$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/905b9808-a44d-3c8d-89b4-e8a4ce95b2af.roa File: 905b9808-a44d-3c8d-89b4-e8a4ce95b2af.roa (raw, json) Hash identifier: aebC+JTB5khGXi4UXHhr+pnaOsmpEv1q9IIPgl41Ffs= Subject key identifier: 5F:06:1E:3E:F2:A9:54:FD:60:5C:F6:C6:0A:28:DC:AF:69:CD:7E:22 Certificate issuer: /CN=c4668147-a71b-4fb3-9ed9-e1e04061bbdd Certificate serial: 010D0C9F4328584A25257038AC3708E3CFA72120 Authority key identifier: 25:2C:65:D1:2B:2B:E5:A6:80:45:38:98:E0:6B:67:DB:F5:0A:EE:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/905b9808-a44d-3c8d-89b4-e8a4ce95b2af.roa Signing time: Tue 10 Jun 2025 13:01:03 +0000 ROA not before: Tue 10 Jun 2025 13:01:03 +0000 ROA not after: Mon 08 Sep 2025 13:01:03 +0000 asID: 7018 IP address blocks: 199.188.196.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:25:25:70:38:ac:37:08:e3:cf:a7:21:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4668147-a71b-4fb3-9ed9-e1e04061bbdd Validity Not Before: Jun 10 13:01:03 2025 GMT Not After : Sep 8 13:01:03 2025 GMT Subject: CN=ad064b15-eda4-49a7-b3d1-3a05e07f551d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e9:34:c1:8d:77:30:86:bd:1e:c5:eb:c2:fa: 76:e8:ec:4a:43:0e:0c:29:4c:70:72:ca:fe:16:29: 89:30:c8:24:fe:cb:de:65:cf:1e:39:5b:e7:5e:b5: 60:9e:85:0b:75:63:ab:b7:bb:2a:a6:57:5d:34:9e: 40:be:cc:ac:b5:aa:f7:39:80:7c:5f:57:a3:f3:0f: b7:87:e7:59:95:fb:38:a8:25:d5:2c:2a:63:ea:e0: 48:f0:6e:34:e7:39:5e:b6:fb:38:fc:b9:85:c7:49: fe:0f:2c:ae:f8:cb:06:07:b1:2a:fe:ae:04:2c:0c: 56:fb:e6:c4:6f:12:38:be:cc:af:23:17:82:47:b0: 50:cb:84:13:4b:64:e0:e6:d9:b8:b5:d8:23:f0:c4: 4b:9c:ae:d9:66:6b:0e:86:e1:d7:89:45:4d:fb:3c: ba:f8:ac:6b:62:94:8f:0a:74:39:e5:cf:33:3e:f9: 83:15:4b:30:26:b8:5d:32:34:bd:d9:a9:6d:05:ec: 92:2c:7d:f6:bb:6f:48:bf:29:fc:d7:f2:81:e8:3a: f7:ea:d6:19:0b:8e:ad:ba:e9:9d:ba:ba:8a:cb:95: e4:49:b7:59:e9:30:44:8b:73:e3:e0:49:b5:e0:97: 55:57:6e:64:03:1f:2e:dc:21:54:9e:9a:c2:10:4c: be:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:06:1E:3E:F2:A9:54:FD:60:5C:F6:C6:0A:28:DC:AF:69:CD:7E:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/905b9808-a44d-3c8d-89b4-e8a4ce95b2af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.crl X509v3 Authority Key Identifier: keyid:25:2C:65:D1:2B:2B:E5:A6:80:45:38:98:E0:6B:67:DB:F5:0A:EE:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer sbgp-ipAddrBlock: critical IPv4: 199.188.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:7a:b7:88:13:04:c7:ce:7f:37:5c:e0:ef:75:e5:0a:78:09: 79:8a:78:0e:c7:df:b1:7c:db:4c:75:d8:c1:6d:5a:bc:e3:4e: 48:4c:f5:dc:8c:96:1f:1d:99:5d:98:f3:04:b8:6d:6c:77:10: 41:d9:1a:d1:75:d3:01:25:58:4e:7a:58:c5:03:dc:c8:f4:0d: e2:d5:8d:96:34:55:0d:09:74:81:a9:a3:c6:4c:0a:18:91:0a: 6c:c8:04:8f:f3:19:83:3c:a8:87:e5:0a:9d:20:3d:99:c5:7e: 22:dd:43:3d:08:9e:fb:67:19:de:d0:be:99:75:0f:d9:75:9e: 75:87:05:eb:03:b5:32:64:95:b4:52:d8:05:02:1f:26:66:ab: 53:67:3e:0a:c3:f3:0e:58:58:08:2e:3a:9a:c9:fa:19:19:ec: 36:2f:df:2a:4b:13:10:91:8d:57:f5:f8:2e:e6:44:70:04:25: ba:08:25:91:3c:21:dd:6a:a8:10:28:3d:3f:21:00:e2:a6:ff: c0:cc:28:39:48:20:47:85:0e:77:1a:71:93:82:60:cd:32:e5: ae:9b:bf:0e:da:af:37:92:62:5d:19:3c:db:3b:85:a9:14:95: 1a:b3:f5:8f:b9:14:28:72:2f:22:1d:31:5d:48:b1:f2:96:fd: 2b:e9:9c:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEolJXA4rDcI48+nISAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQ2NjgxNDctYTcxYi00ZmIzLTllZDktZTFlMDQwNjFi YmRkMB4XDTI1MDYxMDEzMDEwM1oXDTI1MDkwODEzMDEwM1owLzEtMCsGA1UEAxMk YWQwNjRiMTUtZWRhNC00OWE3LWIzZDEtM2EwNWUwN2Y1NTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouk0wY13MIa9HsXrwvp26OxKQw4MKUxwcsr+ FimJMMgk/sveZc8eOVvnXrVgnoULdWOrt7sqplddNJ5Avsystar3OYB8X1ej8w+3 h+dZlfs4qCXVLCpj6uBI8G405zletvs4/LmFx0n+Dyyu+MsGB7Eq/q4ELAxW++bE bxI4vsyvIxeCR7BQy4QTS2Tg5tm4tdgj8MRLnK7ZZmsOhuHXiUVN+zy6+KxrYpSP CnQ55c8zPvmDFUswJrhdMjS92altBeySLH32u29Ivyn81/KB6Dr36tYZC46tuumd urqKy5XkSbdZ6TBEi3Pj4Em14JdVV25kAx8u3CFUnprCEEy+9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF8GHj7yqVT9YFz2xgoo3K9pzX4iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jNDY2 ODE0Ny1hNzFiLTRmYjMtOWVkOS1lMWUwNDA2MWJiZGQvOTA1Yjk4MDgtYTQ0ZC0z YzhkLTg5YjQtZThhNGNlOTViMmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzQ2NjgxNDctYTcxYi00ZmIzLTll ZDktZTFlMDQwNjFiYmRkL2M0NjY4MTQ3LWE3MWItNGZiMy05ZWQ5LWUxZTA0MDYx YmJkZC5jcmwwHwYDVR0jBBgwFoAUJSxl0Ssr5aaARTiY4Gtn2/UK7jgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jNDY2ODE0Ny1hNzFiLTRmYjMtOWVkOS1lMWUw NDA2MWJiZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx7zEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFB6t4gTBMfOfzdc4O915Qp4CXmKeA7H37F820x12MFtWrzjTkhM9dyM lh8dmV2Y8wS4bWx3EEHZGtF10wElWE56WMUD3Mj0DeLVjZY0VQ0JdIGpo8ZMChiR CmzIBI/zGYM8qIflCp0gPZnFfiLdQz0InvtnGd7Qvpl1D9l1nnWHBesDtTJklbRS 2AUCHyZmq1NnPgrD8w5YWAguOprJ+hkZ7DYv3ypLExCRjVf1+C7mRHAEJboIJZE8 Id1qqBAoPT8hAOKm/8DMKDlIIEeFDncacZOCYM0y5a6bvw7arzeSYl0ZPNs7hakU lRqz9Y+5FChyLyIdMV1IsfKW/SvpnLs= -----END CERTIFICATE-----Generated at Sun Jun 15 13:03:53 2025 by rpki-client