$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/04c4ff3f-33aa-3550-8e99-e3c724d7c968.roa File: 04c4ff3f-33aa-3550-8e99-e3c724d7c968.roa (raw, json) Hash identifier: 1k+yqaZE6cSFZJ4EJod54KcNC9uCfGTBICl6hxiiRmk= Subject key identifier: AB:08:55:EC:A9:AF:5F:85:1A:67:26:FE:5D:84:4B:64:30:E1:02:11 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584A225AC0B1B3341B984D853C00 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/04c4ff3f-33aa-3550-8e99-e3c724d7c968.roa Signing time: Mon 09 Jun 2025 13:01:01 +0000 ROA not before: Mon 09 Jun 2025 13:01:01 +0000 ROA not after: Sun 07 Sep 2025 13:01:01 +0000 asID: 22781 IP address blocks: 98.158.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:22:5a:c0:b1:b3:34:1b:98:4d:85:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Jun 9 13:01:01 2025 GMT Not After : Sep 7 13:01:01 2025 GMT Subject: CN=fbd6f3b6-6bd2-42da-85f6-8f8d4f6982fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0c:78:ae:79:41:9a:de:73:57:91:f0:f2:a5: 8c:a3:7b:22:0e:e6:1b:28:ea:54:8b:c0:65:1c:e7: 1b:ef:61:0e:56:3a:2e:ad:e7:1f:2e:0c:e8:4b:5c: ea:e8:97:70:3a:be:95:45:58:7a:f7:df:c7:57:9f: 46:57:63:4d:09:0c:33:a9:69:b6:c0:17:7f:e1:7c: 27:c9:9e:9d:85:35:8e:fc:f7:aa:23:9f:d5:d3:56: 73:25:18:bb:ac:0c:33:27:40:fa:27:51:33:4e:e3: b1:4e:46:ac:87:9e:38:4a:9c:33:f0:4f:04:1b:f0: 62:67:83:f2:89:5e:4a:39:12:a9:c7:35:42:78:1f: f2:76:7f:bd:ed:33:9c:7c:d1:85:f0:bb:c0:c8:61: 0e:3a:c2:6e:f2:7b:26:0a:94:b5:5f:17:45:44:b2: 6d:dd:cd:35:f4:d3:45:13:31:40:53:8e:87:be:80: 08:eb:be:48:64:98:6a:27:bd:bd:47:89:38:3d:e7: cb:6e:8e:f3:38:25:bd:18:dd:af:35:2e:5f:38:2a: ac:23:a0:3a:c0:a0:97:af:bd:8c:a5:9e:40:a6:14: a4:de:3d:c2:cb:8d:c6:e9:7c:2f:82:69:d6:d3:43: 0b:e1:52:e1:0b:43:36:fc:bb:13:11:9e:fc:d9:9d: 80:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:08:55:EC:A9:AF:5F:85:1A:67:26:FE:5D:84:4B:64:30:E1:02:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/04c4ff3f-33aa-3550-8e99-e3c724d7c968.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 98.158.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:8a:88:72:01:7e:1f:7b:8e:0c:01:51:7f:f7:83:06:d3:f4: 72:24:92:16:c8:5a:b7:9a:9c:09:9f:f2:2f:14:29:e1:ef:b8: f3:f6:33:6b:fc:34:1e:6a:05:ef:84:4c:a8:95:ad:08:47:23: 42:74:62:f5:08:10:78:08:6f:46:7b:3a:57:9d:36:55:81:4a: f4:5a:88:6d:9f:91:03:f2:c6:e9:f2:95:b6:b9:ab:04:b3:5d: 7b:87:5c:52:b0:e0:a0:24:9b:aa:bd:8d:68:ad:c7:69:42:69: 5a:10:a3:fc:e8:cd:cd:ad:69:ca:97:db:57:2c:4c:23:49:27: 9a:7e:b7:e8:92:ca:a2:66:57:c6:21:ce:dc:4c:75:0b:20:53: 08:a0:f8:c9:e6:81:3d:e2:6e:b9:b0:17:ac:a4:63:a9:da:b9: 9c:4b:a8:6e:fa:e6:25:72:53:a5:66:09:46:a0:c6:21:6d:5b: b1:c9:bf:55:66:0f:26:01:d1:df:96:18:2c:88:a5:cd:d9:9a: 1c:93:ec:6d:b4:87:df:23:ef:dc:42:cb:26:53:cf:d7:b5:22: 31:70:33:76:39:dd:d0:8d:2e:81:b1:d7:7b:f3:11:8b:a9:15: 4c:99:98:30:32:9e:e1:9a:30:46:f4:8d:7b:09:4b:68:e5:9f: 8e:02:9b:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoiWsCxszQbmE2FPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDYwOTEzMDEwMVoXDTI1MDkwNzEzMDEwMVowLzEtMCsGA1UEAxMk ZmJkNmYzYjYtNmJkMi00MmRhLTg1ZjYtOGY4ZDRmNjk4MmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgx4rnlBmt5zV5Hw8qWMo3siDuYbKOpUi8Bl HOcb72EOVjourecfLgzoS1zq6JdwOr6VRVh699/HV59GV2NNCQwzqWm2wBd/4Xwn yZ6dhTWO/PeqI5/V01ZzJRi7rAwzJ0D6J1EzTuOxTkash544Spwz8E8EG/BiZ4Py iV5KORKpxzVCeB/ydn+97TOcfNGF8LvAyGEOOsJu8nsmCpS1XxdFRLJt3c019NNF EzFAU46HvoAI675IZJhqJ729R4k4PefLbo7zOCW9GN2vNS5fOCqsI6A6wKCXr72M pZ5AphSk3j3Cy43G6XwvgmnW00ML4VLhC0M2/LsTEZ782Z2AxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKsIVeypr1+FGmcm/l2ES2Qw4QIRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMDRjNGZmM2YtMzNhYS0z NTUwLThlOTktZTNjNzI0ZDdjOTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYp5wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGeKiHIBfh97jgwBUX/3gwbT9HIkkhbIWreanAmf8i8UKeHvuPP2M2v8 NB5qBe+ETKiVrQhHI0J0YvUIEHgIb0Z7OledNlWBSvRaiG2fkQPyxunylba5qwSz XXuHXFKw4KAkm6q9jWitx2lCaVoQo/zozc2tacqX21csTCNJJ5p+t+iSyqJmV8Yh ztxMdQsgUwig+MnmgT3ibrmwF6ykY6nauZxLqG765iVyU6VmCUagxiFtW7HJv1Vm DyYB0d+WGCyIpc3ZmhyT7G20h98j79xCyyZTz9e1IjFwM3Y53dCNLoGx13vzEYup FUyZmDAynuGaMEb0jXsJS2jln44Cm4Q= -----END CERTIFICATE-----Generated at Tue Jun 17 19:43:50 2025 by rpki-client