$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/299cd2db-655a-3cdd-9cad-92d013df4297.roa File: 299cd2db-655a-3cdd-9cad-92d013df4297.roa (raw, json) Hash identifier: ot0e+MvMgpRah0/o0lQ/DUY7+fmkR6WzHdAE9f3gWxA= Subject key identifier: 05:97:95:65:40:E5:37:A5:2F:3E:50:24:76:2E:9A:41:CA:00:1B:29 Certificate issuer: /CN=a062a219-9ee8-48a3-897a-8410b6da94a1 Certificate serial: 010D0C9F4328584A268AB0B457CA99D457851D80 Authority key identifier: 14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/299cd2db-655a-3cdd-9cad-92d013df4297.roa Signing time: Wed 11 Jun 2025 01:00:50 +0000 ROA not before: Wed 11 Jun 2025 01:00:50 +0000 ROA not after: Tue 09 Sep 2025 01:00:50 +0000 asID: 803 IP address blocks: 96.125.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:26:8a:b0:b4:57:ca:99:d4:57:85:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a062a219-9ee8-48a3-897a-8410b6da94a1 Validity Not Before: Jun 11 01:00:50 2025 GMT Not After : Sep 9 01:00:50 2025 GMT Subject: CN=4397c551-87f7-46d4-8a9e-9fb23103d2f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:90:17:60:01:4c:7c:4f:f8:0d:ef:bb:9e:aa: f7:92:e5:95:29:0a:a0:91:ab:f0:54:66:a2:56:54: f6:75:4d:f0:2b:b7:77:ae:64:bd:70:f8:49:ed:86: 22:70:77:be:7d:c5:1a:5b:1d:b2:bb:0a:df:ef:37: de:0b:98:e4:08:14:6b:2b:5f:ac:ce:50:a1:0f:ee: cf:d0:df:fd:cd:42:28:ce:99:8e:f3:07:e7:a6:26: b7:77:c5:cf:1c:2b:fa:aa:43:90:1a:69:52:80:44: 02:d6:a2:7f:dd:5f:83:b2:cd:fd:d2:f7:b7:70:34: 35:6c:6e:f8:92:2d:43:b6:26:1b:86:b2:3b:ea:c4: 06:52:f4:52:13:ed:eb:75:95:4b:39:a8:0a:48:a6: 73:6f:46:a0:f1:af:57:ad:f7:0e:fb:8a:4c:2b:b8: 82:04:7a:c0:f4:0f:1c:e5:ff:44:88:6b:fd:23:41: 16:ee:72:52:8c:1a:29:78:05:a1:9f:69:a4:46:09: 77:3d:19:1e:7d:4c:18:fd:88:f8:04:85:7f:25:99: ed:16:03:93:b6:2c:45:77:45:1e:4c:b2:f5:d1:3f: ca:81:af:37:8f:1d:0e:69:3f:eb:b0:28:e6:01:97: 1c:78:21:96:39:e9:7a:21:2f:9d:a1:f6:5e:9a:30: 79:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:97:95:65:40:E5:37:A5:2F:3E:50:24:76:2E:9A:41:CA:00:1B:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/299cd2db-655a-3cdd-9cad-92d013df4297.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl X509v3 Authority Key Identifier: keyid:14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer sbgp-ipAddrBlock: critical IPv4: 96.125.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:83:e7:b6:62:92:8a:01:a4:b9:03:7e:fb:92:01:bd:53:20: 7b:fc:ef:cb:06:f4:4a:9d:ae:29:2c:ee:76:2c:00:70:e4:e6: c9:cc:a0:b9:11:43:98:e0:54:c4:bb:74:db:e0:96:94:45:63: 99:3d:d5:c3:4d:90:6d:73:3f:f3:75:68:ed:7f:42:55:d9:13: d3:c8:3f:58:22:15:f9:8b:37:38:0d:66:c5:db:62:73:69:e3: a6:d1:f1:a5:a2:c9:35:b9:b8:9a:50:f4:68:e6:7c:be:30:31: 02:29:07:64:6c:ed:79:be:af:36:a2:c6:89:56:3f:2e:f9:c5: a6:55:c2:d6:50:30:3e:5c:fb:59:7d:99:51:e9:78:89:d5:be: c5:1a:ad:e6:92:3c:60:2b:56:36:83:0a:3e:32:73:b9:01:42: 21:e9:48:c3:df:ea:59:57:7a:e8:91:cd:5e:dd:0e:46:85:54: b3:76:44:67:81:72:87:85:da:e0:04:3c:cb:2b:bf:3c:71:28: 29:c6:2c:29:db:c4:2a:f2:ba:0d:6b:0a:a2:11:9b:b8:08:e6: 06:a8:d8:8a:17:39:b9:15:76:88:28:30:8b:02:9c:b0:1f:72: 17:ec:25:87:03:cc:e7:02:d3:7b:59:20:d9:f3:8f:bd:05:b0: f4:f1:72:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEomirC0V8qZ1FeFHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTA2MmEyMTktOWVlOC00OGEzLTg5N2EtODQxMGI2ZGE5 NGExMB4XDTI1MDYxMTAxMDA1MFoXDTI1MDkwOTAxMDA1MFowLzEtMCsGA1UEAxMk NDM5N2M1NTEtODdmNy00NmQ0LThhOWUtOWZiMjMxMDNkMmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZAXYAFMfE/4De+7nqr3kuWVKQqgkavwVGai VlT2dU3wK7d3rmS9cPhJ7YYicHe+fcUaWx2yuwrf7zfeC5jkCBRrK1+szlChD+7P 0N/9zUIozpmO8wfnpia3d8XPHCv6qkOQGmlSgEQC1qJ/3V+Dss390ve3cDQ1bG74 ki1DtiYbhrI76sQGUvRSE+3rdZVLOagKSKZzb0ag8a9XrfcO+4pMK7iCBHrA9A8c 5f9EiGv9I0EW7nJSjBopeAWhn2mkRgl3PRkefUwY/Yj4BIV/JZntFgOTtixFd0Ue TLL10T/Kga83jx0OaT/rsCjmAZcceCGWOel6IS+dofZemjB5VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAWXlWVA5TelLz5QJHYumkHKABspMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMDYy YTIxOS05ZWU4LTQ4YTMtODk3YS04NDEwYjZkYTk0YTEvMjk5Y2QyZGItNjU1YS0z Y2RkLTljYWQtOTJkMDEzZGY0Mjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTA2MmEyMTktOWVlOC00OGEzLTg5 N2EtODQxMGI2ZGE5NGExL2EwNjJhMjE5LTllZTgtNDhhMy04OTdhLTg0MTBiNmRh OTRhMS5jcmwwHwYDVR0jBBgwFoAUFCgnZgWdJKC08ogP76ns4OluhhgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hMDYyYTIxOS05ZWU4LTQ4YTMtODk3YS04NDEw YjZkYTk0YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYH3wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGD57ZikooBpLkDfvuSAb1TIHv878sG9Eqdriks7nYsAHDk5snMoLkR Q5jgVMS7dNvglpRFY5k91cNNkG1zP/N1aO1/QlXZE9PIP1giFfmLNzgNZsXbYnNp 46bR8aWiyTW5uJpQ9GjmfL4wMQIpB2Rs7Xm+rzaixolWPy75xaZVwtZQMD5c+1l9 mVHpeInVvsUareaSPGArVjaDCj4yc7kBQiHpSMPf6llXeuiRzV7dDkaFVLN2RGeB coeF2uAEPMsrvzxxKCnGLCnbxCryug1rCqIRm7gI5gao2IoXObkVdogoMIsCnLAf chfsJYcDzOcC03tZINnzj70FsPTxcks= -----END CERTIFICATE-----Generated at Sun Jun 15 15:23:28 2025 by rpki-client