$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/b4075263-5a25-377f-ac40-317be5b66415.roa File: b4075263-5a25-377f-ac40-317be5b66415.roa (raw, json) Hash identifier: 14CSxfUQIQtRY7TmzpLWrqpJe0VBP9IDDS23OQe17wY= Subject key identifier: B6:AC:50:93:43:5A:C2:E7:18:DA:FE:05:27:3E:DE:AB:FF:5A:C6:12 Certificate issuer: /CN=74a9db22-8d49-4938-9c6f-e3fd428c158e Certificate serial: 010D0C9F4328584A331AE56A016B172828324BC0 Authority key identifier: 98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/b4075263-5a25-377f-ac40-317be5b66415.roa Signing time: Sun 15 Jun 2025 13:01:02 +0000 ROA not before: Sun 15 Jun 2025 13:01:02 +0000 ROA not after: Sat 13 Sep 2025 13:01:02 +0000 asID: 134521 IP address blocks: 199.27.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:33:1a:e5:6a:01:6b:17:28:28:32:4b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74a9db22-8d49-4938-9c6f-e3fd428c158e Validity Not Before: Jun 15 13:01:02 2025 GMT Not After : Sep 13 13:01:02 2025 GMT Subject: CN=d56b0fcf-ce18-4789-87da-c542dfbdcffb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d5:9f:41:47:62:27:ce:36:72:25:b3:ad:df: 92:f2:e8:a5:58:25:1b:88:f6:5f:cc:35:31:2a:e0: 12:4a:f3:d0:2c:f1:9d:e3:e5:7c:c4:79:94:c9:b6: a8:b3:03:71:4e:37:a8:5c:45:d0:c7:21:9f:7a:7a: 0f:ad:da:b9:41:82:dd:cb:d0:ae:13:d9:a8:9c:9a: 91:aa:f6:b6:44:a7:b9:26:fb:38:71:49:ad:83:dc: 77:49:e8:be:84:23:bb:1a:38:e6:30:78:bf:51:87: 6e:6e:54:f1:cf:31:ad:7c:22:86:8e:51:64:a2:8d: 51:3e:41:db:e8:6e:99:43:13:dc:05:57:b2:56:37: 38:73:71:95:74:d2:a1:2f:8b:7d:6f:dc:1d:ea:f4: 38:d2:81:ba:26:b2:24:07:e5:2b:a0:16:52:be:9f: 61:20:2f:ed:a0:52:0e:17:0a:16:79:5a:3b:43:dd: ca:6a:1a:22:a4:f0:a7:73:2f:40:61:b8:a1:2b:9f: f2:6b:0a:55:7c:a9:c3:de:a8:da:ae:19:39:f1:0a: ef:f3:f1:d2:cd:ba:8d:c6:34:52:fa:c6:3e:40:e9: 97:f1:7a:57:d5:a3:3d:ff:da:4d:36:50:bf:0d:cb: 46:ba:cd:97:64:4d:34:97:18:8c:81:ce:92:fe:b8: 54:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:AC:50:93:43:5A:C2:E7:18:DA:FE:05:27:3E:DE:AB:FF:5A:C6:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/b4075263-5a25-377f-ac40-317be5b66415.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.crl X509v3 Authority Key Identifier: keyid:98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer sbgp-ipAddrBlock: critical IPv4: 199.27.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:40:17:c0:78:8b:e8:66:a0:89:5b:03:b3:78:f8:d0:3f:23: d0:15:0e:7e:8a:a2:f1:8f:d2:58:86:37:ca:28:9e:cf:b7:57: cf:2a:25:91:fc:ab:30:d9:4b:e0:d9:b5:56:30:9e:02:a6:7d: 1e:34:bc:91:10:3c:4c:48:fc:f3:27:01:f1:f8:d2:6d:52:84: 26:d1:21:19:2b:8f:92:72:fb:78:23:fe:76:9e:91:0e:fe:6d: 43:d8:a6:c2:1b:a5:4d:9f:37:09:b1:be:b0:ae:11:5b:8a:dd: c1:eb:48:de:b5:75:ed:15:7f:f2:31:24:3c:ad:10:9d:d4:dd: a6:a1:db:c1:f5:b3:b3:c2:b0:8b:71:ec:75:af:1a:08:6d:50: 36:de:b1:e6:2d:be:62:20:c2:64:ca:2e:61:b9:13:f3:f4:a3: 11:ea:fb:f5:bd:59:73:e9:73:4c:91:c2:0d:57:09:91:1c:1e: 70:a6:fa:3d:ab:48:26:02:be:a1:e3:3f:5c:32:a5:24:01:c8: 4d:ff:8a:15:41:56:9f:66:24:a6:0f:72:b9:18:54:f0:13:98: 69:cf:b0:27:6c:fe:7b:f3:a4:73:6b:92:3f:bb:44:02:56:1e: 32:7b:dd:b9:7c:c4:37:2a:08:24:d5:0b:38:80:7d:da:e7:31: 4e:df:f2:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEozGuVqAWsXKCgyS8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRhOWRiMjItOGQ0OS00OTM4LTljNmYtZTNmZDQyOGMx NThlMB4XDTI1MDYxNTEzMDEwMloXDTI1MDkxMzEzMDEwMlowLzEtMCsGA1UEAxMk ZDU2YjBmY2YtY2UxOC00Nzg5LTg3ZGEtYzU0MmRmYmRjZmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdWfQUdiJ842ciWzrd+S8uilWCUbiPZfzDUx KuASSvPQLPGd4+V8xHmUybaoswNxTjeoXEXQxyGfenoPrdq5QYLdy9CuE9monJqR qva2RKe5Jvs4cUmtg9x3Sei+hCO7GjjmMHi/UYdublTxzzGtfCKGjlFkoo1RPkHb 6G6ZQxPcBVeyVjc4c3GVdNKhL4t9b9wd6vQ40oG6JrIkB+UroBZSvp9hIC/toFIO FwoWeVo7Q93KahoipPCncy9AYbihK5/yawpVfKnD3qjarhk58Qrv8/HSzbqNxjRS +sY+QOmX8XpX1aM9/9pNNlC/DctGus2XZE00lxiMgc6S/rhU5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLasUJNDWsLnGNr+BSc+3qv/WsYSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NGE5 ZGIyMi04ZDQ5LTQ5MzgtOWM2Zi1lM2ZkNDI4YzE1OGUvYjQwNzUyNjMtNWEyNS0z NzdmLWFjNDAtMzE3YmU1YjY2NDE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzRhOWRiMjItOGQ0OS00OTM4LTlj NmYtZTNmZDQyOGMxNThlLzc0YTlkYjIyLThkNDktNDkzOC05YzZmLWUzZmQ0Mjhj MTU4ZS5jcmwwHwYDVR0jBBgwFoAUmPupDsV3auhpmoOFV1QuM6AcJkEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NGE5ZGIyMi04ZDQ5LTQ5MzgtOWM2Zi1lM2Zk NDI4YzE1OGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxxuXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhAF8B4i+hmoIlbA7N4+NA/I9AVDn6KovGP0liGN8oons+3V88qJZH8 qzDZS+DZtVYwngKmfR40vJEQPExI/PMnAfH40m1ShCbRIRkrj5Jy+3gj/naekQ7+ bUPYpsIbpU2fNwmxvrCuEVuK3cHrSN61de0Vf/IxJDytEJ3U3aah28H1s7PCsItx 7HWvGghtUDbeseYtvmIgwmTKLmG5E/P0oxHq+/W9WXPpc0yRwg1XCZEcHnCm+j2r SCYCvqHjP1wypSQByE3/ihVBVp9mJKYPcrkYVPATmGnPsCds/nvzpHNrkj+7RAJW HjJ73bl8xDcqCCTVCziAfdrnMU7f8tQ= -----END CERTIFICATE-----Generated at Sun Jun 15 22:11:57 2025 by rpki-client