$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/4bad2ed5-4af6-3597-ab3d-ee8ed02a05f2.roa File: 4bad2ed5-4af6-3597-ab3d-ee8ed02a05f2.roa (raw, json) Hash identifier: qXgM2BLveyyPLSYnlZcByGLdTpDiRfVRJr4PwIZYjz4= Subject key identifier: 20:FB:8A:D7:69:DE:25:3D:8A:E7:CF:55:6E:D3:AB:73:89:C3:D5:A2 Certificate issuer: /CN=8031642d-35b5-42ec-8bec-18b7bcfe2bd8 Certificate serial: 010D0C9F4328584A2955687791A4F53B2B32DF20 Authority key identifier: A6:A5:1C:03:54:44:75:D8:E8:EF:92:A3:39:97:27:79:C5:07:0F:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/4bad2ed5-4af6-3597-ab3d-ee8ed02a05f2.roa Signing time: Thu 12 Jun 2025 01:00:51 +0000 ROA not before: Thu 12 Jun 2025 01:00:51 +0000 ROA not after: Wed 10 Sep 2025 01:00:51 +0000 asID: 55101 IP address blocks: 198.97.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:29:55:68:77:91:a4:f5:3b:2b:32:df:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8031642d-35b5-42ec-8bec-18b7bcfe2bd8 Validity Not Before: Jun 12 01:00:51 2025 GMT Not After : Sep 10 01:00:51 2025 GMT Subject: CN=a1f1cb26-2115-4b17-9e64-c13169ea2075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:19:32:5a:19:ab:1a:ee:7f:8d:01:2b:ef:7a: bf:0f:73:c9:15:d3:a6:95:85:3d:98:b3:44:98:53: d4:bb:23:ec:14:48:6f:28:89:64:32:82:fc:36:7d: 30:f8:ef:f2:5d:a8:00:ed:2e:66:2f:82:38:eb:9d: 05:ca:8b:b1:4b:59:72:98:74:25:26:53:dc:9e:b6: a0:a5:20:48:5b:14:89:d5:ca:40:c0:a9:a4:9b:26: 58:68:89:8f:2f:e1:28:96:fa:05:c8:c6:70:ac:e8: 3a:5c:4d:40:01:63:b3:2e:e3:77:69:62:d8:f2:9b: 93:69:03:27:24:76:43:e6:cd:9c:51:e2:0d:0d:d5: b0:70:b4:9f:6f:f4:bc:ea:69:86:7a:3f:59:84:8a: 02:31:ae:0a:03:02:98:35:3c:8f:7f:49:91:0d:b8: ef:a3:e9:65:03:6a:57:f6:b1:17:31:f2:78:76:67: a8:12:d7:dc:da:40:61:9d:14:26:19:2b:18:ce:6b: 53:a3:12:16:a8:1b:77:46:67:f2:d2:2d:73:c4:64: 78:1a:a9:e6:26:c8:92:a9:40:f6:ab:09:75:d2:a3: 3a:3e:42:55:3f:03:c8:77:31:57:57:77:3c:63:85: a1:33:1c:ce:25:f7:25:4b:34:2e:1c:a6:91:3b:10: f8:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:FB:8A:D7:69:DE:25:3D:8A:E7:CF:55:6E:D3:AB:73:89:C3:D5:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/4bad2ed5-4af6-3597-ab3d-ee8ed02a05f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.crl X509v3 Authority Key Identifier: keyid:A6:A5:1C:03:54:44:75:D8:E8:EF:92:A3:39:97:27:79:C5:07:0F:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer sbgp-ipAddrBlock: critical IPv4: 198.97.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:fe:44:d8:3a:6b:a7:28:d9:5b:85:ab:b0:37:a9:dd:a3:38: 05:6f:3e:21:5c:38:68:be:8a:a5:fa:8b:2f:a2:39:4b:b2:55: 7f:4c:ca:27:e4:74:37:ef:82:f2:ea:5b:16:48:69:d7:f4:d4: 66:11:41:d9:28:64:e1:17:b7:03:8a:6e:50:88:f0:fe:66:d4: 55:48:50:db:c0:0a:3d:e0:78:bb:38:2f:97:59:66:c9:62:6e: f3:a2:2b:af:43:7b:b8:39:5b:0b:32:3a:03:35:b0:af:02:3d: dc:21:d1:89:51:d7:33:b8:79:c7:f6:6e:43:a5:c3:44:ce:4b: 11:36:3c:c5:47:f1:59:f6:68:c8:11:ca:e5:c6:c3:ce:ca:5b: 52:90:8f:e0:db:63:6b:e0:2d:78:38:62:0e:4b:b4:37:7a:d9: 15:c3:bc:6b:61:db:71:80:44:e9:60:55:3f:d4:23:6a:64:39: f2:78:3e:8b:92:36:23:6f:b5:ff:bf:4b:e2:7a:ee:0b:3f:98: 8a:fb:54:ff:1d:28:7f:0b:40:57:de:78:ac:6d:68:d9:e4:69: 6a:ff:01:3f:00:7d:71:1b:18:48:01:d1:43:74:10:3d:99:65: d1:a2:8b:62:87:e9:61:f8:e1:53:54:55:67:2b:bb:59:28:f6: bd:d8:c6:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEopVWh3kaT1Oysy3yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODAzMTY0MmQtMzViNS00MmVjLThiZWMtMThiN2JjZmUy YmQ4MB4XDTI1MDYxMjAxMDA1MVoXDTI1MDkxMDAxMDA1MVowLzEtMCsGA1UEAxMk YTFmMWNiMjYtMjExNS00YjE3LTllNjQtYzEzMTY5ZWEyMDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBkyWhmrGu5/jQEr73q/D3PJFdOmlYU9mLNE mFPUuyPsFEhvKIlkMoL8Nn0w+O/yXagA7S5mL4I4650FyouxS1lymHQlJlPcnrag pSBIWxSJ1cpAwKmkmyZYaImPL+EolvoFyMZwrOg6XE1AAWOzLuN3aWLY8puTaQMn JHZD5s2cUeINDdWwcLSfb/S86mmGej9ZhIoCMa4KAwKYNTyPf0mRDbjvo+llA2pX 9rEXMfJ4dmeoEtfc2kBhnRQmGSsYzmtToxIWqBt3Rmfy0i1zxGR4GqnmJsiSqUD2 qwl10qM6PkJVPwPIdzFXV3c8Y4WhMxzOJfclSzQuHKaROxD4qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCD7itdp3iU9iufPVW7Tq3OJw9WiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84MDMx NjQyZC0zNWI1LTQyZWMtOGJlYy0xOGI3YmNmZTJiZDgvNGJhZDJlZDUtNGFmNi0z NTk3LWFiM2QtZWU4ZWQwMmEwNWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvODAzMTY0MmQtMzViNS00MmVjLThi ZWMtMThiN2JjZmUyYmQ4LzgwMzE2NDJkLTM1YjUtNDJlYy04YmVjLTE4YjdiY2Zl MmJkOC5jcmwwHwYDVR0jBBgwFoAUpqUcA1REddjo75KjOZcnecUHD1cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84MDMxNjQyZC0zNWI1LTQyZWMtOGJlYy0xOGI3 YmNmZTJiZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxmHUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEn+RNg6a6co2VuFq7A3qd2jOAVvPiFcOGi+iqX6iy+iOUuyVX9Myifk dDfvgvLqWxZIadf01GYRQdkoZOEXtwOKblCI8P5m1FVIUNvACj3geLs4L5dZZsli bvOiK69De7g5WwsyOgM1sK8CPdwh0YlR1zO4ecf2bkOlw0TOSxE2PMVH8Vn2aMgR yuXGw87KW1KQj+DbY2vgLXg4Yg5LtDd62RXDvGth23GAROlgVT/UI2pkOfJ4PouS NiNvtf+/S+J67gs/mIr7VP8dKH8LQFfeeKxtaNnkaWr/AT8AfXEbGEgB0UN0ED2Z ZdGii2KH6WH44VNUVWcru1ko9r3Yxvc= -----END CERTIFICATE-----Generated at Tue Jun 17 11:06:47 2025 by rpki-client