$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4713f01f-5b80-3cac-85a6-971ac5132813.roa File: 4713f01f-5b80-3cac-85a6-971ac5132813.roa (raw, json) Hash identifier: A2bN1pxuLx+QKO/2wxyc/H3UulnV4jUCu7hBUltICg0= Subject key identifier: 58:17:EB:D0:6B:06:1D:E2:50:52:42:F9:E1:CA:E9:6F:6C:E6:B0:82 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A18955562FD19123B4E4B0080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4713f01f-5b80-3cac-85a6-971ac5132813.roa Signing time: Fri 06 Jun 2025 01:00:50 +0000 ROA not before: Fri 06 Jun 2025 01:00:50 +0000 ROA not after: Thu 04 Sep 2025 01:00:50 +0000 asID: 200005 IP address blocks: 170.199.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:18:95:55:62:fd:19:12:3b:4e:4b:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 6 01:00:50 2025 GMT Not After : Sep 4 01:00:50 2025 GMT Subject: CN=e0deb68d-120d-4656-b91f-5e69a6a96a3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ba:b6:68:73:70:ae:08:cd:7a:20:57:fb:2a: cb:66:19:63:df:8a:f1:8d:d7:32:bf:7f:76:72:fd: 79:b8:55:5e:49:52:f7:a3:b8:4b:61:a0:c0:13:d3: 5a:67:fe:25:6a:4f:74:13:f9:9b:a7:9d:e6:f2:81: 33:ad:09:f8:e6:82:e4:27:f3:3d:c2:f1:2e:96:7a: 04:a5:bc:22:cd:0b:ee:45:11:9e:07:11:67:92:78: e7:6f:11:a5:2e:7e:db:b9:8c:53:61:8d:a8:f7:c2: 83:76:58:74:8b:65:fb:1f:0d:b6:ac:a9:e7:2c:b2: 55:54:2c:59:73:12:91:a0:72:4d:98:49:d9:23:14: a9:20:73:37:f6:7e:60:3d:a7:ef:a6:de:da:0d:08: de:3a:5e:3e:96:67:48:5b:c2:48:4f:94:5f:c8:22: 67:83:82:1f:39:68:f2:81:7e:0c:ba:0c:43:ec:9e: 7a:5f:3a:85:d1:41:be:49:7c:fa:81:5f:7d:06:29: 4e:27:06:8d:ed:bc:54:50:e3:67:17:69:38:cd:49: b0:f9:21:ef:d8:b9:a6:0f:8b:4d:bf:9e:94:c9:d6: a5:47:46:40:b5:5d:ab:ef:ff:55:94:b5:17:63:0d: 10:ee:99:f1:a9:81:a9:e5:cd:54:16:3a:8c:7c:51: 80:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:17:EB:D0:6B:06:1D:E2:50:52:42:F9:E1:CA:E9:6F:6C:E6:B0:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4713f01f-5b80-3cac-85a6-971ac5132813.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 170.199.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:f3:18:e4:49:e6:4d:5a:ca:70:61:6e:8d:c6:c2:ec:8b:a4: 72:dd:9e:bc:aa:7d:cb:4f:e8:4f:f1:96:53:c2:61:62:07:9e: 8a:3a:51:89:20:52:ed:94:c5:2a:36:6a:e3:a3:48:5b:61:b9: 50:35:2f:ac:68:f8:5f:6f:83:62:1e:b2:5d:be:10:e8:88:a2: d7:5b:ae:71:2c:5f:1c:3d:96:a7:ab:7f:c6:fb:f9:38:8b:cf: ed:62:f4:a9:6f:fa:c2:36:79:e8:a4:32:8a:d8:37:1e:03:74: b6:ad:45:58:4d:b9:c7:c6:9b:7f:ea:2f:8e:c0:85:61:0b:15: 87:47:5c:19:21:05:9f:ea:de:12:ff:0b:15:e1:c0:59:e1:4a: 35:10:17:a0:1f:0a:35:4c:c3:58:5d:71:69:56:48:b4:98:ec: 5a:7c:b6:90:02:81:a2:98:c3:2b:f7:a7:e2:4f:1d:c9:97:fc: c1:e1:b5:cf:d9:5a:f4:85:6e:6d:e9:f6:7f:14:cf:ca:95:57: e2:f2:90:b8:b8:86:af:12:46:9a:16:5b:dc:0a:4b:b6:5c:88: e4:d0:ca:4b:fa:a3:0b:e0:ad:55:54:6a:b9:30:e0:7f:cb:0e: ed:cb:81:1d:fb:ac:d1:7a:fd:67:b0:a0:c4:a4:7a:05:2e:5a: 89:8d:0c:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoYlVVi/RkSO05LAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYwNjAxMDA1MFoXDTI1MDkwNDAxMDA1MFowLzEtMCsGA1UEAxMk ZTBkZWI2OGQtMTIwZC00NjU2LWI5MWYtNWU2OWE2YTk2YTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorq2aHNwrgjNeiBX+yrLZhlj34rxjdcyv392 cv15uFVeSVL3o7hLYaDAE9NaZ/4lak90E/mbp53m8oEzrQn45oLkJ/M9wvEulnoE pbwizQvuRRGeBxFnknjnbxGlLn7buYxTYY2o98KDdlh0i2X7Hw22rKnnLLJVVCxZ cxKRoHJNmEnZIxSpIHM39n5gPafvpt7aDQjeOl4+lmdIW8JIT5RfyCJng4IfOWjy gX4MugxD7J56XzqF0UG+SXz6gV99BilOJwaN7bxUUONnF2k4zUmw+SHv2LmmD4tN v56UydalR0ZAtV2r7/9VlLUXYw0Q7pnxqYGp5c1UFjqMfFGAZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFgX69BrBh3iUFJC+eHK6W9s5rCCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDcxM2YwMWYtNWI4MC0z Y2FjLTg1YTYtOTcxYWM1MTMyODEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqsfKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnzGORJ5k1aynBhbo3GwuyLpHLdnryqfctP6E/xllPCYWIHnoo6UYkg Uu2UxSo2auOjSFthuVA1L6xo+F9vg2Iesl2+EOiIotdbrnEsXxw9lqerf8b7+TiL z+1i9Klv+sI2eeikMorYNx4DdLatRVhNucfGm3/qL47AhWELFYdHXBkhBZ/q3hL/ CxXhwFnhSjUQF6AfCjVMw1hdcWlWSLSY7Fp8tpACgaKYwyv3p+JPHcmX/MHhtc/Z WvSFbm3p9n8Uz8qVV+LykLi4hq8SRpoWW9wKS7ZciOTQykv6owvgrVVUarkw4H/L Du3LgR37rNF6/WewoMSkegUuWomNDHQ= -----END CERTIFICATE-----Generated at Sat Jun 7 23:23:00 2025 by rpki-client