$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2e60b6fb-bf89-3d1f-88f5-becae22d6055.roa File: 2e60b6fb-bf89-3d1f-88f5-becae22d6055.roa (raw, json) Hash identifier: y3eBRLwSQwD+UlXIrqx4je3WukSS6SljKyUbQbBx/sE= Subject key identifier: 3B:AA:B5:9D:48:D3:C8:F5:B7:06:12:08:B3:FC:74:DB:A3:78:0A:45 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584A2E15020231E7C41096508340 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2e60b6fb-bf89-3d1f-88f5-becae22d6055.roa Signing time: Fri 13 Jun 2025 17:50:16 +0000 ROA not before: Fri 13 Jun 2025 17:50:16 +0000 ROA not after: Thu 11 Sep 2025 17:50:16 +0000 asID: 401152 IP address blocks: 198.20.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2e:15:02:02:31:e7:c4:10:96:50:83:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jun 13 17:50:16 2025 GMT Not After : Sep 11 17:50:16 2025 GMT Subject: CN=be20c9a2-1f52-4165-8808-bd9dbd07570c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:32:68:85:6b:54:7c:47:eb:26:f1:3a:0f:02: 92:6e:8c:7f:5b:3d:c5:c8:b0:4b:4e:de:78:71:bc: 23:fe:11:97:84:19:41:c1:94:64:e2:da:fa:ae:fb: 33:0e:da:a7:22:0c:9f:b6:68:73:d7:99:b6:5b:ac: d6:ca:78:3d:90:56:67:c2:8d:1c:71:8b:97:99:0c: 91:07:9a:14:02:da:09:44:2d:9d:4c:08:b6:21:3f: be:79:5a:c3:79:63:5a:0d:c7:f4:74:ae:43:8b:1e: 67:05:86:b7:c0:0e:fb:67:5e:ce:e3:6d:a0:83:d5: 78:33:ce:94:89:25:79:6c:cc:0e:02:87:19:04:8b: 2b:b3:cf:5d:68:5c:96:98:a6:e6:78:ae:a4:95:07: 0a:df:bb:5e:62:9d:77:71:4e:29:aa:08:ac:42:5c: 2b:8a:2e:76:0b:ed:4a:44:f9:2a:51:b3:0b:e2:8d: a1:f7:d4:5f:f0:8b:dc:d8:83:f5:eb:62:4b:b7:32: 19:cf:19:29:99:42:24:fd:d2:30:02:e7:4b:23:46: 63:5f:96:7d:f6:22:75:27:b7:d8:e3:8a:a1:0d:55: e5:64:a7:ce:3d:44:c1:0e:fd:4a:16:16:b6:b8:72: d2:e6:4c:67:74:58:c4:6c:6e:96:c0:22:08:0a:3f: 1e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:AA:B5:9D:48:D3:C8:F5:B7:06:12:08:B3:FC:74:DB:A3:78:0A:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2e60b6fb-bf89-3d1f-88f5-becae22d6055.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 198.20.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:af:ce:e2:2a:33:8b:31:f5:b7:8e:f9:d4:06:98:1d:2b:b1: aa:c7:32:ee:33:91:28:27:0e:a5:cd:e7:19:4f:8a:4d:7e:3d: c8:b7:39:38:21:e9:8e:8c:00:f5:f3:f9:b4:5e:04:6c:91:28: d9:a7:6b:3c:f5:b3:47:20:8d:6c:50:46:f6:91:83:ef:b8:c4: f4:df:e6:15:6b:ac:81:79:8c:3d:82:b1:4e:a5:b0:f6:f7:8a: ea:f4:60:2b:4c:00:ba:32:b1:78:da:17:43:e7:2a:04:79:e7: 98:c8:5d:31:24:83:1c:71:70:b3:a2:f8:5d:6b:a5:2e:ec:88: 7a:03:15:4a:65:86:db:f3:c1:4a:a6:7f:6f:7b:e4:86:38:6e: 2b:01:c6:06:21:9c:22:8e:6d:76:26:73:46:8a:b1:54:ec:ca: ff:00:22:10:4e:3f:8b:d6:b0:90:4e:45:1f:7a:09:d8:14:e4: 9f:ba:b7:5f:67:dd:5c:0c:fc:e2:7e:0d:c1:ef:79:2c:08:c5: d1:cd:4e:11:f8:8b:22:57:e2:68:16:38:06:3d:e9:ee:4a:d6: bc:3b:f1:81:2e:e7:ce:75:fb:74:f4:41:36:41:d6:f6:1b:5b: 86:24:65:f7:b1:d4:7f:8e:c5:44:0b:f3:ce:89:bb:80:d6:06: 88:f4:e2:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEouFQICMefEEJZQg0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDYxMzE3NTAxNloXDTI1MDkxMTE3NTAxNlowLzEtMCsGA1UEAxMk YmUyMGM5YTItMWY1Mi00MTY1LTg4MDgtYmQ5ZGJkMDc1NzBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zJohWtUfEfrJvE6DwKSbox/Wz3FyLBLTt54 cbwj/hGXhBlBwZRk4tr6rvszDtqnIgyftmhz15m2W6zWyng9kFZnwo0ccYuXmQyR B5oUAtoJRC2dTAi2IT++eVrDeWNaDcf0dK5Dix5nBYa3wA77Z17O422gg9V4M86U iSV5bMwOAocZBIsrs89daFyWmKbmeK6klQcK37teYp13cU4pqgisQlwrii52C+1K RPkqUbML4o2h99Rf8Ivc2IP162JLtzIZzxkpmUIk/dIwAudLI0ZjX5Z99iJ1J7fY 44qhDVXlZKfOPUTBDv1KFha2uHLS5kxndFjEbG6WwCIICj8eDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDuqtZ1I08j1twYSCLP8dNujeApFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMmU2MGI2ZmItYmY4OS0z ZDFmLTg4ZjUtYmVjYWUyMmQ2MDU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxhSYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGyvzuIqM4sx9beO+dQGmB0rsarHMu4zkSgnDqXN5xlPik1+Pci3OTgh 6Y6MAPXz+bReBGyRKNmnazz1s0cgjWxQRvaRg++4xPTf5hVrrIF5jD2CsU6lsPb3 iur0YCtMALoysXjaF0PnKgR555jIXTEkgxxxcLOi+F1rpS7siHoDFUplhtvzwUqm f2975IY4bisBxgYhnCKObXYmc0aKsVTsyv8AIhBOP4vWsJBORR96CdgU5J+6t19n 3VwM/OJ+DcHveSwIxdHNThH4iyJX4mgWOAY96e5K1rw78YEu5851+3T0QTZB1vYb W4YkZfex1H+OxUQL886Ju4DWBoj04r0= -----END CERTIFICATE-----Generated at Sun Jun 15 21:05:13 2025 by rpki-client