$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/891700c1-b3f6-3099-9f5f-78ba0b27d31f.roa File: 891700c1-b3f6-3099-9f5f-78ba0b27d31f.roa (raw, json) Hash identifier: /4KrJ1Omq5yaBuAiGlzJxWXFDPY5gQbbVFOlln5e9ks= Subject key identifier: 66:93:C8:30:C6:E1:C7:D5:19:E6:C0:99:E2:1A:C9:DD:96:24:93:55 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584A7085F0D34D617A903CBA2580 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/891700c1-b3f6-3099-9f5f-78ba0b27d31f.roa Signing time: Mon 07 Jul 2025 13:01:05 +0000 ROA not before: Mon 07 Jul 2025 13:01:05 +0000 ROA not after: Sun 05 Oct 2025 13:01:05 +0000 asID: 21949 IP address blocks: 199.45.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 02 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:70:85:f0:d3:4d:61:7a:90:3c:ba:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Jul 7 13:01:05 2025 GMT Not After : Oct 5 13:01:05 2025 GMT Subject: CN=41b6ebd9-d94a-45fd-ab76-aa7317023de7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2b:af:80:a2:cb:15:88:27:22:75:a7:ae:d6: 17:ae:3c:7b:23:e2:f5:c4:a1:65:1f:0a:a2:03:d1: 7c:fe:7a:d9:1a:81:ea:2c:cc:98:ed:13:e2:c1:41: 3d:6a:8e:e5:8d:7d:6d:b8:5d:50:5e:28:ae:0f:57: f3:60:34:88:1b:58:db:08:1c:3e:f5:fb:bf:52:59: 19:69:ac:c2:78:75:f4:de:24:93:4f:be:23:f4:ff: 4c:ac:2b:79:dc:bb:72:97:8f:f0:44:e0:f0:77:39: ee:f2:6a:82:b7:88:2b:3e:dc:0c:f1:fa:b0:db:06: 19:19:27:98:1d:ba:6d:e9:0d:2e:bb:23:a3:e1:c2: 70:41:38:9c:b4:cc:db:9a:d5:6a:ce:e0:42:4a:b9: dc:ed:8f:cc:32:7a:c9:9a:83:6e:26:5d:97:f1:51: 12:e4:a6:a9:af:d0:ad:f9:71:f0:25:3d:aa:9b:94: c0:29:11:54:74:1d:5b:a0:bc:3f:7f:c1:47:ab:92: 6b:4a:a7:a9:1c:6e:8b:f9:04:a0:20:0b:61:15:90: a8:17:d2:a4:b5:f5:77:58:59:83:01:fe:40:dd:61: df:9e:7f:ae:7d:c5:c5:4c:61:ef:48:cf:23:36:cb: ef:d7:9f:27:25:45:02:ea:27:67:b6:91:c9:68:4c: ad:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:93:C8:30:C6:E1:C7:D5:19:E6:C0:99:E2:1A:C9:DD:96:24:93:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/891700c1-b3f6-3099-9f5f-78ba0b27d31f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 199.45.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:50:f8:d7:13:49:6d:ce:85:dc:10:4a:b8:51:f0:d4:22:af: 49:a7:06:a8:7b:21:6e:31:57:6e:08:d4:75:fa:7a:0b:1a:01: e4:ef:55:fe:12:10:55:a1:0b:cb:7e:69:db:3b:18:7e:35:ee: a6:0b:f1:77:31:a2:4c:af:fe:a2:dc:8f:6b:12:e8:39:1d:7c: ca:99:f4:37:69:78:36:86:79:1d:f3:10:c8:f9:dc:c8:4c:51: 8f:3f:e9:9d:23:9b:e8:56:6c:84:25:fb:ae:9f:73:9d:27:3f: a7:fb:87:b8:ba:78:3c:f0:98:44:75:56:09:5c:ea:aa:4f:7a: 83:58:b7:52:b2:21:b0:c7:12:c0:c9:ce:97:12:38:a6:10:06: 56:fc:81:56:1b:cf:58:29:3a:30:9a:e0:9f:56:77:8e:e2:6a: 2c:cd:d9:86:83:74:f7:7c:73:95:c0:9c:a0:4c:37:14:ad:d7: 4b:d6:dc:4f:ec:75:34:ad:6a:5e:84:14:18:24:51:c4:ea:23: a1:11:24:03:15:f6:be:61:59:71:a1:b8:09:30:7c:8d:5e:5f: 1d:e6:f4:b3:ef:2a:d6:11:07:65:a4:35:82:4a:c3:ec:fd:9d: 9a:3d:b2:28:27:7a:60:3d:ca:d2:29:ee:89:89:d3:cf:90:0b: 36:68:11:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpwhfDTTWF6kDy6JYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI1MDcwNzEzMDEwNVoXDTI1MTAwNTEzMDEwNVowLzEtMCsGA1UEAxMk NDFiNmViZDktZDk0YS00NWZkLWFiNzYtYWE3MzE3MDIzZGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSuvgKLLFYgnInWnrtYXrjx7I+L1xKFlHwqi A9F8/nrZGoHqLMyY7RPiwUE9ao7ljX1tuF1QXiiuD1fzYDSIG1jbCBw+9fu/UlkZ aazCeHX03iSTT74j9P9MrCt53Ltyl4/wRODwdznu8mqCt4grPtwM8fqw2wYZGSeY Hbpt6Q0uuyOj4cJwQTictMzbmtVqzuBCSrnc7Y/MMnrJmoNuJl2X8VES5Kapr9Ct +XHwJT2qm5TAKRFUdB1boLw/f8FHq5JrSqepHG6L+QSgIAthFZCoF9KktfV3WFmD Af5A3WHfnn+ufcXFTGHvSM8jNsvv158nJUUC6idntpHJaEytrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGaTyDDG4cfVGebAmeIayd2WJJNVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvODkxNzAwYzEtYjNmNi0z MDk5LTlmNWYtNzhiYTBiMjdkMzFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxy2QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1Q+NcTSW3OhdwQSrhR8NQir0mnBqh7IW4xV24I1HX6egsaAeTvVf4S EFWhC8t+ads7GH417qYL8Xcxokyv/qLcj2sS6DkdfMqZ9DdpeDaGeR3zEMj53MhM UY8/6Z0jm+hWbIQl+66fc50nP6f7h7i6eDzwmER1Vglc6qpPeoNYt1KyIbDHEsDJ zpcSOKYQBlb8gVYbz1gpOjCa4J9Wd47iaizN2YaDdPd8c5XAnKBMNxSt10vW3E/s dTStal6EFBgkUcTqI6ERJAMV9r5hWXGhuAkwfI1eXx3m9LPvKtYRB2WkNYJKw+z9 nZo9signemA9ytIp7omJ08+QCzZoEYA= -----END CERTIFICATE-----Generated at Thu Jul 31 15:10:04 2025 by rpki-client