$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/0039e239-41e8-3a9b-8b0f-46101a16e3df.roa File: 0039e239-41e8-3a9b-8b0f-46101a16e3df.roa (raw, json) Hash identifier: fwkniMz+Vqzeg0oZNIRzCf4F4A4tzdUouArNcoYjuqA= Subject key identifier: 29:1B:38:4F:B6:6B:E4:BC:AB:20:02:5C:53:B8:17:89:E2:60:B9:43 Certificate issuer: /CN=7496889c-61af-4c61-8157-4b7f2fde690d Certificate serial: 010D0C9F43285849D42FAE253307938816334600 Authority key identifier: 59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/0039e239-41e8-3a9b-8b0f-46101a16e3df.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 611 IP address blocks: 198.164.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:ae:25:33:07:93:88:16:33:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7496889c-61af-4c61-8157-4b7f2fde690d Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=f662331b-39ba-48c3-9c34-f57be8231d5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:65:48:82:10:79:5e:e1:03:d8:d2:b8:2a:cf: 68:0c:62:03:e9:11:cc:c2:39:b5:46:8e:2b:33:db: b4:54:d4:3a:e0:30:0a:d1:3b:9c:2b:08:b1:a4:c4: 28:69:de:23:fc:1b:ba:86:01:bd:b1:16:67:4d:71: 2d:8a:c2:4a:50:9d:86:09:09:b0:5c:3a:61:4d:be: de:51:c7:9f:05:30:05:fc:05:90:e7:41:3a:21:3d: 85:32:01:8d:83:77:2b:2e:41:d4:e8:db:7d:a3:05: 73:d7:9a:f8:da:e8:85:6c:43:3e:f7:f7:bc:6f:fd: e3:c2:ea:eb:e0:00:ae:8b:63:40:d6:2c:ba:b9:d3: ec:a9:a0:83:43:02:d8:e7:2e:d1:81:38:e5:02:25: a2:29:e1:1e:01:16:00:cc:1e:99:19:b3:f3:a5:de: e0:1a:46:07:cd:a2:21:36:8a:74:04:a7:87:12:9e: 23:2f:8f:97:6a:d3:1f:9b:7f:9a:9f:66:a4:01:22: f1:f4:2f:37:d3:85:06:ae:93:59:2c:7d:3e:7d:79: 97:62:4a:e8:ba:1e:aa:eb:2c:6a:52:5d:2d:5a:68: 88:d0:03:f4:28:6c:11:42:cb:19:21:fa:b6:b2:00: d7:6c:61:ca:57:c7:26:d7:cc:63:aa:f1:d2:de:a3: 7c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:1B:38:4F:B6:6B:E4:BC:AB:20:02:5C:53:B8:17:89:E2:60:B9:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/0039e239-41e8-3a9b-8b0f-46101a16e3df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl X509v3 Authority Key Identifier: keyid:59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer sbgp-ipAddrBlock: critical IPv4: 198.164.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:b4:4a:99:c1:ba:13:e1:9c:12:b2:49:07:e1:d7:ba:4b:81: e3:94:56:76:43:c4:fe:c0:fe:39:f4:2f:18:60:2c:d1:64:15: be:cd:58:42:54:25:8a:b1:eb:fc:a2:1e:7e:da:1d:95:92:66: dc:9f:44:40:31:ab:7b:b2:21:41:db:7b:2a:68:29:5c:3e:3a: d0:a5:ab:c8:2e:65:92:f9:46:06:a7:af:50:b7:f7:7d:69:40: ce:0e:27:7f:50:4b:b4:00:27:d4:71:ab:e1:43:81:e1:4e:09: 84:40:8e:0e:03:20:0d:5c:72:db:57:47:9b:c3:ed:8b:8b:c2: c8:44:c0:67:2a:ca:30:17:08:34:73:ba:45:15:5b:5c:7b:bb: 0b:d7:24:f1:97:6f:48:61:12:15:e9:7b:4f:5c:5e:da:c0:5e: 6a:ed:9a:fc:45:2d:6a:09:ff:38:bf:54:42:a7:29:21:11:c1: cf:0e:18:bb:f3:cd:d7:f9:ea:f5:67:bc:79:a2:50:4a:e0:89: 83:41:1d:1c:c2:f2:ca:60:46:bc:5d:16:85:33:54:9d:dc:d4: bc:f5:69:93:99:28:f1:71:5f:79:13:5f:2c:de:33:40:b5:94: 15:a0:28:db:24:2e:06:5c:a3:ba:0a:61:f0:4d:d3:59:d3:13: ae:98:b3:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUL64lMweTiBYzRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5Njg4OWMtNjFhZi00YzYxLTgxNTctNGI3ZjJmZGU2 OTBkMB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk ZjY2MjMzMWItMzliYS00OGMzLTljMzQtZjU3YmU4MjMxZDVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmVIghB5XuED2NK4Ks9oDGID6RHMwjm1Ro4r M9u0VNQ64DAK0TucKwixpMQoad4j/Bu6hgG9sRZnTXEtisJKUJ2GCQmwXDphTb7e UcefBTAF/AWQ50E6IT2FMgGNg3crLkHU6Nt9owVz15r42uiFbEM+9/e8b/3jwurr 4ACui2NA1iy6udPsqaCDQwLY5y7RgTjlAiWiKeEeARYAzB6ZGbPzpd7gGkYHzaIh Nop0BKeHEp4jL4+XatMfm3+an2akASLx9C8304UGrpNZLH0+fXmXYkrouh6q6yxq Ul0tWmiI0AP0KGwRQssZIfq2sgDXbGHKV8cm18xjqvHS3qN82wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkbOE+2a+S8qyACXFO4F4niYLlDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83NDk2 ODg5Yy02MWFmLTRjNjEtODE1Ny00YjdmMmZkZTY5MGQvMDAzOWUyMzktNDFlOC0z YTliLThiMGYtNDYxMDFhMTZlM2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzQ5Njg4OWMtNjFhZi00YzYxLTgx NTctNGI3ZjJmZGU2OTBkLzc0OTY4ODljLTYxYWYtNGM2MS04MTU3LTRiN2YyZmRl NjkwZC5jcmwwHwYDVR0jBBgwFoAUWYrA5l80WnZOjSAYuX0BnNESuY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83NDk2ODg5Yy02MWFmLTRjNjEtODE1Ny00Yjdm MmZkZTY5MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqT+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADi0SpnBuhPhnBKySQfh17pLgeOUVnZDxP7A/jn0LxhgLNFkFb7NWEJU JYqx6/yiHn7aHZWSZtyfREAxq3uyIUHbeypoKVw+OtClq8guZZL5Rganr1C3931p QM4OJ39QS7QAJ9Rxq+FDgeFOCYRAjg4DIA1ccttXR5vD7YuLwshEwGcqyjAXCDRz ukUVW1x7uwvXJPGXb0hhEhXpe09cXtrAXmrtmvxFLWoJ/zi/VEKnKSERwc8OGLvz zdf56vVnvHmiUErgiYNBHRzC8spgRrxdFoUzVJ3c1Lz1aZOZKPFxX3kTXyzeM0C1 lBWgKNskLgZco7oKYfBN01nTE66Ysws= -----END CERTIFICATE-----Generated at Mon Jun 16 14:07:49 2025 by rpki-client