$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55/fa68b0de-950c-3c2b-93c2-0c01d381801f.roa File: fa68b0de-950c-3c2b-93c2-0c01d381801f.roa (raw, json) Hash identifier: d8vHJW65M9gmXJNcFwy2uxuSq1kY1Y6mY+pI7qucVmE= Subject key identifier: 6B:72:E1:3C:12:90:8C:64:3A:F4:A0:F2:C6:9D:50:81:B6:DF:5F:47 Certificate issuer: /CN=1f5fe3e7-3c15-4742-a824-8c933974ab55 Certificate serial: 010D0C9F43285849E2251F3AD3E230C2BED8AF60 Authority key identifier: 04:16:CB:E5:BD:0C:1A:59:30:EB:0E:72:5C:7A:4E:81:7C:0E:C5:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55/fa68b0de-950c-3c2b-93c2-0c01d381801f.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 16509 IP address blocks: 198.99.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55/1f5fe3e7-3c15-4742-a824-8c933974ab55.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55/1f5fe3e7-3c15-4742-a824-8c933974ab55.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:1f:3a:d3:e2:30:c2:be:d8:af:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f5fe3e7-3c15-4742-a824-8c933974ab55 Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=636c2ac2-29a7-4ff0-bd82-5e2dc3f31043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:dd:e7:4f:c7:86:58:0d:d0:67:74:3d:80:2a: b7:72:62:8f:b1:2a:cc:fa:35:71:de:ec:2d:aa:7c: 3e:80:fc:4b:c5:4f:3d:4b:36:e6:06:b6:89:78:5b: 62:23:e8:63:50:87:ee:3e:03:a7:11:61:d2:86:d1: a3:7b:9b:91:dc:f9:82:0a:49:ff:df:6a:19:64:24: d4:54:5f:c2:26:fa:e3:cc:1a:5f:26:50:d3:8c:c0: e8:70:6d:58:a8:bf:ee:84:2e:f4:e4:66:aa:c1:da: e6:a9:a6:ac:8a:96:22:69:a1:7a:11:bf:cd:b2:9c: 37:de:46:3c:e8:f9:0d:b4:7b:d1:e7:38:3b:15:bc: 7a:7e:02:a7:bd:18:40:04:bc:0d:8b:67:67:c6:db: e8:84:dd:8f:bb:54:25:f4:70:9d:ca:26:ce:be:1b: 32:1b:30:b8:8d:21:9e:18:2f:e8:05:de:df:e4:de: ba:04:4e:31:29:61:c6:4f:4a:6f:b8:ef:2c:c9:30: 68:df:3c:7d:0e:5d:63:79:df:fe:52:36:e4:6b:f7: 43:70:cb:bf:19:e8:ce:79:d4:6d:45:9a:0f:1c:56: f8:fd:6f:81:e8:43:49:12:88:29:d7:fa:76:b9:c8: 24:28:91:8d:e4:19:3b:fb:84:dc:80:dc:c2:70:bb: c0:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:72:E1:3C:12:90:8C:64:3A:F4:A0:F2:C6:9D:50:81:B6:DF:5F:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55/fa68b0de-950c-3c2b-93c2-0c01d381801f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55/1f5fe3e7-3c15-4742-a824-8c933974ab55.crl X509v3 Authority Key Identifier: keyid:04:16:CB:E5:BD:0C:1A:59:30:EB:0E:72:5C:7A:4E:81:7C:0E:C5:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55.cer sbgp-ipAddrBlock: critical IPv4: 198.99.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:25:ed:20:02:6e:21:70:ba:7e:f4:df:9e:07:4f:99:88:92: 52:55:ed:29:f7:70:e7:7c:c2:0d:de:4e:28:ac:fa:99:9a:f5: d3:12:6a:8c:62:07:d0:f4:80:e0:c8:47:5d:4b:4e:c0:d5:c0: a6:27:30:96:2c:29:e3:69:b3:5e:80:5d:f4:0a:aa:10:99:50: ce:9f:79:3a:3d:7a:86:af:50:ee:1e:dd:8d:01:0a:36:66:35: 29:72:6e:5f:e2:59:f3:ee:98:d8:6f:be:8e:55:3e:30:43:b5: e3:03:75:8b:f7:2e:8b:0b:e4:bb:ff:5d:a7:dd:41:5c:a6:90: 7a:54:9c:7a:b4:88:ff:32:b4:c1:8f:a4:00:4c:36:9c:6d:9c: c1:73:7f:54:be:95:88:15:8e:8a:55:28:f0:79:e5:d3:6c:6e: a1:90:60:56:43:13:7d:81:be:9b:a3:33:7e:87:d3:b7:cb:ca: cd:5e:56:18:0a:15:cc:25:df:46:41:9a:3d:e9:4f:f3:b2:65: 32:62:32:c4:70:9e:ae:bf:17:d4:0f:f1:8e:c0:26:b0:93:6d: ba:22:98:c1:7c:59:f0:cc:f0:c4:be:42:8f:bf:37:4c:38:fa: aa:f4:fc:c1:08:56:ab:b8:67:d7:72:78:90:45:e0:22:7d:51: 4e:53:de:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEniJR860+Iwwr7Yr2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY1ZmUzZTctM2MxNS00NzQyLWE4MjQtOGM5MzM5NzRh YjU1MB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk NjM2YzJhYzItMjlhNy00ZmYwLWJkODItNWUyZGMzZjMxMDQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqN3nT8eGWA3QZ3Q9gCq3cmKPsSrM+jVx3uwt qnw+gPxLxU89SzbmBraJeFtiI+hjUIfuPgOnEWHShtGje5uR3PmCCkn/32oZZCTU VF/CJvrjzBpfJlDTjMDocG1YqL/uhC705GaqwdrmqaasipYiaaF6Eb/Nspw33kY8 6PkNtHvR5zg7Fbx6fgKnvRhABLwNi2dnxtvohN2Pu1Ql9HCdyibOvhsyGzC4jSGe GC/oBd7f5N66BE4xKWHGT0pvuO8syTBo3zx9Dl1jed/+Ujbka/dDcMu/GejOedRt RZoPHFb4/W+B6ENJEogp1/p2ucgkKJGN5Bk7+4TcgNzCcLvAzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGty4TwSkIxkOvSg8sadUIG2319HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xZjVm ZTNlNy0zYzE1LTQ3NDItYTgyNC04YzkzMzk3NGFiNTUvZmE2OGIwZGUtOTUwYy0z YzJiLTkzYzItMGMwMWQzODE4MDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWY1ZmUzZTctM2MxNS00NzQyLWE4 MjQtOGM5MzM5NzRhYjU1LzFmNWZlM2U3LTNjMTUtNDc0Mi1hODI0LThjOTMzOTc0 YWI1NS5jcmwwHwYDVR0jBBgwFoAUBBbL5b0MGlkw6w5yXHpOgXwOxfUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xZjVmZTNlNy0zYzE1LTQ3NDItYTgyNC04Yzkz Mzk3NGFiNTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmN7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIkl7SACbiFwun70354HT5mIklJV7Sn3cOd8wg3eTiis+pma9dMSaoxi B9D0gODIR11LTsDVwKYnMJYsKeNps16AXfQKqhCZUM6feTo9eoavUO4e3Y0BCjZm NSlybl/iWfPumNhvvo5VPjBDteMDdYv3LosL5Lv/XafdQVymkHpUnHq0iP8ytMGP pABMNpxtnMFzf1S+lYgVjopVKPB55dNsbqGQYFZDE32BvpujM36H07fLys1eVhgK Fcwl30ZBmj3pT/OyZTJiMsRwnq6/F9QP8Y7AJrCTbboimMF8WfDM8MS+Qo+/N0w4 +qr0/MEIVqu4Z9dyeJBF4CJ9UU5T3jY= -----END CERTIFICATE-----Generated at Sat Jun 14 06:19:15 2025 by rpki-client