$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/5eabecf5-9f45-376b-83d0-ccd1a3b4a5b3.roa File: 5eabecf5-9f45-376b-83d0-ccd1a3b4a5b3.roa (raw, json) Hash identifier: UjxjZqb+X8WrutrkIT8nfc26QcFcKoZoKCo8YvaaXf0= Subject key identifier: 57:0B:47:9F:A8:AB:BA:AA:4A:97:3A:52:37:38:28:51:9F:C9:02:4B Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584A2ABAFE68D7B15759B5AB5800 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/5eabecf5-9f45-376b-83d0-ccd1a3b4a5b3.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 54858 IP address blocks: 199.27.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:fe:68:d7:b1:57:59:b5:ab:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=31a8d146-9c8a-49ab-be48-cbcc3bb4c807 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:4c:f6:4b:57:ec:8a:1f:04:41:2d:dd:9a:c3: 20:e8:88:01:19:3e:7e:c3:11:c5:06:44:68:11:f9: 7e:60:64:2b:fc:74:47:fd:f7:f7:d4:5c:29:d9:38: 9f:8c:46:ba:dd:7a:0c:1b:b5:30:f5:3a:d0:b9:49: 57:9d:8c:05:ed:cb:2f:5b:56:1c:53:d9:ac:13:27: 91:a4:5c:29:b5:76:e4:c2:39:10:af:1a:25:1f:a2: f9:67:4d:cd:42:74:0e:5e:97:e9:b0:88:85:9a:b3: 0b:9a:90:8b:d1:52:3e:1a:27:3e:7e:d8:3d:93:ee: f5:0d:13:61:b0:b3:e5:6c:29:79:6c:99:7e:a7:63: 81:02:c6:00:7d:65:ac:ef:39:45:1c:48:7a:83:a7: 82:9c:12:82:08:86:b9:3f:d0:e6:8f:ab:56:e1:29: 3e:1d:94:f6:5b:11:20:f5:5c:c7:17:51:01:ba:a7: 82:b3:fa:a6:ad:db:63:c2:b1:e4:d1:09:c2:d6:86: 22:80:40:3b:af:c9:bc:e1:76:fd:ec:17:67:3b:3e: 76:15:51:99:07:b3:8c:07:0d:b1:e0:fc:e0:a1:25: 46:2e:82:69:67:4d:09:4b:16:17:65:ef:c8:59:a2: bc:e1:ad:eb:bb:44:0c:45:d7:da:3c:0b:c0:0c:d8: be:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:0B:47:9F:A8:AB:BA:AA:4A:97:3A:52:37:38:28:51:9F:C9:02:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/5eabecf5-9f45-376b-83d0-ccd1a3b4a5b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 199.27.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:f4:a5:6a:a6:ab:b4:5e:c6:7e:ff:8b:a6:5f:2c:19:09:a5: 61:66:7c:ca:bd:5c:0f:28:96:f9:4d:f8:5e:10:a2:ba:1a:06: e4:7a:1c:7b:bd:fb:b7:ae:0d:5f:ba:27:09:cf:af:62:d8:ca: 2f:30:00:04:88:be:63:41:97:09:f8:39:c2:2d:51:32:e5:2e: c1:ca:d4:f6:69:09:7c:77:1f:a8:e1:b1:13:81:ee:f8:cb:e6: 7b:ee:3c:63:c8:71:d0:6f:b9:a8:8b:1d:5c:df:0a:9b:5b:7b: 3f:80:22:ab:e3:6f:11:d5:b6:a8:c3:c5:95:a8:8a:31:4a:b5: df:81:3a:65:d9:0c:b6:8d:b5:42:92:b3:ce:70:ae:0e:2a:82: 28:c6:c2:ad:d4:df:2c:29:74:3a:c3:f4:b7:4a:a5:4b:ec:2c: b5:34:cf:84:95:8d:bc:cc:ec:fb:f9:de:51:62:37:86:62:fc: 89:e7:40:6e:e1:2d:b0:42:4a:ae:e3:bd:29:42:37:8b:5e:ed: b8:fd:87:48:19:63:3e:8b:0e:0f:e0:e7:38:59:f2:f0:0a:43: b0:66:1b:81:1b:22:3f:d9:35:75:4c:d6:9b:e2:56:f7:d7:c9: a8:d4:fa:35:ab:fa:7d:16:10:95:a8:94:d8:1a:2e:bd:fc:88: ce:67:7f:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoquv5o17FXWbWrWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk MzFhOGQxNDYtOWM4YS00OWFiLWJlNDgtY2JjYzNiYjRjODA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEz2S1fsih8EQS3dmsMg6IgBGT5+wxHFBkRo Efl+YGQr/HRH/ff31Fwp2TifjEa63XoMG7Uw9TrQuUlXnYwF7csvW1YcU9msEyeR pFwptXbkwjkQrxolH6L5Z03NQnQOXpfpsIiFmrMLmpCL0VI+Gic+ftg9k+71DRNh sLPlbCl5bJl+p2OBAsYAfWWs7zlFHEh6g6eCnBKCCIa5P9Dmj6tW4Sk+HZT2WxEg 9VzHF1EBuqeCs/qmrdtjwrHk0QnC1oYigEA7r8m84Xb97BdnOz52FVGZB7OMBw2x 4PzgoSVGLoJpZ00JSxYXZe/IWaK84a3ru0QMRdfaPAvADNi+MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFcLR5+oq7qqSpc6Ujc4KFGfyQJLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvNWVhYmVjZjUtOWY0NS0z NzZiLTgzZDAtY2NkMWEzYjRhNWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxxuwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADn0pWqmq7Rexn7/i6ZfLBkJpWFmfMq9XA8olvlN+F4QoroaBuR6HHu9 +7euDV+6JwnPr2LYyi8wAASIvmNBlwn4OcItUTLlLsHK1PZpCXx3H6jhsROB7vjL 5nvuPGPIcdBvuaiLHVzfCptbez+AIqvjbxHVtqjDxZWoijFKtd+BOmXZDLaNtUKS s85wrg4qgijGwq3U3ywpdDrD9LdKpUvsLLU0z4SVjbzM7Pv53lFiN4Zi/InnQG7h LbBCSq7jvSlCN4te7bj9h0gZYz6LDg/g5zhZ8vAKQ7BmG4EbIj/ZNXVM1pviVvfX yajU+jWr+n0WEJWolNgaLr38iM5nf8Y= -----END CERTIFICATE-----Generated at Sun Jun 15 15:23:19 2025 by rpki-client