$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/d90f067e-e5d9-327f-9510-ee2cdae10ad4.roa File: d90f067e-e5d9-327f-9510-ee2cdae10ad4.roa (raw, json) Hash identifier: 1hvfLhedjF/5tHI0TeNIkEeIwgO5VND+TI5apxUibOw= Subject key identifier: 00:C5:CF:EE:67:A0:05:8B:6D:9C:43:38:43:1A:B2:93:D8:E0:C7:21 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F43285849FF751C2D1ED3F480C90A5E00 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/d90f067e-e5d9-327f-9510-ee2cdae10ad4.roa Signing time: Wed 28 May 2025 01:00:49 +0000 ROA not before: Wed 28 May 2025 01:00:49 +0000 ROA not after: Tue 26 Aug 2025 01:00:49 +0000 asID: 62468 IP address blocks: 198.44.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ff:75:1c:2d:1e:d3:f4:80:c9:0a:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: May 28 01:00:49 2025 GMT Not After : Aug 26 01:00:49 2025 GMT Subject: CN=20e1cf3e-6a8b-49c4-ab87-fe22e080ba3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:24:14:a0:fe:69:a3:86:71:da:dd:13:84:ab: c8:8f:c3:eb:e7:69:a6:38:ca:21:eb:ed:f1:5e:07: cb:c9:89:a9:84:e3:ed:bb:0c:65:ae:0e:73:cd:12: 1f:cb:96:b7:ad:45:c4:ab:4a:0e:9d:41:1b:20:7e: 6e:5f:65:2f:54:b8:87:73:73:92:37:40:95:e3:fe: 4c:13:1a:de:29:a2:7b:97:23:b9:b4:27:95:89:76: f0:fc:44:72:bd:5f:06:92:ca:1a:46:fe:91:83:30: eb:8a:3e:d1:06:5d:91:89:f9:1d:f6:cd:12:6d:84: c9:4b:61:de:b1:6e:d8:df:20:61:7c:9d:14:d2:9d: 74:a2:fe:16:92:82:c2:09:5c:83:a1:11:07:c0:40: 89:76:8c:77:d0:00:89:f4:ea:14:0e:ab:63:59:08: 27:09:0c:93:7b:47:13:07:8d:9f:58:5e:e7:91:89: 71:f8:7d:18:10:4d:ff:a7:0a:e2:32:d2:ef:f1:91: e5:b4:ba:5e:94:97:11:e1:d3:95:a3:28:b9:01:06: 14:c0:86:7e:e1:38:51:8d:4b:70:53:b9:2c:cc:97: c0:60:fd:43:dd:4c:7e:2b:92:67:ee:0e:29:99:aa: a8:7b:97:0c:81:fc:56:eb:14:b6:cd:84:c0:40:4a: 06:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:C5:CF:EE:67:A0:05:8B:6D:9C:43:38:43:1A:B2:93:D8:E0:C7:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/d90f067e-e5d9-327f-9510-ee2cdae10ad4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 198.44.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:e5:b5:1f:dd:82:47:61:71:99:a1:4e:0c:0a:b9:be:43:ec: 04:71:e6:54:78:c7:47:d5:0a:b0:11:93:38:31:09:63:98:4c: f0:f8:92:a5:75:6d:1d:10:21:29:09:61:0c:c3:d9:7a:82:32: 09:e6:d5:02:82:59:70:9f:e5:c8:28:76:3b:e4:a2:c2:0e:9d: 07:22:65:0e:b6:25:d0:b0:e9:82:ba:27:b9:7d:ac:d1:75:c8: 02:3e:8d:23:d8:e7:a4:71:0b:d6:92:99:a2:58:c7:41:c6:d9: 59:45:ae:dd:c4:ee:8e:9a:29:5c:53:12:c6:b3:5b:d7:50:8e: 02:15:25:d7:be:45:ca:7c:e0:de:27:01:cb:24:e4:00:0c:5e: 3e:92:41:23:b4:1c:ff:79:93:04:db:01:4a:98:ee:28:8f:96: fd:a1:2a:f4:61:66:23:99:61:43:0a:0c:ce:e6:ea:3e:15:bc: ba:36:7b:8c:64:7f:9d:47:59:84:e8:44:6e:22:84:9f:f9:0c: ac:76:0e:52:ad:bd:ec:d5:69:62:a5:52:40:28:ff:33:25:fa: e3:aa:c7:73:da:48:aa:bc:55:50:00:8c:9a:e5:80:ea:92:e6: 64:28:b7:fc:da:53:57:d0:de:68:c1:ea:08:3d:c8:a1:54:79: f1:4e:f5:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn/dRwtHtP0gMkKXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI1MDUyODAxMDA0OVoXDTI1MDgyNjAxMDA0OVowLzEtMCsGA1UEAxMk MjBlMWNmM2UtNmE4Yi00OWM0LWFiODctZmUyMmUwODBiYTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCQUoP5po4Zx2t0ThKvIj8Pr52mmOMoh6+3x XgfLyYmphOPtuwxlrg5zzRIfy5a3rUXEq0oOnUEbIH5uX2UvVLiHc3OSN0CV4/5M ExreKaJ7lyO5tCeViXbw/ERyvV8GksoaRv6RgzDrij7RBl2Rifkd9s0SbYTJS2He sW7Y3yBhfJ0U0p10ov4WkoLCCVyDoREHwECJdox30ACJ9OoUDqtjWQgnCQyTe0cT B42fWF7nkYlx+H0YEE3/pwriMtLv8ZHltLpelJcR4dOVoyi5AQYUwIZ+4ThRjUtw U7kszJfAYP1D3Ux+K5Jn7g4pmaqoe5cMgfxW6xS2zYTAQEoG8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFADFz+5noAWLbZxDOEMaspPY4MchMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvZDkwZjA2N2UtZTVkOS0z MjdmLTk1MTAtZWUyY2RhZTEwYWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxiygMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDltR/dgkdhcZmhTgwKub5D7ARx5lR4x0fVCrARkzgxCWOYTPD4kqV1 bR0QISkJYQzD2XqCMgnm1QKCWXCf5cgodjvkosIOnQciZQ62JdCw6YK6J7l9rNF1 yAI+jSPY56RxC9aSmaJYx0HG2VlFrt3E7o6aKVxTEsazW9dQjgIVJde+Rcp84N4n Acsk5AAMXj6SQSO0HP95kwTbAUqY7iiPlv2hKvRhZiOZYUMKDM7m6j4VvLo2e4xk f51HWYToRG4ihJ/5DKx2DlKtvezVaWKlUkAo/zMl+uOqx3PaSKq8VVAAjJrlgOqS 5mQot/zaU1fQ3mjB6gg9yKFUefFO9Sc= -----END CERTIFICATE-----Generated at Mon Jun 16 22:07:24 2025 by rpki-client