$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/be99669b-76e7-3a62-9151-901a36da86da.roa File: be99669b-76e7-3a62-9151-901a36da86da.roa (raw, json) Hash identifier: y54hTawqB3+CFxX95mUDQezrWXVrW+brtmK18mcVIWU= Subject key identifier: 31:09:7A:15:62:25:8C:C0:19:9F:7A:E2:06:6B:C9:2F:3C:C4:88:D8 Certificate issuer: /CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9 Certificate serial: 010D0C9F4328584A7085F4D4F23F9DBD2FC5BEC0 Authority key identifier: 90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/be99669b-76e7-3a62-9151-901a36da86da.roa Signing time: Mon 07 Jul 2025 13:01:05 +0000 ROA not before: Mon 07 Jul 2025 13:01:05 +0000 ROA not after: Sun 05 Oct 2025 13:01:05 +0000 asID: 212238 IP address blocks: 199.181.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:70:85:f4:d4:f2:3f:9d:bd:2f:c5:be:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9 Validity Not Before: Jul 7 13:01:05 2025 GMT Not After : Oct 5 13:01:05 2025 GMT Subject: CN=309c2d70-230f-4318-bf42-4f7fd67d25c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:6f:b8:90:f2:2d:dd:e1:a6:af:63:d2:82:01: aa:f2:3f:a4:02:8c:4c:3f:03:53:b8:fd:b2:41:d8: 90:9e:49:7c:5c:8d:ef:18:40:ef:84:c1:42:63:e8: 6f:46:08:9f:2a:d2:94:69:85:44:e6:5c:85:24:1d: 12:57:a0:f9:fb:1a:cf:3e:95:4f:17:21:51:a1:b6: 80:38:10:68:84:c7:55:16:57:3a:3d:14:7b:a0:31: 44:37:25:d6:09:8c:67:1e:0e:62:68:7f:88:24:d3: 8b:e4:a4:4d:1a:ca:9b:df:a0:0f:db:5c:53:6c:f7: dc:cd:7d:c8:08:9e:eb:41:c5:ff:5e:5b:90:7e:fd: 74:ed:f5:03:ee:38:d5:f2:cc:c2:5c:66:23:b0:e9: 7f:34:67:30:ed:3d:6d:e6:6e:08:6f:58:35:7a:84: c2:8e:c4:b7:df:f3:92:40:2d:ca:f9:eb:2e:76:c1: d8:b4:16:6e:39:15:b3:cb:ad:aa:cc:5d:1e:9c:db: 85:d5:bb:b0:ea:fc:58:6a:f5:64:c3:e9:d2:8c:1a: c3:7f:bf:96:e5:a1:66:d1:8f:d9:ba:87:ae:8b:09: 23:b6:fc:83:e1:cd:9d:00:6a:94:8f:73:a8:bf:31: f9:04:f4:53:af:b4:ce:a4:b0:cd:95:f2:8e:ea:d0: f5:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:09:7A:15:62:25:8C:C0:19:9F:7A:E2:06:6B:C9:2F:3C:C4:88:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/be99669b-76e7-3a62-9151-901a36da86da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl X509v3 Authority Key Identifier: keyid:90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer sbgp-ipAddrBlock: critical IPv4: 199.181.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:ad:6a:4b:22:42:39:64:71:8b:63:ef:f1:e4:fc:e2:9b:64: 3a:47:98:2e:6c:98:1f:c7:99:59:1d:35:f4:1d:43:b9:fb:e0: 4a:14:34:df:8f:7f:ba:f2:cc:82:fc:f1:da:79:0e:48:fa:c4: b8:d3:12:3d:db:5b:2b:4d:60:71:2e:a3:ce:50:37:79:7b:97: 03:08:fd:80:e9:8c:bf:c6:4b:96:1b:7d:e0:a5:91:5a:83:48: 19:34:a1:e0:84:cc:a7:34:ac:39:f4:68:02:57:11:d8:76:0a: 20:14:38:70:f5:c4:c5:d9:89:7d:bf:92:e9:7b:d1:90:4f:7a: c5:81:ce:50:dc:1c:5e:ca:a7:9e:9a:24:af:c3:91:ce:d7:3e: 91:3e:51:64:b1:14:2b:af:2f:48:26:9a:e9:31:b4:db:be:5e: 5a:5a:85:11:da:4f:cd:7b:01:1a:05:7d:70:b3:f8:dd:0c:d6: 8a:f6:ad:7f:7c:12:a4:29:12:d4:94:9a:14:e6:65:4f:7a:2e: dc:b3:6d:3e:b5:43:11:ef:05:a4:d6:a8:7b:51:86:23:c1:91: 27:f6:4e:3a:82:98:d0:79:bb:18:aa:a7:8f:f9:fc:01:1b:14: a3:01:c5:ee:70:53:c3:9c:d5:93:a2:50:e5:d1:bd:91:39:e4: 49:4d:c1:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpwhfTU8j+dvS/FvsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk0YjJlZDgtMWEyYS00YmQxLWI3MDktNzQ3OWRiN2M0 ZWE5MB4XDTI1MDcwNzEzMDEwNVoXDTI1MTAwNTEzMDEwNVowLzEtMCsGA1UEAxMk MzA5YzJkNzAtMjMwZi00MzE4LWJmNDItNGY3ZmQ2N2QyNWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnG+4kPIt3eGmr2PSggGq8j+kAoxMPwNTuP2y QdiQnkl8XI3vGEDvhMFCY+hvRgifKtKUaYVE5lyFJB0SV6D5+xrPPpVPFyFRobaA OBBohMdVFlc6PRR7oDFENyXWCYxnHg5iaH+IJNOL5KRNGsqb36AP21xTbPfczX3I CJ7rQcX/XluQfv107fUD7jjV8szCXGYjsOl/NGcw7T1t5m4Ib1g1eoTCjsS33/OS QC3K+esudsHYtBZuORWzy62qzF0enNuF1buw6vxYavVkw+nSjBrDf7+W5aFm0Y/Z uoeuiwkjtvyD4c2dAGqUj3OovzH5BPRTr7TOpLDNlfKO6tD1ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDEJehViJYzAGZ964gZryS88xIjYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OTRi MmVkOC0xYTJhLTRiZDEtYjcwOS03NDc5ZGI3YzRlYTkvYmU5OTY2OWItNzZlNy0z YTYyLTkxNTEtOTAxYTM2ZGE4NmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTk0YjJlZDgtMWEyYS00YmQxLWI3 MDktNzQ3OWRiN2M0ZWE5Lzk5NGIyZWQ4LTFhMmEtNGJkMS1iNzA5LTc0NzlkYjdj NGVhOS5jcmwwHwYDVR0jBBgwFoAUkH1OvQyn9d0T/0KVHpr0mzPpeXwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85OTRiMmVkOC0xYTJhLTRiZDEtYjcwOS03NDc5 ZGI3YzRlYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7XvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMqtaksiQjlkcYtj7/Hk/OKbZDpHmC5smB/HmVkdNfQdQ7n74EoUNN+P f7ryzIL88dp5Dkj6xLjTEj3bWytNYHEuo85QN3l7lwMI/YDpjL/GS5YbfeClkVqD SBk0oeCEzKc0rDn0aAJXEdh2CiAUOHD1xMXZiX2/kul70ZBPesWBzlDcHF7Kp56a JK/Dkc7XPpE+UWSxFCuvL0gmmukxtNu+XlpahRHaT817ARoFfXCz+N0M1or2rX98 EqQpEtSUmhTmZU96LtyzbT61QxHvBaTWqHtRhiPBkSf2TjqCmNB5uxiqp4/5/AEb FKMBxe5wU8Oc1ZOiUOXRvZE55ElNwQw= -----END CERTIFICATE-----Generated at Sun Jul 20 12:30:16 2025 by rpki-client