:78: 51:3a:5a:da:49:fc:cb:c7:c3:f9:7e:16:d6:10:92: 41:5d:19:6f:2f:b0:4d:09:68:8d:44:bc:34:42:60: ff:1d:78:82:8a:03:c5:3d:ad:2c:99:0a:66:e9:02: 63:84:66:0a:b2:3f:d0:bd:06:72:a2:65:30:64:64: b0:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:48:95:AD:B8:94:B1:0F:0B:E4:BB:50:5C:EC:68:1C:28:98:13:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/1b54a3eb-c57f-38c6-85bb-063509906029.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 199.27.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:60:9a:0b:52:bf:c9:ac:ee:bb:2a:e6:a9:c0:d9:88:f8:1c: fc:19:1c:06:d2:33:7b:15:2c:7c:d4:b2:fc:7a:64:87:75:27: 39:63:18:2f:5f:b4:4c:71:70:a0:d7:b2:f2:0c:af:2a:ba:06: e1:84:e4:95:cf:fa:42:8e:20:c0:21:a4:f1:38:bb:a5:a3:5b: dc:1d:06:d0:d5:cc:e1:16:ef:95:d7:ca:29:ec:ac:24:42:ef: 6f:49:7b:5d:66:1d:45:5b:a7:28:62:a0:05:69:56:b2:a6:4a: 61:64:3a:bb:84:db:67:07:66:39:24:3a:a3:06:e9:d5:62:bb: d2:18:77:07:b1:02:64:b3:75:b3:d8:41:e0:1f:5b:e9:70:02: 75:de:af:73:e4:43:4f:14:d8:d4:db:43:c4:fd:e9:ba:11:ed: ca:8e:30:1a:bf:d1:f9:8a:5d:c4:0f:4e:a2:4c:42:8b:b2:36: ab:6d:d0:36:7e:55:8b:ae:a0:2b:a1:f6:66:14:20:59:24:42: 8b:d1:b8:21:78:5a:89:37:11:42:7a:8c:36:78:cc:c9:de:6d: e1:0c:23:28:16:ce:27:f4:a6:d0:88:6f:2b:fc:bd:93:fd:51: 23:f9:65:7e:c1:e5:3c:d4:3b:4f:be:78:e1:5d:20:51:02:7d: 4a:4b:0b:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoquvARsKJHTSoUV+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk MWUzNjAwMzktMTFjZi00YjA0LTgxNDYtYmRjMTdhN2EwNDFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7ZLlyGOgz1giTrCqNuNJarw8gp/GjOEFKbE NHpjv7z+9ADXRyhcDkeLX8uMUYuuuZakymyQh6Xxa+0jbks9CHeZh0B2yVlKXyRL fJjWPYencbX0gAFWdvHP7ho5t0QunXLW9aF2GYglKA+ks2PaqB3I1+lJrdA0wfUH 9uoKnN0BVAV3ihFLbk2+6gWOYuL0xZOzgYLB4gfA4ZOYV5TFYLmprkfyZ+8TTbav xTsEkC1fS88bQM8vbST3L4J9rZAPIXhROlraSfzLx8P5fhbWEJJBXRlvL7BNCWiN RLw0QmD/HXiCigPFPa0smQpm6QJjhGYKsj/QvQZyomUwZGSwyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB5Ila24lLEPC+S7UFzsaBwomBNeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvMWI1NGEzZWItYzU3Zi0z OGM2LTg1YmItMDYzNTA5OTA2MDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxxtoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVgmgtSv8ms7rsq5qnA2Yj4HPwZHAbSM3sVLHzUsvx6ZId1JzljGC9f tExxcKDXsvIMryq6BuGE5JXP+kKOIMAhpPE4u6WjW9wdBtDVzOEW75XXyinsrCRC 729Je11mHUVbpyhioAVpVrKmSmFkOruE22cHZjkkOqMG6dViu9IYdwexAmSzdbPY QeAfW+lwAnXer3PkQ08U2NTbQ8T96boR7cqOMBq/0fmKXcQPTqJMQouyNqtt0DZ+ VYuuoCuh9mYUIFkkQovRuCF4Wok3EUJ6jDZ4zMnebeEMIygWzif0ptCIbyv8vZP9 USP5ZX7B5TzUO0++eOFdIFECfUpLC5Y= -----END CERTIFICATE-----Generated at Sun Jun 15 11:34:04 2025 by rpki-client