$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/ac48f340-e66d-3e30-8f20-abcd664e0251.roa File: ac48f340-e66d-3e30-8f20-abcd664e0251.roa (raw, json) Hash identifier: CaSZWeBDWwjtBOLYGlQLtgQulJsaeb6xfve8z96Askk= Subject key identifier: FD:88:26:F9:E0:93:1A:86:99:61:1D:22:E4:41:F1:04:91:A2:5E:03 Certificate issuer: /CN=9de5b47f-bd49-4614-b658-9980cfd17769 Certificate serial: 010D0C9F4328584A30503A78A6924F3E402B6700 Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/ac48f340-e66d-3e30-8f20-abcd664e0251.roa Signing time: Sat 14 Jun 2025 13:01:04 +0000 ROA not before: Sat 14 Jun 2025 13:01:04 +0000 ROA not after: Fri 12 Sep 2025 13:01:04 +0000 asID: 27471 IP address blocks: 199.19.255.0/24 maxlen: 24 199.116.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:30:50:3a:78:a6:92:4f:3e:40:2b:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769 Validity Not Before: Jun 14 13:01:04 2025 GMT Not After : Sep 12 13:01:04 2025 GMT Subject: CN=69302562-46f1-4f62-9778-c1c5347ac286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:6c:ad:a3:fe:52:88:a9:aa:5c:9a:11:bf:54: 93:31:0d:aa:a4:db:f3:17:61:29:de:10:fb:dc:63: ed:f8:7f:8c:85:6d:35:7c:ad:52:f1:d7:99:ce:22: be:67:e1:78:19:2d:cc:7c:be:78:73:35:0e:5e:9c: 99:55:4a:88:00:16:98:28:bd:08:48:4d:92:5d:33: 72:25:3b:a4:e4:9c:aa:4e:a0:ee:48:8d:30:ad:4f: b9:19:a5:31:ae:6d:3f:2c:41:d5:c1:b5:c3:d5:67: 8f:17:c6:77:a2:b3:e4:62:1b:de:17:77:8b:65:cf: 11:77:d7:d3:2b:4b:21:c7:9f:60:10:cd:1e:f5:77: d2:e9:e0:2f:2c:d5:8d:48:d4:5d:c2:f3:02:00:23: 11:19:ba:e9:2e:c5:dd:aa:f8:4c:13:93:27:ce:ec: 8e:7f:50:27:25:92:e8:46:9f:b3:96:d9:61:7e:f7: aa:15:58:93:52:5d:c8:d1:29:f6:54:2c:18:3c:40: 2e:3e:7e:25:75:11:cb:bf:bb:11:73:5e:29:05:6b: 3f:e2:e4:ad:8e:55:e7:45:8e:3f:0e:4d:8f:78:cd: 2c:ad:2d:14:37:1c:1a:c0:21:45:a4:64:6b:fe:2e: 52:81:b1:20:f9:a8:b2:ca:ee:37:07:78:e7:aa:15: 1b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:88:26:F9:E0:93:1A:86:99:61:1D:22:E4:41:F1:04:91:A2:5E:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/ac48f340-e66d-3e30-8f20-abcd664e0251.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl X509v3 Authority Key Identifier: keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer sbgp-ipAddrBlock: critical IPv4: 199.19.255.0/24 199.116.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:15:c5:cc:58:a3:c6:11:02:7b:63:59:c4:ec:35:db:88:cf: af:6a:09:8c:74:10:c7:c9:1f:e0:34:5b:d3:41:1d:f8:bc:f5: 9e:5d:55:c2:6a:fb:78:e5:15:79:2f:53:94:41:70:ab:8d:10: 32:e3:73:9c:40:0f:1e:05:66:20:cb:af:c9:b6:04:7d:6a:fb: 62:f8:5c:46:2c:f0:ff:cf:62:ea:39:12:be:b8:75:5d:13:2b: 4a:7f:b7:52:53:a4:76:f9:6f:9e:d5:1a:70:46:ed:b0:35:95: 6f:49:70:63:47:30:de:c2:25:58:af:78:97:f5:b0:95:2e:5a: 24:df:71:3e:38:34:20:d9:0e:65:74:f0:d2:75:51:aa:9a:78: a4:44:fd:31:3a:4d:a0:f4:7a:0c:fe:ed:2f:89:6b:81:35:f1: 2e:d6:bd:57:2a:e9:e1:9b:71:60:4e:fc:69:8e:5b:48:5e:b0: cf:b2:8f:02:d2:38:ad:a8:1a:3c:1e:3c:32:05:1b:cd:f8:2a: b4:23:55:2f:ec:87:89:e6:b3:0c:e3:28:cc:44:11:c8:a7:d8: 94:30:be:8f:4d:ea:45:5c:20:ae:d5:43:3d:9b:c4:c1:e7:5e: 2e:c6:e3:a5:32:06:9b:97:f7:2e:71:7a:7e:9c:7f:0f:48:fb: 24:5c:74:32 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEowUDp4ppJPPkArZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRlNWI0N2YtYmQ0OS00NjE0LWI2NTgtOTk4MGNmZDE3 NzY5MB4XDTI1MDYxNDEzMDEwNFoXDTI1MDkxMjEzMDEwNFowLzEtMCsGA1UEAxMk NjkzMDI1NjItNDZmMS00ZjYyLTk3NzgtYzFjNTM0N2FjMjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGyto/5SiKmqXJoRv1STMQ2qpNvzF2Ep3hD7 3GPt+H+MhW01fK1S8deZziK+Z+F4GS3MfL54czUOXpyZVUqIABaYKL0ISE2SXTNy JTuk5JyqTqDuSI0wrU+5GaUxrm0/LEHVwbXD1WePF8Z3orPkYhveF3eLZc8Rd9fT K0shx59gEM0e9XfS6eAvLNWNSNRdwvMCACMRGbrpLsXdqvhME5MnzuyOf1AnJZLo Rp+zltlhfveqFViTUl3I0Sn2VCwYPEAuPn4ldRHLv7sRc14pBWs/4uStjlXnRY4/ Dk2PeM0srS0UNxwawCFFpGRr/i5SgbEg+aiyyu43B3jnqhUbvwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFP2IJvngkxqGmWEdIuRB8QSRol4DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1 YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgwY2ZkMTc3NjkvYWM0OGYzNDAtZTY2ZC0z ZTMwLThmMjAtYWJjZDY2NGUwMjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWRlNWI0N2YtYmQ0OS00NjE0LWI2 NTgtOTk4MGNmZDE3NzY5LzlkZTViNDdmLWJkNDktNDYxNC1iNjU4LTk5ODBjZmQx Nzc2OS5jcmwwHwYDVR0jBBgwFoAUjxiLGO21eSNV+7m/BlYK0+IBpDcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgw Y2ZkMTc3NjkuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAxxP/AwQA x3SsMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHIVxcxYo8YRAntjWcTsNduIz69qCYx0EMfJH+A0W9NBHfi8 9Z5dVcJq+3jlFXkvU5RBcKuNEDLjc5xADx4FZiDLr8m2BH1q+2L4XEYs8P/PYuo5 Er64dV0TK0p/t1JTpHb5b57VGnBG7bA1lW9JcGNHMN7CJViveJf1sJUuWiTfcT44 NCDZDmV08NJ1UaqaeKRE/TE6TaD0egz+7S+Ja4E18S7WvVcq6eGbcWBO/GmOW0he sM+yjwLSOK2oGjwePDIFG834KrQjVS/sh4nmswzjKMxEEcin2JQwvo9N6kVcIK7V Qz2bxMHnXi7G46UyBpuX9y5xen6cfw9I+yRcdDI= -----END CERTIFICATE-----Generated at Sun Jun 15 06:25:30 2025 by rpki-client