$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/a3f0893a-35f0-324d-b592-cfd2098b1ae7.roa File: a3f0893a-35f0-324d-b592-cfd2098b1ae7.roa (raw, json) Hash identifier: NuqK3Ppp4f8rRzsOADlqAyoZgdp53BFjLs9AN/rEA/4= Subject key identifier: 2D:5A:C7:1C:9D:46:C9:34:A6:48:6A:A1:C2:B8:13:5A:34:AE:75:5B Certificate issuer: /CN=e35c7007-7a33-480f-a32e-40481f8f1792 Certificate serial: 010D0C9F4328584A268ABC84B55C63ED3BF4E3C0 Authority key identifier: 69:C5:93:B3:CB:4A:4F:6B:F2:C7:1E:19:B2:7A:66:85:BA:C2:EA:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/a3f0893a-35f0-324d-b592-cfd2098b1ae7.roa Signing time: Wed 11 Jun 2025 01:00:50 +0000 ROA not before: Wed 11 Jun 2025 01:00:50 +0000 ROA not after: Tue 09 Sep 2025 01:00:50 +0000 asID: 204631 IP address blocks: 199.47.148.0/24 maxlen: 24 199.47.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/e35c7007-7a33-480f-a32e-40481f8f1792.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/e35c7007-7a33-480f-a32e-40481f8f1792.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:26:8a:bc:84:b5:5c:63:ed:3b:f4:e3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e35c7007-7a33-480f-a32e-40481f8f1792 Validity Not Before: Jun 11 01:00:50 2025 GMT Not After : Sep 9 01:00:50 2025 GMT Subject: CN=934277f7-b9e0-43a6-ae07-4dfb046cd092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:cd:a4:b9:3f:58:2f:a2:04:df:91:87:cd:9d: 6d:10:e9:42:a8:7e:9b:36:43:cb:02:47:dc:dc:ae: 23:a5:0c:c7:94:4b:25:cd:f1:e4:a3:26:f6:de:8b: d6:3f:cb:51:b5:8d:f6:84:46:5f:9b:dd:16:a1:1b: 94:ad:e0:34:31:4f:95:fe:b3:fc:35:1e:f0:7d:83: 04:08:fd:f8:de:5c:da:b9:60:16:d5:21:84:d1:c4: c7:62:61:f0:15:77:f8:de:a6:b6:f2:1f:a7:95:9f: 38:49:2e:03:ec:c0:56:14:e2:a6:d7:62:aa:e5:84: 0f:2c:82:6d:79:ca:f8:9c:b2:85:ee:15:0a:ab:77: 0a:38:13:9e:27:dd:b5:da:9a:a1:04:56:2a:fb:19: 17:16:29:c3:65:da:a6:23:9a:7b:59:75:c1:da:3d: 2e:ec:95:89:49:6e:12:5f:88:55:8d:c9:6e:ae:e4: 3b:87:ab:f4:9e:77:d1:b5:98:d9:e9:6e:84:63:78: 84:56:ee:f7:0f:f4:46:2a:0f:17:29:ee:d4:86:93: 6a:2c:7f:f2:22:a9:79:5c:9f:d9:28:b5:01:b8:e4: 74:97:ef:fb:86:9a:75:67:7f:ca:20:23:d9:54:a6: a3:da:f8:48:40:74:b4:5c:42:1c:e0:ec:86:92:eb: 62:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:5A:C7:1C:9D:46:C9:34:A6:48:6A:A1:C2:B8:13:5A:34:AE:75:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/a3f0893a-35f0-324d-b592-cfd2098b1ae7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/e35c7007-7a33-480f-a32e-40481f8f1792.crl X509v3 Authority Key Identifier: keyid:69:C5:93:B3:CB:4A:4F:6B:F2:C7:1E:19:B2:7A:66:85:BA:C2:EA:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792.cer sbgp-ipAddrBlock: critical IPv4: 199.47.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:0c:6c:b9:1b:0c:fc:07:a9:5f:41:54:91:42:74:ba:79:2e: 75:28:eb:3b:2b:57:01:dc:0d:5c:49:eb:a1:22:51:d7:8e:6b: e2:03:85:3b:88:ec:cc:96:22:3e:fe:e2:cc:a0:b8:37:75:92: 04:31:fb:6d:77:78:ef:c7:69:33:19:92:fa:4b:2e:d9:9d:1e: e6:18:0b:f4:be:5d:d3:f4:76:15:b7:17:1d:7d:ac:d3:40:00: 2d:d5:43:09:25:12:bc:d4:89:ee:dd:41:34:e6:2f:eb:c0:98: cc:4a:7e:71:3c:3f:a9:30:59:97:4b:8b:46:dc:2e:2a:b5:e8: 50:4f:79:55:51:02:05:33:35:2c:3f:dc:fa:67:de:a0:2f:8d: dd:a0:ce:fd:aa:23:65:7e:ef:6c:1f:ed:7c:6b:57:91:df:27: c8:2f:ca:d8:79:f1:a9:3c:47:c2:16:cb:88:22:fc:04:df:72: 68:bf:f5:f2:f4:90:e0:51:e4:07:ff:d2:fa:c6:ce:5f:b5:ae: 48:00:0b:2a:f9:6d:76:a1:07:60:61:19:99:bc:42:0e:38:fe: 71:5a:68:24:8b:27:56:e8:2e:09:32:1b:e1:4c:3e:8a:3f:e6: a0:18:59:3f:37:25:26:cc:5f:b8:66:16:99:c5:b4:6b:2d:ef: 78:17:ff:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEomiryEtVxj7Tv048AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM1YzcwMDctN2EzMy00ODBmLWEzMmUtNDA0ODFmOGYx NzkyMB4XDTI1MDYxMTAxMDA1MFoXDTI1MDkwOTAxMDA1MFowLzEtMCsGA1UEAxMk OTM0Mjc3ZjctYjllMC00M2E2LWFlMDctNGRmYjA0NmNkMDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo82kuT9YL6IE35GHzZ1tEOlCqH6bNkPLAkfc 3K4jpQzHlEslzfHkoyb23ovWP8tRtY32hEZfm90WoRuUreA0MU+V/rP8NR7wfYME CP343lzauWAW1SGE0cTHYmHwFXf43qa28h+nlZ84SS4D7MBWFOKm12Kq5YQPLIJt ecr4nLKF7hUKq3cKOBOeJ9212pqhBFYq+xkXFinDZdqmI5p7WXXB2j0u7JWJSW4S X4hVjcluruQ7h6v0nnfRtZjZ6W6EY3iEVu73D/RGKg8XKe7UhpNqLH/yIql5XJ/Z KLUBuOR0l+/7hpp1Z3/KICPZVKaj2vhIQHS0XEIc4OyGkutiywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC1axxydRsk0pkhqocK4E1o0rnVbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lMzVj NzAwNy03YTMzLTQ4MGYtYTMyZS00MDQ4MWY4ZjE3OTIvYTNmMDg5M2EtMzVmMC0z MjRkLWI1OTItY2ZkMjA5OGIxYWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTM1YzcwMDctN2EzMy00ODBmLWEz MmUtNDA0ODFmOGYxNzkyL2UzNWM3MDA3LTdhMzMtNDgwZi1hMzJlLTQwNDgxZjhm MTc5Mi5jcmwwHwYDVR0jBBgwFoAUacWTs8tKT2vyxx4ZsnpmhbrC6uwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lMzVjNzAwNy03YTMzLTQ4MGYtYTMyZS00MDQ4 MWY4ZjE3OTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxy+UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAAMbLkbDPwHqV9BVJFCdLp5LnUo6zsrVwHcDVxJ66EiUdeOa+IDhTuI 7MyWIj7+4syguDd1kgQx+213eO/HaTMZkvpLLtmdHuYYC/S+XdP0dhW3Fx19rNNA AC3VQwklErzUie7dQTTmL+vAmMxKfnE8P6kwWZdLi0bcLiq16FBPeVVRAgUzNSw/ 3Ppn3qAvjd2gzv2qI2V+72wf7XxrV5HfJ8gvyth58ak8R8IWy4gi/ATfcmi/9fL0 kOBR5Af/0vrGzl+1rkgACyr5bXahB2BhGZm8Qg44/nFaaCSLJ1boLgkyG+FMPoo/ 5qAYWT83JSbMX7hmFpnFtGst73gX/2g= -----END CERTIFICATE-----Generated at Sun Jun 15 21:20:51 2025 by rpki-client