$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5/252b5b3a-aba2-3e83-bc54-72f26f51952f.roa File: 252b5b3a-aba2-3e83-bc54-72f26f51952f.roa (raw, json) Hash identifier: EKkG7zP57wlh73xm3Qn8dJP0qleIA+EO3FrnlKEhQgE= Subject key identifier: 3A:2F:92:79:CE:9C:08:A0:B3:FB:4F:AC:14:23:BF:A9:AC:CD:8E:4D Certificate issuer: /CN=da5c184e-0f46-42cb-a77d-3f3d837657a5 Certificate serial: 010D0C9F43285849F0FA5ED50665867033EB4500 Authority key identifier: D2:81:12:89:FB:FA:14:2F:97:56:72:9D:7F:1F:02:AE:0F:29:29:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5/252b5b3a-aba2-3e83-bc54-72f26f51952f.roa Signing time: Mon 19 May 2025 19:36:08 +0000 ROA not before: Mon 19 May 2025 19:36:08 +0000 ROA not after: Sun 17 Aug 2025 19:36:08 +0000 asID: 16509 IP address blocks: 199.36.100.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5/da5c184e-0f46-42cb-a77d-3f3d837657a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5/da5c184e-0f46-42cb-a77d-3f3d837657a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f0:fa:5e:d5:06:65:86:70:33:eb:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da5c184e-0f46-42cb-a77d-3f3d837657a5 Validity Not Before: May 19 19:36:08 2025 GMT Not After : Aug 17 19:36:08 2025 GMT Subject: CN=8d8e9be9-7f28-466a-85f4-83083d61763c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:11:2a:01:18:fa:e0:d3:53:c8:ee:f8:c9:8e: 08:a9:27:68:8c:64:9b:2d:45:7f:71:63:63:33:c6: 75:64:30:19:44:e3:76:a4:8e:51:cd:a2:fe:3a:e4: 0a:09:fc:ac:8c:55:dd:65:bf:40:32:9a:29:ed:a6: 68:82:b0:88:69:ab:fb:d0:b4:d7:02:05:ed:24:a6: 85:20:21:de:36:8b:79:61:43:1c:bf:7b:e9:7f:30: be:5c:05:79:93:14:cc:ed:f0:4b:53:87:71:60:88: 73:a6:8e:ea:72:a4:ea:e2:30:7d:ca:d1:8a:f4:1f: 89:69:af:b9:5d:17:00:d2:ce:20:af:c5:23:f0:f3: 73:61:d6:f8:1e:a1:4d:0a:0c:b1:3d:25:4b:41:a7: e6:c5:c4:dd:ed:27:b5:12:9b:0e:1c:ac:12:7c:26: 87:65:c9:ab:53:32:14:88:0a:09:0d:46:0f:19:ad: 10:20:78:a6:54:88:ed:64:f0:2e:49:27:9c:e1:d7: 14:07:46:0d:83:c7:08:e3:db:f9:30:72:fc:19:86: d7:f2:ef:06:53:7e:30:d2:f4:b9:b1:5d:37:71:9d: f1:05:dd:bb:a7:d3:20:c2:be:61:76:ff:33:d8:53: 4f:5f:38:71:5e:4f:46:d6:a6:39:4b:a4:fa:ee:8f: 78:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:2F:92:79:CE:9C:08:A0:B3:FB:4F:AC:14:23:BF:A9:AC:CD:8E:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5/252b5b3a-aba2-3e83-bc54-72f26f51952f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5/da5c184e-0f46-42cb-a77d-3f3d837657a5.crl X509v3 Authority Key Identifier: keyid:D2:81:12:89:FB:FA:14:2F:97:56:72:9D:7F:1F:02:AE:0F:29:29:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5.cer sbgp-ipAddrBlock: critical IPv4: 199.36.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:11:b6:74:3d:33:ea:63:b8:b9:9b:15:85:51:25:a2:5c:31: d3:a6:79:26:43:bf:94:59:c9:1a:06:2b:e5:a9:01:5b:40:2c: a0:12:56:eb:e9:bb:71:08:aa:9f:9c:a3:8b:a2:ee:00:17:1f: 7b:25:c6:42:01:20:6b:e5:74:6b:02:5c:79:5d:da:d7:3a:c0: 2f:ed:8d:b2:11:35:0e:23:f5:16:09:54:68:d1:31:6e:0a:80: e8:03:a9:97:39:d1:2e:62:e1:68:69:56:10:c3:a0:7c:5e:b6: e6:91:92:57:00:cc:4d:69:85:db:7a:f5:2e:63:e4:c2:84:7e: 60:93:2f:a1:36:6c:cf:5f:27:e3:85:26:53:5e:90:f4:e9:74: 70:69:0b:28:93:76:42:24:7d:e1:61:93:af:4e:17:7a:27:0a: 99:2b:9b:9c:9e:28:cf:dd:4b:58:17:66:b0:ed:7c:84:2c:b0: 82:53:d7:57:18:3a:e2:05:e8:8d:cf:4b:b2:dd:35:f9:8b:43: b9:8d:3d:32:25:b3:42:27:5c:55:20:9b:7d:ed:c6:27:62:8f: 67:ed:7c:8f:fa:e8:10:99:ac:e9:33:72:30:31:68:40:a8:e8: 77:e6:14:74:81:39:71:f2:eb:9c:64:09:4d:23:f5:e7:b7:78: ad:a4:ab:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnw+l7VBmWGcDPrRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGE1YzE4NGUtMGY0Ni00MmNiLWE3N2QtM2YzZDgzNzY1 N2E1MB4XDTI1MDUxOTE5MzYwOFoXDTI1MDgxNzE5MzYwOFowLzEtMCsGA1UEAxMk OGQ4ZTliZTktN2YyOC00NjZhLTg1ZjQtODMwODNkNjE3NjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshEqARj64NNTyO74yY4IqSdojGSbLUV/cWNj M8Z1ZDAZRON2pI5RzaL+OuQKCfysjFXdZb9AMpop7aZogrCIaav70LTXAgXtJKaF ICHeNot5YUMcv3vpfzC+XAV5kxTM7fBLU4dxYIhzpo7qcqTq4jB9ytGK9B+Jaa+5 XRcA0s4gr8Uj8PNzYdb4HqFNCgyxPSVLQafmxcTd7Se1EpsOHKwSfCaHZcmrUzIU iAoJDUYPGa0QIHimVIjtZPAuSSec4dcUB0YNg8cI49v5MHL8GYbX8u8GU34w0vS5 sV03cZ3xBd27p9Mgwr5hdv8z2FNPXzhxXk9G1qY5S6T67o94ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDovknnOnAigs/tPrBQjv6mszY5NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kYTVj MTg0ZS0wZjQ2LTQyY2ItYTc3ZC0zZjNkODM3NjU3YTUvMjUyYjViM2EtYWJhMi0z ZTgzLWJjNTQtNzJmMjZmNTE5NTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZGE1YzE4NGUtMGY0Ni00MmNiLWE3 N2QtM2YzZDgzNzY1N2E1L2RhNWMxODRlLTBmNDYtNDJjYi1hNzdkLTNmM2Q4Mzc2 NTdhNS5jcmwwHwYDVR0jBBgwFoAU0oESifv6FC+XVnKdfx8Crg8pKY0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kYTVjMTg0ZS0wZjQ2LTQyY2ItYTc3ZC0zZjNk ODM3NjU3YTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxyRkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQRtnQ9M+pjuLmbFYVRJaJcMdOmeSZDv5RZyRoGK+WpAVtALKASVuvp u3EIqp+co4ui7gAXH3slxkIBIGvldGsCXHld2tc6wC/tjbIRNQ4j9RYJVGjRMW4K gOgDqZc50S5i4WhpVhDDoHxetuaRklcAzE1phdt69S5j5MKEfmCTL6E2bM9fJ+OF JlNekPTpdHBpCyiTdkIkfeFhk69OF3onCpkrm5yeKM/dS1gXZrDtfIQssIJT11cY OuIF6I3PS7LdNfmLQ7mNPTIls0InXFUgm33txidij2ftfI/66BCZrOkzcjAxaECo 6HfmFHSBOXHy65xkCU0j9ee3eK2kq4o= -----END CERTIFICATE-----Generated at Sat Jun 14 06:15:11 2025 by rpki-client