$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c/cddbbd1a-6a14-3c42-8f1a-c63c17e27973.roa File: cddbbd1a-6a14-3c42-8f1a-c63c17e27973.roa (raw, json) Hash identifier: GN6yGrfrtENr7iCn5a9w2Rh1cB7H9NEnWLRCvcLF7rw= Subject key identifier: BE:14:5E:E0:30:43:DC:BE:D2:8C:C4:97:A4:B9:36:27:85:18:2F:B5 Certificate issuer: /CN=85b2de73-1d42-4595-8cb1-9e82d873ee1c Certificate serial: 010D0C9F4328584A0EF4E6FADA3B4CF3A2A79790 Authority key identifier: 0D:96:6E:E6:35:D4:0C:D0:10:70:F8:F5:78:51:C2:47:F4:F6:0C:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c/cddbbd1a-6a14-3c42-8f1a-c63c17e27973.roa Signing time: Mon 02 Jun 2025 14:15:32 +0000 ROA not before: Mon 02 Jun 2025 14:15:32 +0000 ROA not after: Sun 31 Aug 2025 14:15:32 +0000 asID: 40346 IP address blocks: 199.48.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c/85b2de73-1d42-4595-8cb1-9e82d873ee1c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c/85b2de73-1d42-4595-8cb1-9e82d873ee1c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0e:f4:e6:fa:da:3b:4c:f3:a2:a7:97:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85b2de73-1d42-4595-8cb1-9e82d873ee1c Validity Not Before: Jun 2 14:15:32 2025 GMT Not After : Aug 31 14:15:32 2025 GMT Subject: CN=2ded3eb8-8b4d-432b-aa46-047ec886660c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:9f:2d:12:c5:0f:3d:fd:80:00:d1:52:0a:22: f2:ee:e1:9d:95:38:61:5d:0a:61:d8:ff:20:10:39: f7:5b:c8:02:7b:0f:04:33:e4:44:c5:be:a0:84:bb: 36:b9:57:2e:ac:1b:a8:74:a5:03:95:d8:09:04:f6: 3b:47:c0:98:56:3c:2a:af:bf:44:4a:18:21:1c:f7: e3:87:bd:b5:f6:9e:de:bc:ea:81:d5:dd:8b:c3:00: a2:e4:bd:13:b6:98:c7:c5:d3:cd:1c:22:63:d5:8d: 21:08:8c:47:9c:5b:03:25:90:f7:9e:1d:cd:d1:27: 0e:89:8c:75:3c:3c:bf:42:aa:f2:04:43:d0:4c:31: fc:27:d2:7c:cf:92:e8:0d:24:08:5d:8c:c1:2f:be: 4f:4d:01:85:56:7d:ca:9d:c5:bf:19:79:99:d7:a2: ac:5b:92:98:6c:44:af:3f:3b:cb:75:61:a2:3a:72: 1a:7f:aa:ce:46:0b:a2:32:64:f0:8c:b3:f4:ab:4a: 82:5f:15:fd:66:bd:6a:08:41:5a:91:9a:de:f8:66: af:e3:23:aa:d7:2b:21:ea:bb:0e:b1:ce:8d:62:b4: c4:bf:16:7c:e8:ea:ef:9e:62:77:8e:a6:02:78:c0: b5:12:b4:0e:02:5f:ee:52:ab:be:1b:2b:1a:2f:71: 8f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:14:5E:E0:30:43:DC:BE:D2:8C:C4:97:A4:B9:36:27:85:18:2F:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c/cddbbd1a-6a14-3c42-8f1a-c63c17e27973.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c/85b2de73-1d42-4595-8cb1-9e82d873ee1c.crl X509v3 Authority Key Identifier: keyid:0D:96:6E:E6:35:D4:0C:D0:10:70:F8:F5:78:51:C2:47:F4:F6:0C:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c.cer sbgp-ipAddrBlock: critical IPv4: 199.48.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:fc:2e:48:e0:f3:62:c5:23:a6:94:8b:3c:3c:56:f5:f0:e8: 16:19:ae:b6:d4:36:84:fc:4d:a1:d5:15:85:1f:56:c2:0c:c6: ec:38:e2:6f:73:3d:50:08:09:7c:84:ab:e7:c7:2d:97:9f:01: 53:57:1b:00:0d:07:15:f2:c4:9d:d1:e4:15:82:48:74:06:dc: 71:c9:8e:a4:a9:2e:32:b3:30:d3:7a:80:1a:c1:7a:b1:14:b2: b1:f6:8b:9a:64:d8:d1:b2:3d:bd:35:5b:7f:0f:2f:a7:28:19: 44:32:99:7b:34:c7:6c:bf:61:4b:1c:a1:0f:7a:72:21:6e:15: 4a:f8:f9:96:4c:51:52:66:7d:a9:e8:2a:77:e5:5b:ce:2c:a7: 0e:66:ed:72:01:8b:02:01:e6:64:32:9f:ea:f5:f3:0c:f1:37: 9a:ae:84:5a:cf:8f:c4:f7:d7:12:b6:2b:11:ee:45:7c:13:ad: 2c:bd:ad:3f:a5:b2:4b:dd:33:99:e6:9f:0d:64:67:6b:7c:69: ba:b5:69:dd:3a:dc:77:da:6f:a4:ea:cb:b2:7a:bd:b4:ed:9e: 13:fa:1e:de:48:19:92:2a:86:86:6f:e4:c6:86:7e:f7:63:ad: 2f:2b:8c:7b:5d:7c:da:9a:66:37:fd:10:66:de:6c:c1:c5:56: a4:cb:9d:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoO9Ob62jtM86Knl5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODViMmRlNzMtMWQ0Mi00NTk1LThjYjEtOWU4MmQ4NzNl ZTFjMB4XDTI1MDYwMjE0MTUzMloXDTI1MDgzMTE0MTUzMlowLzEtMCsGA1UEAxMk MmRlZDNlYjgtOGI0ZC00MzJiLWFhNDYtMDQ3ZWM4ODY2NjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi58tEsUPPf2AANFSCiLy7uGdlThhXQph2P8g EDn3W8gCew8EM+RExb6ghLs2uVcurBuodKUDldgJBPY7R8CYVjwqr79EShghHPfj h7219p7evOqB1d2LwwCi5L0TtpjHxdPNHCJj1Y0hCIxHnFsDJZD3nh3N0ScOiYx1 PDy/QqryBEPQTDH8J9J8z5LoDSQIXYzBL75PTQGFVn3KncW/GXmZ16KsW5KYbESv PzvLdWGiOnIaf6rORguiMmTwjLP0q0qCXxX9Zr1qCEFakZre+Gav4yOq1ysh6rsO sc6NYrTEvxZ86OrvnmJ3jqYCeMC1ErQOAl/uUqu+GysaL3GPKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL4UXuAwQ9y+0ozEl6S5NieFGC+1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84NWIy ZGU3My0xZDQyLTQ1OTUtOGNiMS05ZTgyZDg3M2VlMWMvY2RkYmJkMWEtNmExNC0z YzQyLThmMWEtYzYzYzE3ZTI3OTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvODViMmRlNzMtMWQ0Mi00NTk1LThj YjEtOWU4MmQ4NzNlZTFjLzg1YjJkZTczLTFkNDItNDU5NS04Y2IxLTllODJkODcz ZWUxYy5jcmwwHwYDVR0jBBgwFoAUDZZu5jXUDNAQcPj1eFHCR/T2DC8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy84NWIyZGU3My0xZDQyLTQ1OTUtOGNiMS05ZTgy ZDg3M2VlMWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzD7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/8Lkjg82LFI6aUizw8VvXw6BYZrrbUNoT8TaHVFYUfVsIMxuw44m9z PVAICXyEq+fHLZefAVNXGwANBxXyxJ3R5BWCSHQG3HHJjqSpLjKzMNN6gBrBerEU srH2i5pk2NGyPb01W38PL6coGUQymXs0x2y/YUscoQ96ciFuFUr4+ZZMUVJmfano KnflW84spw5m7XIBiwIB5mQyn+r18wzxN5quhFrPj8T31xK2KxHuRXwTrSy9rT+l skvdM5nmnw1kZ2t8abq1ad063Hfab6Tqy7J6vbTtnhP6Ht5IGZIqhoZv5MaGfvdj rS8rjHtdfNqaZjf9EGbebMHFVqTLnW0= -----END CERTIFICATE-----Generated at Wed Jun 18 05:43:11 2025 by rpki-client