$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/337099e7-4ae6-3200-84db-2441bbde1298.roa File: 337099e7-4ae6-3200-84db-2441bbde1298.roa (raw, json) Hash identifier: lt0JfoVb+mtUthpTQrKyQVWdAW81mZSnoD4k7uMd0Do= Subject key identifier: BF:D5:5C:54:9E:99:30:C1:0E:B3:0F:64:59:1C:9C:40:DC:8D:3F:45 Certificate issuer: /CN=161143c9-c030-4270-91a4-41e54bbb2357 Certificate serial: 010D0C9F43285849CE9A3E2C5613D63D9D1F8C80 Authority key identifier: 3F:1F:91:EE:51:47:94:04:0E:68:02:55:C7:6B:C2:2A:74:D9:CE:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/337099e7-4ae6-3200-84db-2441bbde1298.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 14630 IP address blocks: 199.230.0.0/21 maxlen: 24 199.230.8.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/161143c9-c030-4270-91a4-41e54bbb2357.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/161143c9-c030-4270-91a4-41e54bbb2357.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:3e:2c:56:13:d6:3d:9d:1f:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=161143c9-c030-4270-91a4-41e54bbb2357 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=870f1782-e68e-483f-b64e-2a73a44b81e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:92:03:eb:7b:2c:a8:d8:cd:46:78:1d:9e:7f: 2a:19:8d:46:a2:6a:7e:be:ed:1a:b5:43:3b:91:37: ca:e1:1d:60:35:1b:1c:ae:22:cb:3f:f5:55:34:3b: 04:16:51:aa:df:8c:8b:0e:04:29:39:96:4b:9c:5a: e2:be:32:3e:9f:31:94:50:ec:9e:5b:f1:db:4e:ed: fd:56:37:8a:1b:7f:c6:8f:c5:a0:f5:fc:be:c0:f5: ce:cd:be:88:24:ff:c3:79:36:a6:f7:7e:4d:be:d9: b5:1b:e7:32:c4:17:ad:5b:2e:a9:68:0e:03:8f:f7: 99:20:4c:cb:cc:49:f4:2f:8b:bf:21:ab:b7:16:5a: 51:c7:20:92:88:a8:ad:50:19:c8:2f:05:c4:5e:45: 32:cd:40:76:9b:06:d4:66:66:25:52:23:be:85:23: 6b:3e:65:87:e0:c8:02:ef:e9:cb:98:ac:24:ea:e3: 25:a8:e1:17:fb:33:fa:a4:48:57:74:56:b5:e4:0d: 1f:8c:95:10:8b:86:05:c6:72:72:4a:ea:81:94:0a: 7f:c1:51:45:f5:67:39:66:da:8c:37:5e:9f:70:b1: ff:ab:8f:7c:e8:51:2f:03:75:bb:cd:88:3e:50:c1: 1f:5b:78:64:51:20:db:10:8b:9c:9a:21:85:3b:d8: a1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:D5:5C:54:9E:99:30:C1:0E:B3:0F:64:59:1C:9C:40:DC:8D:3F:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/337099e7-4ae6-3200-84db-2441bbde1298.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/161143c9-c030-4270-91a4-41e54bbb2357.crl X509v3 Authority Key Identifier: keyid:3F:1F:91:EE:51:47:94:04:0E:68:02:55:C7:6B:C2:2A:74:D9:CE:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357.cer sbgp-ipAddrBlock: critical IPv4: 199.230.0.0-199.230.9.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:44:c4:e8:f5:c4:b8:3f:d4:92:db:29:34:85:53:8b:65:46: b9:96:cf:c7:da:29:33:c9:5a:7a:08:0f:47:04:c0:e2:98:92: 0d:d6:4a:a5:92:c5:c9:92:dc:d5:b5:83:bb:0a:26:44:65:6f: 85:7c:99:bb:b8:2d:2e:f2:b6:b3:97:11:01:36:3d:09:f2:2a: d6:08:54:9e:76:30:2c:8e:51:45:51:00:0f:49:84:55:1a:5f: 22:84:9e:2a:89:ed:c5:f2:69:9f:3c:a9:28:da:54:1a:2e:ff: 52:1d:5f:10:a3:f1:03:9b:f8:df:a5:aa:6c:9d:ec:af:42:45: 2d:dc:14:34:5d:39:db:2e:28:4c:d6:d5:4a:ac:36:0a:b3:8e: 9b:c6:10:5a:6e:59:7a:d2:dd:4b:f1:3a:e1:85:a1:69:8c:c7: e2:64:70:8c:fe:8c:ba:00:80:07:77:ff:b8:22:5d:9e:4a:51: 7a:97:dc:f1:47:29:d2:7d:ee:e3:69:9d:4a:ee:05:f4:ee:bb: c2:af:ec:c4:d4:1a:d8:9c:18:00:b4:37:2f:7d:7f:d8:45:36: b5:bb:7d:d9:bb:68:f2:29:cf:c6:6d:bb:1e:ab:49:7e:b5:c7: 33:69:59:4e:16:5c:05:d9:07:29:13:66:6d:e0:6a:4f:05:25: b6:9a:c1:0c -----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgIUAQ0Mn0MoWEnOmj4sVhPWPZ0fjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTYxMTQzYzktYzAzMC00MjcwLTkxYTQtNDFlNTRiYmIy MzU3MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk ODcwZjE3ODItZTY4ZS00ODNmLWI2NGUtMmE3M2E0NGI4MWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipID63ssqNjNRngdnn8qGY1Gomp+vu0atUM7 kTfK4R1gNRscriLLP/VVNDsEFlGq34yLDgQpOZZLnFrivjI+nzGUUOyeW/HbTu39 VjeKG3/Gj8Wg9fy+wPXOzb6IJP/DeTam935Nvtm1G+cyxBetWy6paA4Dj/eZIEzL zEn0L4u/Iau3FlpRxyCSiKitUBnILwXEXkUyzUB2mwbUZmYlUiO+hSNrPmWH4MgC 7+nLmKwk6uMlqOEX+zP6pEhXdFa15A0fjJUQi4YFxnJySuqBlAp/wVFF9Wc5ZtqM N16fcLH/q4986FEvA3W7zYg+UMEfW3hkUSDbEIucmiGFO9ihLQIDAQABo4IDXDCC A1gwHQYDVR0OBBYEFL/VXFSemTDBDrMPZFkcnEDcjT9FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNjEx NDNjOS1jMDMwLTQyNzAtOTFhNC00MWU1NGJiYjIzNTcvMzM3MDk5ZTctNGFlNi0z MjAwLTg0ZGItMjQ0MWJiZGUxMjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTYxMTQzYzktYzAzMC00MjcwLTkx YTQtNDFlNTRiYmIyMzU3LzE2MTE0M2M5LWMwMzAtNDI3MC05MWE0LTQxZTU0YmJi MjM1Ny5jcmwwHwYDVR0jBBgwFoAUPx+R7lFHlAQOaAJVx2vCKnTZzmwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xNjExNDNjOS1jMDMwLTQyNzAtOTFhNC00MWU1 NGJiYjIzNTcuY2VyMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDAwHH5gME AcfmCDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQCzRMTo9cS4P9SS2yk0hVOLZUa5ls/H2ikzyVp6CA9HBMDi mJIN1kqlksXJktzVtYO7CiZEZW+FfJm7uC0u8razlxEBNj0J8irWCFSedjAsjlFF UQAPSYRVGl8ihJ4qie3F8mmfPKko2lQaLv9SHV8Qo/EDm/jfpapsneyvQkUt3BQ0 XTnbLihM1tVKrDYKs46bxhBabll60t1L8TrhhaFpjMfiZHCM/oy6AIAHd/+4Il2e SlF6l9zxRynSfe7jaZ1K7gX07rvCr+zE1BrYnBgAtDcvfX/YRTa1u33Zu2jyKc/G bbseq0l+tcczaVlOFlwF2QcpE2Zt4GpPBSW2msEM -----END CERTIFICATE-----Generated at Mon Jun 16 05:12:40 2025 by rpki-client