$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/db0fcf69-663e-3c95-80e5-791ef9b1704b.roa File: db0fcf69-663e-3c95-80e5-791ef9b1704b.roa (raw, json) Hash identifier: VtBcQV6HQp3rqWoXDiTuZ8QXwIERJ+xkX6PsEg26d2o= Subject key identifier: 54:2A:29:2E:BC:C1:31:C5:47:B9:EB:2D:12:34:39:84:B2:40:8E:23 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F43285849F87A83080DA7D593F429CB00 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/db0fcf69-663e-3c95-80e5-791ef9b1704b.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 137409 IP address blocks: 98.159.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:83:08:0d:a7:d5:93:f4:29:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=3ef8e3cf-4109-4ab4-a233-f6a052e78173 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ca:15:de:62:22:7a:15:d5:31:37:01:96:b1: 1c:2d:2d:f6:97:16:a3:ef:88:4e:af:47:d5:e3:cb: 19:49:52:f3:04:0b:a2:43:4f:11:68:f2:d5:82:12: aa:2d:ea:89:f7:2e:2f:36:8e:27:8c:e5:6d:d1:2a: e0:86:40:0c:08:ac:a4:49:ea:b5:93:cf:31:c0:17: af:ef:eb:ef:76:a0:70:0c:b0:95:19:37:86:db:7f: 39:f4:de:43:81:e0:3b:2d:5a:be:24:1c:7e:f8:80: c9:f2:0a:bd:98:bd:81:72:96:a8:26:5f:ab:ae:f6: b8:cc:f3:4f:46:e8:0b:d8:07:53:61:00:29:33:3d: 3c:15:49:ea:88:3c:19:53:e4:74:8e:35:c5:d2:23: 3b:15:79:30:52:11:46:06:bf:cd:d0:12:de:e9:46: 85:11:b7:2b:d4:8a:d8:ee:b9:96:52:5b:70:8b:53: 0f:1e:8c:8f:cf:93:df:5c:58:ba:c0:09:12:71:e6: 53:e3:53:6f:08:72:53:6d:33:6f:fb:78:92:3c:f6: bc:cd:83:9d:44:e1:1c:f8:fe:c3:38:b0:57:29:5c: 62:d5:22:e8:0e:08:d7:1a:02:3e:0b:8e:20:f9:e4: d5:e8:7e:c9:4a:95:ff:0f:dd:be:0e:15:ec:a8:8c: 21:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:2A:29:2E:BC:C1:31:C5:47:B9:EB:2D:12:34:39:84:B2:40:8E:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/db0fcf69-663e-3c95-80e5-791ef9b1704b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 98.159.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:10:c0:13:ef:76:b2:15:f3:6a:64:94:88:93:03:0f:db:28: 93:ab:42:17:97:fc:d5:f0:d7:82:cc:6c:14:b8:2a:d4:2c:68: da:9e:89:0c:51:04:fc:9b:04:6c:62:e8:cc:55:90:da:55:2b: c9:cb:ef:8e:29:10:80:ba:46:6d:10:e0:22:1b:be:45:23:18: 5b:5d:08:21:78:f3:70:9e:69:e1:d7:2b:65:e6:5d:78:f8:bb: bb:62:da:96:b1:bc:dd:0e:e1:ee:39:d7:5e:61:4d:29:f8:8d: d6:d2:32:2b:9b:94:cf:cb:df:37:96:0c:f9:45:a7:a5:70:85: e0:b5:51:12:27:cd:6e:58:c2:cf:17:f9:4d:29:b0:b9:3d:0b: 24:bd:2f:2c:0e:39:28:5c:e6:cf:a5:9c:fa:27:46:ed:e0:a8: 60:2e:0d:b9:07:6b:99:d2:99:3d:2d:6f:01:3a:cd:c0:5d:4e: 3c:f7:0a:8d:a1:57:f6:e4:8b:f6:85:9b:0b:df:d6:02:58:d0: c6:c0:16:13:a5:1d:06:17:90:e9:ce:ad:d0:f7:4c:16:e7:1a: fb:af:fa:dd:1a:3a:ea:49:47:2d:f4:20:7e:f5:9f:b8:af:d2: ad:b8:53:4c:59:74:04:2c:f9:1b:9b:5e:96:43:27:1f:31:94: 01:4c:5e:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn4eoMIDafVk/QpywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk M2VmOGUzY2YtNDEwOS00YWI0LWEyMzMtZjZhMDUyZTc4MTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsoV3mIiehXVMTcBlrEcLS32lxaj74hOr0fV 48sZSVLzBAuiQ08RaPLVghKqLeqJ9y4vNo4njOVt0SrghkAMCKykSeq1k88xwBev 7+vvdqBwDLCVGTeG23859N5DgeA7LVq+JBx++IDJ8gq9mL2BcpaoJl+rrva4zPNP RugL2AdTYQApMz08FUnqiDwZU+R0jjXF0iM7FXkwUhFGBr/N0BLe6UaFEbcr1IrY 7rmWUltwi1MPHoyPz5PfXFi6wAkSceZT41NvCHJTbTNv+3iSPPa8zYOdROEc+P7D OLBXKVxi1SLoDgjXGgI+C44g+eTV6H7JSpX/D92+DhXsqIwhIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQqKS68wTHFR7nrLRI0OYSyQI4jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvZGIwZmNmNjktNjYzZS0z Yzk1LTgwZTUtNzkxZWY5YjE3MDRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYp8kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAQwBPvdrIV82pklIiTAw/bKJOrQheX/NXw14LMbBS4KtQsaNqeiQxR BPybBGxi6MxVkNpVK8nL744pEIC6Rm0Q4CIbvkUjGFtdCCF483CeaeHXK2XmXXj4 u7ti2paxvN0O4e45115hTSn4jdbSMiublM/L3zeWDPlFp6VwheC1URInzW5Yws8X +U0psLk9CyS9LywOOShc5s+lnPonRu3gqGAuDbkHa5nSmT0tbwE6zcBdTjz3Co2h V/bki/aFmwvf1gJY0MbAFhOlHQYXkOnOrdD3TBbnGvuv+t0aOupJRy30IH71n7iv 0q24U0xZdAQs+RubXpZDJx8xlAFMXtk= -----END CERTIFICATE-----Generated at Tue Jun 17 00:32:34 2025 by rpki-client