$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b5217f05-3564-3e92-84db-00e602008e43.roa File: b5217f05-3564-3e92-84db-00e602008e43.roa (raw, json) Hash identifier: YXj95wkvPDL608rInAyEKiwL5ZNbQYvFOVNyV7c+XFU= Subject key identifier: 43:90:94:D4:24:8E:0C:13:AB:C4:96:CA:99:EB:23:F8:D6:33:AC:9E Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285849DF5A5339158BC54F496BC630 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b5217f05-3564-3e92-84db-00e602008e43.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 30036 IP address blocks: 198.40.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:53:39:15:8b:c5:4f:49:6b:c6:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=130403d5-541d-4f14-ab4e-0b8d5533a3f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:74:2d:ce:54:14:bc:87:ea:8d:45:bb:44:e1: 2f:11:45:31:31:d8:5e:19:77:c0:2c:3f:6f:cf:9a: d4:5c:70:2a:6b:6b:57:e8:39:b2:9b:ba:be:f6:b0: 42:44:17:45:b7:13:ef:70:92:32:bd:16:4a:65:0f: 09:d5:3e:81:45:58:44:95:98:76:7e:c7:36:0e:87: 29:8b:a0:20:86:fe:59:e4:d3:b4:b8:1a:9a:27:5e: 8c:ea:ae:36:e0:5d:ea:d5:b6:83:47:c3:09:76:41: 58:73:4e:f9:d2:30:2f:00:0f:4d:7e:9b:db:c4:97: 51:cc:49:f4:7b:e2:27:94:a4:c8:ae:52:1b:0f:81: 12:67:b6:9a:cb:0a:5d:dd:14:da:9d:8b:5d:11:f9: 3d:f2:4f:77:66:ac:fc:32:d1:a4:3e:ca:f8:fe:db: ad:fa:ef:5c:7a:d4:9a:69:2f:3c:61:1c:4d:be:ba: c5:32:40:ee:8d:fb:c3:f3:3f:5e:30:5e:7e:b9:3c: 98:68:31:24:5f:3a:90:d8:9b:87:f4:58:aa:9c:69: d0:d7:04:95:18:07:1e:52:49:16:1c:76:d7:71:bb: e1:ff:4a:95:3b:17:3f:89:6a:8f:6f:64:35:59:08: 33:cf:55:ab:b7:e5:00:bc:25:9d:77:58:a0:90:65: 36:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:90:94:D4:24:8E:0C:13:AB:C4:96:CA:99:EB:23:F8:D6:33:AC:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b5217f05-3564-3e92-84db-00e602008e43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 198.40.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:54:70:53:6d:39:31:6c:7a:76:fb:02:33:19:23:ca:9a:f5: 4a:32:88:61:98:63:44:39:ce:42:1d:96:b5:33:30:75:cb:61: c6:50:db:85:ee:58:f8:64:29:8a:8f:59:79:1a:41:ce:f7:fb: eb:37:c5:19:29:31:ae:44:47:89:39:f7:76:87:2a:b7:ad:14: ee:a7:5c:69:1f:66:5b:c1:2a:e9:4e:ee:5c:1f:9b:52:0c:3d: b0:1d:b0:e5:c4:6c:3b:d9:a7:c1:fe:3e:c0:82:6e:51:d6:f1: 87:ff:b0:04:e2:5f:e6:b6:62:5a:db:71:d7:65:a6:23:c6:60: e6:87:8a:f2:bf:44:95:4a:83:1c:c6:fa:bf:30:ed:97:82:a3: 46:dd:b9:a3:8c:39:75:bb:06:a4:74:de:ef:d1:da:a0:09:6f: da:a3:c1:9d:80:8a:99:4c:83:53:50:4e:85:3b:ce:ad:eb:a3: 9b:84:ba:b6:24:04:5d:c9:87:65:39:f6:28:c3:22:5c:2e:1c: 02:05:7b:5d:04:53:5c:be:cf:8a:d8:c0:65:86:74:39:3b:21: d6:79:2f:d7:03:9d:d6:96:40:ad:f7:48:c1:68:93:92:c5:1a: b7:f5:10:43:e9:74:df:9b:fc:29:6c:e9:44:ee:c5:07:f7:47: 55:f6:5d:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfWlM5FYvFT0lrxjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk MTMwNDAzZDUtNTQxZC00ZjE0LWFiNGUtMGI4ZDU1MzNhM2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHQtzlQUvIfqjUW7ROEvEUUxMdheGXfALD9v z5rUXHAqa2tX6Dmym7q+9rBCRBdFtxPvcJIyvRZKZQ8J1T6BRVhElZh2fsc2Docp i6Aghv5Z5NO0uBqaJ16M6q424F3q1baDR8MJdkFYc0750jAvAA9NfpvbxJdRzEn0 e+InlKTIrlIbD4ESZ7aaywpd3RTanYtdEfk98k93Zqz8MtGkPsr4/tut+u9cetSa aS88YRxNvrrFMkDujfvD8z9eMF5+uTyYaDEkXzqQ2JuH9FiqnGnQ1wSVGAceUkkW HHbXcbvh/0qVOxc/iWqPb2Q1WQgzz1Wrt+UAvCWdd1igkGU2FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEOQlNQkjgwTq8SWypnrI/jWM6yeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYjUyMTdmMDUtMzU2NC0z ZTkyLTg0ZGItMDBlNjAyMDA4ZTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxijiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpUcFNtOTFsenb7AjMZI8qa9UoyiGGYY0Q5zkIdlrUzMHXLYcZQ24Xu WPhkKYqPWXkaQc73++s3xRkpMa5ER4k593aHKretFO6nXGkfZlvBKulO7lwfm1IM PbAdsOXEbDvZp8H+PsCCblHW8Yf/sATiX+a2YlrbcddlpiPGYOaHivK/RJVKgxzG +r8w7ZeCo0bduaOMOXW7BqR03u/R2qAJb9qjwZ2AiplMg1NQToU7zq3ro5uEurYk BF3Jh2U59ijDIlwuHAIFe10EU1y+z4rYwGWGdDk7IdZ5L9cDndaWQK33SMFok5LF Grf1EEPpdN+b/Cls6UTuxQf3R1X2XdY= -----END CERTIFICATE-----Generated at Sun Jun 15 21:49:03 2025 by rpki-client