$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/acad1d7d-111c-3859-8be3-9dc66b4d4b4c.roa File: acad1d7d-111c-3859-8be3-9dc66b4d4b4c.roa (raw, json) Hash identifier: 8/fbbthE4MWROVx1YJU4J0HOAUtOw7d0aYhcfYvQ2wA= Subject key identifier: 9F:E8:48:82:BA:7F:01:52:7F:E1:7A:11:A3:21:00:80:BC:B0:A4:0E Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584A03A53BD622F74ED87E0ABFC0 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/acad1d7d-111c-3859-8be3-9dc66b4d4b4c.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 14061 IP address blocks: 198.211.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:3b:d6:22:f7:4e:d8:7e:0a:bf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=19bc3352-dab5-4274-8500-8ac33e6343f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4a:af:9e:b0:4d:43:d8:5e:34:55:d7:33:67: 46:39:dc:9e:1b:e5:9c:44:e2:78:74:ab:0f:b4:8f: 4a:96:af:76:08:98:d7:a7:82:07:e7:67:ab:ef:65: b8:cd:5d:36:93:95:bc:7f:41:f7:1f:84:0f:a7:2d: 29:5d:33:2e:a2:cf:6b:64:f1:08:9b:98:96:32:95: eb:09:16:98:00:3f:c0:96:7d:77:72:3d:ed:06:b4: f6:5d:9f:e2:d6:c5:e1:3a:d0:4b:ee:9b:e8:cc:24: 74:4d:4a:b3:b4:9d:b2:6f:45:65:90:5e:a1:bd:97: 17:dc:7a:81:2d:dd:a8:11:b0:d6:0e:58:23:f4:be: b1:59:fe:4e:74:f4:70:21:68:1a:e4:52:cc:08:d3: e0:1f:8e:75:40:da:63:3a:20:bf:78:52:11:af:db: 73:80:9b:eb:ff:c6:fc:21:4a:bb:7f:71:24:81:c9: 9f:c7:89:ea:ff:de:df:cc:4a:c9:a1:dd:1e:cd:51: ae:ff:0a:b0:f9:29:58:a2:e7:27:d4:9f:ea:38:aa: 7d:b1:86:23:66:a7:48:75:83:63:9e:8c:da:53:2d: 2e:cd:77:01:d1:b9:62:e6:fa:45:56:89:31:06:6c: 74:0d:5b:5f:4d:e8:67:cb:e0:34:1e:3e:6c:ba:ef: 78:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:E8:48:82:BA:7F:01:52:7F:E1:7A:11:A3:21:00:80:BC:B0:A4:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/acad1d7d-111c-3859-8be3-9dc66b4d4b4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 198.211.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:29:69:8f:65:12:1b:2f:08:0e:28:44:bf:97:c9:5b:dc:99: dd:2b:25:7e:b0:0c:57:17:bf:32:74:41:3e:aa:d7:6b:5d:a6: 3c:ce:71:9f:a4:a0:8d:08:94:4a:81:b3:24:64:68:21:56:78: 0e:65:aa:c7:94:de:a6:67:4e:7f:b6:24:85:ad:08:32:63:0b: 06:6d:be:fe:3a:28:7b:2c:ae:2b:28:a8:f6:08:ee:3d:ad:aa: 27:55:ce:64:c4:f1:c1:40:be:99:12:8d:de:6f:14:01:b3:c4: 73:9e:5e:06:2c:c3:24:ce:42:0f:2d:88:cb:60:ad:87:22:1b: 28:11:84:b8:cd:d3:c6:75:32:3f:a1:d3:ac:05:b6:a4:6c:d8: a9:68:24:a6:33:b4:c0:bf:92:c1:a0:1b:b0:d4:31:bc:cd:07: d1:ea:96:c1:ba:b4:24:c7:3e:d7:d6:1e:88:73:44:84:36:2f: 58:b2:fe:ed:8a:62:df:81:1d:ea:1c:de:23:3d:06:75:ed:53: ac:46:68:6f:0b:d7:ff:57:00:eb:43:f8:d6:f0:09:bb:e4:bc: 25:4c:99:5b:f1:04:cb:8e:7f:38:7e:93:15:50:e4:25:dc:fe: a0:8f:a9:50:ca:86:20:51:95:c2:d0:a5:08:4f:b7:d2:f1:86: 23:1f:73:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpTvWIvdO2H4Kv8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk MTliYzMzNTItZGFiNS00Mjc0LTg1MDAtOGFjMzNlNjM0M2YxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEqvnrBNQ9heNFXXM2dGOdyeG+WcROJ4dKsP tI9Klq92CJjXp4IH52er72W4zV02k5W8f0H3H4QPpy0pXTMuos9rZPEIm5iWMpXr CRaYAD/Aln13cj3tBrT2XZ/i1sXhOtBL7pvozCR0TUqztJ2yb0VlkF6hvZcX3HqB Ld2oEbDWDlgj9L6xWf5OdPRwIWga5FLMCNPgH451QNpjOiC/eFIRr9tzgJvr/8b8 IUq7f3Ekgcmfx4nq/97fzErJod0ezVGu/wqw+SlYoucn1J/qOKp9sYYjZqdIdYNj nozaUy0uzXcB0bli5vpFVokxBmx0DVtfTehny+A0Hj5suu94fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ/oSIK6fwFSf+F6EaMhAIC8sKQOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvYWNhZDFkN2QtMTExYy0z ODU5LThiZTMtOWRjNjZiNGQ0YjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFxtNgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEgpaY9lEhsvCA4oRL+XyVvcmd0rJX6wDFcXvzJ0QT6q12tdpjzOcZ+k oI0IlEqBsyRkaCFWeA5lqseU3qZnTn+2JIWtCDJjCwZtvv46KHssrisoqPYI7j2t qidVzmTE8cFAvpkSjd5vFAGzxHOeXgYswyTOQg8tiMtgrYciGygRhLjN08Z1Mj+h 06wFtqRs2KloJKYztMC/ksGgG7DUMbzNB9HqlsG6tCTHPtfWHohzRIQ2L1iy/u2K Yt+BHeoc3iM9BnXtU6xGaG8L1/9XAOtD+NbwCbvkvCVMmVvxBMuOfzh+kxVQ5CXc /qCPqVDKhiBRlcLQpQhPt9LxhiMfcyQ= -----END CERTIFICATE-----Generated at Mon Jun 16 06:17:00 2025 by rpki-client