$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/c4cc816d-0378-3331-bfab-29af1c51cb4e.roa File: c4cc816d-0378-3331-bfab-29af1c51cb4e.roa (raw, json) Hash identifier: YTsep/4Hu7hgmffOfyb6AX5yueGOuL5x9wa1vXbyXxk= Subject key identifier: 2B:9E:10:17:77:0D:12:EC:4B:07:EF:BB:FF:1E:06:70:81:89:5B:7A Certificate issuer: /CN=b985122e-f2ff-4349-8e7b-d604ee2577f1 Certificate serial: 010D0C9F43285849FF75160768D054B2FC643600 Authority key identifier: 32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/c4cc816d-0378-3331-bfab-29af1c51cb4e.roa Signing time: Wed 28 May 2025 01:00:49 +0000 ROA not before: Wed 28 May 2025 01:00:49 +0000 ROA not after: Tue 26 Aug 2025 01:00:49 +0000 asID: 202 IP address blocks: 199.249.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ff:75:16:07:68:d0:54:b2:fc:64:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b985122e-f2ff-4349-8e7b-d604ee2577f1 Validity Not Before: May 28 01:00:49 2025 GMT Not After : Aug 26 01:00:49 2025 GMT Subject: CN=1cca6782-4a8c-4e89-af01-3e3bcc7a09db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2d:21:61:d8:61:0a:94:81:7b:23:ed:f8:84: 43:e5:dc:05:b9:91:d3:62:75:35:70:99:05:80:26: bc:b3:fa:ef:ba:c0:fa:f7:dc:8d:71:89:be:c8:9f: b5:67:8a:96:84:a5:ec:aa:4c:4a:31:2e:f1:04:53: b3:bf:99:d6:16:4b:e0:16:dd:5e:19:6e:ff:58:4c: b7:97:74:72:fd:6b:db:24:ac:18:25:6b:c6:5b:28: 0d:75:3c:6e:23:9f:f9:fe:5c:f7:2a:95:dd:87:3f: 51:95:13:e3:68:8c:f4:a1:30:a9:ed:75:c8:7d:71: bb:e5:90:cb:98:0e:92:2c:0d:0d:2e:64:e5:27:01: 38:d2:75:d6:e1:db:a8:c2:e1:4c:7e:b1:34:0d:b4: e6:04:84:14:bd:7f:9b:00:97:f2:aa:b8:45:00:21: 46:b9:26:20:a3:91:42:5f:5b:c9:36:79:81:00:3c: 5d:00:f6:50:ae:a4:5b:4f:da:ec:06:e0:17:3d:bb: 5f:9a:19:da:fe:d0:c2:a2:29:27:9b:3b:49:31:ca: bb:89:fb:25:a0:bd:70:76:a3:eb:75:77:9f:7b:0e: 92:70:1a:81:b6:95:4f:b6:88:92:0b:3d:7d:70:42: 34:19:41:a3:4f:0a:31:a1:be:0c:62:10:5a:fd:55: 27:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:9E:10:17:77:0D:12:EC:4B:07:EF:BB:FF:1E:06:70:81:89:5B:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/c4cc816d-0378-3331-bfab-29af1c51cb4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl X509v3 Authority Key Identifier: keyid:32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer sbgp-ipAddrBlock: critical IPv4: 199.249.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:3a:68:1f:bc:70:b1:af:8f:4f:66:11:d8:7a:a0:ca:97:bf: 4b:75:9a:4a:9f:47:4e:8f:b9:2f:b1:46:e1:a0:a3:f4:66:8c: 06:51:59:61:fe:13:bb:0f:ef:86:6b:60:22:ff:92:39:41:c2: 02:c3:6b:75:9e:46:81:fb:56:ab:31:7f:74:ba:62:85:b2:33: 6e:cf:76:2d:6c:2d:e1:00:95:c9:f7:71:82:b4:ac:ff:08:76: 90:3f:6b:9f:8d:8c:82:8e:5d:e9:db:e9:c3:a7:e0:81:76:91: 6f:bc:46:45:c9:09:99:11:99:1e:5e:f4:b8:67:fa:d6:96:c7: 5e:32:74:30:1a:cd:b2:2e:de:76:8e:e2:6e:db:b7:2e:0a:35: 92:d8:0f:df:13:b9:1c:5d:36:77:aa:ed:b2:8d:eb:91:c2:8b: 5b:69:17:06:23:6d:1b:1c:05:59:bc:fe:3c:f0:04:a4:bd:c4: 38:33:4e:27:00:77:24:50:27:00:ad:57:88:8e:ff:4b:8b:f3: c7:39:32:c3:08:2f:e2:95:75:df:9f:04:0d:37:85:79:ca:4d: d3:71:a5:18:a9:4e:0a:73:d2:90:bf:6e:57:53:f0:7a:b3:d5: 36:a5:0d:0b:32:23:31:8a:8a:7b:55:72:58:c2:15:29:35:c5: ed:9d:4a:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn/dRYHaNBUsvxkNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk4NTEyMmUtZjJmZi00MzQ5LThlN2ItZDYwNGVlMjU3 N2YxMB4XDTI1MDUyODAxMDA0OVoXDTI1MDgyNjAxMDA0OVowLzEtMCsGA1UEAxMk MWNjYTY3ODItNGE4Yy00ZTg5LWFmMDEtM2UzYmNjN2EwOWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzC0hYdhhCpSBeyPt+IRD5dwFuZHTYnU1cJkF gCa8s/rvusD699yNcYm+yJ+1Z4qWhKXsqkxKMS7xBFOzv5nWFkvgFt1eGW7/WEy3 l3Ry/WvbJKwYJWvGWygNdTxuI5/5/lz3KpXdhz9RlRPjaIz0oTCp7XXIfXG75ZDL mA6SLA0NLmTlJwE40nXW4duowuFMfrE0DbTmBIQUvX+bAJfyqrhFACFGuSYgo5FC X1vJNnmBADxdAPZQrqRbT9rsBuAXPbtfmhna/tDCoiknmztJMcq7ifsloL1wdqPr dXefew6ScBqBtpVPtoiSCz19cEI0GUGjTwoxob4MYhBa/VUnfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCueEBd3DRLsSwfvu/8eBnCBiVt6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iOTg1 MTIyZS1mMmZmLTQzNDktOGU3Yi1kNjA0ZWUyNTc3ZjEvYzRjYzgxNmQtMDM3OC0z MzMxLWJmYWItMjlhZjFjNTFjYjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjk4NTEyMmUtZjJmZi00MzQ5LThl N2ItZDYwNGVlMjU3N2YxL2I5ODUxMjJlLWYyZmYtNDM0OS04ZTdiLWQ2MDRlZTI1 NzdmMS5jcmwwHwYDVR0jBBgwFoAUMkPnPPcbBd82CkZOMRZRS4dhJtswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iOTg1MTIyZS1mMmZmLTQzNDktOGU3Yi1kNjA0 ZWUyNTc3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/nuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE06aB+8cLGvj09mEdh6oMqXv0t1mkqfR06PuS+xRuGgo/RmjAZRWWH+ E7sP74ZrYCL/kjlBwgLDa3WeRoH7Vqsxf3S6YoWyM27Pdi1sLeEAlcn3cYK0rP8I dpA/a5+NjIKOXenb6cOn4IF2kW+8RkXJCZkRmR5e9Lhn+taWx14ydDAazbIu3naO 4m7bty4KNZLYD98TuRxdNneq7bKN65HCi1tpFwYjbRscBVm8/jzwBKS9xDgzTicA dyRQJwCtV4iO/0uL88c5MsMIL+KVdd+fBA03hXnKTdNxpRipTgpz0pC/bldT8Hqz 1TalDQsyIzGKintVcljCFSk1xe2dSiE= -----END CERTIFICATE-----Generated at Fri Jun 6 23:57:19 2025 by rpki-client