$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/1d1bdec8-4fd6-3f71-a5b7-9b80adda0609.roa File: 1d1bdec8-4fd6-3f71-a5b7-9b80adda0609.roa (raw, json) Hash identifier: J+vdnLXRW1VDes5jVz5GD6AbnYTHj4bdaqng/TNMyAs= Subject key identifier: BA:D3:2E:D3:7A:CE:EB:9F:80:B5:22:19:66:D3:74:5C:F5:18:25:0C Certificate issuer: /CN=e8c73746-18f6-4692-80c6-1d7b3e93659a Certificate serial: 010D0C9F43285849FF7517F42DF8B8A98B3B5280 Authority key identifier: 37:0A:97:59:74:D5:5E:63:86:B7:6A:77:B8:A8:47:1C:2E:C1:31:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/1d1bdec8-4fd6-3f71-a5b7-9b80adda0609.roa Signing time: Wed 28 May 2025 01:00:49 +0000 ROA not before: Wed 28 May 2025 01:00:49 +0000 ROA not after: Tue 26 Aug 2025 01:00:49 +0000 asID: 19318 IP address blocks: 198.96.88.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ff:75:17:f4:2d:f8:b8:a9:8b:3b:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8c73746-18f6-4692-80c6-1d7b3e93659a Validity Not Before: May 28 01:00:49 2025 GMT Not After : Aug 26 01:00:49 2025 GMT Subject: CN=dcc85f83-f54c-4f1f-83c1-91d495b2d446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:06:03:03:90:f0:fb:82:6c:90:9c:58:78:ab: 44:ed:eb:e0:be:90:9e:7c:49:8b:bc:91:ea:c4:84: 02:03:bb:f2:55:48:84:30:4d:f1:c8:33:eb:3d:c8: 47:c3:10:a6:36:52:6c:4d:eb:6b:f5:8e:e4:ea:28: d0:48:a1:74:86:70:54:30:12:ba:08:1a:af:22:5a: 52:02:b5:a3:61:f6:de:0b:1b:a9:98:e5:43:37:48: 7d:b4:ce:54:ac:c0:11:b0:da:38:44:fb:67:63:bb: 1f:e5:c3:4e:0e:a9:0e:bd:af:f6:83:c0:7f:58:3e: 20:92:ca:02:de:13:6d:61:7b:cd:8b:2e:4d:0b:72: 1a:7f:64:4e:a5:d8:5b:df:f5:d5:bd:a6:04:0d:82: 0a:a5:6b:9c:ad:5c:ca:0a:a2:2e:25:0c:59:1f:74: 63:2b:4b:e1:84:6a:20:86:46:e3:7b:e1:48:9e:4d: 31:1b:6c:15:0d:fe:fd:e0:ec:be:68:6d:84:5a:59: 9a:77:5a:e6:55:00:24:f5:8b:bf:3a:d6:d4:0b:3a: be:a8:d7:9e:50:ec:a7:86:23:16:bd:d9:71:c3:20: 4d:81:0b:db:07:0c:f7:9c:9d:30:6d:f0:f4:94:94: d2:9e:94:44:da:24:42:93:05:1a:a6:b5:ae:f8:e4: e1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:D3:2E:D3:7A:CE:EB:9F:80:B5:22:19:66:D3:74:5C:F5:18:25:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/1d1bdec8-4fd6-3f71-a5b7-9b80adda0609.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.crl X509v3 Authority Key Identifier: keyid:37:0A:97:59:74:D5:5E:63:86:B7:6A:77:B8:A8:47:1C:2E:C1:31:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer sbgp-ipAddrBlock: critical IPv4: 198.96.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:3a:09:07:14:1d:50:1a:a0:9f:b5:8c:8a:39:cc:88:8f:b5: 70:7b:87:bf:1c:c4:72:8f:a9:b9:bd:a0:f4:5c:5c:97:e4:57: 3a:6b:b6:64:ef:fc:5f:13:0b:3f:d6:0d:83:d2:01:0d:d7:d3: 91:fa:cb:ec:1d:4d:10:95:fa:76:31:b3:55:57:8e:e9:56:27: 7b:52:1c:51:88:b0:18:11:4f:e3:e8:d7:87:e1:e5:e6:49:50: d1:f4:dc:c9:35:ed:92:73:1c:89:00:73:4e:76:a7:67:fb:27: 4b:94:aa:1f:e5:79:36:d5:85:d7:9f:fd:0f:0d:52:49:d4:33: 2f:bc:a7:3c:e5:99:8b:bf:5e:51:6b:59:a2:c8:4d:09:b7:39: c9:ad:2b:1d:37:89:01:40:60:0e:44:0d:25:59:c6:34:57:54: 0b:2f:62:34:a5:1e:2f:03:c0:3b:49:36:43:70:53:e1:c9:f1: 9d:44:d9:a5:75:76:93:f6:1f:7a:79:10:f7:9e:d9:bf:59:bb: 6c:89:f0:58:a4:88:77:ec:c1:a7:27:e9:ea:d3:d8:9c:8b:eb: ad:50:d8:64:4b:93:ea:8a:4e:4f:51:26:3d:9b:0a:ca:d2:e0: e3:d3:d8:a2:d1:6a:9c:70:41:1f:ca:04:67:fb:d0:cb:d4:4d: 38:e4:0b:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn/dRf0Lfi4qYs7UoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZThjNzM3NDYtMThmNi00NjkyLTgwYzYtMWQ3YjNlOTM2 NTlhMB4XDTI1MDUyODAxMDA0OVoXDTI1MDgyNjAxMDA0OVowLzEtMCsGA1UEAxMk ZGNjODVmODMtZjU0Yy00ZjFmLTgzYzEtOTFkNDk1YjJkNDQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwYDA5Dw+4JskJxYeKtE7evgvpCefEmLvJHq xIQCA7vyVUiEME3xyDPrPchHwxCmNlJsTetr9Y7k6ijQSKF0hnBUMBK6CBqvIlpS ArWjYfbeCxupmOVDN0h9tM5UrMARsNo4RPtnY7sf5cNODqkOva/2g8B/WD4gksoC 3hNtYXvNiy5NC3Iaf2ROpdhb3/XVvaYEDYIKpWucrVzKCqIuJQxZH3RjK0vhhGog hkbje+FInk0xG2wVDf794Oy+aG2EWlmad1rmVQAk9Yu/OtbUCzq+qNeeUOynhiMW vdlxwyBNgQvbBwz3nJ0wbfD0lJTSnpRE2iRCkwUaprWu+OTh6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLrTLtN6zuufgLUiGWbTdFz1GCUMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lOGM3 Mzc0Ni0xOGY2LTQ2OTItODBjNi0xZDdiM2U5MzY1OWEvMWQxYmRlYzgtNGZkNi0z ZjcxLWE1YjctOWI4MGFkZGEwNjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZThjNzM3NDYtMThmNi00NjkyLTgw YzYtMWQ3YjNlOTM2NTlhL2U4YzczNzQ2LTE4ZjYtNDY5Mi04MGM2LTFkN2IzZTkz NjU5YS5jcmwwHwYDVR0jBBgwFoAUNwqXWXTVXmOGt2p3uKhHHC7BMdkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9lOGM3Mzc0Ni0xOGY2LTQ2OTItODBjNi0xZDdi M2U5MzY1OWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxmBYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACM6CQcUHVAaoJ+1jIo5zIiPtXB7h78cxHKPqbm9oPRcXJfkVzprtmTv /F8TCz/WDYPSAQ3X05H6y+wdTRCV+nYxs1VXjulWJ3tSHFGIsBgRT+Po14fh5eZJ UNH03Mk17ZJzHIkAc052p2f7J0uUqh/leTbVhdef/Q8NUknUMy+8pzzlmYu/XlFr WaLITQm3OcmtKx03iQFAYA5EDSVZxjRXVAsvYjSlHi8DwDtJNkNwU+HJ8Z1E2aV1 dpP2H3p5EPee2b9Zu2yJ8FikiHfswacn6erT2JyL661Q2GRLk+qKTk9RJj2bCsrS 4OPT2KLRapxwQR/KBGf70MvUTTjkCw0= -----END CERTIFICATE-----Generated at Mon Jun 16 15:32:02 2025 by rpki-client