$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596/cebecf45-75c8-339f-b4d9-cff06abf94d8.roa File: cebecf45-75c8-339f-b4d9-cff06abf94d8.roa (raw, json) Hash identifier: 5sBNODe1nkAnhYAH7vOXsuNkR9XkWURO5xnhGHGnJWQ= Subject key identifier: 4D:1B:C3:88:FC:EA:B6:1A:B8:DA:28:14:F3:25:34:C0:88:F0:30:95 Certificate issuer: /CN=e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596 Certificate serial: 010D0C9F4328584A1E2AA27E2D70CEFBC4AFF100 Authority key identifier: ED:4B:46:DC:16:7F:90:97:72:93:5F:B5:77:41:50:FD:92:5C:C3:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596/cebecf45-75c8-339f-b4d9-cff06abf94d8.roa Signing time: Sun 08 Jun 2025 01:00:49 +0000 ROA not before: Sun 08 Jun 2025 01:00:49 +0000 ROA not after: Sat 06 Sep 2025 01:00:49 +0000 asID: 46555 IP address blocks: 198.133.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1e:2a:a2:7e:2d:70:ce:fb:c4:af:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596 Validity Not Before: Jun 8 01:00:49 2025 GMT Not After : Sep 6 01:00:49 2025 GMT Subject: CN=bb04d62d-7758-4ce1-85ed-b9db9930c9da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8e:f3:ad:ef:7a:d7:37:66:2a:51:73:ba:4c: a0:47:d0:d5:9b:ef:d4:ff:d2:2f:dd:1f:14:23:01: f1:e8:21:3e:23:80:67:0c:92:c7:24:5d:89:51:81: b3:db:1b:9d:17:53:15:ef:ab:9f:bd:e8:9f:37:30: ea:6d:6a:7d:3b:2a:d6:6c:bf:9d:6c:8f:d4:43:71: 77:9f:d5:2f:24:0f:12:4f:6d:27:8d:bf:73:03:b4: 71:84:ad:e7:6d:b8:58:73:72:6e:46:22:8d:19:60: 08:31:70:5f:5c:a6:5b:1a:20:5a:5c:a8:36:8b:18: 65:92:fa:6d:52:60:68:f3:79:02:19:22:64:1c:1c: a7:cc:da:8c:51:f7:e1:d7:01:9f:b1:67:2f:73:42: 9b:97:5c:df:8c:da:70:10:23:d7:8b:33:b3:6e:ca: 81:cc:b2:d6:63:d3:c6:b7:c0:dd:b8:90:81:89:af: 99:4a:1c:82:b4:3c:69:af:b4:9b:cb:47:16:89:08: 44:b2:83:6c:2e:bc:c6:4d:bf:6b:29:fe:a3:70:b7: a4:b9:30:db:70:96:9f:c3:a4:ca:7a:21:5f:e9:e9: f4:48:c8:55:7c:1d:ee:d3:73:83:6c:4a:a0:0f:39: e7:16:af:4e:07:3f:bf:17:7e:c8:0d:b2:c1:4f:fa: fc:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:1B:C3:88:FC:EA:B6:1A:B8:DA:28:14:F3:25:34:C0:88:F0:30:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596/cebecf45-75c8-339f-b4d9-cff06abf94d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596.crl X509v3 Authority Key Identifier: keyid:ED:4B:46:DC:16:7F:90:97:72:93:5F:B5:77:41:50:FD:92:5C:C3:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596.cer sbgp-ipAddrBlock: critical IPv4: 198.133.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:61:46:c3:ac:b2:6a:51:61:d3:22:d6:26:a1:69:df:4f:c5: fd:91:c1:7b:b5:d7:41:be:9b:0d:8e:2b:d4:9e:a5:75:5a:f4: f4:c9:3e:46:84:ae:2a:56:f7:9f:28:35:14:1e:46:1c:fe:37: d3:4a:39:cc:ec:fa:74:de:40:27:31:4f:79:63:7d:9e:db:80: b2:cd:8f:ff:f1:38:ca:a9:91:5e:1b:4c:55:df:99:4b:37:77: f6:ae:45:dd:92:c0:e0:a0:2f:29:f3:1a:f1:0d:94:55:4b:fa: f0:d2:2a:f4:01:d8:99:5f:e3:41:b9:38:e2:9b:fe:f0:aa:ae: 8b:cc:ff:ae:a2:a4:50:de:cb:b9:ae:d4:cf:27:26:32:5b:5c: 6d:76:a7:7b:24:fa:85:23:56:4f:e1:e1:0d:1a:f3:f5:2a:89: 13:5e:0f:6d:02:90:ee:77:cb:cc:2a:c7:92:86:41:d2:b8:b0: 8e:ca:c2:86:98:2a:54:8b:db:a0:2c:bf:91:a7:d5:15:8f:7d: f5:07:10:42:1f:e3:3e:d2:56:95:c4:9d:c3:91:e8:d9:92:fd: 9e:e4:20:16:bc:14:7e:26:b5:89:5d:46:6d:c7:e5:4d:7f:db: 42:73:f2:b6:ea:cd:8e:69:93:f8:b4:96:d4:47:cb:d9:4a:d0: b7:2b:e4:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoeKqJ+LXDO+8Sv8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTZhZGE4ZjUtNmJlMy00YTlmLTlhMmMtMWUxYWEwZTM3 NTk2MB4XDTI1MDYwODAxMDA0OVoXDTI1MDkwNjAxMDA0OVowLzEtMCsGA1UEAxMk YmIwNGQ2MmQtNzc1OC00Y2UxLTg1ZWQtYjlkYjk5MzBjOWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtI7zre961zdmKlFzukygR9DVm+/U/9Iv3R8U IwHx6CE+I4BnDJLHJF2JUYGz2xudF1MV76ufveifNzDqbWp9OyrWbL+dbI/UQ3F3 n9UvJA8ST20njb9zA7RxhK3nbbhYc3JuRiKNGWAIMXBfXKZbGiBaXKg2ixhlkvpt UmBo83kCGSJkHBynzNqMUffh1wGfsWcvc0Kbl1zfjNpwECPXizOzbsqBzLLWY9PG t8DduJCBia+ZShyCtDxpr7Sby0cWiQhEsoNsLrzGTb9rKf6jcLekuTDbcJafw6TK eiFf6en0SMhVfB3u03ODbEqgDznnFq9OBz+/F37IDbLBT/r8eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE0bw4j86rYauNooFPMlNMCI8DCVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lNmFk YThmNS02YmUzLTRhOWYtOWEyYy0xZTFhYTBlMzc1OTYvY2ViZWNmNDUtNzVjOC0z MzlmLWI0ZDktY2ZmMDZhYmY5NGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTZhZGE4ZjUtNmJlMy00YTlmLTlh MmMtMWUxYWEwZTM3NTk2L2U2YWRhOGY1LTZiZTMtNGE5Zi05YTJjLTFlMWFhMGUz NzU5Ni5jcmwwHwYDVR0jBBgwFoAU7UtG3BZ/kJdyk1+1d0FQ/ZJcw20wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lNmFkYThmNS02YmUzLTRhOWYtOWEyYy0xZTFh YTBlMzc1OTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxoXSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACthRsOssmpRYdMi1iahad9Pxf2RwXu110G+mw2OK9SepXVa9PTJPkaE ripW958oNRQeRhz+N9NKOczs+nTeQCcxT3ljfZ7bgLLNj//xOMqpkV4bTFXfmUs3 d/auRd2SwOCgLynzGvENlFVL+vDSKvQB2Jlf40G5OOKb/vCqrovM/66ipFDey7mu 1M8nJjJbXG12p3sk+oUjVk/h4Q0a8/UqiRNeD20CkO53y8wqx5KGQdK4sI7KwoaY KlSL26Asv5Gn1RWPffUHEEIf4z7SVpXEncOR6NmS/Z7kIBa8FH4mtYldRm3H5U1/ 20Jz8rbqzY5pk/i0ltRHy9lK0Lcr5Hs= -----END CERTIFICATE-----Generated at Sun Jun 15 14:23:36 2025 by rpki-client