$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/c23ac558-69f5-3c92-9a4a-e12e37e77616.roa File: c23ac558-69f5-3c92-9a4a-e12e37e77616.roa (raw, json) Hash identifier: MpzIb6bDDkHRIH1XZ4cb/y7jEGAPqoY4850Z2NztPXA= Subject key identifier: 86:C3:DD:7E:D6:EE:BE:EB:64:C8:EB:D9:CD:17:23:3F:79:2F:AF:99 Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Certificate serial: 010D0C9F43285849E225246592AB4BCF8756FE40 Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/c23ac558-69f5-3c92-9a4a-e12e37e77616.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 14297 IP address blocks: 199.189.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:24:65:92:ab:4b:cf:87:56:fe:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=f812a442-1e8b-4227-a43e-395c5b53a322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:0f:1f:5d:e7:4a:0b:0f:1d:9a:f4:4e:d3:5e: 63:87:c7:27:b5:d0:e3:aa:9d:af:0a:bb:df:b4:34: fd:ef:06:e3:10:67:4f:3f:93:dc:b9:72:a6:8e:dd: 97:7a:c0:f5:66:bd:25:bd:1d:f7:bb:a7:bf:cb:f8: 66:97:3f:ba:f8:30:e3:ff:46:a6:b2:03:09:6b:81: 52:97:1d:3a:fc:1e:a4:f3:04:3f:86:ce:1e:5b:e0: 86:bd:8f:86:94:71:1f:8e:40:e4:ee:bb:3e:33:ad: 1c:a6:7a:6a:bb:c4:f4:ab:0c:c2:d1:3d:69:34:d5: 10:c0:df:29:d2:70:90:24:a1:3d:2e:11:38:c8:cb: c0:dd:07:3d:6d:29:26:5f:93:ff:ff:2f:0b:28:99: ee:cc:4c:60:2f:f7:34:14:f5:13:11:f2:7a:62:e7: be:03:7a:f4:84:f6:b4:e5:67:60:4f:4c:6e:62:32: bf:05:ef:2d:ba:74:96:8d:d2:01:0d:33:16:52:ed: a2:8f:ad:1d:68:86:2f:c1:32:5b:c5:52:43:fd:d7: 4c:dd:2a:84:73:31:6a:41:b1:55:f7:e4:6f:09:81: 9d:b2:68:74:f4:61:22:1c:16:b9:eb:d2:87:d8:b7: 29:56:95:0a:ff:ea:86:4b:84:26:0a:4d:69:f6:1a: 30:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:C3:DD:7E:D6:EE:BE:EB:64:C8:EB:D9:CD:17:23:3F:79:2F:AF:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/c23ac558-69f5-3c92-9a4a-e12e37e77616.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl X509v3 Authority Key Identifier: keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer sbgp-ipAddrBlock: critical IPv4: 199.189.234.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:8d:3f:65:f1:26:50:9d:a3:05:99:35:eb:42:f2:67:d1:fb: 90:10:aa:15:aa:fc:4b:74:fa:d3:66:d5:64:46:6d:b8:21:c3: a8:d3:c1:36:4a:81:f7:ef:62:d4:48:3f:1c:f5:90:c2:91:81: e8:d3:63:b8:f6:08:25:25:ad:23:8b:08:de:12:60:90:20:aa: 52:67:6e:bd:59:37:e7:5a:03:39:64:8b:38:4c:66:ec:ed:23: 9c:40:ca:68:fe:da:85:7b:36:59:04:f8:89:d7:0c:ff:f0:f9: 34:83:cf:34:e2:c3:f8:f0:78:14:33:06:53:a3:bc:9e:a3:02: f6:71:98:90:7e:19:fb:bf:e0:80:46:b0:9b:07:ad:db:3e:94: ce:1d:ed:ad:87:e6:d9:d2:f8:64:fc:0d:f7:17:e1:64:ec:9e: 99:ec:ec:f8:3d:3f:45:37:0b:be:3c:da:13:f9:f9:2d:0a:78: fd:09:50:e6:9e:69:51:31:f2:59:69:3d:01:79:9d:be:94:de: c0:73:dc:5e:f6:c4:2c:95:a3:9c:84:d0:79:6c:cb:65:d4:26: a0:8f:da:a7:12:36:55:33:62:0b:3b:35:2c:c7:08:d5:fd:25: c1:c4:1c:c8:c6:2f:64:a7:79:52:34:4e:5f:c1:6a:82:60:01: 82:6f:c7:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEniJSRlkqtLz4dW/kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz N2U2MB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk ZjgxMmE0NDItMWU4Yi00MjI3LWE0M2UtMzk1YzViNTNhMzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjg8fXedKCw8dmvRO015jh8cntdDjqp2vCrvf tDT97wbjEGdPP5PcuXKmjt2XesD1Zr0lvR33u6e/y/hmlz+6+DDj/0amsgMJa4FS lx06/B6k8wQ/hs4eW+CGvY+GlHEfjkDk7rs+M60cpnpqu8T0qwzC0T1pNNUQwN8p 0nCQJKE9LhE4yMvA3Qc9bSkmX5P//y8LKJnuzExgL/c0FPUTEfJ6Yue+A3r0hPa0 5WdgT0xuYjK/Be8tunSWjdIBDTMWUu2ij60daIYvwTJbxVJD/ddM3SqEczFqQbFV 9+RvCYGdsmh09GEiHBa569KH2LcpVpUK/+qGS4QmCk1p9how2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIbD3X7W7r7rZMjr2c0XIz95L6+ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvYzIzYWM1NTgtNjlmNS0z YzkyLTlhNGEtZTEyZTM3ZTc3NjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx73qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGNP2XxJlCdowWZNetC8mfR+5AQqhWq/Et0+tNm1WRGbbghw6jTwTZK gffvYtRIPxz1kMKRgejTY7j2CCUlrSOLCN4SYJAgqlJnbr1ZN+daAzlkizhMZuzt I5xAymj+2oV7NlkE+InXDP/w+TSDzzTiw/jweBQzBlOjvJ6jAvZxmJB+Gfu/4IBG sJsHrds+lM4d7a2H5tnS+GT8DfcX4WTsnpns7Pg9P0U3C7482hP5+S0KeP0JUOae aVEx8llpPQF5nb6U3sBz3F72xCyVo5yE0Hlsy2XUJqCP2qcSNlUzYgs7NSzHCNX9 JcHEHMjGL2SneVI0Tl/BaoJgAYJvx5M= -----END CERTIFICATE-----Generated at Tue Jun 10 05:05:25 2025 by rpki-client