$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b022ab9-d430-450e-a80d-1a7148a7dbbc/b2bdc569-7ee9-3178-acac-30837a20d2da.roa File: b2bdc569-7ee9-3178-acac-30837a20d2da.roa (raw, json) Hash identifier: PIFj/9zPn/HF6BGKPqmIbBFsoiO7YqS42zs872UIqbw= Subject key identifier: 43:3F:F8:04:08:20:87:24:20:4F:AC:F3:06:B0:7A:9E:6B:6C:B5:B0 Certificate issuer: /CN=1b022ab9-d430-450e-a80d-1a7148a7dbbc Certificate serial: 010D0C9F43285849E654ECBD9CD65E60875BBB00 Authority key identifier: A3:C3:38:88:82:20:9C:99:F7:EB:37:EB:E0:57:4E:52:76:87:A8:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b022ab9-d430-450e-a80d-1a7148a7dbbc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b022ab9-d430-450e-a80d-1a7148a7dbbc/b2bdc569-7ee9-3178-acac-30837a20d2da.roa Signing time: Mon 19 May 2025 01:00:48 +0000 ROA not before: Mon 19 May 2025 01:00:48 +0000 ROA not after: Sun 17 Aug 2025 01:00:48 +0000 asID: 396982 IP address blocks: 199.47.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b022ab9-d430-450e-a80d-1a7148a7dbbc/1b022ab9-d430-450e-a80d-1a7148a7dbbc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b022ab9-d430-450e-a80d-1a7148a7dbbc/1b022ab9-d430-450e-a80d-1a7148a7dbbc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b022ab9-d430-450e-a80d-1a7148a7dbbc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e6:54:ec:bd:9c:d6:5e:60:87:5b:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b022ab9-d430-450e-a80d-1a7148a7dbbc Validity Not Before: May 19 01:00:48 2025 GMT Not After : Aug 17 01:00:48 2025 GMT Subject: CN=119bbe05-3788-4c6c-add4-1de353906c0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a9:4b:a6:df:20:fe:14:3a:3a:6c:c5:68:f9: d2:87:b6:e3:4d:05:d2:8e:d2:4d:4b:fa:8e:0e:e9: 62:fc:76:95:0d:50:6d:ca:64:bb:c5:3c:88:26:75: 86:eb:0f:4a:89:78:2b:bf:58:4b:80:de:a5:ee:dd: 57:d2:ce:02:ab:1d:0c:c3:f1:ee:da:84:bb:89:d8: d1:f9:69:78:64:f0:e0:ed:6a:fb:b7:b9:f7:61:46: 3d:de:7d:09:1e:38:2a:c4:34:9f:09:46:95:8e:0d: d9:07:02:df:f4:e5:20:7c:66:43:58:ca:a5:52:1a: 2c:af:20:14:40:fc:0a:4d:6f:88:dc:3b:11:22:2d: 0e:61:55:30:27:e5:33:9c:94:c3:93:e4:ad:6a:a6: c1:f4:dd:20:10:96:9d:7f:1f:59:8c:5d:ac:31:78: 81:67:f2:78:fa:5b:4e:96:c4:24:56:25:82:f1:7c: 58:cb:ac:63:a0:2d:f5:93:f9:23:54:49:11:12:c4: 76:df:48:3a:df:a4:9c:4d:1e:3a:a3:72:d3:35:06: ca:78:51:e0:9f:29:7a:49:0b:4b:64:c3:1a:eb:30: d8:14:10:2a:65:88:19:4e:aa:2d:da:c0:57:2e:96: ae:89:55:31:86:f1:f5:0e:8b:e9:1a:5f:03:2e:31: f9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:3F:F8:04:08:20:87:24:20:4F:AC:F3:06:B0:7A:9E:6B:6C:B5:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b022ab9-d430-450e-a80d-1a7148a7dbbc/b2bdc569-7ee9-3178-acac-30837a20d2da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b022ab9-d430-450e-a80d-1a7148a7dbbc/1b022ab9-d430-450e-a80d-1a7148a7dbbc.crl X509v3 Authority Key Identifier: keyid:A3:C3:38:88:82:20:9C:99:F7:EB:37:EB:E0:57:4E:52:76:87:A8:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b022ab9-d430-450e-a80d-1a7148a7dbbc.cer sbgp-ipAddrBlock: critical IPv4: 199.47.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:dd:e3:4a:25:c8:0e:c8:e3:f8:fc:79:d8:75:58:76:80:f0: 21:a5:6d:fd:43:c8:08:e7:31:95:5b:36:e6:c3:68:09:4d:81: 94:41:9a:7b:c3:a1:d1:64:d3:38:74:a5:31:12:63:3a:e6:db: 89:bd:a1:b9:69:00:ba:da:64:80:86:65:e6:94:c9:18:cd:40: c5:57:8f:b6:18:d7:57:72:06:bb:0a:a5:75:60:58:b6:64:47: 8b:23:10:be:98:6d:8e:f3:1e:5f:af:d8:d5:e4:ba:93:e5:54: 2a:9d:19:7c:7b:62:aa:0b:5e:3c:6d:5b:2c:60:6e:a6:12:62: 5d:66:69:c0:c3:4b:ce:20:a5:77:e2:bb:3a:ae:0d:5b:a6:5d: 1e:20:c3:f2:86:46:68:c7:f7:fb:2b:3b:5b:78:84:d0:a4:22: 8b:60:7f:a8:b6:37:74:6f:15:27:66:9f:5e:48:8e:c2:59:73: a3:47:01:21:0e:af:9e:02:6d:b2:d3:e2:97:71:2c:f4:af:7a: 2f:d8:e7:5a:fb:cb:bc:bb:c2:c1:70:fd:7b:ea:4d:94:d5:9a: da:2c:12:27:61:6b:0b:bc:f3:90:8a:df:5f:8e:f1:85:58:a5: 31:8c:a1:6e:ab:43:88:b5:64:ae:a7:6d:0b:d0:dc:56:c0:d6: 78:9e:2e:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnmVOy9nNZeYIdbuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWIwMjJhYjktZDQzMC00NTBlLWE4MGQtMWE3MTQ4YTdk YmJjMB4XDTI1MDUxOTAxMDA0OFoXDTI1MDgxNzAxMDA0OFowLzEtMCsGA1UEAxMk MTE5YmJlMDUtMzc4OC00YzZjLWFkZDQtMWRlMzUzOTA2YzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6lLpt8g/hQ6OmzFaPnSh7bjTQXSjtJNS/qO Duli/HaVDVBtymS7xTyIJnWG6w9KiXgrv1hLgN6l7t1X0s4Cqx0Mw/Hu2oS7idjR +Wl4ZPDg7Wr7t7n3YUY93n0JHjgqxDSfCUaVjg3ZBwLf9OUgfGZDWMqlUhosryAU QPwKTW+I3DsRIi0OYVUwJ+UznJTDk+StaqbB9N0gEJadfx9ZjF2sMXiBZ/J4+ltO lsQkViWC8XxYy6xjoC31k/kjVEkREsR230g636ScTR46o3LTNQbKeFHgnyl6SQtL ZMMa6zDYFBAqZYgZTqot2sBXLpauiVUxhvH1DovpGl8DLjH5IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEM/+AQIIIckIE+s8wawep5rbLWwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYjAy MmFiOS1kNDMwLTQ1MGUtYTgwZC0xYTcxNDhhN2RiYmMvYjJiZGM1NjktN2VlOS0z MTc4LWFjYWMtMzA4MzdhMjBkMmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWIwMjJhYjktZDQzMC00NTBlLWE4 MGQtMWE3MTQ4YTdkYmJjLzFiMDIyYWI5LWQ0MzAtNDUwZS1hODBkLTFhNzE0OGE3 ZGJiYy5jcmwwHwYDVR0jBBgwFoAUo8M4iIIgnJn36zfr4FdOUnaHqBUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xYjAyMmFiOS1kNDMwLTQ1MGUtYTgwZC0xYTcx NDhhN2RiYmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxy+5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALHd40olyA7I4/j8edh1WHaA8CGlbf1DyAjnMZVbNubDaAlNgZRBmnvD odFk0zh0pTESYzrm24m9oblpALraZICGZeaUyRjNQMVXj7YY11dyBrsKpXVgWLZk R4sjEL6YbY7zHl+v2NXkupPlVCqdGXx7YqoLXjxtWyxgbqYSYl1macDDS84gpXfi uzquDVumXR4gw/KGRmjH9/srO1t4hNCkIotgf6i2N3RvFSdmn15IjsJZc6NHASEO r54CbbLT4pdxLPSvei/Y51r7y7y7wsFw/XvqTZTVmtosEidhawu885CK31+O8YVY pTGMoW6rQ4i1ZK6nbQvQ3FbA1nieLvM= -----END CERTIFICATE-----Generated at Mon Jun 16 06:17:03 2025 by rpki-client