$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/ead2a773-fde3-377f-8da5-a58361b3468c.roa File: ead2a773-fde3-377f-8da5-a58361b3468c.roa (raw, json) Hash identifier: BmJmnfo9ZwgXazAGanx0l9ajQspdchJ3+br0K4LEVFU= Subject key identifier: EA:13:93:6D:11:46:72:ED:4A:8E:C7:06:B9:B6:E8:93:C9:A4:72:2F Certificate issuer: /CN=88842878-1050-4df7-822b-ea8ec25db83d Certificate serial: 010D0C9F4328584A23C0069CE3708C793FA37F00 Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/ead2a773-fde3-377f-8da5-a58361b3468c.roa Signing time: Tue 10 Jun 2025 01:00:50 +0000 ROA not before: Tue 10 Jun 2025 01:00:50 +0000 ROA not after: Mon 08 Sep 2025 01:00:50 +0000 asID: 2495 IP address blocks: 198.248.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:23:c0:06:9c:e3:70:8c:79:3f:a3:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d Validity Not Before: Jun 10 01:00:50 2025 GMT Not After : Sep 8 01:00:50 2025 GMT Subject: CN=9c7eef53-84bd-4866-b284-c0fb8b4ba23d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ca:95:7a:d3:68:55:a5:36:25:9d:29:8d:7e: 23:45:2f:b7:33:01:81:b2:96:ce:31:77:8a:95:5d: 8e:8a:ab:ef:e3:3a:a2:9d:1c:7a:93:be:ef:89:db: b6:fa:66:39:4f:c7:b0:ae:71:da:a2:77:b3:e2:6c: b1:e2:a5:78:89:14:60:84:67:f7:e0:b3:2a:3e:98: ca:6f:3d:87:a9:6e:b8:5f:ca:46:3a:eb:e5:67:44: 75:54:27:75:a3:ae:44:6e:d3:82:07:f8:88:8b:5f: 8d:68:f7:f2:56:ff:23:90:81:0a:24:4c:3d:18:58: e8:b6:11:ac:92:93:8d:24:7c:f7:49:ec:8c:aa:85: 70:49:66:72:35:8a:79:ba:98:23:fc:b1:31:ab:34: a7:3a:4f:85:8b:b6:88:1d:e7:c2:aa:a2:e8:2e:60: ce:f1:ee:0d:c9:f2:28:71:46:8f:e2:97:14:5d:0c: 22:10:ad:39:81:db:d9:99:b9:4f:36:39:89:3b:01: e7:47:5e:72:55:01:89:41:d0:c4:35:71:8e:e6:cd: b4:dd:f7:59:68:f1:be:9e:84:55:48:87:ce:4a:d1: f2:3d:62:09:eb:2e:3f:43:63:cd:ba:4e:5a:9d:0a: b1:2b:bf:94:ba:3c:46:f7:53:4c:e9:34:1b:f1:45: 57:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:13:93:6D:11:46:72:ED:4A:8E:C7:06:B9:B6:E8:93:C9:A4:72:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/ead2a773-fde3-377f-8da5-a58361b3468c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl X509v3 Authority Key Identifier: keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer sbgp-ipAddrBlock: critical IPv4: 198.248.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:e3:a5:46:7b:4a:51:31:d5:ce:e6:bb:34:2d:28:49:5b:f1: 66:f2:91:2b:5d:27:28:70:5b:46:a7:47:da:f5:a9:b6:69:c4: 06:52:4a:6f:0a:0b:08:ef:79:e5:5b:42:97:c1:22:30:b3:b1: 69:c0:76:75:61:b8:d4:6b:3c:25:6c:da:e6:cb:cf:42:f4:1b: 8a:fd:2d:23:85:27:89:ca:36:8c:6a:7d:32:16:fa:56:25:90: e5:e8:e0:b7:6c:43:eb:1e:dc:2a:6e:72:e6:74:6d:b9:62:50: 8a:9e:ce:0d:89:2f:63:ae:c8:f7:06:a5:fd:08:22:93:59:c4: b9:eb:b2:93:53:f9:1e:93:c8:03:ad:c0:99:82:45:e7:76:01: 9c:c4:31:15:ea:2d:43:8b:c7:a5:a8:1b:5d:3a:ca:f4:d2:83: da:02:20:9a:c6:d0:9a:a9:50:65:49:72:f7:71:6c:4e:8c:c9: a5:e7:83:2c:29:7e:f0:fc:d5:2a:8e:a6:91:ed:cd:a6:1d:3f: 64:bf:c1:78:06:ea:68:d0:df:bc:33:f2:4e:6e:fc:dc:99:48: b5:8b:1e:bf:42:7e:60:3e:17:b5:c2:40:b0:42:96:29:e9:d1: e8:b4:f5:c3:10:59:fd:ec:10:56:3c:0c:0f:8d:b0:0d:3e:2c: d1:b8:d7:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEojwAac43CMeT+jfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg4NDI4NzgtMTA1MC00ZGY3LTgyMmItZWE4ZWMyNWRi ODNkMB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk OWM3ZWVmNTMtODRiZC00ODY2LWIyODQtYzBmYjhiNGJhMjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8qVetNoVaU2JZ0pjX4jRS+3MwGBspbOMXeK lV2Oiqvv4zqinRx6k77vidu2+mY5T8ewrnHaonez4myx4qV4iRRghGf34LMqPpjK bz2HqW64X8pGOuvlZ0R1VCd1o65EbtOCB/iIi1+NaPfyVv8jkIEKJEw9GFjothGs kpONJHz3SeyMqoVwSWZyNYp5upgj/LExqzSnOk+Fi7aIHefCqqLoLmDO8e4NyfIo cUaP4pcUXQwiEK05gdvZmblPNjmJOwHnR15yVQGJQdDENXGO5s203fdZaPG+noRV SIfOStHyPWIJ6y4/Q2PNuk5anQqxK7+UujxG91NM6TQb8UVXoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOoTk20RRnLtSo7HBrm26JPJpHIvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0 Mjg3OC0xMDUwLTRkZjctODIyYi1lYThlYzI1ZGI4M2QvZWFkMmE3NzMtZmRlMy0z NzdmLThkYTUtYTU4MzYxYjM0NjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODg4NDI4NzgtMTA1MC00ZGY3LTgy MmItZWE4ZWMyNWRiODNkLzg4ODQyODc4LTEwNTAtNGRmNy04MjJiLWVhOGVjMjVk YjgzZC5jcmwwHwYDVR0jBBgwFoAUCvQvaSDxqtdtZzyGmgTIgB6tfZkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0Mjg3OC0xMDUwLTRkZjctODIyYi1lYThl YzI1ZGI4M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxvjcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbjpUZ7SlEx1c7muzQtKElb8WbykStdJyhwW0anR9r1qbZpxAZSSm8K CwjveeVbQpfBIjCzsWnAdnVhuNRrPCVs2ubLz0L0G4r9LSOFJ4nKNoxqfTIW+lYl kOXo4LdsQ+se3CpucuZ0bbliUIqezg2JL2OuyPcGpf0IIpNZxLnrspNT+R6TyAOt wJmCRed2AZzEMRXqLUOLx6WoG106yvTSg9oCIJrG0JqpUGVJcvdxbE6MyaXngywp fvD81SqOppHtzaYdP2S/wXgG6mjQ37wz8k5u/NyZSLWLHr9CfmA+F7XCQLBClinp 0ei09cMQWf3sEFY8DA+NsA0+LNG410I= -----END CERTIFICATE-----Generated at Mon Jun 16 05:18:41 2025 by rpki-client