$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/cb4a05db-d9d9-3a66-8b98-918d6b164822.roa File: cb4a05db-d9d9-3a66-8b98-918d6b164822.roa (raw, json) Hash identifier: 10odvMblKhYPAaNDyPlJiXzvMefrs+L9OuVFezYPzjw= Subject key identifier: 26:5E:E2:07:82:F1:9D:AC:D7:A9:47:70:81:04:88:24:49:AF:81:39 Certificate issuer: /CN=f84ea5c3-3226-48ac-838b-0fdf69176854 Certificate serial: 010D0C9F4328584A5B95B37E0ACF31748DD29740 Authority key identifier: 82:71:9E:64:EE:FB:6C:5A:E9:41:FD:EE:1D:55:A8:32:16:3B:EE:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/cb4a05db-d9d9-3a66-8b98-918d6b164822.roa Signing time: Mon 30 Jun 2025 01:00:50 +0000 ROA not before: Mon 30 Jun 2025 01:00:50 +0000 ROA not after: Sun 28 Sep 2025 01:00:50 +0000 asID: 14362 IP address blocks: 199.33.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/f84ea5c3-3226-48ac-838b-0fdf69176854.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/f84ea5c3-3226-48ac-838b-0fdf69176854.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5b:95:b3:7e:0a:cf:31:74:8d:d2:97:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f84ea5c3-3226-48ac-838b-0fdf69176854 Validity Not Before: Jun 30 01:00:50 2025 GMT Not After : Sep 28 01:00:50 2025 GMT Subject: CN=8fc560e8-63c9-4a3b-89da-ac2faf5c2857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c6:3c:e9:46:12:ac:19:25:84:76:80:04:6a: 53:bc:e0:70:cf:ed:f7:66:82:10:ca:1e:91:aa:d9: c7:be:92:9b:b8:9c:32:26:ca:4c:77:b5:fc:01:54: a9:37:b1:fe:62:38:a1:b3:67:a4:74:7c:88:e0:fd: c7:7c:ae:9a:75:9b:f9:cd:7f:84:36:05:c9:be:7a: a1:bc:22:dd:c2:a3:8b:0d:95:b7:79:fc:56:63:e6: 8c:97:76:9b:9f:b9:53:c9:79:da:0e:ee:74:b8:22: ad:55:58:88:02:2c:38:6c:0c:cd:02:74:00:bb:d0: be:f2:f5:e1:b5:88:13:68:ee:82:1f:30:35:6a:91: 09:4a:7f:34:83:b1:04:dc:06:dc:4f:9d:34:6f:93: c0:70:fd:74:55:c8:7d:5a:33:e9:dc:19:45:57:7a: c5:e0:94:cc:17:7a:5b:3b:63:39:98:d8:5d:c6:0f: 10:eb:38:e8:61:d8:6c:bd:e1:2d:9d:8c:88:f3:e7: ec:51:21:3b:0d:dc:86:7b:03:03:b3:1d:b4:29:2a: f7:78:00:32:c3:2b:df:3e:a1:9d:72:72:e1:ea:0a: 48:3b:c0:cb:fb:64:bf:f2:19:29:a8:40:a5:4c:42: 64:54:75:f9:a0:40:b2:60:30:c2:1e:21:0e:34:c0: fa:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:5E:E2:07:82:F1:9D:AC:D7:A9:47:70:81:04:88:24:49:AF:81:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/cb4a05db-d9d9-3a66-8b98-918d6b164822.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/f84ea5c3-3226-48ac-838b-0fdf69176854.crl X509v3 Authority Key Identifier: keyid:82:71:9E:64:EE:FB:6C:5A:E9:41:FD:EE:1D:55:A8:32:16:3B:EE:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854.cer sbgp-ipAddrBlock: critical IPv4: 199.33.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:52:ac:53:bd:05:42:c6:3c:56:b4:3c:16:6b:c9:30:2d:44: 0a:1d:3c:29:e6:7a:ac:a4:2e:b9:4d:4b:34:10:53:c8:08:1d: b5:ba:b5:cd:14:e3:c8:07:fe:46:af:48:39:95:d0:bb:56:d6: 92:fc:cb:4c:7b:68:fd:d2:02:3c:17:42:e6:bd:cf:b1:46:f6: 2d:f6:0f:48:21:09:c1:5d:cd:be:d0:0e:44:62:c2:a0:7c:ad: 77:fa:a9:5e:3b:99:43:69:d0:c6:ad:f6:30:9e:c4:a8:a3:a7: c3:1f:61:f4:f2:d0:9d:70:0c:ab:2f:e6:56:e5:5e:8b:98:13: 13:4a:fc:2f:06:64:da:fd:19:2b:b4:33:bd:67:7b:5c:7d:e2: 7b:d3:51:fb:5b:c1:1e:8a:47:46:2c:a5:79:42:6e:59:8e:6b: 6d:e8:51:96:41:76:83:38:06:1e:a3:ef:87:f7:94:91:e5:4e: 92:52:33:71:0b:ea:5a:3b:55:55:59:77:8c:0a:92:ce:2a:e4: 6f:2d:7f:86:e6:91:6c:96:63:9b:8f:a9:4e:31:eb:c4:1e:e7: d0:3a:d2:3c:82:31:72:b6:d9:88:99:62:33:f3:4d:ff:db:09: f6:20:10:7f:73:8b:2a:53:b6:62:1e:90:0a:64:d4:b6:b4:86: d7:77:dc:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpblbN+Cs8xdI3Sl0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg0ZWE1YzMtMzIyNi00OGFjLTgzOGItMGZkZjY5MTc2 ODU0MB4XDTI1MDYzMDAxMDA1MFoXDTI1MDkyODAxMDA1MFowLzEtMCsGA1UEAxMk OGZjNTYwZTgtNjNjOS00YTNiLTg5ZGEtYWMyZmFmNWMyODU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsY86UYSrBklhHaABGpTvOBwz+33ZoIQyh6R qtnHvpKbuJwyJspMd7X8AVSpN7H+Yjihs2ekdHyI4P3HfK6adZv5zX+ENgXJvnqh vCLdwqOLDZW3efxWY+aMl3abn7lTyXnaDu50uCKtVViIAiw4bAzNAnQAu9C+8vXh tYgTaO6CHzA1apEJSn80g7EE3AbcT500b5PAcP10Vch9WjPp3BlFV3rF4JTMF3pb O2M5mNhdxg8Q6zjoYdhsveEtnYyI8+fsUSE7DdyGewMDsx20KSr3eAAywyvfPqGd cnLh6gpIO8DL+2S/8hkpqEClTEJkVHX5oECyYDDCHiEONMD6FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCZe4geC8Z2s16lHcIEEiCRJr4E5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mODRl YTVjMy0zMjI2LTQ4YWMtODM4Yi0wZmRmNjkxNzY4NTQvY2I0YTA1ZGItZDlkOS0z YTY2LThiOTgtOTE4ZDZiMTY0ODIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjg0ZWE1YzMtMzIyNi00OGFjLTgz OGItMGZkZjY5MTc2ODU0L2Y4NGVhNWMzLTMyMjYtNDhhYy04MzhiLTBmZGY2OTE3 Njg1NC5jcmwwHwYDVR0jBBgwFoAUgnGeZO77bFrpQf3uHVWoMhY77kIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mODRlYTVjMy0zMjI2LTQ4YWMtODM4Yi0wZmRm NjkxNzY4NTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyFJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADlSrFO9BULGPFa0PBZryTAtRAodPCnmeqykLrlNSzQQU8gIHbW6tc0U 48gH/kavSDmV0LtW1pL8y0x7aP3SAjwXQua9z7FG9i32D0ghCcFdzb7QDkRiwqB8 rXf6qV47mUNp0Mat9jCexKijp8MfYfTy0J1wDKsv5lblXouYExNK/C8GZNr9GSu0 M71ne1x94nvTUftbwR6KR0YspXlCblmOa23oUZZBdoM4Bh6j74f3lJHlTpJSM3EL 6lo7VVVZd4wKks4q5G8tf4bmkWyWY5uPqU4x68Qe59A60jyCMXK22YiZYjPzTf/b CfYgEH9ziypTtmIekApk1La0htd33Jk= -----END CERTIFICATE-----Generated at Fri Jul 4 08:07:27 2025 by rpki-client