$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/41de201d-f0c9-3b01-828a-2888d2923ae3.roa File: 41de201d-f0c9-3b01-828a-2888d2923ae3.roa (raw, json) Hash identifier: CmuUd4BSSZNGI6DbfJ2RKdX7nG3n7QhCl2Z31Y1b5M4= Subject key identifier: 12:54:23:BC:35:13:84:03:05:D0:35:84:CD:29:99:49:E4:40:E2:E0 Certificate issuer: /CN=8031642d-35b5-42ec-8bec-18b7bcfe2bd8 Certificate serial: 010D0C9F4328584A29556867D9D8A59A120D68F0 Authority key identifier: A6:A5:1C:03:54:44:75:D8:E8:EF:92:A3:39:97:27:79:C5:07:0F:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/41de201d-f0c9-3b01-828a-2888d2923ae3.roa Signing time: Thu 12 Jun 2025 01:00:51 +0000 ROA not before: Thu 12 Jun 2025 01:00:51 +0000 ROA not after: Wed 10 Sep 2025 01:00:51 +0000 asID: 55101 IP address blocks: 198.97.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:29:55:68:67:d9:d8:a5:9a:12:0d:68:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8031642d-35b5-42ec-8bec-18b7bcfe2bd8 Validity Not Before: Jun 12 01:00:51 2025 GMT Not After : Sep 10 01:00:51 2025 GMT Subject: CN=2ef6cae1-e116-4d69-b2bf-7b5d6a1544e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:bf:49:29:38:b7:7b:b6:b1:6d:cb:50:92:0a: b4:2c:34:af:ec:a9:4c:77:f3:25:57:1c:91:9c:1b: 02:f7:92:8b:9a:9d:4f:8f:44:82:2f:fa:79:d7:e7: f9:27:d1:42:f6:0a:d2:d7:3f:f4:7a:db:e0:4e:78: 08:11:85:64:6b:91:d9:e9:a6:90:8a:74:f2:ec:95: cf:88:f3:f5:d5:40:61:b9:97:cc:83:03:98:23:ef: 36:e8:02:d8:ab:a5:dd:5f:d3:71:98:be:c0:8c:a5: 00:c9:b0:e1:b9:94:6e:45:65:bb:eb:11:af:03:9e: 3b:f1:4b:b7:2f:9f:25:12:98:27:4b:ef:98:1c:1c: 63:8d:16:6f:36:10:75:d1:8c:80:8a:ec:6e:24:79: cf:47:ac:4d:64:61:bb:79:86:5e:a8:0b:6b:82:56: f6:6d:ee:da:b4:b8:d3:fb:90:81:d8:d4:ab:2c:45: d2:6e:f0:8d:58:ff:47:fc:82:3f:ef:6d:5a:e7:4a: e2:37:db:0a:09:e3:ca:5f:0f:d0:8d:c3:8a:94:e9: ca:fa:76:ca:76:c3:31:5b:ea:cd:af:ba:71:9d:e6: 2a:9c:e8:c8:4f:5b:c2:88:e3:c2:36:8e:74:0a:b8: a8:03:be:54:b6:eb:e8:3d:03:3c:1d:63:59:be:56: 8d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:54:23:BC:35:13:84:03:05:D0:35:84:CD:29:99:49:E4:40:E2:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/41de201d-f0c9-3b01-828a-2888d2923ae3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.crl X509v3 Authority Key Identifier: keyid:A6:A5:1C:03:54:44:75:D8:E8:EF:92:A3:39:97:27:79:C5:07:0F:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer sbgp-ipAddrBlock: critical IPv4: 198.97.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:01:84:b2:62:67:c0:b6:c5:24:05:76:8a:4a:01:30:7e:6d: b9:cf:12:71:18:a4:e8:d6:95:5c:48:30:57:44:85:e5:37:b7: ea:ab:a2:f0:3f:c7:93:7e:b9:fb:23:a6:f3:4e:4a:55:9b:0f: 8f:09:59:49:27:e1:a0:2e:4e:b8:c2:57:eb:3c:f3:d8:47:38: 13:fa:2e:7d:95:3b:aa:2a:de:a4:0b:fa:ca:da:c0:6a:a4:31: cb:5c:77:74:da:22:c8:2c:01:72:b2:ba:fd:3e:66:ef:60:65: 99:3f:a6:37:49:0c:14:61:de:60:50:ed:6b:b1:7b:54:ec:5f: 7e:1c:27:ac:7a:83:8a:51:b0:f1:4e:85:28:cc:a6:1f:a8:6b: 61:2b:62:26:0d:59:a4:b4:b6:e3:9e:c7:b0:e9:e9:b5:9b:43: bd:18:c9:38:88:d4:ee:94:86:fe:05:af:97:69:d8:66:00:5b: cb:06:41:a6:c8:f4:e6:12:14:b7:b8:71:48:81:55:1e:64:ab: 6d:84:c2:e2:61:e1:09:0f:6c:d3:ab:f4:ef:0c:77:f9:b5:f3: bd:3d:17:e0:14:3b:73:3e:91:f2:16:3a:26:cc:b2:4f:bc:02: 76:e1:7a:cb:a0:ad:ef:de:5d:36:79:7e:a4:23:d4:2b:48:16: 98:59:47:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEopVWhn2dilmhINaPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODAzMTY0MmQtMzViNS00MmVjLThiZWMtMThiN2JjZmUy YmQ4MB4XDTI1MDYxMjAxMDA1MVoXDTI1MDkxMDAxMDA1MVowLzEtMCsGA1UEAxMk MmVmNmNhZTEtZTExNi00ZDY5LWIyYmYtN2I1ZDZhMTU0NGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArb9JKTi3e7axbctQkgq0LDSv7KlMd/MlVxyR nBsC95KLmp1Pj0SCL/p51+f5J9FC9grS1z/0etvgTngIEYVka5HZ6aaQinTy7JXP iPP11UBhuZfMgwOYI+826ALYq6XdX9NxmL7AjKUAybDhuZRuRWW76xGvA5478Uu3 L58lEpgnS++YHBxjjRZvNhB10YyAiuxuJHnPR6xNZGG7eYZeqAtrglb2be7atLjT +5CB2NSrLEXSbvCNWP9H/II/721a50riN9sKCePKXw/QjcOKlOnK+nbKdsMxW+rN r7pxneYqnOjIT1vCiOPCNo50CrioA75UtuvoPQM8HWNZvlaN3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJUI7w1E4QDBdA1hM0pmUnkQOLgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84MDMx NjQyZC0zNWI1LTQyZWMtOGJlYy0xOGI3YmNmZTJiZDgvNDFkZTIwMWQtZjBjOS0z YjAxLTgyOGEtMjg4OGQyOTIzYWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvODAzMTY0MmQtMzViNS00MmVjLThi ZWMtMThiN2JjZmUyYmQ4LzgwMzE2NDJkLTM1YjUtNDJlYy04YmVjLTE4YjdiY2Zl MmJkOC5jcmwwHwYDVR0jBBgwFoAUpqUcA1REddjo75KjOZcnecUHD1cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84MDMxNjQyZC0zNWI1LTQyZWMtOGJlYy0xOGI3 YmNmZTJiZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmHXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQBhLJiZ8C2xSQFdopKATB+bbnPEnEYpOjWlVxIMFdEheU3t+qrovA/ x5N+ufsjpvNOSlWbD48JWUkn4aAuTrjCV+s889hHOBP6Ln2VO6oq3qQL+srawGqk Mctcd3TaIsgsAXKyuv0+Zu9gZZk/pjdJDBRh3mBQ7Wuxe1TsX34cJ6x6g4pRsPFO hSjMph+oa2ErYiYNWaS0tuOex7Dp6bWbQ70YyTiI1O6Uhv4Fr5dp2GYAW8sGQabI 9OYSFLe4cUiBVR5kq22EwuJh4QkPbNOr9O8Md/m18709F+AUO3M+kfIWOibMsk+8 Anbhesugre/eXTZ5fqQj1CtIFphZRzY= -----END CERTIFICATE-----Generated at Tue Jun 17 04:18:42 2025 by rpki-client