$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/03a4cc23-30b0-3516-9da1-e6894a6d8ad8.roa File: 03a4cc23-30b0-3516-9da1-e6894a6d8ad8.roa (raw, json) Hash identifier: rvNMxkaM3sdApo7DZ95b2tGHqUzwNa9gYVaoyWnQ84s= Subject key identifier: 74:B1:9A:EB:BB:FB:23:1F:FB:AC:2A:0E:99:74:AE:7E:D8:9F:91:F2 Certificate issuer: /CN=58520fc1-e07b-4b1b-ad59-5756198c9756 Certificate serial: 010D0C9F4328584A348016F1584D9AC54B346680 Authority key identifier: 8B:68:5A:47:96:D3:96:D1:F9:A1:5F:E7:38:95:E0:29:83:E6:D4:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/03a4cc23-30b0-3516-9da1-e6894a6d8ad8.roa Signing time: Mon 16 Jun 2025 01:00:49 +0000 ROA not before: Mon 16 Jun 2025 01:00:49 +0000 ROA not after: Sun 14 Sep 2025 01:00:49 +0000 asID: 22770 IP address blocks: 199.181.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/58520fc1-e07b-4b1b-ad59-5756198c9756.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/58520fc1-e07b-4b1b-ad59-5756198c9756.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:34:80:16:f1:58:4d:9a:c5:4b:34:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58520fc1-e07b-4b1b-ad59-5756198c9756 Validity Not Before: Jun 16 01:00:49 2025 GMT Not After : Sep 14 01:00:49 2025 GMT Subject: CN=c83e289b-e6c0-4b46-ae60-59d2473ee942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:64:94:39:7f:35:2c:71:63:89:4b:1c:5e:76: 43:de:39:51:ae:67:fa:03:27:b3:4f:1f:81:dd:51: 33:2b:a6:73:bc:a5:0c:1e:c1:4a:97:0b:17:a1:bf: 82:05:04:b1:c2:70:97:53:5f:30:6d:60:26:54:9c: 30:db:d2:4e:c3:ab:de:71:95:0c:22:7d:24:f1:e2: c8:53:f5:6c:b9:82:6e:f1:6f:b8:18:68:49:af:7c: a9:b8:cf:1c:e4:b7:63:82:2d:33:b8:c4:fa:a8:64: e0:cc:02:86:bf:8a:07:8c:4a:6a:16:83:01:fa:47: 29:37:16:3f:df:20:da:27:e7:07:06:a3:dd:b7:ca: 74:de:bb:25:9d:b2:6d:ae:83:88:75:05:81:af:60: d0:c4:31:04:90:9e:fd:7e:0e:cf:e8:93:50:94:7e: b5:49:f3:fb:69:d7:be:45:c4:b3:4a:88:7b:35:07: e1:03:da:ab:05:71:67:92:f0:b3:e7:1f:22:6d:0e: b2:57:8f:b8:55:ec:3b:c2:50:20:35:8e:6e:cb:3d: 35:4c:0d:e2:60:f3:82:24:6b:18:eb:14:8b:d5:b0: 53:b7:4f:ba:a8:ea:4a:99:d5:c8:07:cd:da:b7:40: 26:e0:9e:0b:7e:7a:1c:23:0d:4a:08:f8:67:9f:55: 20:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:B1:9A:EB:BB:FB:23:1F:FB:AC:2A:0E:99:74:AE:7E:D8:9F:91:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/03a4cc23-30b0-3516-9da1-e6894a6d8ad8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/58520fc1-e07b-4b1b-ad59-5756198c9756.crl X509v3 Authority Key Identifier: keyid:8B:68:5A:47:96:D3:96:D1:F9:A1:5F:E7:38:95:E0:29:83:E6:D4:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756.cer sbgp-ipAddrBlock: critical IPv4: 199.181.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:7a:92:8c:ab:82:30:1c:d5:32:13:72:0e:d7:23:fa:42:24: 77:86:95:c6:09:95:71:47:55:d5:a8:82:ff:5d:e7:b6:0f:a3: fe:2a:a7:76:f0:d9:34:24:b0:31:1e:95:e0:fd:95:48:54:e8: 89:e8:cb:ea:7c:2b:b7:ad:3a:3d:e0:12:41:3f:9c:0f:6c:c8: 8c:9a:52:5c:98:d7:a7:28:5b:bf:bc:89:aa:d2:4f:aa:e0:07: c2:09:e8:3d:e9:8b:1b:d0:bb:dd:09:0f:02:90:df:3d:9c:ec: cc:d5:e9:05:8c:0f:12:bc:99:16:57:79:12:09:51:3b:83:56: 3b:2c:68:cf:3f:3d:e1:95:20:b0:20:1c:1b:1f:cc:e0:a2:cd: eb:37:61:a2:e7:c9:b6:46:cc:dc:d1:d6:92:d9:20:00:e5:f0: 94:0c:1e:17:3d:0f:fb:45:e6:39:76:a8:e4:f5:00:cd:37:ce: 30:9a:4e:82:94:66:fd:38:6f:da:f8:64:52:98:85:84:3f:dc: ef:30:70:2d:73:37:0e:45:3a:11:9c:67:64:25:49:79:7d:32: 1d:f6:c3:7d:f7:b2:fd:c6:61:e3:47:ab:cd:9d:2c:26:37:1c: 93:de:e9:b5:cc:b5:ef:9a:72:3a:15:cf:be:9e:96:63:61:d2: e1:5f:66:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo0gBbxWE2axUs0ZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTg1MjBmYzEtZTA3Yi00YjFiLWFkNTktNTc1NjE5OGM5 NzU2MB4XDTI1MDYxNjAxMDA0OVoXDTI1MDkxNDAxMDA0OVowLzEtMCsGA1UEAxMk YzgzZTI4OWItZTZjMC00YjQ2LWFlNjAtNTlkMjQ3M2VlOTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWSUOX81LHFjiUscXnZD3jlRrmf6AyezTx+B 3VEzK6ZzvKUMHsFKlwsXob+CBQSxwnCXU18wbWAmVJww29JOw6vecZUMIn0k8eLI U/VsuYJu8W+4GGhJr3ypuM8c5Ldjgi0zuMT6qGTgzAKGv4oHjEpqFoMB+kcpNxY/ 3yDaJ+cHBqPdt8p03rslnbJtroOIdQWBr2DQxDEEkJ79fg7P6JNQlH61SfP7ade+ RcSzSoh7NQfhA9qrBXFnkvCz5x8ibQ6yV4+4Vew7wlAgNY5uyz01TA3iYPOCJGsY 6xSL1bBTt0+6qOpKmdXIB83at0Am4J4LfnocIw1KCPhnn1Ug7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHSxmuu7+yMf+6wqDpl0rn7Yn5HyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81ODUy MGZjMS1lMDdiLTRiMWItYWQ1OS01NzU2MTk4Yzk3NTYvMDNhNGNjMjMtMzBiMC0z NTE2LTlkYTEtZTY4OTRhNmQ4YWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNTg1MjBmYzEtZTA3Yi00YjFiLWFk NTktNTc1NjE5OGM5NzU2LzU4NTIwZmMxLWUwN2ItNGIxYi1hZDU5LTU3NTYxOThj OTc1Ni5jcmwwHwYDVR0jBBgwFoAUi2haR5bTltH5oV/nOJXgKYPm1AUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81ODUyMGZjMS1lMDdiLTRiMWItYWQ1OS01NzU2 MTk4Yzk3NTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7UhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABh6koyrgjAc1TITcg7XI/pCJHeGlcYJlXFHVdWogv9d57YPo/4qp3bw 2TQksDEeleD9lUhU6Inoy+p8K7etOj3gEkE/nA9syIyaUlyY16coW7+8iarST6rg B8IJ6D3pixvQu90JDwKQ3z2c7MzV6QWMDxK8mRZXeRIJUTuDVjssaM8/PeGVILAg HBsfzOCizes3YaLnybZGzNzR1pLZIADl8JQMHhc9D/tF5jl2qOT1AM03zjCaToKU Zv04b9r4ZFKYhYQ/3O8wcC1zNw5FOhGcZ2QlSXl9Mh32w333sv3GYeNHq82dLCY3 HJPe6bXMte+acjoVz76elmNh0uFfZt4= -----END CERTIFICATE-----Generated at Tue Jul 8 22:08:25 2025 by rpki-client