$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/02a2b201-0d63-3b68-aadd-ec4984b4846f.roa File: 02a2b201-0d63-3b68-aadd-ec4984b4846f.roa (raw, json) Hash identifier: qD26JWX6580QiavIj/pXdqdi4/cL4wobEXXLAwA/fp4= Subject key identifier: 4E:69:25:FF:64:2A:E8:CF:86:7C:50:BF:8A:E5:05:E5:E4:A5:4D:06 Certificate issuer: /CN=21dd6860-719e-46c0-8b7c-89b9e8d88da6 Certificate serial: 010D0C9F4328584A5CFB2DB35C10398957273D80 Authority key identifier: 42:79:8D:AA:08:72:7C:74:A2:5D:C9:91:AD:DB:EA:CA:2E:FC:A5:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/02a2b201-0d63-3b68-aadd-ec4984b4846f.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 12129 IP address blocks: 199.167.252.0/24 maxlen: 24 199.167.253.0/24 maxlen: 24 199.167.254.0/24 maxlen: 24 199.167.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:2d:b3:5c:10:39:89:57:27:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21dd6860-719e-46c0-8b7c-89b9e8d88da6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=64180db3-a8a1-4805-b15b-83c71b6da86f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:68:1d:0f:f8:85:0e:df:cf:90:5f:d0:18:02: 31:3b:f8:51:70:88:5f:fb:a5:fa:e1:17:f9:51:f3: 4d:fa:9f:a7:01:54:fa:7f:26:66:43:03:50:5e:bd: bf:25:e9:12:c7:fd:5c:7d:49:15:23:2c:fd:c7:bb: 64:1f:c0:db:ed:33:fb:da:bd:6f:73:8a:a3:54:8d: 2e:a5:ac:f8:cd:ef:0d:14:45:4b:a9:73:96:b8:f1: 13:54:38:4c:0a:4e:13:53:02:18:b6:28:39:2d:66: 48:51:c0:9f:20:06:51:e7:8a:14:2d:1a:00:e8:c7: c8:06:8a:5b:47:83:f2:51:b9:c0:44:f1:74:73:4f: 18:50:0d:0b:3a:63:62:45:d3:30:99:24:5c:69:f7: b5:63:80:6a:0f:77:2d:16:ad:e9:81:de:95:41:ce: 0f:30:27:16:ea:b3:b0:e9:6f:f2:14:be:0c:f2:00: 79:e3:8f:0c:b0:5f:c5:dc:a4:f1:95:a7:d5:ba:20: 9a:6f:7b:67:89:4d:16:1c:c0:38:61:9e:08:a5:f3: f0:8e:0b:bd:74:4d:a0:3e:c6:ac:d0:35:33:50:4f: bd:58:20:b9:1a:c7:b1:49:de:53:16:4a:59:f2:75: a1:92:74:ab:21:27:5c:33:0e:d3:8c:1e:0b:18:20: cc:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:69:25:FF:64:2A:E8:CF:86:7C:50:BF:8A:E5:05:E5:E4:A5:4D:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/02a2b201-0d63-3b68-aadd-ec4984b4846f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.crl X509v3 Authority Key Identifier: keyid:42:79:8D:AA:08:72:7C:74:A2:5D:C9:91:AD:DB:EA:CA:2E:FC:A5:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer sbgp-ipAddrBlock: critical IPv4: 199.167.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:60:65:c9:10:d1:f5:e2:e1:d5:7a:5a:66:93:e9:d1:ae:15: 32:61:bd:fb:c4:ab:37:dc:99:f5:c3:16:31:95:89:63:4b:68: 17:18:c9:f4:4d:62:8f:8a:bd:94:48:41:f5:6c:b8:a6:29:89: 10:82:65:09:53:12:61:dc:cd:f0:ee:44:7e:54:b0:37:aa:20: df:7e:ba:88:85:3e:ec:54:a8:19:df:86:f9:af:19:30:09:f3: 49:2a:8b:ba:eb:a5:82:b0:62:10:79:72:dd:69:d7:37:3f:23: f9:dc:1a:b8:a9:03:75:e7:e8:dc:7f:74:64:5a:4a:21:30:d2: eb:90:d5:bf:98:b4:69:1f:19:85:0b:7e:fb:c4:71:6f:87:03: 59:2f:bd:21:16:9d:99:26:9e:55:9c:74:bd:71:ef:b0:59:e5: f6:6a:1b:1b:86:ef:7f:4d:27:a1:69:c1:8b:8c:3d:bd:6c:6d: 88:da:18:22:ae:e6:94:a7:bf:da:c7:4a:e0:b3:85:ac:00:73: dc:57:da:b7:04:e8:21:88:dc:6e:30:ae:65:c8:58:14:f9:7d: 36:db:6d:6e:0d:ba:6e:2a:46:93:8d:94:f2:70:e7:31:17:37: f9:a3:2b:96:df:55:74:bc:6f:1b:1c:d7:64:06:7f:00:31:a5: b0:aa:cc:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+y2zXBA5iVcnPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFkZDY4NjAtNzE5ZS00NmMwLThiN2MtODliOWU4ZDg4 ZGE2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk NjQxODBkYjMtYThhMS00ODA1LWIxNWItODNjNzFiNmRhODZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmgdD/iFDt/PkF/QGAIxO/hRcIhf+6X64Rf5 UfNN+p+nAVT6fyZmQwNQXr2/JekSx/1cfUkVIyz9x7tkH8Db7TP72r1vc4qjVI0u paz4ze8NFEVLqXOWuPETVDhMCk4TUwIYtig5LWZIUcCfIAZR54oULRoA6MfIBopb R4PyUbnARPF0c08YUA0LOmNiRdMwmSRcafe1Y4BqD3ctFq3pgd6VQc4PMCcW6rOw 6W/yFL4M8gB5448MsF/F3KTxlafVuiCab3tniU0WHMA4YZ4IpfPwjgu9dE2gPsas 0DUzUE+9WCC5GsexSd5TFkpZ8nWhknSrISdcMw7TjB4LGCDMIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE5pJf9kKujPhnxQv4rlBeXkpU0GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMWRk Njg2MC03MTllLTQ2YzAtOGI3Yy04OWI5ZThkODhkYTYvMDJhMmIyMDEtMGQ2My0z YjY4LWFhZGQtZWM0OTg0YjQ4NDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjFkZDY4NjAtNzE5ZS00NmMwLThi N2MtODliOWU4ZDg4ZGE2LzIxZGQ2ODYwLTcxOWUtNDZjMC04YjdjLTg5YjllOGQ4 OGRhNi5jcmwwHwYDVR0jBBgwFoAUQnmNqghyfHSiXcmRrdvqyi78pSgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMWRkNjg2MC03MTllLTQ2YzAtOGI3Yy04OWI5 ZThkODhkYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx6f8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL9gZckQ0fXi4dV6WmaT6dGuFTJhvfvEqzfcmfXDFjGViWNLaBcYyfRN Yo+KvZRIQfVsuKYpiRCCZQlTEmHczfDuRH5UsDeqIN9+uoiFPuxUqBnfhvmvGTAJ 80kqi7rrpYKwYhB5ct1p1zc/I/ncGripA3Xn6Nx/dGRaSiEw0uuQ1b+YtGkfGYUL fvvEcW+HA1kvvSEWnZkmnlWcdL1x77BZ5fZqGxuG739NJ6FpwYuMPb1sbYjaGCKu 5pSnv9rHSuCzhawAc9xX2rcE6CGI3G4wrmXIWBT5fTbbbW4Num4qRpONlPJw5zEX N/mjK5bfVXS8bxsc12QGfwAxpbCqzA4= -----END CERTIFICATE-----Generated at Thu Jul 10 04:01:48 2025 by rpki-client