$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/5d4ad354-dd38-3033-bd7d-0f275bf0baf5.roa File: 5d4ad354-dd38-3033-bd7d-0f275bf0baf5.roa (raw, json) Hash identifier: 0NVOEP9+VjvGZWwYq3pZWdFF4trbPhf5t29+5q/ILHk= Subject key identifier: 71:22:11:5F:1C:B7:DB:9B:30:18:91:9F:39:E0:D4:2B:EE:B3:19:F4 Certificate issuer: /CN=99cd086f-b993-42d9-8f47-c65df74d693b Certificate serial: 010D0C9F43285849CBCF9B9EC6BE59CFF51DE600 Authority key identifier: C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/5d4ad354-dd38-3033-bd7d-0f275bf0baf5.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 29838 IP address blocks: 162.254.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:9b:9e:c6:be:59:cf:f5:1d:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99cd086f-b993-42d9-8f47-c65df74d693b Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=97d6376e-4f32-463f-bd97-3e0ddb47cc41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c4:82:8e:c1:a7:b7:c2:91:40:8e:47:d6:81: 5c:ca:e6:5e:68:b8:05:a2:b6:b7:a4:55:03:4c:16: 89:71:34:c9:e9:9e:95:94:26:cb:1c:f3:7d:be:1c: fa:82:7a:5a:77:d7:5b:40:fa:d8:0b:4b:d2:a2:4d: 2e:72:6e:f7:41:64:26:b5:8e:a7:54:b5:c0:4d:88: 4f:3b:1c:09:70:42:12:7f:d8:04:94:db:bb:f9:3f: ed:0d:13:26:97:66:36:c6:40:61:bd:6b:c6:41:5c: fc:44:c7:7e:5e:b7:4a:70:8d:07:c1:3b:1e:e5:bc: c2:27:79:40:12:41:c5:0d:6f:7d:d2:2d:a2:d1:6b: 51:d9:9f:a6:e2:b7:af:30:d8:fa:7f:6b:9b:8d:84: 4b:f0:81:2e:04:8b:a9:c8:dc:cc:7f:4d:30:3b:06: 82:96:fa:b0:54:09:54:9f:d7:0b:1c:2a:30:cc:f3: b4:26:8b:bb:e2:49:30:ff:b0:6e:37:d9:eb:3b:6e: 36:1b:bc:5d:9d:5b:94:dd:b8:2c:77:cf:cf:a5:08: ea:1a:9a:36:9d:5a:b5:fb:32:f1:f5:70:5d:ee:2f: 92:90:4f:cf:05:4b:2b:49:4e:a8:73:94:c5:a0:05: 91:c3:c7:2f:2a:58:e9:02:0c:f0:e6:51:cc:cf:56: c1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:22:11:5F:1C:B7:DB:9B:30:18:91:9F:39:E0:D4:2B:EE:B3:19:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/5d4ad354-dd38-3033-bd7d-0f275bf0baf5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl X509v3 Authority Key Identifier: keyid:C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer sbgp-ipAddrBlock: critical IPv4: 162.254.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:11:9f:34:28:c3:d2:fa:ae:0a:b2:ed:46:63:f2:56:9b:36: 19:95:00:58:3e:dc:02:bb:b8:fc:bd:85:85:74:ac:60:e2:cc: cc:03:06:87:a7:1b:8d:f9:7b:d4:c2:61:1d:8e:13:c1:9c:1a: 74:34:0f:a8:f4:69:eb:7a:e9:09:af:b4:4c:a8:4b:a2:88:24: 86:cd:76:2f:60:10:da:72:7a:d8:f1:37:75:15:dd:e8:e9:78: 0e:e8:3d:4b:e0:b3:97:6c:c8:e1:b2:18:5f:76:b1:c2:3b:f5: 17:16:dd:f6:5b:9d:53:07:7f:4c:b9:09:b0:82:c9:05:59:e9: ad:84:17:98:69:e0:22:9e:fc:bb:f9:a8:0d:8f:cf:88:ae:0d: df:13:f5:99:65:19:12:76:18:d9:3a:9c:e8:7c:db:80:eb:6d: b0:99:52:62:ed:8d:a3:3b:46:db:96:5c:1b:87:53:1e:d8:20: 32:8d:35:08:c5:c7:db:f0:6e:f0:71:08:be:8c:f6:d5:d0:6d: 9e:76:2f:6d:ef:03:10:bc:18:25:8b:74:c0:df:70:c0:4e:df: b2:62:cf:6b:cf:88:f1:0f:58:62:6e:17:4a:49:32:35:62:27: fd:77:ea:04:08:cf:9b:e4:2c:81:35:4e:91:77:b3:b5:d4:ed: cd:2f:4a:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnLz5uexr5Zz/Ud5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTljZDA4NmYtYjk5My00MmQ5LThmNDctYzY1ZGY3NGQ2 OTNiMB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk OTdkNjM3NmUtNGYzMi00NjNmLWJkOTctM2UwZGRiNDdjYzQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsSCjsGnt8KRQI5H1oFcyuZeaLgFora3pFUD TBaJcTTJ6Z6VlCbLHPN9vhz6gnpad9dbQPrYC0vSok0ucm73QWQmtY6nVLXATYhP OxwJcEISf9gElNu7+T/tDRMml2Y2xkBhvWvGQVz8RMd+XrdKcI0HwTse5bzCJ3lA EkHFDW990i2i0WtR2Z+m4revMNj6f2ubjYRL8IEuBIupyNzMf00wOwaClvqwVAlU n9cLHCowzPO0Jou74kkw/7BuN9nrO242G7xdnVuU3bgsd8/PpQjqGpo2nVq1+zLx 9XBd7i+SkE/PBUsrSU6oc5TFoAWRw8cvKljpAgzw5lHMz1bBAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHEiEV8ct9ubMBiRnzng1Cvusxn0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85OWNk MDg2Zi1iOTkzLTQyZDktOGY0Ny1jNjVkZjc0ZDY5M2IvNWQ0YWQzNTQtZGQzOC0z MDMzLWJkN2QtMGYyNzViZjBiYWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTljZDA4NmYtYjk5My00MmQ5LThm NDctYzY1ZGY3NGQ2OTNiLzk5Y2QwODZmLWI5OTMtNDJkOS04ZjQ3LWM2NWRmNzRk NjkzYi5jcmwwHwYDVR0jBBgwFoAUw3xudGUvRJJydjptjDZRfGn1VfcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85OWNkMDg2Zi1iOTkzLTQyZDktOGY0Ny1jNjVk Zjc0ZDY5M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAov5VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFERnzQow9L6rgqy7UZj8labNhmVAFg+3AK7uPy9hYV0rGDizMwDBoen G435e9TCYR2OE8GcGnQ0D6j0aet66QmvtEyoS6KIJIbNdi9gENpyetjxN3UV3ejp eA7oPUvgs5dsyOGyGF92scI79RcW3fZbnVMHf0y5CbCCyQVZ6a2EF5hp4CKe/Lv5 qA2Pz4iuDd8T9ZllGRJ2GNk6nOh824DrbbCZUmLtjaM7RtuWXBuHUx7YIDKNNQjF x9vwbvBxCL6M9tXQbZ52L23vAxC8GCWLdMDfcMBO37Jiz2vPiPEPWGJuF0pJMjVi J/136gQIz5vkLIE1TpF3s7XU7c0vShs= -----END CERTIFICATE-----Generated at Fri Jun 6 15:56:32 2025 by rpki-client