$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/86d52164-647e-3414-9ea6-46b394b0d1a1.roa File: 86d52164-647e-3414-9ea6-46b394b0d1a1.roa (raw, json) Hash identifier: rfp3R25csDthpCFeV7y+WQbdltSx1JxnPr4OyxQt6ZE= Subject key identifier: 27:9F:C9:3C:D0:85:63:87:81:93:CF:E8:91:C3:5D:B1:EA:7A:9E:C4 Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F43285849D594DEA25CAC29FE1660D000 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/86d52164-647e-3414-9ea6-46b394b0d1a1.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 12259 IP address blocks: 199.201.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:de:a2:5c:ac:29:fe:16:60:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=bac70da8-15a7-49cd-a711-03f2f0023b12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:42:19:bf:18:33:68:15:d5:64:e9:cf:a4:16: c9:85:14:67:9b:67:dc:c7:f6:f5:b6:ec:25:a2:ce: d1:e2:af:88:ec:01:92:a0:5b:49:34:54:a5:ea:28: 4e:d6:ab:67:b8:ca:1a:00:50:b1:8f:46:ce:d3:f4: 99:de:29:68:27:13:23:83:9e:91:ce:e8:23:4a:91: 80:b6:f0:06:cb:51:98:9c:b4:f2:6a:3d:b6:de:cc: 6f:e4:10:d1:f4:36:f4:1b:5b:e9:13:78:cf:fd:14: 29:67:4a:fd:63:d2:b7:f3:65:af:38:93:08:86:c2: 02:5a:2f:f6:ec:4b:0c:2c:8c:ba:a7:25:87:71:b9: 44:71:28:de:57:d6:de:2c:4f:0f:c3:17:c2:f9:df: 3e:1d:19:4c:3b:3b:c0:86:cc:0c:12:cb:fa:5c:31: e4:70:30:73:7a:71:c8:c0:8b:20:8b:d3:4b:45:22: db:a7:62:c0:87:44:e3:26:f2:4d:a7:76:1b:8e:3e: 51:bf:1a:95:12:56:1f:7d:a3:38:c1:50:fb:ee:5e: 18:16:5b:8b:9a:d0:ca:0a:15:1b:32:ae:84:36:ff: 6a:07:ca:fc:26:76:8e:ce:68:a2:d3:11:fe:46:aa: 21:2e:ee:51:12:ec:2f:f2:3f:2f:52:d4:08:0b:6b: f9:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:9F:C9:3C:D0:85:63:87:81:93:CF:E8:91:C3:5D:B1:EA:7A:9E:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/86d52164-647e-3414-9ea6-46b394b0d1a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv4: 199.201.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:1d:b0:b8:08:cf:df:cf:31:d2:18:de:1f:f0:32:46:de:b9: 35:ae:da:2a:8b:ef:be:ea:e6:82:61:bf:10:c7:0c:30:b1:06: 6d:00:2f:db:83:be:60:bb:9b:71:8f:f6:d3:c8:a9:5d:b4:db: ea:8e:f7:5a:92:bb:d4:50:94:21:94:96:08:9c:72:5c:6b:4b: 4b:e3:90:5e:5c:12:76:f6:46:0c:51:a1:ea:54:86:a2:66:fa: d7:6a:e5:c1:f9:25:0f:8b:71:62:da:36:dd:0d:9b:10:f2:25: 5d:f9:45:03:80:ef:25:9e:49:a9:ff:6a:8f:d3:9a:38:d2:09: 4c:85:a6:c8:22:1a:11:38:07:36:ac:7c:ad:1a:9d:2d:ff:6d: 0b:3d:fd:65:39:c1:77:ba:52:d7:41:65:28:24:ee:cf:cd:e0: 2d:2a:f0:08:40:a7:35:50:fa:0f:d6:57:bf:e1:0b:63:c0:bd: b2:01:41:2f:38:6a:db:91:2e:6c:c1:23:5c:2a:f2:23:35:fa: 9e:0b:7d:c3:ae:77:cb:02:29:d0:fe:b5:2a:68:87:27:55:96: a4:49:0e:d5:f0:59:df:fc:dc:d4:ca:21:01:1f:bf:af:5f:0d: ef:50:26:9c:df:c0:08:e9:29:54:e7:0d:76:7a:12:d3:c5:7d: 49:c7:f2:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnVlN6iXKwp/hZg0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk YmFjNzBkYTgtMTVhNy00OWNkLWE3MTEtMDNmMmYwMDIzYjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0IZvxgzaBXVZOnPpBbJhRRnm2fcx/b1tuwl os7R4q+I7AGSoFtJNFSl6ihO1qtnuMoaAFCxj0bO0/SZ3iloJxMjg56RzugjSpGA tvAGy1GYnLTyaj223sxv5BDR9Db0G1vpE3jP/RQpZ0r9Y9K382WvOJMIhsICWi/2 7EsMLIy6pyWHcblEcSjeV9beLE8PwxfC+d8+HRlMOzvAhswMEsv6XDHkcDBzenHI wIsgi9NLRSLbp2LAh0TjJvJNp3Ybjj5RvxqVElYffaM4wVD77l4YFluLmtDKChUb Mq6ENv9qB8r8JnaOzmii0xH+RqohLu5REuwv8j8vUtQIC2v5lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCefyTzQhWOHgZPP6JHDXbHqep7EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvODZkNTIxNjQtNjQ3ZS0z NDE0LTllYTYtNDZiMzk0YjBkMWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx8lvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMdsLgIz9/PMdIY3h/wMkbeuTWu2iqL777q5oJhvxDHDDCxBm0AL9uD vmC7m3GP9tPIqV202+qO91qSu9RQlCGUlgicclxrS0vjkF5cEnb2RgxRoepUhqJm +tdq5cH5JQ+LcWLaNt0NmxDyJV35RQOA7yWeSan/ao/TmjjSCUyFpsgiGhE4Bzas fK0anS3/bQs9/WU5wXe6UtdBZSgk7s/N4C0q8AhApzVQ+g/WV7/hC2PAvbIBQS84 atuRLmzBI1wq8iM1+p4LfcOud8sCKdD+tSpohydVlqRJDtXwWd/83NTKIQEfv69f De9QJpzfwAjpKVTnDXZ6EtPFfUnH8gU= -----END CERTIFICATE-----Generated at Sun Jun 15 22:04:10 2025 by rpki-client