$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76/59c14deb-5794-3d55-a33a-dd50dc7e6a13.roa File: 59c14deb-5794-3d55-a33a-dd50dc7e6a13.roa (raw, json) Hash identifier: qHG3eEgrb3HFHxGDwQ3QEf+3u6JTm+Nd5rW6RjzQtAE= Subject key identifier: 23:18:8D:4D:7D:D0:B0:AC:F6:C5:36:DC:B1:DA:64:EA:43:F5:B4:6F Certificate issuer: /CN=32d9b6a7-2ed5-448b-9bcb-8d262acc3f76 Certificate serial: 010D0C9F43285849EBEA54474F5B300C2B5F9200 Authority key identifier: 3F:7F:AA:77:BF:AF:E7:2B:2A:B3:CA:D2:1E:AC:4C:10:01:1D:A4:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76/59c14deb-5794-3d55-a33a-dd50dc7e6a13.roa Signing time: Wed 21 May 2025 01:00:49 +0000 ROA not before: Wed 21 May 2025 01:00:49 +0000 ROA not after: Tue 19 Aug 2025 01:00:49 +0000 asID: 209242 IP address blocks: 199.33.230.0/24 maxlen: 24 199.33.231.0/24 maxlen: 24 199.33.232.0/24 maxlen: 24 199.33.233.0/24 maxlen: 24 2001:503:ff40::/48 maxlen: 48 2001:503:ff41::/48 maxlen: 48 2001:503:ff42::/48 maxlen: 48 2001:503:ff43::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:ea:54:47:4f:5b:30:0c:2b:5f:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32d9b6a7-2ed5-448b-9bcb-8d262acc3f76 Validity Not Before: May 21 01:00:49 2025 GMT Not After : Aug 19 01:00:49 2025 GMT Subject: CN=86bca1a4-12be-421c-b99b-2b99979a8cd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f4:ad:34:06:6d:be:4f:67:a2:87:bf:15:f4: 42:00:9d:54:8d:4d:32:f3:13:a4:43:d4:5f:45:70: 38:ad:2c:b8:e0:dc:ae:02:c7:e5:dc:40:ba:43:fa: cd:09:53:89:9b:6c:bd:36:f7:d4:0c:0a:26:4e:f4: 7d:9b:f0:7a:2b:4d:62:13:36:5f:b3:cc:f8:ab:99: df:b5:33:41:df:ff:e8:48:3e:2a:bf:b9:81:7e:aa: cc:c1:6a:9a:32:d4:e0:d5:25:97:d5:59:48:8c:31: 74:51:1f:4b:e4:f2:4f:79:c7:49:22:a2:8d:b6:38: 35:e4:a0:4a:b0:09:7a:02:31:9a:27:b4:0e:bb:bb: 2b:ff:d4:b5:b7:d6:24:a0:01:10:81:53:b9:0b:c7: f4:e2:d7:c5:e2:16:03:22:e6:1a:71:e5:bd:a4:57: b2:8d:5b:f0:e9:34:9a:b5:a2:52:6f:e3:4e:c0:e1: c2:dd:05:23:2f:55:4a:f3:6f:ad:cc:3f:f7:b5:bc: 3c:21:fd:48:8b:79:72:f6:70:f2:92:50:13:56:73: 39:31:ad:ed:68:96:45:1e:7f:53:a0:27:21:8c:9d: 3d:96:d1:24:be:50:d3:fc:31:d6:55:43:60:85:69: e0:dc:7a:a5:b0:ea:8f:57:56:f9:8e:cd:99:e5:74: 8d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:18:8D:4D:7D:D0:B0:AC:F6:C5:36:DC:B1:DA:64:EA:43:F5:B4:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76/59c14deb-5794-3d55-a33a-dd50dc7e6a13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76.crl X509v3 Authority Key Identifier: keyid:3F:7F:AA:77:BF:AF:E7:2B:2A:B3:CA:D2:1E:AC:4C:10:01:1D:A4:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76.cer sbgp-ipAddrBlock: critical IPv4: 199.33.230.0-199.33.233.255 IPv6: 2001:503:ff40::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:f8:42:e0:74:5a:b2:16:96:fa:e6:d4:94:e3:48:0a:68:5c: 54:67:ed:99:c8:52:0a:9a:d1:e3:66:d7:66:91:89:bc:48:f6: d1:9b:a7:75:61:b9:55:c3:3e:9d:11:6f:8a:07:1b:1b:e4:6d: a4:b6:d8:39:3d:8d:93:6f:00:62:c1:0c:be:ef:70:b1:21:6a: fc:5e:d4:3f:ed:b4:e0:6b:ae:39:fe:de:f5:cc:b2:58:ec:ae: 4e:1a:12:2a:43:28:b1:41:6d:a0:66:26:35:87:40:7a:eb:f5: 9b:d2:39:ab:8b:18:7c:65:db:42:70:0f:4c:ed:f7:c1:14:61: 71:80:40:96:c5:70:d9:00:12:b5:fd:09:60:71:1b:89:a1:f0: ab:05:b6:86:ba:50:f9:ed:0e:78:e9:ce:d4:86:e7:a9:cb:35: 09:ee:ae:c2:0b:ac:e3:38:bc:44:8d:d5:1d:23:40:b5:38:8a: 21:61:58:a3:61:50:06:2d:d2:b3:a3:3e:ec:6f:c2:6f:e5:e1: 80:81:74:01:17:75:33:a5:d5:84:1f:70:0d:48:10:b7:0f:d3: 19:ee:ed:9b:ad:c1:2d:4b:53:ac:35:1c:57:1c:c9:52:41:f2: dd:ba:34:2a:1f:96:9b:11:f7:d2:ef:03:28:ab:16:fb:eb:0e: be:dc:a9:d0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnr6lRHT1swDCtfkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJkOWI2YTctMmVkNS00NDhiLTliY2ItOGQyNjJhY2Mz Zjc2MB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk ODZiY2ExYTQtMTJiZS00MjFjLWI5OWItMmI5OTk3OWE4Y2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfStNAZtvk9nooe/FfRCAJ1UjU0y8xOkQ9Rf RXA4rSy44NyuAsfl3EC6Q/rNCVOJm2y9NvfUDAomTvR9m/B6K01iEzZfs8z4q5nf tTNB3//oSD4qv7mBfqrMwWqaMtTg1SWX1VlIjDF0UR9L5PJPecdJIqKNtjg15KBK sAl6AjGaJ7QOu7sr/9S1t9YkoAEQgVO5C8f04tfF4hYDIuYaceW9pFeyjVvw6TSa taJSb+NOwOHC3QUjL1VK82+tzD/3tbw8If1Ii3ly9nDyklATVnM5Ma3taJZFHn9T oCchjJ09ltEkvlDT/DHWVUNghWng3HqlsOqPV1b5js2Z5XSNbQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCMYjU190LCs9sU23LHaZOpD9bRvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zMmQ5 YjZhNy0yZWQ1LTQ0OGItOWJjYi04ZDI2MmFjYzNmNzYvNTljMTRkZWItNTc5NC0z ZDU1LWEzM2EtZGQ1MGRjN2U2YTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzJkOWI2YTctMmVkNS00NDhiLTli Y2ItOGQyNjJhY2MzZjc2LzMyZDliNmE3LTJlZDUtNDQ4Yi05YmNiLThkMjYyYWNj M2Y3Ni5jcmwwHwYDVR0jBBgwFoAUP3+qd7+v5ysqs8rSHqxMEAEdpCowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zMmQ5YjZhNy0yZWQ1LTQ0OGItOWJjYi04ZDI2 MmFjYzNmNzYuY2VyMDgGCCsGAQUFBwEHAQH/BCkwJzAUBAIAATAOMAwDBAHHIeYD BAHHIegwDwQCAAIwCQMHAiABBQP/QDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBC+ELgdFqyFpb65tSU40gK aFxUZ+2ZyFIKmtHjZtdmkYm8SPbRm6d1YblVwz6dEW+KBxsb5G2kttg5PY2TbwBi wQy+73CxIWr8XtQ/7bTga645/t71zLJY7K5OGhIqQyixQW2gZiY1h0B66/Wb0jmr ixh8ZdtCcA9M7ffBFGFxgECWxXDZABK1/QlgcRuJofCrBbaGulD57Q546c7Uhuep yzUJ7q7CC6zjOLxEjdUdI0C1OIohYVijYVAGLdKzoz7sb8Jv5eGAgXQBF3UzpdWE H3ANSBC3D9MZ7u2brcEtS1OsNRxXHMlSQfLdujQqH5abEffS7wMoqxb76w6+3KnQ -----END CERTIFICATE-----Generated at Sun Jun 15 17:59:46 2025 by rpki-client