$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/1efaca2e-ecb7-3af2-a680-aa4cd24df633.roa File: 1efaca2e-ecb7-3af2-a680-aa4cd24df633.roa (raw, json) Hash identifier: qL33nC+SyLbBX3vSzOxYYhbWPiRZ+cg8D9G23OyoBA0= Subject key identifier: 90:A5:7A:85:B8:1F:25:E2:C4:98:FB:7A:66:C4:F9:AB:41:42:74:65 Certificate issuer: /CN=b985122e-f2ff-4349-8e7b-d604ee2577f1 Certificate serial: 010D0C9F43285849FF7515F3E11C3FA0D9520680 Authority key identifier: 32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/1efaca2e-ecb7-3af2-a680-aa4cd24df633.roa Signing time: Wed 28 May 2025 01:00:49 +0000 ROA not before: Wed 28 May 2025 01:00:49 +0000 ROA not after: Tue 26 Aug 2025 01:00:49 +0000 asID: 11052 IP address blocks: 199.249.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ff:75:15:f3:e1:1c:3f:a0:d9:52:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b985122e-f2ff-4349-8e7b-d604ee2577f1 Validity Not Before: May 28 01:00:49 2025 GMT Not After : Aug 26 01:00:49 2025 GMT Subject: CN=8d1c6264-76b6-4df0-86f3-00e65bafad0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:7f:85:f2:bc:28:eb:3b:28:fd:7f:05:f8:fa: 72:79:8a:d4:69:d9:0c:26:98:e6:cc:d4:de:3b:21: 62:fb:51:01:73:f1:2f:89:65:04:d7:c1:82:ee:df: b6:d6:37:7f:f3:d7:ec:e3:9c:8e:ec:e5:92:0e:d9: 7d:47:98:5a:cb:c5:61:79:02:c3:55:66:1f:b9:06: 60:57:62:c3:45:ed:57:5a:d3:3c:08:9a:03:be:28: 31:e6:6b:6a:46:ae:d0:49:02:b7:d0:d0:3c:66:fd: 46:4d:a6:42:4e:19:f9:a7:a9:86:2b:3d:2f:14:2c: 4f:80:4d:e7:15:55:b4:40:d6:f9:ee:0f:3d:ac:3f: 9e:4b:7f:0a:a8:f9:16:65:92:93:c6:5f:1c:7e:93: 6f:9c:0c:88:2e:49:83:a6:cc:a4:42:bf:28:d6:c2: 85:95:5a:17:d2:2b:64:a0:9d:3e:2d:4a:4d:d3:e1: 56:6b:43:62:4c:92:f7:02:c0:ac:ff:48:ae:39:81: 82:33:34:69:2f:d9:c5:a9:36:19:4d:02:64:8c:dc: 55:d4:f7:bd:93:63:e5:9e:22:b5:09:87:b1:0e:cf: c0:cd:bc:c2:27:8c:60:49:84:bd:e5:ef:24:71:ca: 44:4d:7c:ac:7e:10:46:d1:72:ef:64:6e:d1:56:44: 66:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:A5:7A:85:B8:1F:25:E2:C4:98:FB:7A:66:C4:F9:AB:41:42:74:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/1efaca2e-ecb7-3af2-a680-aa4cd24df633.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl X509v3 Authority Key Identifier: keyid:32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer sbgp-ipAddrBlock: critical IPv4: 199.249.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:f6:8e:4c:71:49:04:8d:e5:8e:f1:3d:e6:ea:82:11:1e:6b: d5:48:3f:79:15:8e:fd:1b:a8:ad:9b:21:4b:82:f3:e8:59:0f: f6:78:7a:25:0f:f3:52:33:f0:fd:fe:77:83:a7:76:46:19:50: 96:d2:95:c8:2a:34:f1:a9:9e:fb:4f:e6:78:b0:1b:10:0b:aa: 33:08:be:ae:40:8c:fd:e2:ef:a3:b0:fa:2f:3e:d1:05:51:c3: 02:43:e2:9a:b2:f1:8a:a6:cd:10:7a:d1:5c:64:33:5d:9c:ce: b4:50:6a:80:f5:30:fa:28:c2:06:db:96:85:73:53:be:66:25: f9:95:1f:c9:fa:4b:97:6c:42:6a:d2:19:91:87:8b:a2:48:84: 6e:bb:15:88:a8:3e:86:a5:56:10:34:ef:29:f1:e8:ee:01:5e: 38:9c:b4:2e:56:bb:56:8b:7d:41:a5:1b:60:da:13:f5:5c:8f: 01:d2:27:af:74:8c:8b:98:eb:71:f9:66:86:dd:94:15:43:36: d7:7d:41:aa:36:b7:5c:e4:e5:56:52:64:63:bd:af:b3:31:03: d1:d4:31:90:56:41:5f:2c:4c:6a:c5:8a:c4:f7:65:35:75:25: 37:00:a1:27:a4:a2:2a:3e:1d:29:41:95:0b:7b:01:d2:54:73: 6c:17:04:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn/dRXz4Rw/oNlSBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk4NTEyMmUtZjJmZi00MzQ5LThlN2ItZDYwNGVlMjU3 N2YxMB4XDTI1MDUyODAxMDA0OVoXDTI1MDgyNjAxMDA0OVowLzEtMCsGA1UEAxMk OGQxYzYyNjQtNzZiNi00ZGYwLTg2ZjMtMDBlNjViYWZhZDBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjn+F8rwo6zso/X8F+PpyeYrUadkMJpjmzNTe OyFi+1EBc/EviWUE18GC7t+21jd/89fs45yO7OWSDtl9R5hay8VheQLDVWYfuQZg V2LDRe1XWtM8CJoDvigx5mtqRq7QSQK30NA8Zv1GTaZCThn5p6mGKz0vFCxPgE3n FVW0QNb57g89rD+eS38KqPkWZZKTxl8cfpNvnAyILkmDpsykQr8o1sKFlVoX0itk oJ0+LUpN0+FWa0NiTJL3AsCs/0iuOYGCMzRpL9nFqTYZTQJkjNxV1Pe9k2PlniK1 CYexDs/AzbzCJ4xgSYS95e8kccpETXysfhBG0XLvZG7RVkRmIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJCleoW4HyXixJj7embE+atBQnRlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iOTg1 MTIyZS1mMmZmLTQzNDktOGU3Yi1kNjA0ZWUyNTc3ZjEvMWVmYWNhMmUtZWNiNy0z YWYyLWE2ODAtYWE0Y2QyNGRmNjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjk4NTEyMmUtZjJmZi00MzQ5LThl N2ItZDYwNGVlMjU3N2YxL2I5ODUxMjJlLWYyZmYtNDM0OS04ZTdiLWQ2MDRlZTI1 NzdmMS5jcmwwHwYDVR0jBBgwFoAUMkPnPPcbBd82CkZOMRZRS4dhJtswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iOTg1MTIyZS1mMmZmLTQzNDktOGU3Yi1kNjA0 ZWUyNTc3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/nvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/2jkxxSQSN5Y7xPebqghEea9VIP3kVjv0bqK2bIUuC8+hZD/Z4eiUP 81Iz8P3+d4OndkYZUJbSlcgqNPGpnvtP5niwGxALqjMIvq5AjP3i76Ow+i8+0QVR wwJD4pqy8YqmzRB60VxkM12czrRQaoD1MPoowgbbloVzU75mJfmVH8n6S5dsQmrS GZGHi6JIhG67FYioPoalVhA07ynx6O4BXjictC5Wu1aLfUGlG2DaE/VcjwHSJ690 jIuY63H5ZobdlBVDNtd9Qao2t1zk5VZSZGO9r7MxA9HUMZBWQV8sTGrFisT3ZTV1 JTcAoSekoio+HSlBlQt7AdJUc2wXBHQ= -----END CERTIFICATE-----Generated at Sat Jun 7 13:51:15 2025 by rpki-client