$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/cc1a6945-937c-3135-b0c0-bb633dc10995.roa File: cc1a6945-937c-3135-b0c0-bb633dc10995.roa (raw, json) Hash identifier: 99XQFp+o1wDtcg+tkeWsVUO0L98PT30iE2v7w6SzPkw= Subject key identifier: 95:D9:D3:36:19:18:6A:7D:AF:A8:0B:03:E1:BD:C5:1B:41:04:C9:AC Certificate issuer: /CN=8031642d-35b5-42ec-8bec-18b7bcfe2bd8 Certificate serial: 010D0C9F4328584A29556834608C46DE593F3080 Authority key identifier: A6:A5:1C:03:54:44:75:D8:E8:EF:92:A3:39:97:27:79:C5:07:0F:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/cc1a6945-937c-3135-b0c0-bb633dc10995.roa Signing time: Thu 12 Jun 2025 01:00:51 +0000 ROA not before: Thu 12 Jun 2025 01:00:51 +0000 ROA not after: Wed 10 Sep 2025 01:00:51 +0000 asID: 55101 IP address blocks: 198.97.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:29:55:68:34:60:8c:46:de:59:3f:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8031642d-35b5-42ec-8bec-18b7bcfe2bd8 Validity Not Before: Jun 12 01:00:51 2025 GMT Not After : Sep 10 01:00:51 2025 GMT Subject: CN=a68f615f-d3aa-4891-b176-9dd5ec717a49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:21:7a:02:d2:91:2e:1c:6c:dd:3f:0b:65:3f: c9:7c:fc:3d:cc:1e:b8:1a:2e:5c:a5:2b:ea:72:ca: 63:c0:28:11:a4:f0:f2:da:ed:2d:fa:96:62:5c:15: a6:e1:27:ea:f6:bf:ab:a2:41:3f:04:82:3c:d1:11: 13:19:7b:9b:7f:0f:4b:e0:22:de:28:ee:f5:9d:a6: f0:34:e2:70:ce:3f:ad:fe:72:1d:aa:33:f2:89:f3: 89:28:ff:a7:2c:c8:8e:7a:30:84:e5:79:0d:f9:03: a9:d3:a0:4f:d6:14:ed:fd:30:18:c2:b4:f5:9c:0a: f0:e3:c3:51:08:5e:ab:45:5e:85:53:cf:06:e1:dc: af:a9:3f:12:ea:af:8e:b8:09:e1:da:56:3f:c5:26: 29:b8:0a:d6:1e:ca:00:a3:f4:6c:56:16:dd:4b:70: 0e:f4:ee:fb:73:3e:52:b1:5d:2a:89:41:ae:16:4e: 63:56:ee:66:a5:7e:d1:e7:0b:50:96:4c:b6:34:57: fb:49:c6:9c:a5:19:83:d7:4c:f1:6a:d5:17:f5:c0: 11:95:30:3c:85:60:56:90:af:44:d8:e1:31:b0:84: 0d:92:c0:91:b4:b9:77:35:fd:89:b7:fd:ff:31:5b: b1:84:71:66:b6:af:18:3f:09:33:ac:c0:d5:be:f5: 54:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:D9:D3:36:19:18:6A:7D:AF:A8:0B:03:E1:BD:C5:1B:41:04:C9:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/cc1a6945-937c-3135-b0c0-bb633dc10995.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.crl X509v3 Authority Key Identifier: keyid:A6:A5:1C:03:54:44:75:D8:E8:EF:92:A3:39:97:27:79:C5:07:0F:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer sbgp-ipAddrBlock: critical IPv4: 198.97.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:5b:75:a8:6a:51:82:10:43:c2:28:28:61:97:86:1c:a1:5e: 9e:05:c0:57:f1:24:f3:55:ca:fc:c2:8c:51:4e:d0:37:04:f4: cc:33:80:7b:c2:24:b5:be:9e:8f:c5:01:74:0b:28:bb:1a:cc: 90:70:51:39:42:4d:22:a7:79:59:a7:27:b0:67:80:e9:1a:6f: 6f:f0:57:ed:03:4f:e4:8c:35:e7:68:87:70:b7:eb:d1:6f:6f: a4:56:19:80:c6:bb:9b:03:92:1e:d5:e0:28:79:d0:af:43:c8: be:79:fa:5d:cf:e9:1d:5e:80:ad:ae:64:6d:36:75:54:f2:17: 6c:15:9b:8b:be:12:92:a5:41:85:e5:95:91:10:99:85:7c:2e: e0:2e:c0:e6:9f:5d:e1:a8:f6:2a:07:d9:0a:d4:a9:cf:dd:b0: 0d:55:d8:a9:ff:e0:36:10:a6:98:b9:01:fd:a5:03:e1:1f:56: 34:bd:ef:b1:05:e5:91:75:41:1d:fe:22:65:0d:91:73:c0:75: 6c:a3:50:0e:44:39:06:83:a8:d4:99:23:e6:6e:b0:2e:99:fa: df:d8:4e:5e:aa:74:34:93:bb:5d:36:0f:9e:7d:27:b3:b7:7a: a0:e8:0c:17:b8:1c:cb:35:e2:4b:0b:46:9d:09:fb:d5:5c:47: f8:b7:91:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEopVWg0YIxG3lk/MIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODAzMTY0MmQtMzViNS00MmVjLThiZWMtMThiN2JjZmUy YmQ4MB4XDTI1MDYxMjAxMDA1MVoXDTI1MDkxMDAxMDA1MVowLzEtMCsGA1UEAxMk YTY4ZjYxNWYtZDNhYS00ODkxLWIxNzYtOWRkNWVjNzE3YTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiF6AtKRLhxs3T8LZT/JfPw9zB64Gi5cpSvq cspjwCgRpPDy2u0t+pZiXBWm4Sfq9r+rokE/BII80RETGXubfw9L4CLeKO71nabw NOJwzj+t/nIdqjPyifOJKP+nLMiOejCE5XkN+QOp06BP1hTt/TAYwrT1nArw48NR CF6rRV6FU88G4dyvqT8S6q+OuAnh2lY/xSYpuArWHsoAo/RsVhbdS3AO9O77cz5S sV0qiUGuFk5jVu5mpX7R5wtQlky2NFf7ScacpRmD10zxatUX9cARlTA8hWBWkK9E 2OExsIQNksCRtLl3Nf2Jt/3/MVuxhHFmtq8YPwkzrMDVvvVUhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJXZ0zYZGGp9r6gLA+G9xRtBBMmsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84MDMx NjQyZC0zNWI1LTQyZWMtOGJlYy0xOGI3YmNmZTJiZDgvY2MxYTY5NDUtOTM3Yy0z MTM1LWIwYzAtYmI2MzNkYzEwOTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvODAzMTY0MmQtMzViNS00MmVjLThi ZWMtMThiN2JjZmUyYmQ4LzgwMzE2NDJkLTM1YjUtNDJlYy04YmVjLTE4YjdiY2Zl MmJkOC5jcmwwHwYDVR0jBBgwFoAUpqUcA1REddjo75KjOZcnecUHD1cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84MDMxNjQyZC0zNWI1LTQyZWMtOGJlYy0xOGI3 YmNmZTJiZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmHUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhbdahqUYIQQ8IoKGGXhhyhXp4FwFfxJPNVyvzCjFFO0DcE9MwzgHvC JLW+no/FAXQLKLsazJBwUTlCTSKneVmnJ7BngOkab2/wV+0DT+SMNedoh3C369Fv b6RWGYDGu5sDkh7V4Ch50K9DyL55+l3P6R1egK2uZG02dVTyF2wVm4u+EpKlQYXl lZEQmYV8LuAuwOafXeGo9ioH2QrUqc/dsA1V2Kn/4DYQppi5Af2lA+EfVjS977EF 5ZF1QR3+ImUNkXPAdWyjUA5EOQaDqNSZI+ZusC6Z+t/YTl6qdDSTu102D559J7O3 eqDoDBe4HMs14ksLRp0J+9VcR/i3kZI= -----END CERTIFICATE-----Generated at Tue Jun 17 18:03:00 2025 by rpki-client