$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/328e6c00-d857-3fdd-bf11-e5ff675483b4.roa File: 328e6c00-d857-3fdd-bf11-e5ff675483b4.roa (raw, json) Hash identifier: Vr2HUHYuc+XJIZOUYQiJLPMPTC1I+1Ae0raYnxz1WYo= Subject key identifier: 39:82:0E:85:E0:D8:74:7F:7E:B2:E7:26:94:0C:AE:86:82:73:F8:79 Certificate issuer: /CN=aa033953-9752-479d-b9ee-4213cf648479 Certificate serial: 010D0C9F4328584A093AA17061EE4C7D99B05D00 Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/328e6c00-d857-3fdd-bf11-e5ff675483b4.roa Signing time: Sat 31 May 2025 13:01:03 +0000 ROA not before: Sat 31 May 2025 13:01:03 +0000 ROA not after: Fri 29 Aug 2025 13:01:03 +0000 asID: 3136 IP address blocks: 198.150.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:09:3a:a1:70:61:ee:4c:7d:99:b0:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479 Validity Not Before: May 31 13:01:03 2025 GMT Not After : Aug 29 13:01:03 2025 GMT Subject: CN=73d97b51-f764-4367-89b1-1784cb30f9da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fa:ab:7a:19:ef:84:b7:16:e2:c4:54:c4:10: 77:01:10:35:ef:40:3f:40:09:62:7a:cd:07:d8:16: 36:88:72:ba:82:34:a9:41:06:0e:7e:b8:81:4f:f5: f9:da:67:b9:7c:10:53:25:f3:68:76:e1:8d:91:69: d2:e7:7a:03:64:cb:53:b7:db:ad:86:d4:ba:61:ad: f7:3a:37:53:6d:1c:0c:5c:3d:32:3a:6f:cb:6d:50: 7b:7a:6c:6f:49:4f:26:72:a7:4c:7d:45:fc:39:0b: 27:03:2d:3c:f1:b0:67:b5:2b:d7:77:4b:10:c3:12: 5c:f8:ba:f5:90:e9:12:3c:53:da:1a:8d:f3:36:05: 7d:7d:ba:22:37:f9:01:e7:95:3d:2f:a2:dd:cb:28: 4b:a6:2d:f2:14:bd:9d:a2:9f:51:e4:1a:b4:74:a2: 04:7d:0d:12:fa:a3:a3:17:9c:c6:86:1c:26:ba:68: 93:10:1a:0e:44:3f:1a:c4:1a:29:62:ac:3c:09:0e: 85:cb:2b:0c:1a:88:cc:0b:31:3b:a7:f4:df:ae:dd: 15:64:5c:4f:cd:78:71:49:15:1d:c3:82:ba:cc:08: bb:19:01:de:22:a8:35:d0:d8:75:cd:c4:bc:88:23: 94:bf:4b:9c:7b:62:55:12:18:3b:83:1a:19:28:82: b7:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:82:0E:85:E0:D8:74:7F:7E:B2:E7:26:94:0C:AE:86:82:73:F8:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/328e6c00-d857-3fdd-bf11-e5ff675483b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl X509v3 Authority Key Identifier: keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer sbgp-ipAddrBlock: critical IPv4: 198.150.110.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:35:a0:2c:e7:4a:fe:f3:0e:e4:d7:25:17:b1:00:bd:08:bc: cd:53:ca:79:55:e1:a8:bb:b5:fc:d5:43:94:cd:78:46:1d:c8: ed:6c:6a:2c:d5:22:cc:90:2f:4c:89:be:97:63:1c:31:8e:e1: 3b:b9:0c:b1:65:56:9d:5b:dc:ca:d4:93:3a:11:5b:7f:dc:7f: 95:f4:4e:5b:c1:46:15:71:21:a1:ea:4b:24:8f:7a:9b:0d:52: 90:62:b4:03:48:3c:40:ef:d3:d0:66:a6:61:d3:16:18:b3:e0: d4:c6:3a:eb:e0:9d:70:0d:cd:eb:fd:08:9e:af:60:5b:f0:f6: 7b:84:c1:d9:f4:d4:73:44:ae:6b:5a:0b:32:0d:a4:3d:db:59: 3a:66:25:26:33:c7:f8:f6:d8:1d:bf:9b:1a:41:b7:d0:87:23: fa:80:2d:ec:14:47:b1:47:78:f3:82:96:aa:05:9c:9e:02:f4: b6:bf:b9:7e:4a:b3:fe:c0:15:9a:9d:fc:f1:ae:3b:14:24:8a: 70:ee:66:95:e1:3d:33:89:a7:72:d8:e7:fe:cc:70:e3:b1:35: 2f:3e:46:2a:f1:7b:86:66:e1:08:9f:05:90:c0:02:2a:06:dc: fe:56:b5:0a:5b:76:df:51:ce:27:c9:72:55:90:03:68:e7:d4: e0:ac:ef:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoJOqFwYe5MfZmwXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEwMzM5NTMtOTc1Mi00NzlkLWI5ZWUtNDIxM2NmNjQ4 NDc5MB4XDTI1MDUzMTEzMDEwM1oXDTI1MDgyOTEzMDEwM1owLzEtMCsGA1UEAxMk NzNkOTdiNTEtZjc2NC00MzY3LTg5YjEtMTc4NGNiMzBmOWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvqrehnvhLcW4sRUxBB3ARA170A/QAlies0H 2BY2iHK6gjSpQQYOfriBT/X52me5fBBTJfNoduGNkWnS53oDZMtTt9uthtS6Ya33 OjdTbRwMXD0yOm/LbVB7emxvSU8mcqdMfUX8OQsnAy088bBntSvXd0sQwxJc+Lr1 kOkSPFPaGo3zNgV9fboiN/kB55U9L6LdyyhLpi3yFL2dop9R5Bq0dKIEfQ0S+qOj F5zGhhwmumiTEBoORD8axBopYqw8CQ6FyysMGojMCzE7p/Tfrt0VZFxPzXhxSRUd w4K6zAi7GQHeIqg10Nh1zcS8iCOUv0uce2JVEhg7gxoZKIK3jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDmCDoXg2HR/frLnJpQMroaCc/h5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hYTAz Mzk1My05NzUyLTQ3OWQtYjllZS00MjEzY2Y2NDg0NzkvMzI4ZTZjMDAtZDg1Ny0z ZmRkLWJmMTEtZTVmZjY3NTQ4M2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYWEwMzM5NTMtOTc1Mi00NzlkLWI5 ZWUtNDIxM2NmNjQ4NDc5L2FhMDMzOTUzLTk3NTItNDc5ZC1iOWVlLTQyMTNjZjY0 ODQ3OS5jcmwwHwYDVR0jBBgwFoAUhCZLjuQsOm5/g8Ywel2MTTjmuLMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hYTAzMzk1My05NzUyLTQ3OWQtYjllZS00MjEz Y2Y2NDg0NzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpZuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH01oCznSv7zDuTXJRexAL0IvM1TynlV4ai7tfzVQ5TNeEYdyO1saizV IsyQL0yJvpdjHDGO4Tu5DLFlVp1b3MrUkzoRW3/cf5X0TlvBRhVxIaHqSySPepsN UpBitANIPEDv09BmpmHTFhiz4NTGOuvgnXANzev9CJ6vYFvw9nuEwdn01HNErmta CzINpD3bWTpmJSYzx/j22B2/mxpBt9CHI/qALewUR7FHePOClqoFnJ4C9La/uX5K s/7AFZqd/PGuOxQkinDuZpXhPTOJp3LY5/7McOOxNS8+Rirxe4Zm4QifBZDAAioG 3P5WtQpbdt9RzifJclWQA2jn1OCs79I= -----END CERTIFICATE-----Generated at Sun Jun 15 05:54:18 2025 by rpki-client