$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/baf35b03-5e28-3070-83c6-669f5294e617.roa File: baf35b03-5e28-3070-83c6-669f5294e617.roa (raw, json) Hash identifier: cUH+w43mPijR8tcjdep6rYcTrN4QemBPjf1EBqYbrW4= Subject key identifier: FE:86:16:D9:FA:09:3C:24:78:16:99:E9:71:85:4D:47:13:72:CE:32 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A7A4B3A26E33A57A26D280680 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/baf35b03-5e28-3070-83c6-669f5294e617.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 852 IP address blocks: 99.199.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:3a:26:e3:3a:57:a2:6d:28:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=eed4c291-d7b1-4524-9513-b0cc7ba42afe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:25:8a:c8:d5:a6:60:8c:19:0f:e9:fd:77:d9: dd:2f:0d:a5:21:fe:9b:a2:f1:fc:f7:32:bb:44:c3: be:8d:9b:90:d3:04:0e:b9:1f:84:6a:8c:cf:ea:0c: 92:d9:a5:ca:97:c1:8c:04:e2:79:5d:71:60:a3:22: 5b:9f:02:d4:dc:0c:c7:68:8b:75:72:31:92:ed:66: d7:59:b8:6b:1e:ca:00:84:a9:d4:89:76:a8:94:4c: cd:53:3c:5c:11:bb:92:e2:f1:d5:bb:1d:01:e4:6d: fd:9a:bb:da:97:03:23:c4:21:93:fb:56:35:89:cd: 1a:96:05:75:f1:55:5f:58:b0:da:e5:ce:d3:30:c8: 62:74:26:13:e3:ca:2d:9c:54:2c:8b:38:b7:30:b1: d4:48:8e:ed:dc:f3:1f:20:f6:13:e8:77:7a:89:ee: 73:ef:68:6d:6d:b0:5f:ec:11:8f:ee:ae:da:bb:f2: 9c:4f:86:f1:30:5c:1c:f5:1d:d2:98:9d:25:b0:c1: be:df:77:12:44:49:b3:a2:7c:c9:c0:e4:15:9b:0c: 0c:67:14:ca:d0:08:9a:fb:00:25:bf:c0:ac:9e:5b: 32:48:c7:2a:d2:ef:ef:c5:89:3f:02:fc:c3:fa:6b: a6:9b:21:01:93:ca:6b:27:2d:1b:18:10:e1:f8:5a: 19:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:86:16:D9:FA:09:3C:24:78:16:99:E9:71:85:4D:47:13:72:CE:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/baf35b03-5e28-3070-83c6-669f5294e617.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 99.199.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:62:f7:2a:e0:1b:c6:08:0c:9b:a1:42:60:ec:04:9a:3c:1f: 0f:8d:9f:9c:c5:68:8c:1a:85:9f:ce:4e:4f:48:31:6b:53:0a: 30:a4:01:16:09:cb:7e:b1:0d:2c:ee:0a:c8:73:0e:ca:1c:a4: 9f:57:4d:51:61:78:d7:c0:7a:ac:0a:fd:1f:4c:11:a5:8f:78: 88:97:d0:67:7c:21:93:cf:43:99:c0:b3:82:74:7f:7c:81:1a: d0:8f:86:c0:e3:7f:4f:39:ea:3c:c1:a4:7c:aa:72:ab:b7:42: c8:52:38:08:5f:87:b4:56:32:95:1b:47:0c:b1:4c:01:de:9f: fb:8c:a0:72:aa:d0:cf:52:00:2f:96:74:eb:23:6a:3b:43:46: d8:89:7f:bf:97:7c:ac:45:b1:86:cc:fe:1e:f7:12:55:62:12: f4:e3:15:43:ef:cc:c9:4c:d3:81:a5:24:95:1f:2a:22:7d:88: 52:58:05:57:09:5d:d4:75:ca:74:5c:74:e1:3c:1f:e4:27:62: 8a:b5:3e:df:93:86:52:0a:ce:85:3c:a4:b5:65:0d:2b:1a:0c: 09:28:f5:6d:b8:f3:dd:09:dc:a4:14:36:d3:01:57:a7:c3:f5: 2d:0b:de:24:c0:72:fa:8d:0e:58:48:8d:20:4b:fd:f9:4b:24: 90:db:6e:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6Szom4zpXom0oBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk ZWVkNGMyOTEtZDdiMS00NTI0LTk1MTMtYjBjYzdiYTQyYWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1iWKyNWmYIwZD+n9d9ndLw2lIf6bovH89zK7 RMO+jZuQ0wQOuR+EaozP6gyS2aXKl8GMBOJ5XXFgoyJbnwLU3AzHaIt1cjGS7WbX WbhrHsoAhKnUiXaolEzNUzxcEbuS4vHVux0B5G39mrvalwMjxCGT+1Y1ic0algV1 8VVfWLDa5c7TMMhidCYT48otnFQsizi3MLHUSI7t3PMfIPYT6Hd6ie5z72htbbBf 7BGP7q7au/KcT4bxMFwc9R3SmJ0lsMG+33cSREmzonzJwOQVmwwMZxTK0Aia+wAl v8CsnlsySMcq0u/vxYk/AvzD+mummyEBk8prJy0bGBDh+FoZ7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP6GFtn6CTwkeBaZ6XGFTUcTcs4yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYmFmMzViMDMtNWUyOC0z MDcwLTgzYzYtNjY5ZjUyOTRlNjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEY8fAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChi9yrgG8YIDJuhQmDsBJo8Hw+Nn5zFaIwahZ/OTk9IMWtTCjCkARYJ y36xDSzuCshzDsocpJ9XTVFheNfAeqwK/R9MEaWPeIiX0Gd8IZPPQ5nAs4J0f3yB GtCPhsDjf0856jzBpHyqcqu3QshSOAhfh7RWMpUbRwyxTAHen/uMoHKq0M9SAC+W dOsjajtDRtiJf7+XfKxFsYbM/h73ElViEvTjFUPvzMlM04GlJJUfKiJ9iFJYBVcJ XdR1ynRcdOE8H+QnYoq1Pt+ThlIKzoU8pLVlDSsaDAko9W24890J3KQUNtMBV6fD 9S0L3iTAcvqNDlhIjSBL/flLJJDbbi0= -----END CERTIFICATE-----Generated at Fri Jul 25 19:27:19 2025 by rpki-client