$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/bb5807ed-8deb-3938-bc64-5cc7806d002d.roa File: bb5807ed-8deb-3938-bc64-5cc7806d002d.roa (raw, json) Hash identifier: GKC8O8RsL+JZ9aQh6TwGYkes8DWJMuzOtf8E0tStF7s= Subject key identifier: 02:7E:79:6B:9D:E7:B2:D0:9B:17:77:D4:1C:7A:CE:3B:4E:CF:7F:0B Certificate issuer: /CN=b985122e-f2ff-4349-8e7b-d604ee2577f1 Certificate serial: 010D0C9F43285849FF75164A18E35BAFCA383680 Authority key identifier: 32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/bb5807ed-8deb-3938-bc64-5cc7806d002d.roa Signing time: Wed 28 May 2025 01:00:49 +0000 ROA not before: Wed 28 May 2025 01:00:49 +0000 ROA not after: Tue 26 Aug 2025 01:00:49 +0000 asID: 3356 IP address blocks: 199.249.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ff:75:16:4a:18:e3:5b:af:ca:38:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b985122e-f2ff-4349-8e7b-d604ee2577f1 Validity Not Before: May 28 01:00:49 2025 GMT Not After : Aug 26 01:00:49 2025 GMT Subject: CN=c0217acf-b1e8-4909-a340-e74a5f307acc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:be:06:2f:24:a5:b0:69:ce:14:4e:af:1b:a7: 52:d7:b1:41:ea:c3:97:c4:99:f4:a2:04:39:75:28: 77:25:fd:bd:81:a4:9c:3a:b5:0a:e0:8b:38:36:c5: be:e9:0d:37:92:82:b9:62:c3:65:a3:bc:b6:d4:9f: 2d:0b:da:15:c0:b5:d4:31:ea:60:c9:de:50:b3:68: ff:8f:b7:b4:1d:bf:55:ac:1b:63:5b:de:5f:4a:ac: de:08:a7:3a:d9:2d:6d:cd:48:f9:42:2f:c2:dc:f8: 1d:7d:f9:b9:97:47:4f:51:bd:19:5a:97:bc:14:27: 2c:46:c9:ea:6a:2e:e9:29:f2:ab:c2:67:d5:f0:00: e7:9d:fd:c5:74:3e:48:4d:d5:22:71:c7:20:8b:0d: 06:5d:60:68:a5:64:00:87:10:35:c5:97:9f:c0:d8: 7d:9e:38:eb:a2:a7:72:6b:d2:7c:b6:32:27:55:59: bf:b5:76:17:c2:27:84:2d:68:63:03:61:ae:ba:66: 59:a0:6d:86:41:1e:04:69:6f:4f:73:51:15:f0:a7: d0:8d:fe:1e:06:28:09:29:b3:60:f7:c3:26:15:8a: 1e:59:d2:3b:2d:b1:61:eb:e5:e0:a2:5e:25:94:35: 6d:40:c5:32:b1:c1:f8:47:58:51:5f:16:57:fa:95: f9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:7E:79:6B:9D:E7:B2:D0:9B:17:77:D4:1C:7A:CE:3B:4E:CF:7F:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/bb5807ed-8deb-3938-bc64-5cc7806d002d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl X509v3 Authority Key Identifier: keyid:32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer sbgp-ipAddrBlock: critical IPv4: 199.249.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:3a:c0:d1:68:31:48:2c:25:ba:aa:d4:5a:b0:dc:a9:a8:89: 12:ca:1a:5b:4a:d6:03:d1:be:e1:86:3e:fa:f0:f9:fd:1e:63: 90:bb:50:7f:6a:a5:10:ce:bb:df:8c:14:fe:1a:83:a0:1c:21: 04:42:ea:7e:d9:e3:ee:5f:de:90:d2:17:13:4c:7c:7c:a3:56: 35:6f:30:f3:c3:d9:a1:f3:b3:31:05:b1:bb:8c:8f:02:e7:c3: 48:b5:39:37:8c:26:09:e8:e6:ea:72:51:3e:a1:17:05:47:87: 09:59:72:d4:25:e6:59:4f:a7:82:34:59:f6:81:dd:1c:39:fb: e9:c1:eb:a3:2f:d3:6a:af:97:ba:b6:89:49:ab:d3:d7:35:b9: 83:94:ae:95:83:ce:35:1a:65:82:9b:87:88:14:b1:ee:64:81: 4b:94:e7:82:77:ef:f2:48:b8:84:aa:a7:35:b1:5b:06:13:e5: 49:ec:8a:42:42:09:e7:d6:8e:dc:c1:fb:c3:70:90:53:e1:da: fc:6c:48:3c:77:c1:7e:da:5c:61:77:0a:15:80:ee:bb:38:00: 79:c4:ea:db:02:be:44:02:c7:e7:ff:25:15:81:5d:8f:73:e8: 1a:da:19:71:8c:7b:3a:cd:08:38:82:eb:91:01:31:b3:0b:b5: c0:47:99:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn/dRZKGONbr8o4NoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk4NTEyMmUtZjJmZi00MzQ5LThlN2ItZDYwNGVlMjU3 N2YxMB4XDTI1MDUyODAxMDA0OVoXDTI1MDgyNjAxMDA0OVowLzEtMCsGA1UEAxMk YzAyMTdhY2YtYjFlOC00OTA5LWEzNDAtZTc0YTVmMzA3YWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmb4GLySlsGnOFE6vG6dS17FB6sOXxJn0ogQ5 dSh3Jf29gaScOrUK4Is4NsW+6Q03koK5YsNlo7y21J8tC9oVwLXUMepgyd5Qs2j/ j7e0Hb9VrBtjW95fSqzeCKc62S1tzUj5Qi/C3Pgdffm5l0dPUb0ZWpe8FCcsRsnq ai7pKfKrwmfV8ADnnf3FdD5ITdUicccgiw0GXWBopWQAhxA1xZefwNh9njjroqdy a9J8tjInVVm/tXYXwieELWhjA2GuumZZoG2GQR4EaW9Pc1EV8KfQjf4eBigJKbNg 98MmFYoeWdI7LbFh6+Xgol4llDVtQMUyscH4R1hRXxZX+pX5LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAJ+eWud57LQmxd31Bx6zjtOz38LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iOTg1 MTIyZS1mMmZmLTQzNDktOGU3Yi1kNjA0ZWUyNTc3ZjEvYmI1ODA3ZWQtOGRlYi0z OTM4LWJjNjQtNWNjNzgwNmQwMDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjk4NTEyMmUtZjJmZi00MzQ5LThl N2ItZDYwNGVlMjU3N2YxL2I5ODUxMjJlLWYyZmYtNDM0OS04ZTdiLWQ2MDRlZTI1 NzdmMS5jcmwwHwYDVR0jBBgwFoAUMkPnPPcbBd82CkZOMRZRS4dhJtswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iOTg1MTIyZS1mMmZmLTQzNDktOGU3Yi1kNjA0 ZWUyNTc3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/nuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQ6wNFoMUgsJbqq1Fqw3KmoiRLKGltK1gPRvuGGPvrw+f0eY5C7UH9q pRDOu9+MFP4ag6AcIQRC6n7Z4+5f3pDSFxNMfHyjVjVvMPPD2aHzszEFsbuMjwLn w0i1OTeMJgno5upyUT6hFwVHhwlZctQl5llPp4I0WfaB3Rw5++nB66Mv02qvl7q2 iUmr09c1uYOUrpWDzjUaZYKbh4gUse5kgUuU54J37/JIuISqpzWxWwYT5UnsikJC CefWjtzB+8NwkFPh2vxsSDx3wX7aXGF3ChWA7rs4AHnE6tsCvkQCx+f/JRWBXY9z 6BraGXGMezrNCDiC65EBMbMLtcBHme0= -----END CERTIFICATE-----Generated at Thu Jun 5 18:37:21 2025 by rpki-client