$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/431e93dd-5d2f-3db1-9c2a-936ab1931179.roa File: 431e93dd-5d2f-3db1-9c2a-936ab1931179.roa (raw, json) Hash identifier: VDuAe4QdggQpPgWhA+fQpntSgeXuq3x/7drZ6MLHYwU= Subject key identifier: 8E:02:57:E1:FD:5A:BF:9C:41:3A:AB:7C:03:63:97:CD:D6:55:5B:84 Certificate issuer: /CN=aa033953-9752-479d-b9ee-4213cf648479 Certificate serial: 010D0C9F4328584A093AA1542FEEBBA4E97A8280 Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/431e93dd-5d2f-3db1-9c2a-936ab1931179.roa Signing time: Sat 31 May 2025 13:01:03 +0000 ROA not before: Sat 31 May 2025 13:01:03 +0000 ROA not after: Fri 29 Aug 2025 13:01:03 +0000 asID: 394316 IP address blocks: 198.150.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:09:3a:a1:54:2f:ee:bb:a4:e9:7a:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479 Validity Not Before: May 31 13:01:03 2025 GMT Not After : Aug 29 13:01:03 2025 GMT Subject: CN=d838c35c-e47e-48e3-b930-246f81c3dde6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:1c:6c:f3:02:fa:60:48:21:19:3f:63:28:45: 64:30:fe:a8:84:e0:34:2f:af:98:2f:28:04:e7:fe: cd:3e:18:0a:ee:1c:ab:be:1a:77:ea:2f:8c:0d:98: 8f:75:17:d9:6e:ef:a8:ff:a2:40:04:fe:43:66:10: 4c:35:4e:c8:d3:52:26:60:0b:37:f2:50:9c:9c:42: 20:37:9f:61:3b:c2:9c:c0:24:30:aa:bd:f1:19:b6: 7e:1a:04:82:54:c0:1b:f4:fa:54:a6:28:df:3a:d2: 70:49:37:e0:7a:2d:ae:77:51:f8:fb:90:d5:c0:e4: f5:23:3b:bc:f2:2a:1a:94:e7:b7:4e:9d:90:fb:91: f8:32:e4:e9:0b:34:06:9e:9e:a6:5c:45:7c:ab:99: 0a:9c:2f:99:93:31:00:21:2a:cd:9a:4d:54:75:b1: 0a:12:a7:09:0e:87:c1:6e:71:98:af:57:62:6c:f7: ff:02:77:32:3e:99:8a:b8:19:83:20:5b:a1:63:e7: 5c:70:85:b6:9e:08:55:ba:17:ac:88:b3:b2:9e:8f: 09:3e:d8:fd:c7:c0:b4:08:d4:e3:1d:88:1f:c4:5e: 2c:81:e1:66:54:89:5a:fc:29:6d:27:a0:3b:00:ab: c6:44:55:07:04:2a:5b:e3:3d:3e:cc:ac:b3:60:b3: ec:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:02:57:E1:FD:5A:BF:9C:41:3A:AB:7C:03:63:97:CD:D6:55:5B:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/431e93dd-5d2f-3db1-9c2a-936ab1931179.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl X509v3 Authority Key Identifier: keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer sbgp-ipAddrBlock: critical IPv4: 198.150.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:74:00:46:57:af:b6:1a:0c:8e:c0:41:35:af:70:08:3c:c6: fe:2c:9b:30:8f:66:7c:71:12:82:89:f9:d3:b6:e4:02:bd:77: a1:69:c1:70:f2:a9:88:ea:6b:2e:1e:f5:b5:46:01:97:a9:12: 1a:42:12:02:8e:f0:a8:f0:35:1b:b8:cb:f4:ed:c0:34:f9:da: 16:83:4e:8d:8f:ee:37:82:b4:e0:76:83:a8:18:fe:7d:bc:70: 4d:72:a3:d1:be:c5:b0:ac:75:23:0e:d1:3d:33:f6:00:31:c2: 2e:e7:cf:a6:89:41:bc:8a:de:d4:b3:04:66:ba:6f:3f:17:c9: 11:ab:1b:22:12:aa:aa:e0:d2:ff:29:e1:69:b9:4e:fe:19:0e: 0a:d2:35:4b:8b:71:b9:7e:13:8e:5b:8a:d6:62:ee:a3:be:7f: 73:26:a7:fe:3d:82:38:57:a2:da:cb:41:99:5c:2f:d4:57:b6: ff:8e:94:ad:04:34:1f:e5:73:be:85:ca:82:c3:83:df:10:21: 08:da:4f:62:06:b8:43:dc:4f:69:2a:bc:7d:23:b0:bf:f8:82: 69:9b:26:cf:34:7c:51:3e:47:1a:71:a6:73:8b:21:92:02:32: b4:a5:50:d2:5d:31:98:36:6b:0e:e4:44:45:d9:7e:d7:e2:13: 14:04:2d:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoJOqFUL+67pOl6goAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEwMzM5NTMtOTc1Mi00NzlkLWI5ZWUtNDIxM2NmNjQ4 NDc5MB4XDTI1MDUzMTEzMDEwM1oXDTI1MDgyOTEzMDEwM1owLzEtMCsGA1UEAxMk ZDgzOGMzNWMtZTQ3ZS00OGUzLWI5MzAtMjQ2ZjgxYzNkZGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7xxs8wL6YEghGT9jKEVkMP6ohOA0L6+YLygE 5/7NPhgK7hyrvhp36i+MDZiPdRfZbu+o/6JABP5DZhBMNU7I01ImYAs38lCcnEIg N59hO8KcwCQwqr3xGbZ+GgSCVMAb9PpUpijfOtJwSTfgei2ud1H4+5DVwOT1Izu8 8ioalOe3Tp2Q+5H4MuTpCzQGnp6mXEV8q5kKnC+ZkzEAISrNmk1UdbEKEqcJDofB bnGYr1dibPf/AncyPpmKuBmDIFuhY+dccIW2nghVuhesiLOyno8JPtj9x8C0CNTj HYgfxF4sgeFmVIla/CltJ6A7AKvGRFUHBCpb4z0+zKyzYLPsgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI4CV+H9Wr+cQTqrfANjl83WVVuEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hYTAz Mzk1My05NzUyLTQ3OWQtYjllZS00MjEzY2Y2NDg0NzkvNDMxZTkzZGQtNWQyZi0z ZGIxLTljMmEtOTM2YWIxOTMxMTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYWEwMzM5NTMtOTc1Mi00NzlkLWI5 ZWUtNDIxM2NmNjQ4NDc5L2FhMDMzOTUzLTk3NTItNDc5ZC1iOWVlLTQyMTNjZjY0 ODQ3OS5jcmwwHwYDVR0jBBgwFoAUhCZLjuQsOm5/g8Ywel2MTTjmuLMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hYTAzMzk1My05NzUyLTQ3OWQtYjllZS00MjEz Y2Y2NDg0NzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxpZiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHF0AEZXr7YaDI7AQTWvcAg8xv4smzCPZnxxEoKJ+dO25AK9d6FpwXDy qYjqay4e9bVGAZepEhpCEgKO8KjwNRu4y/TtwDT52haDTo2P7jeCtOB2g6gY/n28 cE1yo9G+xbCsdSMO0T0z9gAxwi7nz6aJQbyK3tSzBGa6bz8XyRGrGyISqqrg0v8p 4Wm5Tv4ZDgrSNUuLcbl+E45bitZi7qO+f3Mmp/49gjhXotrLQZlcL9RXtv+OlK0E NB/lc76FyoLDg98QIQjaT2IGuEPcT2kqvH0jsL/4gmmbJs80fFE+RxpxpnOLIZIC MrSlUNJdMZg2aw7kREXZftfiExQELaQ= -----END CERTIFICATE-----Generated at Mon Jun 16 20:03:43 2025 by rpki-client