$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/30859cb8-c929-30aa-bad4-950f640e28f0.roa File: 30859cb8-c929-30aa-bad4-950f640e28f0.roa (raw, json) Hash identifier: VbJs+vHOq6vzjyP4UUWEdAjjp31xu3soY07kwGxB970= Subject key identifier: 34:B5:B4:39:AF:44:39:3A:9C:1D:1C:C9:10:C7:2A:94:E7:75:F8:95 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F43285849ED4FCFF2B1CA3BB7CC2C5780 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/30859cb8-c929-30aa-bad4-950f640e28f0.roa Signing time: Wed 21 May 2025 13:01:04 +0000 ROA not before: Wed 21 May 2025 13:01:04 +0000 ROA not after: Tue 19 Aug 2025 13:01:04 +0000 asID: 142032 IP address blocks: 198.44.184.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ed:4f:cf:f2:b1:ca:3b:b7:cc:2c:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: May 21 13:01:04 2025 GMT Not After : Aug 19 13:01:04 2025 GMT Subject: CN=b12a87af-7094-47c3-b136-9a47574a518b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:93:b4:71:4e:ec:70:b0:f6:d4:dd:ff:04:16: 36:ef:66:dc:ce:a0:74:29:fa:d7:48:06:4e:0e:d4: 17:41:60:ff:20:8a:c1:32:12:12:52:89:2f:78:a4: c7:7b:49:d3:c1:ce:93:b2:4f:f5:9c:77:15:1e:e4: 9d:c8:71:15:8e:1f:01:62:bf:ec:28:37:da:1d:e7: 44:f7:05:dd:84:80:d1:10:d4:48:25:44:dc:d9:dd: b0:05:48:22:52:93:49:a9:da:72:a6:18:ab:ad:7c: 06:cf:d5:72:3b:3c:69:f0:f3:1d:36:b4:81:80:f5: e5:d0:ec:3b:49:95:e3:db:3f:66:1c:81:d4:31:99: 5e:ae:1f:2a:3a:53:fc:1b:3d:8a:98:b4:bf:12:2d: b3:dc:48:cd:b8:00:f9:01:da:80:48:01:0b:99:d3: 76:7a:b9:0a:82:21:a8:55:63:07:e9:de:82:8e:2f: 28:e5:63:74:e9:86:17:46:fb:65:53:8a:4a:40:ec: cd:11:2f:ef:6e:d3:9c:a6:78:14:44:de:09:3b:ee: 5b:03:59:8c:0a:0d:98:95:8c:c3:56:ce:5f:f7:e0: da:19:3d:4b:06:20:70:47:3a:7e:87:f2:a0:1f:4f: 1b:0c:16:9c:ca:56:b5:2e:48:c4:3f:7f:61:ba:41: 38:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:B5:B4:39:AF:44:39:3A:9C:1D:1C:C9:10:C7:2A:94:E7:75:F8:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/30859cb8-c929-30aa-bad4-950f640e28f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 198.44.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:56:57:44:6d:8a:48:bb:c3:b0:9a:dc:72:84:eb:01:ae:6c: cc:bf:01:1b:05:35:39:12:db:36:0f:f2:56:58:db:f1:58:bc: cd:78:d0:c8:f5:cb:3b:24:ce:19:59:8e:80:95:22:e8:8a:f5: 93:1c:24:49:02:3b:ad:3f:78:37:ea:a9:7f:f2:e6:3f:d3:72: 9d:2c:ba:12:95:6c:c7:96:e0:d2:2a:4e:b8:93:47:91:bb:13: f4:67:43:bd:8d:13:66:7c:47:6c:de:53:1b:c6:7f:8d:fe:66: 55:28:90:84:0d:43:b6:49:cd:f5:81:a5:d5:37:82:56:e3:a5: aa:d4:51:45:1c:ff:80:06:54:b8:4a:29:b4:75:f4:2f:23:20: d6:73:11:0c:ff:a8:cb:5f:b7:85:b7:c5:50:18:64:d6:2f:49: c4:21:a6:1e:c5:1d:e5:e6:57:1b:e3:c6:82:7c:cc:21:72:40: 40:46:c4:8c:c9:d0:01:88:bb:d1:8e:7d:f6:e6:02:5a:b0:5b: 79:ea:37:0b:d1:be:82:59:1b:66:db:f1:cf:e0:9c:b4:85:97: b7:17:81:59:21:4b:3e:0c:d9:a3:78:ff:16:7e:57:b5:dc:88: f0:09:ba:ff:3b:10:08:22:d1:ff:ea:bc:00:b4:96:ef:f2:d4: f0:01:69:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEntT8/ysco7t8wsV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI1MDUyMTEzMDEwNFoXDTI1MDgxOTEzMDEwNFowLzEtMCsGA1UEAxMk YjEyYTg3YWYtNzA5NC00N2MzLWIxMzYtOWE0NzU3NGE1MThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZO0cU7scLD21N3/BBY272bczqB0KfrXSAZO DtQXQWD/IIrBMhISUokveKTHe0nTwc6Tsk/1nHcVHuSdyHEVjh8BYr/sKDfaHedE 9wXdhIDRENRIJUTc2d2wBUgiUpNJqdpyphirrXwGz9VyOzxp8PMdNrSBgPXl0Ow7 SZXj2z9mHIHUMZlerh8qOlP8Gz2KmLS/Ei2z3EjNuAD5AdqASAELmdN2erkKgiGo VWMH6d6Cji8o5WN06YYXRvtlU4pKQOzNES/vbtOcpngURN4JO+5bA1mMCg2YlYzD Vs5f9+DaGT1LBiBwRzp+h/KgH08bDBacyla1LkjEP39hukE4HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDS1tDmvRDk6nB0cyRDHKpTndfiVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvMzA4NTljYjgtYzkyOS0z MGFhLWJhZDQtOTUwZjY0MGUyOGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxiy4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFWV0Rtiki7w7Ca3HKE6wGubMy/ARsFNTkS2zYP8lZY2/FYvM140Mj1 yzskzhlZjoCVIuiK9ZMcJEkCO60/eDfqqX/y5j/Tcp0suhKVbMeW4NIqTriTR5G7 E/RnQ72NE2Z8R2zeUxvGf43+ZlUokIQNQ7ZJzfWBpdU3glbjparUUUUc/4AGVLhK KbR19C8jINZzEQz/qMtft4W3xVAYZNYvScQhph7FHeXmVxvjxoJ8zCFyQEBGxIzJ 0AGIu9GOffbmAlqwW3nqNwvRvoJZG2bb8c/gnLSFl7cXgVkhSz4M2aN4/xZ+V7Xc iPAJuv87EAgi0f/qvAC0lu/y1PABaTU= -----END CERTIFICATE-----Generated at Mon Jun 16 14:48:52 2025 by rpki-client