$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/ae689f65-5df9-3697-9711-2fdf70b4ca5e.roa File: ae689f65-5df9-3697-9711-2fdf70b4ca5e.roa (raw, json) Hash identifier: P0NeL/2G97zxCqyHbkI+rfzEF1mrQ+2wqK3p84yd9to= Subject key identifier: 9E:8A:9D:88:F5:1C:02:44:34:F3:22:FB:C9:9B:27:1C:09:F8:3A:BC Certificate issuer: /CN=3965685f-104b-41c9-9fe3-53d7fe4d141e Certificate serial: 010D0C9F4328584A18954A6ADDB996EEEF2A1200 Authority key identifier: 2D:4E:EC:07:7D:05:74:F6:8E:93:8D:47:DD:E3:82:57:D4:0B:DF:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/ae689f65-5df9-3697-9711-2fdf70b4ca5e.roa Signing time: Fri 06 Jun 2025 01:00:50 +0000 ROA not before: Fri 06 Jun 2025 01:00:50 +0000 ROA not after: Thu 04 Sep 2025 01:00:50 +0000 asID: 6079 IP address blocks: 172.99.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:18:95:4a:6a:dd:b9:96:ee:ef:2a:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3965685f-104b-41c9-9fe3-53d7fe4d141e Validity Not Before: Jun 6 01:00:50 2025 GMT Not After : Sep 4 01:00:50 2025 GMT Subject: CN=71b5ddd9-a846-4939-9fc1-e5e122c687d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e9:18:b6:4b:24:31:7c:f6:a8:6d:a4:cc:2b: 0f:49:03:58:ca:31:7c:b8:40:3d:e3:06:09:7a:73: 24:2b:83:d1:3a:92:63:83:b6:68:bb:88:0c:cd:80: 11:e5:4c:c8:89:0f:bb:71:1f:f4:b7:eb:3d:05:16: cb:10:18:42:08:32:ab:a3:02:54:82:b3:cc:cb:3c: 91:68:e8:7b:22:90:36:d1:62:cf:97:fe:30:79:0c: ee:c7:70:57:23:b6:f5:67:eb:ca:2b:b7:88:7b:70: 99:7d:e2:20:42:ab:c5:e8:fa:bb:c5:33:db:33:b8: 67:be:13:6c:e2:81:b7:cc:38:47:6a:d7:f8:6a:f3: 87:9d:b7:a7:ed:cc:67:60:23:1e:ad:56:85:a4:1e: 4c:27:35:fd:6c:cf:34:36:74:92:c8:0d:7a:48:bd: 9e:b7:bf:47:61:5d:70:1a:1e:d4:d2:13:b5:ba:80: 76:1c:59:a8:48:6c:15:cc:8d:b4:7e:67:6f:ae:50: 49:70:9d:62:18:80:36:72:09:bf:47:85:5c:2e:8f: 09:98:59:3f:af:76:71:48:65:9a:88:61:c8:4e:42: d9:c2:f7:ce:5d:ea:33:8b:df:0d:eb:53:cd:8c:41: fa:ce:87:14:9b:98:20:b1:d5:1f:a5:f7:64:18:08: 43:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:8A:9D:88:F5:1C:02:44:34:F3:22:FB:C9:9B:27:1C:09:F8:3A:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/ae689f65-5df9-3697-9711-2fdf70b4ca5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.crl X509v3 Authority Key Identifier: keyid:2D:4E:EC:07:7D:05:74:F6:8E:93:8D:47:DD:E3:82:57:D4:0B:DF:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer sbgp-ipAddrBlock: critical IPv4: 172.99.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:e8:89:2c:67:06:ce:7c:2c:03:b8:af:c7:d4:3f:94:69:04: a0:40:14:59:50:28:62:63:31:01:2f:10:63:64:aa:f6:e2:d4: 6e:cd:a7:d1:76:5d:91:0d:89:4d:12:b6:6c:c7:1d:ec:fc:e7: 54:bd:8c:2b:31:4a:b8:4a:c3:85:77:43:2d:b2:23:7b:7e:79: 33:18:7b:61:78:4a:a4:f6:c4:0b:48:02:d1:e8:4d:65:de:56: 34:25:89:05:73:e6:b4:d5:f8:e1:7e:ec:69:61:b4:ed:6e:63: e1:d9:84:c4:af:31:23:47:ba:de:ab:31:2d:7d:75:b1:8b:a4: b0:f2:7a:06:34:fb:7a:bf:08:8f:85:8e:87:11:55:68:4a:78: f5:74:3f:b2:8f:ea:a9:04:68:b8:ac:68:9d:93:e7:c1:fc:0c: dc:75:5f:70:6b:6f:de:45:c5:ca:42:d8:62:8d:52:96:1e:2e: 2f:15:89:35:4c:e2:21:00:c1:a0:0c:df:9b:d6:25:c1:5b:1f: cb:88:6a:0d:cb:e6:c7:e9:8c:ac:2d:0e:39:29:fd:30:4e:1d: 23:93:92:2d:93:95:b3:32:11:7f:85:ff:ef:90:b9:17:45:28: c8:c7:cb:68:11:68:62:2e:5d:73:11:3d:ee:05:8a:58:a5:0a: 51:1b:7d:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoYlUpq3bmW7u8qEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk2NTY4NWYtMTA0Yi00MWM5LTlmZTMtNTNkN2ZlNGQx NDFlMB4XDTI1MDYwNjAxMDA1MFoXDTI1MDkwNDAxMDA1MFowLzEtMCsGA1UEAxMk NzFiNWRkZDktYTg0Ni00OTM5LTlmYzEtZTVlMTIyYzY4N2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOkYtkskMXz2qG2kzCsPSQNYyjF8uEA94wYJ enMkK4PROpJjg7Zou4gMzYAR5UzIiQ+7cR/0t+s9BRbLEBhCCDKrowJUgrPMyzyR aOh7IpA20WLPl/4weQzux3BXI7b1Z+vKK7eIe3CZfeIgQqvF6Pq7xTPbM7hnvhNs 4oG3zDhHatf4avOHnben7cxnYCMerVaFpB5MJzX9bM80NnSSyA16SL2et79HYV1w Gh7U0hO1uoB2HFmoSGwVzI20fmdvrlBJcJ1iGIA2cgm/R4VcLo8JmFk/r3ZxSGWa iGHITkLZwvfOXeozi98N61PNjEH6zocUm5ggsdUfpfdkGAhD9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ6KnYj1HAJENPMi+8mbJxwJ+Dq8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY1 Njg1Zi0xMDRiLTQxYzktOWZlMy01M2Q3ZmU0ZDE0MWUvYWU2ODlmNjUtNWRmOS0z Njk3LTk3MTEtMmZkZjcwYjRjYTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzk2NTY4NWYtMTA0Yi00MWM5LTlm ZTMtNTNkN2ZlNGQxNDFlLzM5NjU2ODVmLTEwNGItNDFjOS05ZmUzLTUzZDdmZTRk MTQxZS5jcmwwHwYDVR0jBBgwFoAULU7sB30FdPaOk41H3eOCV9QL398wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY1Njg1Zi0xMDRiLTQxYzktOWZlMy01M2Q3 ZmU0ZDE0MWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGPwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADToiSxnBs58LAO4r8fUP5RpBKBAFFlQKGJjMQEvEGNkqvbi1G7Np9F2 XZENiU0StmzHHez851S9jCsxSrhKw4V3Qy2yI3t+eTMYe2F4SqT2xAtIAtHoTWXe VjQliQVz5rTV+OF+7GlhtO1uY+HZhMSvMSNHut6rMS19dbGLpLDyegY0+3q/CI+F jocRVWhKePV0P7KP6qkEaLisaJ2T58H8DNx1X3Brb95FxcpC2GKNUpYeLi8ViTVM 4iEAwaAM35vWJcFbH8uIag3L5sfpjKwtDjkp/TBOHSOTki2TlbMyEX+F/++QuRdF KMjHy2gRaGIuXXMRPe4FililClEbfdY= -----END CERTIFICATE-----Generated at Fri Jun 6 16:47:51 2025 by rpki-client