$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/13c7705c-5068-3193-a68c-a2e387dab614.roa File: 13c7705c-5068-3193-a68c-a2e387dab614.roa (raw, json) Hash identifier: q3ARJexEwDMDMfQLgMoLM/HRDiFZPeu0ZSzP5XtA8AQ= Subject key identifier: 6F:0C:2D:7C:E9:71:31:DA:8C:8D:75:29:0E:A9:89:10:DD:D0:1D:1B Certificate issuer: /CN=95e29289-6f1c-4c2f-84f4-c944e9e54940 Certificate serial: 010D0C9F4328584A03A5484B52B291D3CB01B7C0 Authority key identifier: 4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/13c7705c-5068-3193-a68c-a2e387dab614.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 36329 IP address blocks: 199.36.164.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:48:4b:52:b2:91:d3:cb:01:b7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95e29289-6f1c-4c2f-84f4-c944e9e54940 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=2a879e21-eb31-4f06-bfd7-22fb038904fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:58:32:9b:97:1f:f4:f8:ba:5d:de:21:b7:85: 04:46:d5:4d:08:f6:66:57:4d:16:6b:f4:1a:8e:04: 23:e3:fa:22:a8:55:90:59:e9:a7:e4:91:6f:23:2d: bf:9f:14:ca:93:31:fd:cf:72:13:11:4b:e7:82:4d: eb:e3:2a:38:be:27:27:3f:b5:de:da:04:4f:73:8f: 5e:72:c0:ee:6a:4c:32:ae:34:e0:c8:0d:72:51:f9: d7:54:80:86:db:f0:d2:9c:89:3c:1b:84:18:97:ad: e8:a5:18:6e:9d:c8:1d:12:f1:d4:e6:49:b3:7f:f6: 83:a8:3f:94:67:24:45:e6:8d:2d:19:a7:5c:6d:86: 9e:aa:6d:b3:6e:1c:07:82:b6:64:b0:37:b5:eb:a7: bb:ba:2e:64:9b:b4:7e:62:7a:37:a4:0b:d0:fb:5e: 17:15:3c:92:67:a8:b7:14:7d:12:68:f4:5b:a9:af: 94:b1:4a:19:a6:37:af:81:0d:43:64:6b:e1:8b:6a: f7:73:fa:ab:6d:4b:92:51:38:a6:37:3e:c9:6a:7b: d8:d2:17:9b:84:c6:2f:82:03:9e:97:8b:12:38:db: 78:74:ad:66:5e:02:52:96:ca:c7:e2:95:a5:0d:a6: 4e:82:2d:24:8d:4a:6d:a8:59:04:61:0c:5b:85:b9: 20:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:0C:2D:7C:E9:71:31:DA:8C:8D:75:29:0E:A9:89:10:DD:D0:1D:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/13c7705c-5068-3193-a68c-a2e387dab614.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.crl X509v3 Authority Key Identifier: keyid:4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer sbgp-ipAddrBlock: critical IPv4: 199.36.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:1c:e6:8d:b3:c4:7a:05:f0:68:80:40:ad:bf:84:8e:0d:0b: b7:46:2d:f0:61:cf:3b:b2:ba:88:eb:93:d4:c4:e6:88:6f:91: 20:61:42:b8:68:a1:3c:93:d1:19:0b:8f:5b:cc:1f:10:38:c1: 7e:db:9b:ec:2e:6f:30:bc:cf:5c:cf:0f:b0:30:f7:0b:b5:75: 82:6e:dc:22:f6:e9:9c:57:0d:cd:68:e6:a2:b6:0d:20:0a:2e: 22:ed:1d:eb:b7:7b:f2:01:41:85:60:c0:6d:37:65:f5:7c:41: d8:02:d5:2f:bb:99:86:35:8d:7c:ca:e7:33:a1:96:2f:5c:96: e8:e1:fe:9f:6a:77:7a:2e:44:46:2c:9f:10:f2:7b:8a:28:05: 81:84:a9:07:32:e1:88:b4:63:0e:33:b3:d5:77:11:56:ed:6b: 2f:15:f8:98:50:14:64:c6:00:f2:59:a9:9c:f0:e1:8e:ef:cf: c3:fd:14:6d:62:f6:95:2b:e8:ec:83:65:69:1d:1b:a2:77:a6: 5b:f8:bb:55:ba:83:79:59:81:1f:e2:8c:3a:7c:81:7c:bc:e8: 7a:7e:6d:fb:61:75:66:3a:22:44:17:d2:4d:f8:0b:5c:3f:57: 09:aa:1d:b3:2c:d3:29:2d:59:ff:34:d9:31:36:7a:34:f3:23: ff:92:91:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpUhLUrKR08sBt8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVlMjkyODktNmYxYy00YzJmLTg0ZjQtYzk0NGU5ZTU0 OTQwMB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk MmE4NzllMjEtZWIzMS00ZjA2LWJmZDctMjJmYjAzODkwNGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1gym5cf9Pi6Xd4ht4UERtVNCPZmV00Wa/Qa jgQj4/oiqFWQWemn5JFvIy2/nxTKkzH9z3ITEUvngk3r4yo4vicnP7Xe2gRPc49e csDuakwyrjTgyA1yUfnXVICG2/DSnIk8G4QYl63opRhuncgdEvHU5kmzf/aDqD+U ZyRF5o0tGadcbYaeqm2zbhwHgrZksDe166e7ui5km7R+Yno3pAvQ+14XFTySZ6i3 FH0SaPRbqa+UsUoZpjevgQ1DZGvhi2r3c/qrbUuSUTimNz7JanvY0hebhMYvggOe l4sSONt4dK1mXgJSlsrH4pWlDaZOgi0kjUptqFkEYQxbhbkg5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG8MLXzpcTHajI11KQ6piRDd0B0bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85NWUy OTI4OS02ZjFjLTRjMmYtODRmNC1jOTQ0ZTllNTQ5NDAvMTNjNzcwNWMtNTA2OC0z MTkzLWE2OGMtYTJlMzg3ZGFiNjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTVlMjkyODktNmYxYy00YzJmLTg0 ZjQtYzk0NGU5ZTU0OTQwLzk1ZTI5Mjg5LTZmMWMtNGMyZi04NGY0LWM5NDRlOWU1 NDk0MC5jcmwwHwYDVR0jBBgwFoAUTbpFqqu5h2Ol5m+zCcVulzCUmp4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85NWUyOTI4OS02ZjFjLTRjMmYtODRmNC1jOTQ0 ZTllNTQ5NDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxySkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL0c5o2zxHoF8GiAQK2/hI4NC7dGLfBhzzuyuojrk9TE5ohvkSBhQrho oTyT0RkLj1vMHxA4wX7bm+wubzC8z1zPD7Aw9wu1dYJu3CL26ZxXDc1o5qK2DSAK LiLtHeu3e/IBQYVgwG03ZfV8QdgC1S+7mYY1jXzK5zOhli9clujh/p9qd3ouREYs nxDye4ooBYGEqQcy4Yi0Yw4zs9V3EVbtay8V+JhQFGTGAPJZqZzw4Y7vz8P9FG1i 9pUr6OyDZWkdG6J3plv4u1W6g3lZgR/ijDp8gXy86Hp+bfthdWY6IkQX0k34C1w/ VwmqHbMs0yktWf802TE2ejTzI/+SkQk= -----END CERTIFICATE-----Generated at Sat Jun 7 21:14:00 2025 by rpki-client