$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/c43498db-1a52-317c-a01f-d3f059ca3df1.roa File: c43498db-1a52-317c-a01f-d3f059ca3df1.roa (raw, json) Hash identifier: lfiNRgDCUXNeqsnsivPFzwIBCHz4lMXn7OJ1SuePgRk= Subject key identifier: CB:BC:6C:BD:7D:10:06:A0:FF:9F:9B:A0:99:4E:5A:09:26:BA:88:87 Certificate issuer: /CN=ccb6a98a-09f4-4e29-9406-bc0cb1661dfc Certificate serial: 010D0C9F4328584A5E60687BB5437813B9C9CA80 Authority key identifier: 58:DB:8B:8A:D7:D2:BF:71:D8:C2:07:5C:12:9D:84:4E:DB:90:6D:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/c43498db-1a52-317c-a01f-d3f059ca3df1.roa Signing time: Tue 01 Jul 2025 01:00:50 +0000 ROA not before: Tue 01 Jul 2025 01:00:50 +0000 ROA not after: Mon 29 Sep 2025 01:00:50 +0000 asID: 20473 IP address blocks: 199.255.148.0/24 maxlen: 24 2602:fd1e::/36 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:60:68:7b:b5:43:78:13:b9:c9:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccb6a98a-09f4-4e29-9406-bc0cb1661dfc Validity Not Before: Jul 1 01:00:50 2025 GMT Not After : Sep 29 01:00:50 2025 GMT Subject: CN=c3f9d5bd-91e8-446b-925d-082995090e62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b6:da:35:b7:ed:3d:40:2c:ef:c5:e2:a6:7d: 2a:ff:7d:79:98:ec:c6:84:27:b7:7d:f4:46:88:c7: 07:94:83:91:6c:42:49:f8:80:0b:ca:c1:6f:c4:3a: d4:e9:4a:9d:58:8a:45:e2:f6:07:c8:f7:00:ed:1b: aa:2b:e4:7a:05:3c:c5:52:90:f8:9f:16:a4:cc:38: 55:3c:11:e3:15:01:a1:5e:21:72:7f:91:87:e0:ae: fa:b4:f0:79:77:4f:18:8a:72:9a:bd:5e:69:95:17: f7:9d:56:48:a3:21:76:c9:81:dc:11:fd:da:74:93: e2:e0:35:fe:3c:55:15:7e:07:dc:e3:39:13:02:72: 97:1d:da:5f:ec:54:bd:7c:f4:07:7b:19:0e:87:44: ae:62:01:88:57:df:c8:9f:1e:57:12:5d:2e:20:6f: aa:f4:f4:4b:fc:23:3a:29:26:83:23:fd:58:2e:44: 5e:ec:82:e4:56:ec:c4:d5:40:5c:79:05:24:83:a0: 7b:70:04:4f:10:b7:c7:9e:2a:73:ed:91:2b:ad:b0: 4d:90:01:13:11:34:55:65:2d:89:09:79:da:59:74: cf:88:69:9b:a0:40:be:40:d6:d6:ef:04:c0:14:8a: 7d:e3:c3:06:6c:ea:95:43:f6:53:12:c0:ac:65:cc: be:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:BC:6C:BD:7D:10:06:A0:FF:9F:9B:A0:99:4E:5A:09:26:BA:88:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/c43498db-1a52-317c-a01f-d3f059ca3df1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.crl X509v3 Authority Key Identifier: keyid:58:DB:8B:8A:D7:D2:BF:71:D8:C2:07:5C:12:9D:84:4E:DB:90:6D:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.cer sbgp-ipAddrBlock: critical IPv4: 199.255.148.0/24 IPv6: 2602:fd1e::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:19:fe:60:38:ca:7e:53:0d:fa:68:04:de:e8:90:32:19:44: 15:76:5b:46:31:a9:c2:39:e1:a8:1c:40:75:f3:f4:91:72:0f: 7c:03:78:e5:79:81:a2:1a:b6:98:11:f8:8a:57:54:21:e2:dd: fa:3b:86:2b:94:1c:29:c5:1f:e7:e7:96:f8:cf:c1:eb:42:8d: 92:6d:2e:4f:9b:af:17:df:f8:93:e8:b8:10:8c:c0:01:d5:36: fd:de:98:25:8e:32:02:da:5d:96:6f:06:c8:3e:98:6a:44:ad: 95:01:af:ae:09:4d:7c:16:85:02:56:c2:e3:38:c4:2f:01:0b: 9e:43:84:74:4f:eb:28:cd:58:7c:c8:2e:9c:55:55:eb:d6:56: d9:d0:7d:2e:82:20:7f:76:ac:4c:99:2c:2b:f4:8e:41:c5:54: 77:85:15:85:4d:96:b1:9d:f8:cd:da:ee:fe:11:3a:84:f0:d1: 43:a1:51:06:7e:1e:7f:33:9f:eb:a1:2e:a8:50:a8:77:60:bd: ce:77:b8:be:09:a8:2a:b6:08:24:5b:99:74:4a:12:8e:94:6c: 03:83:2f:d3:4e:0d:71:06:5f:b9:54:64:46:d6:6c:b9:f1:63: 4a:e2:a3:1b:dd:d8:ca:31:19:bc:74:e9:dc:2b:3e:6f:f1:a0: 51:5c:e6:de -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEpeYGh7tUN4E7nJyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2NiNmE5OGEtMDlmNC00ZTI5LTk0MDYtYmMwY2IxNjYx ZGZjMB4XDTI1MDcwMTAxMDA1MFoXDTI1MDkyOTAxMDA1MFowLzEtMCsGA1UEAxMk YzNmOWQ1YmQtOTFlOC00NDZiLTkyNWQtMDgyOTk1MDkwZTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLbaNbftPUAs78Xipn0q/315mOzGhCe3ffRG iMcHlIORbEJJ+IALysFvxDrU6UqdWIpF4vYHyPcA7RuqK+R6BTzFUpD4nxakzDhV PBHjFQGhXiFyf5GH4K76tPB5d08YinKavV5plRf3nVZIoyF2yYHcEf3adJPi4DX+ PFUVfgfc4zkTAnKXHdpf7FS9fPQHexkOh0SuYgGIV9/Inx5XEl0uIG+q9PRL/CM6 KSaDI/1YLkRe7ILkVuzE1UBceQUkg6B7cARPELfHnipz7ZErrbBNkAETETRVZS2J CXnaWXTPiGmboEC+QNbW7wTAFIp948MGbOqVQ/ZTEsCsZcy+RQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFMu8bL19EAag/5+boJlOWgkmuoiHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jY2I2 YTk4YS0wOWY0LTRlMjktOTQwNi1iYzBjYjE2NjFkZmMvYzQzNDk4ZGItMWE1Mi0z MTdjLWEwMWYtZDNmMDU5Y2EzZGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2NiNmE5OGEtMDlmNC00ZTI5LTk0 MDYtYmMwY2IxNjYxZGZjL2NjYjZhOThhLTA5ZjQtNGUyOS05NDA2LWJjMGNiMTY2 MWRmYy5jcmwwHwYDVR0jBBgwFoAUWNuLitfSv3HYwgdcEp2ETtuQbc4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jY2I2YTk4YS0wOWY0LTRlMjktOTQwNi1iYzBj YjE2NjFkZmMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAx/+UMA4E AgACMAgDBgQmAv0eADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA+Gf5gOMp+Uw36aATe6JAyGUQVdltGManC OeGoHEB18/SRcg98A3jleYGiGraYEfiKV1Qh4t36O4YrlBwpxR/n55b4z8HrQo2S bS5Pm68X3/iT6LgQjMAB1Tb93pgljjIC2l2WbwbIPphqRK2VAa+uCU18FoUCVsLj OMQvAQueQ4R0T+sozVh8yC6cVVXr1lbZ0H0ugiB/dqxMmSwr9I5BxVR3hRWFTZax nfjN2u7+ETqE8NFDoVEGfh5/M5/roS6oUKh3YL3Od7i+CagqtggkW5l0ShKOlGwD gy/TTg1xBl+5VGRG1my58WNK4qMb3djKMRm8dOncKz5v8aBRXObe -----END CERTIFICATE-----Generated at Thu Jul 10 06:25:27 2025 by rpki-client