$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378/1f1498a6-2bec-3976-84a6-72c5baa00e10.roa File: 1f1498a6-2bec-3976-84a6-72c5baa00e10.roa (raw, json) Hash identifier: q5i/LCjNf2gLqji4YBNPcNum/Xi1epNBMmB7PYs1CIY= Subject key identifier: 5D:D6:38:36:AC:C5:6F:FA:FD:73:DA:C5:FF:B5:4B:09:FC:2C:27:22 Certificate issuer: /CN=6f65c9e2-b250-402e-aa3e-eb6f9552d378 Certificate serial: 010D0C9F4328584957F411AD70B307FDDE7C9680 Authority key identifier: 19:32:7F:F7:D4:07:EF:BC:E0:B8:AB:37:CC:34:96:F5:C7:84:B6:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378/1f1498a6-2bec-3976-84a6-72c5baa00e10.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 3855 IP address blocks: 199.96.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378/6f65c9e2-b250-402e-aa3e-eb6f9552d378.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378/6f65c9e2-b250-402e-aa3e-eb6f9552d378.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f4:11:ad:70:b3:07:fd:de:7c:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f65c9e2-b250-402e-aa3e-eb6f9552d378 Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=015dc304-aea1-471d-8c5d-3b1c77ececf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:01:ba:1a:aa:b8:cd:3f:fd:f4:86:c5:f4:b1: cd:69:20:ed:ec:f8:ce:20:1e:d6:47:fa:e1:57:40: 10:6a:eb:e7:52:7a:d9:58:11:e5:1a:43:49:9b:ea: 04:a4:47:60:b4:62:f2:23:77:64:77:26:93:45:d7: 49:9b:6f:aa:3e:a7:41:d1:a3:45:d1:59:39:a9:eb: 81:86:d5:9b:5c:45:14:b7:97:f6:a5:ab:2d:4f:b9: 44:b9:25:01:e6:88:de:66:01:dd:84:23:97:a4:92: ed:b4:99:92:fe:37:4c:12:ec:ad:dc:93:4e:83:2e: 28:86:5f:37:9d:60:18:7a:4d:9e:a0:ab:02:0a:5d: d8:d0:3b:e3:d4:73:72:33:0a:51:30:12:4d:7a:97: 3c:23:2e:71:1b:d9:62:ce:5d:a9:33:db:64:7c:d5: f3:f4:d2:09:9b:37:16:f4:58:03:0a:a0:65:47:7c: 87:29:a7:1a:6e:f5:0f:79:c3:11:ef:4d:0a:4e:71: b5:1b:eb:a5:a2:95:30:e6:0a:70:49:46:f0:e3:dc: e6:ba:99:ae:d6:52:17:ab:76:bc:ff:a1:f9:b3:78: ac:53:33:52:91:b1:1e:98:23:21:3e:95:9a:4d:c7: b4:0a:d7:06:62:b2:44:14:60:50:47:9b:a1:11:13: 9e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:D6:38:36:AC:C5:6F:FA:FD:73:DA:C5:FF:B5:4B:09:FC:2C:27:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378/1f1498a6-2bec-3976-84a6-72c5baa00e10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378/6f65c9e2-b250-402e-aa3e-eb6f9552d378.crl X509v3 Authority Key Identifier: keyid:19:32:7F:F7:D4:07:EF:BC:E0:B8:AB:37:CC:34:96:F5:C7:84:B6:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378.cer sbgp-ipAddrBlock: critical IPv4: 199.96.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:f7:6e:5b:c7:d2:38:e0:b7:b2:68:42:e4:46:16:82:c2:a9: 95:cd:fd:11:eb:a3:2b:4e:b7:59:59:40:a4:9d:bb:f7:03:f8: 66:fd:97:0c:fe:30:3b:14:5a:fa:e1:2f:ad:1c:83:87:d8:4c: 3f:35:ff:64:ee:44:79:f1:2e:e1:a5:3b:0b:cd:b5:b5:0e:1f: 47:39:c4:96:6a:94:b5:bf:08:97:97:ce:05:b3:8c:4d:4e:7b: e2:2d:a4:9c:a3:0a:1b:17:1b:17:9a:59:1f:64:a3:47:0b:6d: bd:31:f8:7e:59:f0:2e:49:d6:30:7f:78:b8:ed:aa:9a:9a:91: 45:b1:27:8f:70:e7:f9:cc:69:42:08:b5:5a:39:2c:48:c2:79: 6a:16:33:bb:39:cf:14:70:a8:8f:80:a3:ac:b0:96:3e:d8:bd: e3:18:e5:a0:d7:b9:12:e9:dc:ad:e2:fd:60:b4:d2:4c:39:10: 37:63:ea:a6:7f:b3:14:06:36:94:d7:af:d6:86:b7:9a:87:08: d6:52:00:cf:27:c3:df:40:18:de:92:d2:57:78:ff:c4:3f:70: ae:29:88:cf:01:6e:60:9b:08:6d:de:e3:b8:e0:2c:67:db:7e: d7:f0:90:70:b7:91:a6:60:32:21:83:4c:83:90:c3:aa:de:19: 73:3e:fd:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX9BGtcLMH/d58loAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY2NWM5ZTItYjI1MC00MDJlLWFhM2UtZWI2Zjk1NTJk Mzc4MB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk MDE1ZGMzMDQtYWVhMS00NzFkLThjNWQtM2IxYzc3ZWNlY2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgG6Gqq4zT/99IbF9LHNaSDt7PjOIB7WR/rh V0AQauvnUnrZWBHlGkNJm+oEpEdgtGLyI3dkdyaTRddJm2+qPqdB0aNF0Vk5qeuB htWbXEUUt5f2pastT7lEuSUB5ojeZgHdhCOXpJLttJmS/jdMEuyt3JNOgy4ohl83 nWAYek2eoKsCCl3Y0Dvj1HNyMwpRMBJNepc8Iy5xG9lizl2pM9tkfNXz9NIJmzcW 9FgDCqBlR3yHKacabvUPecMR700KTnG1G+ulopUw5gpwSUbw49zmupmu1lIXq3a8 /6H5s3isUzNSkbEemCMhPpWaTce0CtcGYrJEFGBQR5uhEROe2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF3WODasxW/6/XPaxf+1Swn8LCciMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82ZjY1 YzllMi1iMjUwLTQwMmUtYWEzZS1lYjZmOTU1MmQzNzgvMWYxNDk4YTYtMmJlYy0z OTc2LTg0YTYtNzJjNWJhYTAwZTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNmY2NWM5ZTItYjI1MC00MDJlLWFh M2UtZWI2Zjk1NTJkMzc4LzZmNjVjOWUyLWIyNTAtNDAyZS1hYTNlLWViNmY5NTUy ZDM3OC5jcmwwHwYDVR0jBBgwFoAUGTJ/99QH77zguKs3zDSW9ceEtoIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi82ZjY1YzllMi1iMjUwLTQwMmUtYWEzZS1lYjZm OTU1MmQzNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx2BAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFf3blvH0jjgt7JoQuRGFoLCqZXN/RHroytOt1lZQKSdu/cD+Gb9lwz+ MDsUWvrhL60cg4fYTD81/2TuRHnxLuGlOwvNtbUOH0c5xJZqlLW/CJeXzgWzjE1O e+ItpJyjChsXGxeaWR9ko0cLbb0x+H5Z8C5J1jB/eLjtqpqakUWxJ49w5/nMaUII tVo5LEjCeWoWM7s5zxRwqI+Ao6ywlj7YveMY5aDXuRLp3K3i/WC00kw5EDdj6qZ/ sxQGNpTXr9aGt5qHCNZSAM8nw99AGN6S0ld4/8Q/cK4piM8BbmCbCG3e47jgLGfb ftfwkHC3kaZgMiGDTIOQw6reGXM+/eo= -----END CERTIFICATE-----Generated at Sun Jun 15 17:41:57 2025 by rpki-client