$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/2f038248-705f-3c26-9387-b87281a39922.roa File: 2f038248-705f-3c26-9387-b87281a39922.roa (raw, json) Hash identifier: ZWjfRvN+nthdW0vJCgGRAGMc57BvrXqz0mNczIBWQGM= Subject key identifier: F4:B7:6F:6F:FC:58:23:3F:A5:48:17:C2:30:17:E8:00:17:CB:26:79 Certificate issuer: /CN=88842878-1050-4df7-822b-ea8ec25db83d Certificate serial: 010D0C9F4328584A23C000E7EE7820CD3C0BA700 Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/2f038248-705f-3c26-9387-b87281a39922.roa Signing time: Tue 10 Jun 2025 01:00:50 +0000 ROA not before: Tue 10 Jun 2025 01:00:50 +0000 ROA not after: Mon 08 Sep 2025 01:00:50 +0000 asID: 2495 IP address blocks: 198.248.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:23:c0:00:e7:ee:78:20:cd:3c:0b:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d Validity Not Before: Jun 10 01:00:50 2025 GMT Not After : Sep 8 01:00:50 2025 GMT Subject: CN=ec2dddf5-8dbf-4b16-b5a7-70a723bc183e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:5e:d2:d9:b6:76:fe:2e:13:b7:19:7f:a0:ca: b7:af:ba:5f:6a:4e:19:2f:76:b6:80:45:28:5d:48: 2d:7d:49:19:2b:22:47:36:9c:e9:87:6a:a5:d5:81: 07:c3:55:f1:01:04:63:eb:6d:fd:f1:3b:41:aa:3d: 36:b4:f6:ec:f6:47:37:bd:c0:d2:15:e6:86:75:47: f8:e0:c8:ed:7f:62:f2:2b:39:d2:55:ad:cd:1c:9e: 6d:44:a2:aa:6a:05:a7:7d:0a:7d:68:21:a4:72:7f: ab:32:d6:a3:5b:3a:d0:5c:2e:76:08:fa:f6:16:f5: 17:77:7e:f1:14:61:66:dd:47:0c:79:ed:99:0d:2e: e5:c0:4a:dc:ae:6e:1b:e6:cc:02:aa:07:c0:1c:54: 81:1c:55:9f:61:eb:80:a6:7c:36:eb:13:8f:cf:63: 85:07:7f:7e:90:a0:5a:fa:cd:7c:6a:95:8e:de:1b: 18:89:04:38:e9:04:0a:57:c3:47:f5:69:a2:4e:f1: 18:a4:0c:c9:69:d3:f6:87:e4:97:a8:fc:27:c6:de: 3d:77:36:c6:12:d3:10:f2:bb:ac:de:23:52:d6:c3: 3c:af:a4:ad:ce:b2:0d:4a:28:27:1f:3b:17:9d:79: fb:b7:99:72:c5:a3:15:df:2b:d8:f2:61:da:4a:bd: f8:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:B7:6F:6F:FC:58:23:3F:A5:48:17:C2:30:17:E8:00:17:CB:26:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/2f038248-705f-3c26-9387-b87281a39922.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl X509v3 Authority Key Identifier: keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer sbgp-ipAddrBlock: critical IPv4: 198.248.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:c8:53:19:cd:84:a0:32:07:72:58:a3:0e:ac:71:78:d8:10: 12:be:41:38:3d:35:e8:70:c3:92:50:73:e2:a1:05:e3:35:63: 8f:2a:1f:99:c9:76:09:d5:d2:7b:b0:d3:a8:db:65:66:09:f2: 49:cc:74:af:50:fb:10:4f:61:c4:28:76:29:6a:46:d6:95:d7: c0:37:1f:60:aa:e6:62:11:07:ea:47:77:2f:eb:43:63:28:81: c9:34:0d:62:6f:94:13:53:ea:5f:e2:7e:71:34:4d:d6:4c:41: ea:f5:cd:f3:52:15:cb:bc:a5:70:60:5c:f2:9c:70:e6:39:4d: 33:2d:01:c2:9d:d7:65:8b:65:b8:f5:b7:40:60:c8:07:e3:a3: 7b:1d:ce:d7:b1:92:72:f8:4b:60:b7:8b:b2:17:21:0c:0f:10: 1a:1c:09:e4:2f:c2:2d:87:d3:0a:96:0d:43:a2:0e:cf:85:20: 6b:b4:06:f4:62:16:b2:cb:49:dd:6c:16:e4:05:9c:a9:59:43: 57:5f:7b:b2:1c:be:68:e1:75:9e:f4:ee:56:c1:eb:a5:fb:9e: d4:b3:d8:46:05:53:8c:48:67:2c:00:9f:43:99:66:b6:33:fb: 7e:b4:b2:d7:7a:c2:e9:f0:c6:06:1c:36:6b:42:54:10:93:b0: a5:33:66:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEojwADn7nggzTwLpwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg4NDI4NzgtMTA1MC00ZGY3LTgyMmItZWE4ZWMyNWRi ODNkMB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk ZWMyZGRkZjUtOGRiZi00YjE2LWI1YTctNzBhNzIzYmMxODNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg17S2bZ2/i4Ttxl/oMq3r7pfak4ZL3a2gEUo XUgtfUkZKyJHNpzph2ql1YEHw1XxAQRj62398TtBqj02tPbs9kc3vcDSFeaGdUf4 4Mjtf2LyKznSVa3NHJ5tRKKqagWnfQp9aCGkcn+rMtajWzrQXC52CPr2FvUXd37x FGFm3UcMee2ZDS7lwErcrm4b5swCqgfAHFSBHFWfYeuApnw26xOPz2OFB39+kKBa +s18apWO3hsYiQQ46QQKV8NH9WmiTvEYpAzJadP2h+SXqPwnxt49dzbGEtMQ8rus 3iNS1sM8r6StzrINSignHzsXnXn7t5lyxaMV3yvY8mHaSr34FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPS3b2/8WCM/pUgXwjAX6AAXyyZ5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0 Mjg3OC0xMDUwLTRkZjctODIyYi1lYThlYzI1ZGI4M2QvMmYwMzgyNDgtNzA1Zi0z YzI2LTkzODctYjg3MjgxYTM5OTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODg4NDI4NzgtMTA1MC00ZGY3LTgy MmItZWE4ZWMyNWRiODNkLzg4ODQyODc4LTEwNTAtNGRmNy04MjJiLWVhOGVjMjVk YjgzZC5jcmwwHwYDVR0jBBgwFoAUCvQvaSDxqtdtZzyGmgTIgB6tfZkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0Mjg3OC0xMDUwLTRkZjctODIyYi1lYThl YzI1ZGI4M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxvjMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrIUxnNhKAyB3JYow6scXjYEBK+QTg9Nehww5JQc+KhBeM1Y48qH5nJ dgnV0nuw06jbZWYJ8knMdK9Q+xBPYcQodilqRtaV18A3H2Cq5mIRB+pHdy/rQ2Mo gck0DWJvlBNT6l/ifnE0TdZMQer1zfNSFcu8pXBgXPKccOY5TTMtAcKd12WLZbj1 t0BgyAfjo3sdztexknL4S2C3i7IXIQwPEBocCeQvwi2H0wqWDUOiDs+FIGu0BvRi FrLLSd1sFuQFnKlZQ1dfe7IcvmjhdZ707lbB66X7ntSz2EYFU4xIZywAn0OZZrYz +360std6wunwxgYcNmtCVBCTsKUzZhg= -----END CERTIFICATE-----Generated at Wed Jun 18 13:26:11 2025 by rpki-client