$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/29308d46-f55d-36a4-88b5-cc2afdcc7cb2.roa File: 29308d46-f55d-36a4-88b5-cc2afdcc7cb2.roa (raw, json) Hash identifier: SIGUtDN61uTTdRGUETj2McedqpDMsl91to1zL8ciq9g= Subject key identifier: E1:10:67:AA:3C:A1:5B:11:39:05:94:17:98:1A:3C:70:63:67:0C:56 Certificate issuer: /CN=7496889c-61af-4c61-8157-4b7f2fde690d Certificate serial: 010D0C9F43285849DF5A742413690329E2441480 Authority key identifier: 59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/29308d46-f55d-36a4-88b5-cc2afdcc7cb2.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 611 IP address blocks: 198.164.104.0/24 maxlen: 24 198.164.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:74:24:13:69:03:29:e2:44:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7496889c-61af-4c61-8157-4b7f2fde690d Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=7eba0cbe-aba2-4bd4-88b8-63e176e8d8d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a2:c9:da:ab:ed:b2:a3:ce:2b:65:41:9a:8e: 33:c8:77:5c:ee:c4:74:f3:27:e1:2e:12:14:5e:06: 88:43:da:00:f9:73:10:6c:d8:e1:d1:b0:f0:02:fd: 04:d9:cd:17:1e:3b:7d:b4:df:78:47:d0:9c:f0:69: 2a:77:74:92:0b:c6:f7:d0:cd:33:8b:7d:64:2c:33: 46:3d:07:55:86:e7:04:89:d8:12:18:c5:05:c6:26: e8:ab:08:5c:c3:9c:1c:c3:26:07:fd:36:96:1b:02: ea:5e:1a:70:5f:f8:2e:8c:ec:da:47:90:76:61:d8: 3c:27:e3:da:4d:87:78:71:32:f7:8a:bc:68:02:db: 94:db:e5:1f:11:fa:1d:f0:5e:f0:d4:2f:42:7b:1f: c1:3a:4d:32:d7:c1:e7:6a:7d:43:10:d8:53:de:65: 26:dc:66:b2:48:32:60:48:ac:03:de:ee:e3:5a:aa: 89:ca:36:96:56:91:59:4d:18:3d:5d:ed:f6:50:65: 6c:35:06:92:45:4e:6b:e0:ef:aa:a4:ba:c4:71:83: 17:fd:2a:57:43:07:6d:a8:7e:bf:ca:0e:cf:43:78: be:3d:d8:6c:66:66:f3:c5:fb:0c:fd:98:0b:82:5b: 83:ab:3f:e8:0a:26:c7:04:fa:97:e1:b6:81:79:eb: e0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:10:67:AA:3C:A1:5B:11:39:05:94:17:98:1A:3C:70:63:67:0C:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/29308d46-f55d-36a4-88b5-cc2afdcc7cb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl X509v3 Authority Key Identifier: keyid:59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer sbgp-ipAddrBlock: critical IPv4: 198.164.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:4f:5e:fa:c3:72:98:47:04:84:88:d6:3b:36:bf:b5:5b:78: f2:d3:e7:75:76:23:4a:5d:a9:aa:13:92:1f:f3:20:16:80:32: 3b:0a:6f:60:fa:8f:77:be:07:0c:cb:9c:f3:a8:6d:90:dc:05: a6:0a:1c:bb:12:41:91:17:f4:3e:21:33:57:b1:69:66:d9:8a: 9c:4d:2f:c3:b8:ae:08:2f:8d:e8:e9:41:2f:ba:30:02:67:f6: 43:47:04:3d:a5:1c:66:f8:3a:49:02:0b:25:eb:d4:93:10:c4: 90:0a:1a:0f:d8:ee:8a:ee:9e:a3:34:91:3c:42:3b:4a:a3:11: e8:90:c2:dd:4f:f0:dc:eb:2a:3a:d7:63:69:42:46:ed:a7:10: 5c:5a:41:8b:bc:30:32:85:b5:83:66:fe:e0:cf:c4:d5:6d:58: 45:e3:f1:58:52:41:cb:c2:d2:9d:70:ae:ff:3d:82:f2:0f:d2: 0e:0b:e8:df:20:02:62:e4:a9:f8:21:6f:3b:7e:45:d9:8e:5f: 0c:b3:0c:fb:85:19:23:95:72:ea:39:86:7e:fc:ae:05:33:23: 7e:3e:04:14:5a:6a:fa:a7:bf:f0:5f:02:0b:49:e0:34:b5:48: 85:cc:8a:2c:3f:d8:4d:42:3c:d2:d7:ab:ec:06:34:5a:b4:c0: 62:9a:3e:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfWnQkE2kDKeJEFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5Njg4OWMtNjFhZi00YzYxLTgxNTctNGI3ZjJmZGU2 OTBkMB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk N2ViYTBjYmUtYWJhMi00YmQ0LTg4YjgtNjNlMTc2ZThkOGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaLJ2qvtsqPOK2VBmo4zyHdc7sR08yfhLhIU XgaIQ9oA+XMQbNjh0bDwAv0E2c0XHjt9tN94R9Cc8Gkqd3SSC8b30M0zi31kLDNG PQdVhucEidgSGMUFxiboqwhcw5wcwyYH/TaWGwLqXhpwX/gujOzaR5B2Ydg8J+Pa TYd4cTL3irxoAtuU2+UfEfod8F7w1C9Cex/BOk0y18Hnan1DENhT3mUm3GaySDJg SKwD3u7jWqqJyjaWVpFZTRg9Xe32UGVsNQaSRU5r4O+qpLrEcYMX/SpXQwdtqH6/ yg7PQ3i+PdhsZmbzxfsM/ZgLgluDqz/oCibHBPqX4baBeevgxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOEQZ6o8oVsROQWUF5gaPHBjZwxWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83NDk2 ODg5Yy02MWFmLTRjNjEtODE1Ny00YjdmMmZkZTY5MGQvMjkzMDhkNDYtZjU1ZC0z NmE0LTg4YjUtY2MyYWZkY2M3Y2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzQ5Njg4OWMtNjFhZi00YzYxLTgx NTctNGI3ZjJmZGU2OTBkLzc0OTY4ODljLTYxYWYtNGM2MS04MTU3LTRiN2YyZmRl NjkwZC5jcmwwHwYDVR0jBBgwFoAUWYrA5l80WnZOjSAYuX0BnNESuY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83NDk2ODg5Yy02MWFmLTRjNjEtODE1Ny00Yjdm MmZkZTY5MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxqRoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJPXvrDcphHBISI1js2v7VbePLT53V2I0pdqaoTkh/zIBaAMjsKb2D6 j3e+BwzLnPOobZDcBaYKHLsSQZEX9D4hM1exaWbZipxNL8O4rggvjejpQS+6MAJn 9kNHBD2lHGb4OkkCCyXr1JMQxJAKGg/Y7orunqM0kTxCO0qjEeiQwt1P8NzrKjrX Y2lCRu2nEFxaQYu8MDKFtYNm/uDPxNVtWEXj8VhSQcvC0p1wrv89gvIP0g4L6N8g AmLkqfghbzt+RdmOXwyzDPuFGSOVcuo5hn78rgUzI34+BBRaavqnv/BfAgtJ4DS1 SIXMiiw/2E1CPNLXq+wGNFq0wGKaPgA= -----END CERTIFICATE-----Generated at Mon Jun 16 23:33:04 2025 by rpki-client