$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/d0d0cc2d-a574-3bd7-a8b6-bfe473605728.roa File: d0d0cc2d-a574-3bd7-a8b6-bfe473605728.roa (raw, json) Hash identifier: T9MZBRNV08jEpn8Djp18w7ufC9DqXUDAj0JMvcYgAI0= Subject key identifier: 36:8E:FD:0E:2A:AC:98:4C:7B:E8:36:B8:A6:82:D8:3E:4B:11:04:39 Certificate issuer: /CN=6719c5f2-5819-4972-b430-9d76eb88cb36 Certificate serial: 010D0C9F432858498B99D17F065E62EDC281FBC8 Authority key identifier: D2:1B:81:45:14:AD:B5:ED:A9:8B:2D:BF:1E:FA:41:07:50:54:AA:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/d0d0cc2d-a574-3bd7-a8b6-bfe473605728.roa Signing time: Wed 16 Apr 2025 13:01:01 +0000 ROA not before: Wed 16 Apr 2025 13:01:01 +0000 ROA not after: Tue 15 Jul 2025 13:01:01 +0000 asID: 397735 IP address blocks: 198.175.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/6719c5f2-5819-4972-b430-9d76eb88cb36.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/6719c5f2-5819-4972-b430-9d76eb88cb36.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8b:99:d1:7f:06:5e:62:ed:c2:81:fb:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6719c5f2-5819-4972-b430-9d76eb88cb36 Validity Not Before: Apr 16 13:01:01 2025 GMT Not After : Jul 15 13:01:01 2025 GMT Subject: CN=c39dd39b-607c-46b3-981e-ddbeb0f54951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:be:e0:4e:01:e4:87:29:c0:ff:fe:69:82:20: c4:eb:4e:1b:17:db:4c:26:66:c3:37:fe:2c:16:59: ed:b9:c2:a9:66:5d:74:63:b6:30:99:cf:21:78:4f: 00:f5:a6:41:2a:a7:a2:62:a4:0f:94:4e:90:ad:60: 65:67:70:1c:c0:29:f6:b8:38:1c:e9:f2:1e:74:b4: 4d:e7:0d:ee:04:6c:e2:91:a7:ff:15:4d:f2:6b:eb: 2f:3d:2f:1e:fe:36:eb:17:aa:0f:20:68:70:88:08: 5c:5a:bc:18:73:36:9b:3f:41:01:57:32:6e:4c:18: b5:ec:2f:67:a1:d2:00:d8:a7:d7:71:b2:61:1e:98: b4:69:01:bb:83:49:26:ae:8e:9e:5e:71:61:5e:c7: 65:64:4c:38:bf:9b:9b:3e:84:92:7f:d5:09:06:a7: c5:3c:f0:4a:b3:c3:8d:d4:fc:8a:d3:71:8e:a5:97: 8b:8e:54:76:a0:31:aa:68:65:f3:f8:98:1d:46:a8: 12:a9:e4:e1:1b:ee:0b:bd:f8:e0:09:a7:f1:2d:e7: 5d:8e:7d:b3:06:65:97:ea:3e:43:90:07:0c:45:19: dc:29:3e:4b:ea:8e:cb:da:2a:47:b7:c5:a9:bf:93: 3b:13:53:44:fe:04:62:64:15:b5:99:c6:74:75:8f: a9:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:8E:FD:0E:2A:AC:98:4C:7B:E8:36:B8:A6:82:D8:3E:4B:11:04:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/d0d0cc2d-a574-3bd7-a8b6-bfe473605728.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/6719c5f2-5819-4972-b430-9d76eb88cb36.crl X509v3 Authority Key Identifier: keyid:D2:1B:81:45:14:AD:B5:ED:A9:8B:2D:BF:1E:FA:41:07:50:54:AA:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36.cer sbgp-ipAddrBlock: critical IPv4: 198.175.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:23:a0:5d:75:62:4a:7b:b1:2a:d2:5f:31:2b:c6:9c:0e:7e: 11:b8:dc:8f:1f:ed:dd:3f:4a:8f:54:63:b4:04:69:a6:63:7c: 50:e2:47:bc:0a:55:09:ee:47:09:48:50:3c:eb:ae:2d:be:c6: 7b:27:f0:fe:1a:11:1d:1f:e4:28:89:a3:17:be:82:ad:c4:c8: ed:f5:07:9f:c7:dd:ed:4e:c4:6b:cd:f8:7c:a9:5a:2d:48:c5: 3e:cf:2e:3e:2d:95:25:85:12:23:0a:20:28:72:b7:25:19:f6: 97:f5:b0:b3:df:62:c8:81:98:20:07:3b:76:5b:a6:9d:66:66: 55:30:1d:10:d8:d9:b4:97:56:e4:10:82:f7:c1:cd:44:b5:84: 06:bb:38:74:3a:17:55:32:bd:17:e9:66:59:ff:59:1b:c9:d9: b4:4d:e1:16:1b:25:d6:8b:fb:0b:42:e1:e6:ae:b2:27:1a:2e: 80:b9:33:a3:1e:f9:ed:cb:8e:1b:af:a8:ab:fe:06:5c:9f:c9: 38:4d:fa:e8:54:60:cc:a2:5d:0a:44:4e:1d:ac:84:d0:09:93: b8:bc:47:3c:19:3d:f2:cc:fe:a5:43:31:57:eb:c6:c2:09:1c: 9c:7e:75:71:81:bc:00:aa:68:a4:c0:7e:6c:51:9a:f0:dc:9f: db:91:21:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmLmdF/Bl5i7cKB+8gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjcxOWM1ZjItNTgxOS00OTcyLWI0MzAtOWQ3NmViODhj YjM2MB4XDTI1MDQxNjEzMDEwMVoXDTI1MDcxNTEzMDEwMVowLzEtMCsGA1UEAxMk YzM5ZGQzOWItNjA3Yy00NmIzLTk4MWUtZGRiZWIwZjU0OTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAub7gTgHkhynA//5pgiDE604bF9tMJmbDN/4s FlntucKpZl10Y7Ywmc8heE8A9aZBKqeiYqQPlE6QrWBlZ3AcwCn2uDgc6fIedLRN 5w3uBGzikaf/FU3ya+svPS8e/jbrF6oPIGhwiAhcWrwYczabP0EBVzJuTBi17C9n odIA2KfXcbJhHpi0aQG7g0kmro6eXnFhXsdlZEw4v5ubPoSSf9UJBqfFPPBKs8ON 1PyK03GOpZeLjlR2oDGqaGXz+JgdRqgSqeThG+4LvfjgCafxLeddjn2zBmWX6j5D kAcMRRncKT5L6o7L2ipHt8Wpv5M7E1NE/gRiZBW1mcZ0dY+prQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDaO/Q4qrJhMe+g2uKaC2D5LEQQ5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82NzE5 YzVmMi01ODE5LTQ5NzItYjQzMC05ZDc2ZWI4OGNiMzYvZDBkMGNjMmQtYTU3NC0z YmQ3LWE4YjYtYmZlNDczNjA1NzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjcxOWM1ZjItNTgxOS00OTcyLWI0 MzAtOWQ3NmViODhjYjM2LzY3MTljNWYyLTU4MTktNDk3Mi1iNDMwLTlkNzZlYjg4 Y2IzNi5jcmwwHwYDVR0jBBgwFoAU0huBRRStte2piy2/HvpBB1BUquwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi82NzE5YzVmMi01ODE5LTQ5NzItYjQzMC05ZDc2 ZWI4OGNiMzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxq8UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEgjoF11Ykp7sSrSXzErxpwOfhG43I8f7d0/So9UY7QEaaZjfFDiR7wK VQnuRwlIUDzrri2+xnsn8P4aER0f5CiJoxe+gq3EyO31B5/H3e1OxGvN+HypWi1I xT7PLj4tlSWFEiMKIChytyUZ9pf1sLPfYsiBmCAHO3Zbpp1mZlUwHRDY2bSXVuQQ gvfBzUS1hAa7OHQ6F1UyvRfpZln/WRvJ2bRN4RYbJdaL+wtC4eausicaLoC5M6Me +e3LjhuvqKv+BlyfyThN+uhUYMyiXQpETh2shNAJk7i8RzwZPfLM/qVDMVfrxsIJ HJx+dXGBvACqaKTAfmxRmvDcn9uRIQo= -----END CERTIFICATE-----Generated at Mon Apr 28 09:26:58 2025 by rpki-client