$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/439ee44d-2f63-3c0e-80de-7ad7f7cb69f7.roa File: 439ee44d-2f63-3c0e-80de-7ad7f7cb69f7.roa (raw, json) Hash identifier: GUulx6kG3DqjLsDKo4G2+5VC+t5TPQt+zqMFMAAyon0= Subject key identifier: 06:07:2A:C4:92:4D:E2:2F:88:7C:B3:03:34:22:9E:6C:7A:F3:00:DF Certificate issuer: /CN=70a424d3-35bd-43df-8245-3fb08ea7af5a Certificate serial: 010D0C9F43285849E91FA536FFA7D1A2FB96CA80 Authority key identifier: F2:5A:07:ED:D8:B7:BD:AD:2C:76:F0:5E:9C:50:2A:EA:83:E4:B1:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/439ee44d-2f63-3c0e-80de-7ad7f7cb69f7.roa Signing time: Tue 20 May 2025 01:00:49 +0000 ROA not before: Tue 20 May 2025 01:00:49 +0000 ROA not after: Mon 18 Aug 2025 01:00:49 +0000 asID: 40583 IP address blocks: 198.236.184.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e9:1f:a5:36:ff:a7:d1:a2:fb:96:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70a424d3-35bd-43df-8245-3fb08ea7af5a Validity Not Before: May 20 01:00:49 2025 GMT Not After : Aug 18 01:00:49 2025 GMT Subject: CN=9c7ea2e3-0e78-4967-9d0a-dd7b2f57b268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0b:50:12:30:a0:e5:03:4b:c3:7d:8b:52:99: e8:5b:5c:c3:15:80:27:e2:a0:4e:1c:4b:62:e0:8f: 5e:94:61:b1:56:a7:dd:6d:3d:64:00:ba:ce:63:0a: 86:c5:51:98:87:e2:af:09:82:72:f5:3e:60:23:98: 54:d5:b9:54:ed:f3:55:77:1e:77:bf:f3:12:c8:b7: d0:2f:40:e2:61:23:18:e5:86:0b:2c:c6:6a:ef:1e: 77:7c:69:b1:86:26:41:e2:e4:7b:b5:8a:03:3f:86: d2:d8:43:db:41:c7:70:01:4f:0b:cd:23:0d:13:0f: 7e:5e:1f:24:21:03:63:3a:f4:98:a2:e3:ea:26:31: 8b:c5:a7:1c:2d:72:4e:2d:bf:79:3f:d8:c5:34:8c: c0:07:6d:a0:d4:87:49:6d:37:65:1d:49:f1:c8:28: 92:cf:f0:ba:ba:e2:ce:01:58:0b:84:42:17:ca:69: f4:aa:e6:22:d5:73:a8:71:8a:02:3e:f3:a1:21:93: a1:50:7e:56:92:4f:a3:2c:9a:3c:73:5b:9a:fd:f6: 5e:50:35:31:f7:a7:50:8a:d2:97:3b:73:df:35:b5: 9b:96:03:22:3d:56:8f:43:39:c4:f7:24:0f:d0:01: 4e:62:ad:f7:25:a4:28:7f:a4:46:20:f9:d1:b4:77: 5f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:07:2A:C4:92:4D:E2:2F:88:7C:B3:03:34:22:9E:6C:7A:F3:00:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/439ee44d-2f63-3c0e-80de-7ad7f7cb69f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.crl X509v3 Authority Key Identifier: keyid:F2:5A:07:ED:D8:B7:BD:AD:2C:76:F0:5E:9C:50:2A:EA:83:E4:B1:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a.cer sbgp-ipAddrBlock: critical IPv4: 198.236.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:55:c8:21:91:ea:de:8a:10:81:72:27:46:8e:99:88:ee:da: 05:a0:86:f4:cf:1f:b8:4c:4a:01:70:6e:fc:d3:e7:d9:5b:bb: d7:c4:6f:b0:87:17:a1:f0:0e:eb:b6:e5:ef:88:4e:59:82:8c: e4:70:28:1e:89:ec:f8:8b:a9:00:60:e2:eb:6e:20:79:76:03: 01:34:73:ad:88:c3:5b:97:73:0f:4a:e1:fb:1f:43:46:83:1d: 31:ad:86:87:7d:f5:90:2c:f7:fd:79:ef:b1:07:14:b8:43:97: d2:80:79:33:91:e3:eb:28:79:d5:54:de:8e:57:bc:ab:75:b0: d4:ba:46:f7:d4:8d:72:af:8a:d4:91:4b:fb:6a:2e:b0:7a:2f: 15:25:4e:cb:54:b8:7a:81:23:94:d5:87:f6:16:21:4d:09:b5: bc:9a:66:37:d5:94:b0:3e:04:2a:f9:65:87:d7:9c:1d:05:da: 46:3a:af:ba:d4:1e:21:8b:87:b2:e8:a9:aa:7b:b1:a8:1e:13: 27:7c:2e:38:88:08:47:10:2a:59:74:5c:ac:0a:41:68:0c:eb: 89:d5:6f:2d:d6:32:04:90:60:d4:69:ea:cd:f4:50:3a:36:6b: 99:5a:cc:48:39:18:ff:53:d7:64:97:31:c1:e7:75:75:7b:e7: 89:2e:43:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnpH6U2/6fRovuWyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzBhNDI0ZDMtMzViZC00M2RmLTgyNDUtM2ZiMDhlYTdh ZjVhMB4XDTI1MDUyMDAxMDA0OVoXDTI1MDgxODAxMDA0OVowLzEtMCsGA1UEAxMk OWM3ZWEyZTMtMGU3OC00OTY3LTlkMGEtZGQ3YjJmNTdiMjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwtQEjCg5QNLw32LUpnoW1zDFYAn4qBOHEti 4I9elGGxVqfdbT1kALrOYwqGxVGYh+KvCYJy9T5gI5hU1blU7fNVdx53v/MSyLfQ L0DiYSMY5YYLLMZq7x53fGmxhiZB4uR7tYoDP4bS2EPbQcdwAU8LzSMNEw9+Xh8k IQNjOvSYouPqJjGLxaccLXJOLb95P9jFNIzAB22g1IdJbTdlHUnxyCiSz/C6uuLO AVgLhEIXymn0quYi1XOocYoCPvOhIZOhUH5Wkk+jLJo8c1ua/fZeUDUx96dQitKX O3PfNbWblgMiPVaPQznE9yQP0AFOYq33JaQof6RGIPnRtHdfFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAYHKsSSTeIviHyzAzQinmx68wDfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83MGE0 MjRkMy0zNWJkLTQzZGYtODI0NS0zZmIwOGVhN2FmNWEvNDM5ZWU0NGQtMmY2My0z YzBlLTgwZGUtN2FkN2Y3Y2I2OWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzBhNDI0ZDMtMzViZC00M2RmLTgy NDUtM2ZiMDhlYTdhZjVhLzcwYTQyNGQzLTM1YmQtNDNkZi04MjQ1LTNmYjA4ZWE3 YWY1YS5jcmwwHwYDVR0jBBgwFoAU8loH7di3va0sdvBenFAq6oPksZYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83MGE0MjRkMy0zNWJkLTQzZGYtODI0NS0zZmIw OGVhN2FmNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxuy4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9VyCGR6t6KEIFyJ0aOmYju2gWghvTPH7hMSgFwbvzT59lbu9fEb7CH F6HwDuu25e+ITlmCjORwKB6J7PiLqQBg4utuIHl2AwE0c62Iw1uXcw9K4fsfQ0aD HTGthod99ZAs9/1577EHFLhDl9KAeTOR4+soedVU3o5XvKt1sNS6RvfUjXKvitSR S/tqLrB6LxUlTstUuHqBI5TVh/YWIU0JtbyaZjfVlLA+BCr5ZYfXnB0F2kY6r7rU HiGLh7Loqap7sageEyd8LjiICEcQKll0XKwKQWgM64nVby3WMgSQYNRp6s30UDo2 a5lazEg5GP9T12SXMcHndXV754kuQ54= -----END CERTIFICATE-----Generated at Mon Jun 16 19:17:00 2025 by rpki-client