$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/ec749261-21d5-3145-9684-d93e7631475d.roa File: ec749261-21d5-3145-9684-d93e7631475d.roa (raw, json) Hash identifier: taE3gDLkHE7tJCahT/cwSD12UsNeltzFjT1n5F8xACQ= Subject key identifier: 33:20:DF:35:F4:53:E6:C4:C0:F6:F0:7E:39:48:2B:80:BD:3F:CA:24 Certificate issuer: /CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c Certificate serial: 010D0C9F4328584A778088BC52642AE044B1B7C0 Authority key identifier: 27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/ec749261-21d5-3145-9684-d93e7631475d.roa Signing time: Thu 10 Jul 2025 01:00:51 +0000 ROA not before: Thu 10 Jul 2025 01:00:51 +0000 ROA not after: Wed 08 Oct 2025 01:00:51 +0000 asID: 125 IP address blocks: 199.64.34.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:77:80:88:bc:52:64:2a:e0:44:b1:b7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c Validity Not Before: Jul 10 01:00:51 2025 GMT Not After : Oct 8 01:00:51 2025 GMT Subject: CN=871fae08-985a-47f8-8dfd-82a78c00418b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7c:d2:ce:11:83:41:2d:34:26:27:c9:4b:f9: 09:ea:14:e8:5b:a4:5f:88:02:e4:d1:e5:02:46:cb: 7a:c0:36:2a:87:67:f3:9d:9a:0a:1b:fa:53:b8:85: ad:15:c7:63:62:10:55:34:25:b9:b3:d9:30:57:b2: 18:22:82:a7:ae:b2:69:ff:92:73:de:62:d7:98:c2: 49:96:88:66:76:55:0c:35:29:e9:cd:02:b5:99:91: 7c:12:35:78:76:46:10:83:44:dc:73:f3:3e:2f:ec: 76:93:a9:e0:0b:5b:80:e8:6d:98:a6:ef:d3:ba:7b: ab:57:1d:cf:7d:3c:15:e5:16:19:f1:cb:16:03:1b: a7:fb:b1:7e:35:b1:ba:14:91:38:f9:e7:24:b9:8e: b6:41:f7:40:ed:92:b2:b6:3b:ed:fd:79:03:c8:a7: 5a:82:b3:bc:f6:0a:08:b7:46:28:fc:19:35:29:37: c3:94:e5:54:31:f2:15:51:34:c4:54:5f:62:2d:b6: 32:e4:3a:62:db:60:0b:76:fe:a4:09:0f:9e:0c:cc: 38:bc:92:3d:f6:9b:cb:8b:1d:98:4a:76:d2:d3:7d: e6:3d:57:7e:1f:8d:c5:7e:a0:de:15:c8:9a:71:b0: 56:07:81:d7:10:12:35:a3:05:5a:ad:2e:d4:a8:2f: 78:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:20:DF:35:F4:53:E6:C4:C0:F6:F0:7E:39:48:2B:80:BD:3F:CA:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/ec749261-21d5-3145-9684-d93e7631475d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl X509v3 Authority Key Identifier: keyid:27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer sbgp-ipAddrBlock: critical IPv4: 199.64.34.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:ae:a6:a3:67:99:0f:16:f1:18:0b:29:d4:8c:ec:d9:84:cd: cf:be:f5:96:ad:d5:30:00:f4:44:7b:ec:e0:cc:b2:78:8d:8b: 0d:16:40:9c:75:a8:c7:af:12:b3:fa:a2:c5:5c:3b:b3:72:12: c2:ca:e1:66:0c:a5:ff:63:9c:49:7f:e2:90:71:f3:fa:5d:dd: b5:35:49:cc:6b:00:57:37:55:de:75:99:35:ae:df:b1:2c:17: a4:49:ea:84:56:a0:12:d2:f8:5e:7d:2d:7a:cc:28:cb:b4:f3: cc:d1:5c:e8:b4:11:3a:4e:b1:25:cb:76:2c:b3:39:65:fd:bb: 56:1d:e6:27:73:77:ae:26:5e:66:90:38:3a:ec:64:fe:8f:a7: 1e:a0:49:3f:fe:7b:cd:94:0c:d7:80:7f:1f:8e:6c:06:1b:e9: a7:00:6f:8c:3f:8d:ed:a1:ea:dd:73:14:54:a7:9e:c4:cd:8d: fc:a1:1c:21:64:b7:5b:8f:66:80:46:f9:3c:75:aa:51:34:49: d5:b0:c2:ea:ba:09:6d:c2:5a:94:76:9b:9d:77:cf:22:92:9a: c2:77:25:89:e4:1e:1b:64:21:41:df:6f:16:16:61:e8:59:8d: 53:d1:a8:aa:11:9d:05:e1:75:e1:7e:a8:67:b4:1c:d3:e9:40: 01:0f:d1:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp3gIi8UmQq4ESxt8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIzMTA3N2QtMDU1OS00ZTdhLTljZGYtZmUwMGE1MTJh YjVjMB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk ODcxZmFlMDgtOTg1YS00N2Y4LThkZmQtODJhNzhjMDA0MThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXzSzhGDQS00JifJS/kJ6hToW6RfiALk0eUC Rst6wDYqh2fznZoKG/pTuIWtFcdjYhBVNCW5s9kwV7IYIoKnrrJp/5Jz3mLXmMJJ lohmdlUMNSnpzQK1mZF8EjV4dkYQg0Tcc/M+L+x2k6ngC1uA6G2Ypu/TunurVx3P fTwV5RYZ8csWAxun+7F+NbG6FJE4+eckuY62QfdA7ZKytjvt/XkDyKdagrO89goI t0Yo/Bk1KTfDlOVUMfIVUTTEVF9iLbYy5Dpi22ALdv6kCQ+eDMw4vJI99pvLix2Y SnbS033mPVd+H43FfqDeFciacbBWB4HXEBI1owVarS7UqC94gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMg3zX0U+bEwPbwfjlIK4C9P8okMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MjMx MDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAwYTUxMmFiNWMvZWM3NDkyNjEtMjFkNS0z MTQ1LTk2ODQtZDkzZTc2MzE0NzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODIzMTA3N2QtMDU1OS00ZTdhLTlj ZGYtZmUwMGE1MTJhYjVjLzgyMzEwNzdkLTA1NTktNGU3YS05Y2RmLWZlMDBhNTEy YWI1Yy5jcmwwHwYDVR0jBBgwFoAUJ1dCrsqoI+3BIFyf8CNlXQVl+3YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MjMxMDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAw YTUxMmFiNWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx0AiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGupqNnmQ8W8RgLKdSM7NmEzc++9Zat1TAA9ER77ODMsniNiw0WQJx1 qMevErP6osVcO7NyEsLK4WYMpf9jnEl/4pBx8/pd3bU1ScxrAFc3Vd51mTWu37Es F6RJ6oRWoBLS+F59LXrMKMu088zRXOi0ETpOsSXLdiyzOWX9u1Yd5idzd64mXmaQ ODrsZP6Ppx6gST/+e82UDNeAfx+ObAYb6acAb4w/je2h6t1zFFSnnsTNjfyhHCFk t1uPZoBG+Tx1qlE0SdWwwuq6CW3CWpR2m513zyKSmsJ3JYnkHhtkIUHfbxYWYehZ jVPRqKoRnQXhdeF+qGe0HNPpQAEP0fc= -----END CERTIFICATE-----Generated at Wed Jul 23 11:49:08 2025 by rpki-client