$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/68e4c63c-f3d8-3762-ba1d-a02053a06b7e.roa File: 68e4c63c-f3d8-3762-ba1d-a02053a06b7e.roa (raw, json) Hash identifier: lj/+IkJwtSjf4oOsluyVjIUqeE1PtGKo8RKLvHAlWcM= Subject key identifier: C3:18:17:41:B7:9A:77:50:C3:DA:64:9D:DF:60:EE:EA:23:90:AE:F1 Certificate issuer: /CN=99cd086f-b993-42d9-8f47-c65df74d693b Certificate serial: 010D0C9F43285849CBCF9B8B3BB7DA74C5424620 Authority key identifier: C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/68e4c63c-f3d8-3762-ba1d-a02053a06b7e.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 9009 IP address blocks: 162.254.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:9b:8b:3b:b7:da:74:c5:42:46:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99cd086f-b993-42d9-8f47-c65df74d693b Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=e0a99e29-750a-4252-a4be-a277cf2a165c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:8b:36:4e:71:67:78:ca:f1:53:7b:84:00:82: 5f:a6:2a:e1:9a:8f:2c:1a:4b:0d:25:6c:34:46:66: fd:06:0e:53:ac:0f:7e:b5:18:b4:7d:02:5a:fe:0f: 2b:0f:99:ba:84:33:fe:f8:87:d4:90:68:04:11:cb: ef:8a:6a:dd:cf:16:68:6e:ae:2c:37:69:66:f5:50: 84:2c:13:8b:d3:a7:d7:a8:ad:0a:86:5a:1b:0c:da: 4b:2b:30:46:dc:c3:97:87:a5:05:31:fa:82:9d:8a: 46:c8:27:1b:00:36:59:e5:24:12:da:54:62:62:e4: d5:f4:97:5e:10:8b:2c:fc:62:d0:27:2b:87:f8:d2: 15:e1:93:39:19:a9:c9:f9:f2:44:1a:d1:2e:53:bd: 79:c2:2d:91:03:b7:4c:fa:0c:82:c9:69:ca:d7:ee: cd:60:e5:a3:db:c9:c8:04:00:a6:34:f7:42:a6:ae: 37:db:f3:39:be:4b:59:fa:56:8d:de:b7:eb:95:91: 62:6e:6d:20:04:f8:25:9f:d4:4d:aa:71:a1:99:34: 74:f6:48:bc:03:30:c9:7a:71:83:83:b2:c8:91:13: b3:bf:d9:61:5b:b5:08:f8:29:ea:bd:20:f2:da:3a: e8:12:43:cf:3a:76:72:96:26:fd:fe:c6:91:1f:09: d4:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:18:17:41:B7:9A:77:50:C3:DA:64:9D:DF:60:EE:EA:23:90:AE:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/68e4c63c-f3d8-3762-ba1d-a02053a06b7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl X509v3 Authority Key Identifier: keyid:C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer sbgp-ipAddrBlock: critical IPv4: 162.254.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:3f:9f:48:ee:47:ec:2a:09:53:0a:bc:7e:39:5c:e6:f2:54: 3a:81:8e:cb:b7:ac:41:b3:d2:e1:8e:ce:98:49:69:71:df:e3: 47:db:15:be:ec:ef:ad:a3:79:54:f9:56:43:63:3c:39:b8:96: 2a:b4:9d:05:fe:34:c9:57:e5:42:f6:72:00:1d:d0:9e:f8:78: bd:63:69:18:f5:cb:96:2a:25:64:ff:3e:8e:c9:61:97:c7:61: 22:af:56:70:9e:5f:cd:23:77:4a:13:1b:bc:ff:42:30:5e:e5: 99:9f:da:6d:db:48:ab:29:7f:6d:90:68:95:0c:2f:29:fc:34: bd:36:76:12:a3:97:53:17:b1:d7:9c:d5:d3:a9:1a:bd:9d:2e: 05:42:3e:7d:26:57:1d:a6:e9:d5:70:99:ef:21:eb:f7:cd:46: ed:08:56:cf:e8:bd:66:08:5c:1f:bf:3a:f9:7b:89:1d:24:6e: 5d:1c:c9:b6:e9:00:4b:9a:d3:37:5b:1b:08:68:63:93:f8:7b: 61:46:8f:f3:32:da:ad:36:27:d4:83:8e:03:c6:60:c8:8e:3e: 05:ac:5e:b4:ad:88:6d:29:80:3d:92:1b:f9:8d:cd:c7:32:c8: c3:7e:4b:86:a0:00:ca:93:7a:5f:4f:22:52:d6:e3:81:3a:3e: be:f5:85:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnLz5uLO7fadMVCRiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTljZDA4NmYtYjk5My00MmQ5LThmNDctYzY1ZGY3NGQ2 OTNiMB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk ZTBhOTllMjktNzUwYS00MjUyLWE0YmUtYTI3N2NmMmExNjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIs2TnFneMrxU3uEAIJfpirhmo8sGksNJWw0 Rmb9Bg5TrA9+tRi0fQJa/g8rD5m6hDP++IfUkGgEEcvvimrdzxZobq4sN2lm9VCE LBOL06fXqK0KhlobDNpLKzBG3MOXh6UFMfqCnYpGyCcbADZZ5SQS2lRiYuTV9Jde EIss/GLQJyuH+NIV4ZM5GanJ+fJEGtEuU715wi2RA7dM+gyCyWnK1+7NYOWj28nI BACmNPdCpq432/M5vktZ+laN3rfrlZFibm0gBPgln9RNqnGhmTR09ki8AzDJenGD g7LIkROzv9lhW7UI+CnqvSDy2jroEkPPOnZylib9/saRHwnUlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMMYF0G3mndQw9pknd9g7uojkK7xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85OWNk MDg2Zi1iOTkzLTQyZDktOGY0Ny1jNjVkZjc0ZDY5M2IvNjhlNGM2M2MtZjNkOC0z NzYyLWJhMWQtYTAyMDUzYTA2YjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTljZDA4NmYtYjk5My00MmQ5LThm NDctYzY1ZGY3NGQ2OTNiLzk5Y2QwODZmLWI5OTMtNDJkOS04ZjQ3LWM2NWRmNzRk NjkzYi5jcmwwHwYDVR0jBBgwFoAUw3xudGUvRJJydjptjDZRfGn1VfcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85OWNkMDg2Zi1iOTkzLTQyZDktOGY0Ny1jNjVk Zjc0ZDY5M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAov5UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4/n0juR+wqCVMKvH45XObyVDqBjsu3rEGz0uGOzphJaXHf40fbFb7s 762jeVT5VkNjPDm4liq0nQX+NMlX5UL2cgAd0J74eL1jaRj1y5YqJWT/Po7JYZfH YSKvVnCeX80jd0oTG7z/QjBe5Zmf2m3bSKspf22QaJUMLyn8NL02dhKjl1MXsdec 1dOpGr2dLgVCPn0mVx2m6dVwme8h6/fNRu0IVs/ovWYIXB+/Ovl7iR0kbl0cybbp AEua0zdbGwhoY5P4e2FGj/My2q02J9SDjgPGYMiOPgWsXrStiG0pgD2SG/mNzccy yMN+S4agAMqTel9PIlLW44E6Pr71hZE= -----END CERTIFICATE-----Generated at Tue Jun 3 10:14:34 2025 by rpki-client