$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d2714ea-5618-446b-8e12-7743856af6e6/0b2cb9cc-aa96-35c1-b550-6a477e6ef982.roa File: 0b2cb9cc-aa96-35c1-b550-6a477e6ef982.roa (raw, json) Hash identifier: 3xA+rw5EFNGPiqmlYnhR7kAcMlYw6M6tLR+eWUtoyfg= Subject key identifier: FD:F8:85:F8:8A:37:F7:07:51:BB:36:0E:FD:24:B5:BD:E8:69:74:40 Certificate issuer: /CN=4d2714ea-5618-446b-8e12-7743856af6e6 Certificate serial: 010D0C9F4328584A4F05D1680FE91C36C6D05CD0 Authority key identifier: 52:62:7A:BD:AB:0D:51:ED:FF:6C:BA:7E:2E:37:25:6D:76:40:C3:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d2714ea-5618-446b-8e12-7743856af6e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d2714ea-5618-446b-8e12-7743856af6e6/0b2cb9cc-aa96-35c1-b550-6a477e6ef982.roa Signing time: Wed 25 Jun 2025 13:01:04 +0000 ROA not before: Wed 25 Jun 2025 13:01:04 +0000 ROA not after: Tue 23 Sep 2025 13:01:04 +0000 asID: 174 IP address blocks: 199.67.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d2714ea-5618-446b-8e12-7743856af6e6/4d2714ea-5618-446b-8e12-7743856af6e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d2714ea-5618-446b-8e12-7743856af6e6/4d2714ea-5618-446b-8e12-7743856af6e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d2714ea-5618-446b-8e12-7743856af6e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4f:05:d1:68:0f:e9:1c:36:c6:d0:5c:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d2714ea-5618-446b-8e12-7743856af6e6 Validity Not Before: Jun 25 13:01:04 2025 GMT Not After : Sep 23 13:01:04 2025 GMT Subject: CN=384e982e-ca89-440a-9aeb-96c22a60abcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c0:95:f6:6b:51:c6:d6:d3:48:07:90:51:11: 4d:69:e0:ad:f5:50:fa:c2:ef:a6:e4:f1:8d:b8:18: 3b:73:9b:16:06:35:8a:90:82:33:5b:62:c4:62:2a: 9d:26:92:36:fe:95:d7:8c:63:2c:0d:da:fc:e6:a0: f6:27:41:e6:ac:d9:9d:9a:43:1b:a6:da:72:8e:cf: 5f:c5:71:63:51:0a:e5:65:21:dc:ac:7b:5c:e7:4e: 7e:a1:bc:b4:bf:e6:f7:30:20:07:24:71:f0:68:11: 35:d9:b1:2b:23:e3:26:ab:5e:8f:51:93:40:44:f3: 87:d3:08:0b:9f:64:11:48:0c:13:99:86:fc:44:04: da:22:d7:17:8e:39:77:a1:ab:ca:29:29:2d:22:0c: da:7f:bc:ad:94:56:0c:df:d7:a7:13:9c:63:71:cc: 10:d3:03:63:af:b7:9a:b9:d9:11:b5:0d:98:fe:98: 36:13:90:d5:4b:bf:62:99:b7:88:fd:52:8e:1d:2e: a7:ab:bd:03:68:c9:fc:ae:ce:82:2b:2a:90:7d:ee: 77:43:58:b7:1f:4b:13:f5:a0:58:67:1e:ed:ac:a9: aa:53:f3:47:06:88:8d:5b:27:93:7d:92:33:ef:11: e9:5e:81:c9:31:c3:f7:21:41:2c:7f:44:fc:31:a3: ce:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:F8:85:F8:8A:37:F7:07:51:BB:36:0E:FD:24:B5:BD:E8:69:74:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d2714ea-5618-446b-8e12-7743856af6e6/0b2cb9cc-aa96-35c1-b550-6a477e6ef982.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d2714ea-5618-446b-8e12-7743856af6e6/4d2714ea-5618-446b-8e12-7743856af6e6.crl X509v3 Authority Key Identifier: keyid:52:62:7A:BD:AB:0D:51:ED:FF:6C:BA:7E:2E:37:25:6D:76:40:C3:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d2714ea-5618-446b-8e12-7743856af6e6.cer sbgp-ipAddrBlock: critical IPv4: 199.67.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:aa:4c:62:48:fe:31:e7:de:30:c1:21:cf:44:5f:00:00:1c: 08:e0:ae:58:d8:e2:7c:12:3a:bc:80:cf:5d:06:9f:4d:fa:65: 53:92:ab:0a:39:5c:5c:48:fb:db:b8:9a:16:4c:9f:57:b1:4e: 70:94:be:f0:c3:4f:47:95:57:79:17:8d:e7:09:23:83:1d:ba: fc:87:b0:58:38:68:5c:df:c0:88:2f:83:77:ef:ad:b2:ea:60: b5:98:4f:73:a0:85:7a:5a:ae:0b:eb:c1:6a:ad:3c:55:79:c8: 2e:e0:42:0b:51:ac:95:24:6b:97:76:13:a4:da:53:57:08:1a: c1:a5:ab:5d:67:0c:7c:0f:fa:e7:42:17:63:cb:e7:56:eb:3b: 40:35:1f:32:55:69:a1:01:d9:5b:9d:25:4b:08:62:72:f8:02: b1:20:c3:c7:62:cb:02:a0:0a:4c:66:08:4d:32:d1:d2:17:bd: 4c:1a:0c:31:c1:2d:c1:15:72:8c:8f:b6:ec:e2:88:ee:8c:d6: 90:9e:69:8e:5b:b5:45:15:e9:f6:fa:d7:6e:fb:86:55:dc:3b: 4b:7f:b2:5e:4b:bf:23:c1:42:a7:93:f9:4e:67:f5:ec:65:b1: f5:cd:fa:26:8e:7a:55:52:95:4f:e4:e9:47:29:ff:0b:bd:9e: 7f:4d:5f:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpPBdFoD+kcNsbQXNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQyNzE0ZWEtNTYxOC00NDZiLThlMTItNzc0Mzg1NmFm NmU2MB4XDTI1MDYyNTEzMDEwNFoXDTI1MDkyMzEzMDEwNFowLzEtMCsGA1UEAxMk Mzg0ZTk4MmUtY2E4OS00NDBhLTlhZWItOTZjMjJhNjBhYmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksCV9mtRxtbTSAeQURFNaeCt9VD6wu+m5PGN uBg7c5sWBjWKkIIzW2LEYiqdJpI2/pXXjGMsDdr85qD2J0HmrNmdmkMbptpyjs9f xXFjUQrlZSHcrHtc505+oby0v+b3MCAHJHHwaBE12bErI+Mmq16PUZNARPOH0wgL n2QRSAwTmYb8RATaItcXjjl3oavKKSktIgzaf7ytlFYM39enE5xjccwQ0wNjr7ea udkRtQ2Y/pg2E5DVS79imbeI/VKOHS6nq70DaMn8rs6CKyqQfe53Q1i3H0sT9aBY Zx7trKmqU/NHBoiNWyeTfZIz7xHpXoHJMcP3IUEsf0T8MaPOIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP34hfiKN/cHUbs2Dv0ktb3oaXRAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZDI3 MTRlYS01NjE4LTQ0NmItOGUxMi03NzQzODU2YWY2ZTYvMGIyY2I5Y2MtYWE5Ni0z NWMxLWI1NTAtNmE0NzdlNmVmOTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGQyNzE0ZWEtNTYxOC00NDZiLThl MTItNzc0Mzg1NmFmNmU2LzRkMjcxNGVhLTU2MTgtNDQ2Yi04ZTEyLTc3NDM4NTZh ZjZlNi5jcmwwHwYDVR0jBBgwFoAUUmJ6vasNUe3/bLp+LjclbXZAwwswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZDI3MTRlYS01NjE4LTQ0NmItOGUxMi03NzQz ODU2YWY2ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFx0NgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyqTGJI/jHn3jDBIc9EXwAAHAjgrljY4nwSOryAz10Gn036ZVOSqwo5 XFxI+9u4mhZMn1exTnCUvvDDT0eVV3kXjecJI4MduvyHsFg4aFzfwIgvg3fvrbLq YLWYT3OghXpargvrwWqtPFV5yC7gQgtRrJUka5d2E6TaU1cIGsGlq11nDHwP+udC F2PL51brO0A1HzJVaaEB2VudJUsIYnL4ArEgw8diywKgCkxmCE0y0dIXvUwaDDHB LcEVcoyPtuziiO6M1pCeaY5btUUV6fb61277hlXcO0t/sl5LvyPBQqeT+U5n9exl sfXN+iaOelVSlU/k6Ucp/wu9nn9NXzA= -----END CERTIFICATE-----Generated at Tue Jul 1 07:53:45 2025 by rpki-client