$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/08b775a9-f16d-34fe-903b-47de515a919a.roa File: 08b775a9-f16d-34fe-903b-47de515a919a.roa (raw, json) Hash identifier: HT4OKCXVaYwcqBNrKgiPO+iuQc4iDR+L45BVXnRVfcY= Subject key identifier: 6D:36:6C:0F:FB:33:1B:57:6A:18:44:51:6E:22:D9:D5:68:E9:BA:A5 Certificate issuer: /CN=d57d789e-7c0e-4086-93e5-04d300453dae Certificate serial: 010D0C9F43285849D85FAAEFFFEAD03680AAEDC0 Authority key identifier: 2D:7A:3D:DF:E4:E3:E7:29:8A:98:51:FF:DF:5F:09:7B:AC:21:51:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/08b775a9-f16d-34fe-903b-47de515a919a.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 14618 IP address blocks: 198.22.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/d57d789e-7c0e-4086-93e5-04d300453dae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/d57d789e-7c0e-4086-93e5-04d300453dae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:aa:ef:ff:ea:d0:36:80:aa:ed:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d57d789e-7c0e-4086-93e5-04d300453dae Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=bbe2bea1-28e8-477f-ab5d-a5f729dc4f21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b9:77:5f:2e:95:76:36:85:5c:4a:a6:77:cd: ee:38:2e:1d:02:df:0d:55:b3:3f:13:d5:b5:91:f7: fc:6a:8c:82:47:9c:68:15:c8:2f:ba:bf:e7:7a:d9: 50:34:52:2b:5b:36:c0:cf:81:26:55:c9:fa:95:64: 25:f3:bf:2b:77:e1:51:6c:9d:3e:1a:a7:4f:b5:24: 7e:bc:6c:ca:b4:94:ee:03:8e:86:e9:7d:dc:ac:a9: 5b:f1:13:68:62:5c:c9:b3:e4:91:e4:f8:2d:9b:60: 53:ce:14:92:d0:6f:ac:fd:3d:07:e3:99:fd:b5:ee: 8a:79:ce:1a:d3:fd:a6:9b:0e:43:77:36:43:91:60: c4:4a:12:ae:58:a0:4b:f0:4d:1a:d7:42:5e:8d:7c: 12:c3:af:8f:f7:d6:fa:0e:d7:01:b7:f2:20:a8:c2: 6e:5b:01:cf:36:f9:d4:72:35:ae:8d:ad:83:a7:4e: 47:81:2f:d0:29:b6:50:e6:60:fb:b9:ae:31:6e:82: 5e:46:8c:91:0d:85:15:f6:75:2c:10:ed:dd:e7:2b: f8:93:63:c0:d9:e7:04:c7:ea:7a:75:52:ed:0a:48: f9:bc:00:34:57:9f:69:02:59:7b:25:90:de:a2:5f: 69:cc:49:03:30:5c:f1:bf:57:23:0d:b2:8a:ad:5f: ad:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:36:6C:0F:FB:33:1B:57:6A:18:44:51:6E:22:D9:D5:68:E9:BA:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/08b775a9-f16d-34fe-903b-47de515a919a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/d57d789e-7c0e-4086-93e5-04d300453dae.crl X509v3 Authority Key Identifier: keyid:2D:7A:3D:DF:E4:E3:E7:29:8A:98:51:FF:DF:5F:09:7B:AC:21:51:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae.cer sbgp-ipAddrBlock: critical IPv4: 198.22.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:7a:db:f8:89:0c:79:02:35:c8:4a:41:89:e5:e0:df:d5:1a: 16:95:ee:ce:2c:03:d7:fb:42:a5:59:0e:5b:9b:20:0f:78:b0: 18:68:8e:ab:67:1a:76:0a:9d:8f:0a:43:47:74:d5:8f:d8:48: aa:8c:ce:dc:0b:e4:e1:81:4f:2e:a0:a4:0b:e1:2f:bb:23:1f: 11:c3:6a:38:c3:89:47:10:a7:74:82:71:89:17:ff:56:16:6e: e9:4d:8f:20:06:e8:ca:81:5c:9d:fe:c1:fe:0d:00:e7:87:91: f5:f1:2c:48:c3:b3:fe:55:1a:ec:97:1e:59:7e:7a:8a:89:a7: 3a:25:38:1c:7f:85:34:da:40:6c:e0:61:1a:32:af:d8:d8:75: 3b:cf:5a:65:7d:e2:e7:97:aa:6f:cd:04:10:f5:ee:b9:ba:bf: 3f:90:0e:e0:98:b1:8c:c5:8a:44:ed:4b:6b:ce:e4:d3:f3:f4: e8:89:e5:76:80:f1:94:e4:9e:62:e5:10:9e:e1:29:f9:fc:98: bc:1e:8c:ee:99:5b:54:c0:ef:b7:60:69:c9:c1:f5:1c:88:69: db:8b:b6:5c:92:89:39:e2:96:4d:f0:a0:e5:a2:2b:9e:be:4d: e6:ab:15:56:e0:8f:69:ea:7b:ee:4f:4b:98:13:69:20:28:c8: 2b:80:0c:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX6rv/+rQNoCq7cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDU3ZDc4OWUtN2MwZS00MDg2LTkzZTUtMDRkMzAwNDUz ZGFlMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk YmJlMmJlYTEtMjhlOC00NzdmLWFiNWQtYTVmNzI5ZGM0ZjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobl3Xy6VdjaFXEqmd83uOC4dAt8NVbM/E9W1 kff8aoyCR5xoFcgvur/netlQNFIrWzbAz4EmVcn6lWQl878rd+FRbJ0+GqdPtSR+ vGzKtJTuA46G6X3crKlb8RNoYlzJs+SR5Pgtm2BTzhSS0G+s/T0H45n9te6Kec4a 0/2mmw5DdzZDkWDEShKuWKBL8E0a10JejXwSw6+P99b6DtcBt/IgqMJuWwHPNvnU cjWuja2Dp05HgS/QKbZQ5mD7ua4xboJeRoyRDYUV9nUsEO3d5yv4k2PA2ecEx+p6 dVLtCkj5vAA0V59pAll7JZDeol9pzEkDMFzxv1cjDbKKrV+tmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG02bA/7MxtXahhEUW4i2dVo6bqlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kNTdk Nzg5ZS03YzBlLTQwODYtOTNlNS0wNGQzMDA0NTNkYWUvMDhiNzc1YTktZjE2ZC0z NGZlLTkwM2ItNDdkZTUxNWE5MTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZDU3ZDc4OWUtN2MwZS00MDg2LTkz ZTUtMDRkMzAwNDUzZGFlL2Q1N2Q3ODllLTdjMGUtNDA4Ni05M2U1LTA0ZDMwMDQ1 M2RhZS5jcmwwHwYDVR0jBBgwFoAULXo93+Tj5ymKmFH/318Je6whUcQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9kNTdkNzg5ZS03YzBlLTQwODYtOTNlNS0wNGQz MDA0NTNkYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhbuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMN62/iJDHkCNchKQYnl4N/VGhaV7s4sA9f7QqVZDlubIA94sBhojqtn GnYKnY8KQ0d01Y/YSKqMztwL5OGBTy6gpAvhL7sjHxHDajjDiUcQp3SCcYkX/1YW bulNjyAG6MqBXJ3+wf4NAOeHkfXxLEjDs/5VGuyXHll+eoqJpzolOBx/hTTaQGzg YRoyr9jYdTvPWmV94ueXqm/NBBD17rm6vz+QDuCYsYzFikTtS2vO5NPz9OiJ5XaA 8ZTknmLlEJ7hKfn8mLwejO6ZW1TA77dgacnB9RyIaduLtlySiTnilk3woOWiK56+ TearFVbgj2nqe+5PS5gTaSAoyCuADJc= -----END CERTIFICATE-----Generated at Sun Jun 15 09:09:30 2025 by rpki-client