$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/248b08bd-1d4c-3fe1-83ff-8d8c3b72f8a4.roa File: 248b08bd-1d4c-3fe1-83ff-8d8c3b72f8a4.roa (raw, json) Hash identifier: I8CqfRZ/YM2l/lJl3m9++3BqadeCZnEtrgxDmOmfeiM= Subject key identifier: 50:79:6F:B9:13:1E:DC:F5:C0:24:DD:E1:62:0D:A1:F6:5B:55:02:43 Certificate issuer: /CN=4f9aabcb-26a8-4c57-ae55-7933ba2b51b6 Certificate serial: 010D0C9F4328584A3950D0A45CC04A4AACF2C200 Authority key identifier: 7C:70:D2:8C:38:34:29:F5:7A:7B:3B:D8:48:17:5E:03:4E:1D:C1:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/248b08bd-1d4c-3fe1-83ff-8d8c3b72f8a4.roa Signing time: Tue 20 May 2025 20:57:10 +0000 ROA not before: Tue 20 May 2025 20:57:10 +0000 ROA not after: Mon 18 Aug 2025 20:57:10 +0000 asID: 10794 IP address blocks: 199.201.52.0/23 maxlen: 23 199.201.52.0/24 maxlen: 24 199.201.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:39:50:d0:a4:5c:c0:4a:4a:ac:f2:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f9aabcb-26a8-4c57-ae55-7933ba2b51b6 Validity Not Before: May 20 20:57:10 2025 GMT Not After : Aug 18 20:57:10 2025 GMT Subject: CN=a6123bf8-ac98-48e0-93a2-1ae7009b0f93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:01:ca:96:7a:32:c5:5a:61:5a:ef:87:c3:d6: d6:ab:7c:3a:56:b9:ea:b0:a2:fa:75:db:ee:99:36: 86:0e:9c:9a:b2:18:f3:c9:a6:e4:03:9d:a4:0d:59: f7:c6:26:b9:af:9a:28:36:ed:b6:37:23:58:74:fb: f6:de:5d:ec:c4:45:99:2e:92:d5:58:1d:f2:dc:9e: 88:ea:35:70:92:5c:02:be:2b:f7:8b:c9:ec:8b:8d: 56:43:5d:b6:34:c8:99:9b:61:66:1f:cf:b7:c2:aa: dc:07:2d:c5:d1:db:51:07:3c:13:e2:2b:7a:7c:7e: db:7b:b3:ca:7b:98:e2:5b:d3:2e:a1:3b:78:5b:cd: a1:14:c9:44:9d:6f:31:b0:57:6a:52:f4:5e:33:60: 38:af:b4:e2:91:09:6f:e6:f7:e6:5c:51:50:3a:53: 74:7f:e6:9d:49:0c:4a:d7:91:fb:87:c5:4a:32:50: ee:b3:85:d9:61:99:d7:90:d6:2b:77:94:f8:93:14: 4c:80:b0:ae:1b:f6:69:32:ba:d6:dc:36:60:95:54: 16:d7:62:9f:8a:20:7c:48:2f:78:2a:df:56:2f:6e: 95:fa:92:eb:c8:7f:e0:86:16:53:56:53:20:0a:10: 3e:7b:9a:7b:c5:f2:5b:ac:fa:e6:df:b3:31:17:b7: 42:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:79:6F:B9:13:1E:DC:F5:C0:24:DD:E1:62:0D:A1:F6:5B:55:02:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/248b08bd-1d4c-3fe1-83ff-8d8c3b72f8a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.crl X509v3 Authority Key Identifier: keyid:7C:70:D2:8C:38:34:29:F5:7A:7B:3B:D8:48:17:5E:03:4E:1D:C1:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer sbgp-ipAddrBlock: critical IPv4: 199.201.52.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:c4:27:bb:b7:b2:ac:64:9b:f1:2a:a7:96:08:c6:4d:15:eb: 4c:e5:af:f9:21:86:dc:9d:90:7e:0d:46:64:fd:c0:ff:7a:da: a1:e0:e0:6a:36:67:33:a8:69:56:f0:8a:10:fb:31:bb:40:77: 0b:05:61:80:01:ef:1b:26:17:1a:20:14:87:a6:33:86:c9:45: 40:7a:ee:e4:4b:7b:1b:56:b9:5c:e0:06:0d:ef:e6:4f:02:d2: 22:be:0b:66:fd:0c:84:3f:c2:ba:a1:a7:09:6b:d8:b1:e5:c8: 8e:ab:09:99:de:63:cc:8b:ee:72:5a:79:e4:0b:89:9b:ee:d9: 54:5e:c2:af:57:37:6d:f5:a4:ff:ac:86:eb:cd:8a:75:70:6e: ec:4b:8e:1f:f1:92:37:46:9d:a3:68:53:35:1d:13:53:ae:36: 24:88:43:59:8e:23:f0:61:49:4a:0a:fc:f3:98:d3:94:f6:11: 6e:e3:ca:91:5f:2b:44:83:b9:34:cf:08:06:a1:2d:62:73:ce: 19:ee:11:0c:9c:e7:6b:13:ee:4b:15:02:59:c2:d8:66:9c:ea: 28:95:df:88:d1:04:97:62:98:3f:29:00:e6:db:e3:02:c8:bc: f3:22:7f:c1:61:f6:10:14:b8:83:6a:4e:24:1a:ea:75:4b:67: 16:d2:c7:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo5UNCkXMBKSqzywgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGY5YWFiY2ItMjZhOC00YzU3LWFlNTUtNzkzM2JhMmI1 MWI2MB4XDTI1MDUyMDIwNTcxMFoXDTI1MDgxODIwNTcxMFowLzEtMCsGA1UEAxMk YTYxMjNiZjgtYWM5OC00OGUwLTkzYTItMWFlNzAwOWIwZjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAHKlnoyxVphWu+Hw9bWq3w6VrnqsKL6ddvu mTaGDpyashjzyabkA52kDVn3xia5r5ooNu22NyNYdPv23l3sxEWZLpLVWB3y3J6I 6jVwklwCviv3i8nsi41WQ122NMiZm2FmH8+3wqrcBy3F0dtRBzwT4it6fH7be7PK e5jiW9MuoTt4W82hFMlEnW8xsFdqUvReM2A4r7TikQlv5vfmXFFQOlN0f+adSQxK 15H7h8VKMlDus4XZYZnXkNYrd5T4kxRMgLCuG/ZpMrrW3DZglVQW12KfiiB8SC94 Kt9WL26V+pLryH/ghhZTVlMgChA+e5p7xfJbrPrm37MxF7dCWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFB5b7kTHtz1wCTd4WINofZbVQJDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80Zjlh YWJjYi0yNmE4LTRjNTctYWU1NS03OTMzYmEyYjUxYjYvMjQ4YjA4YmQtMWQ0Yy0z ZmUxLTgzZmYtOGQ4YzNiNzJmOGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNGY5YWFiY2ItMjZhOC00YzU3LWFl NTUtNzkzM2JhMmI1MWI2LzRmOWFhYmNiLTI2YTgtNGM1Ny1hZTU1LTc5MzNiYTJi NTFiNi5jcmwwHwYDVR0jBBgwFoAUfHDSjDg0KfV6ezvYSBdeA04dwcIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy80ZjlhYWJjYi0yNmE4LTRjNTctYWU1NS03OTMz YmEyYjUxYjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx8k0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAInEJ7u3sqxkm/Eqp5YIxk0V60zlr/khhtydkH4NRmT9wP962qHg4Go2 ZzOoaVbwihD7MbtAdwsFYYAB7xsmFxogFIemM4bJRUB67uRLextWuVzgBg3v5k8C 0iK+C2b9DIQ/wrqhpwlr2LHlyI6rCZneY8yL7nJaeeQLiZvu2VRewq9XN231pP+s huvNinVwbuxLjh/xkjdGnaNoUzUdE1OuNiSIQ1mOI/BhSUoK/POY05T2EW7jypFf K0SDuTTPCAahLWJzzhnuEQyc52sT7ksVAlnC2Gac6iiV34jRBJdimD8pAObb4wLI vPMif8Fh9hAUuINqTiQa6nVLZxbSx0I= -----END CERTIFICATE-----Generated at Wed Jun 18 15:41:32 2025 by rpki-client