$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/d7d19c6a-acd3-3622-8cf6-c0e01fce1b12.roa File: d7d19c6a-acd3-3622-8cf6-c0e01fce1b12.roa (raw, json) Hash identifier: b9dWzCOkt6FAPITSu2Pe8pbRsLtLSPepknDR9FH4aXI= Subject key identifier: CC:96:C5:21:9D:9B:E3:13:D4:B3:CE:B5:D8:BE:AD:77:5D:C4:59:D0 Certificate issuer: /CN=8031642d-35b5-42ec-8bec-18b7bcfe2bd8 Certificate serial: 010D0C9F4328584A2955685826C98F9999371B00 Authority key identifier: A6:A5:1C:03:54:44:75:D8:E8:EF:92:A3:39:97:27:79:C5:07:0F:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/d7d19c6a-acd3-3622-8cf6-c0e01fce1b12.roa Signing time: Thu 12 Jun 2025 01:00:51 +0000 ROA not before: Thu 12 Jun 2025 01:00:51 +0000 ROA not after: Wed 10 Sep 2025 01:00:51 +0000 asID: 55101 IP address blocks: 198.97.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:29:55:68:58:26:c9:8f:99:99:37:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8031642d-35b5-42ec-8bec-18b7bcfe2bd8 Validity Not Before: Jun 12 01:00:51 2025 GMT Not After : Sep 10 01:00:51 2025 GMT Subject: CN=9646bb74-4073-42af-9201-ccecd9e84503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d9:3c:62:f5:c1:fb:85:4d:b4:b8:65:a8:bf: 11:34:59:91:3a:46:6d:0d:c4:69:f4:d3:fc:54:ea: ce:6b:85:04:01:0f:ff:e1:64:61:9a:d5:17:16:f8: 6f:43:d7:58:2e:18:5a:68:0c:72:c1:63:cd:dc:1d: a9:91:40:cf:9b:d3:e3:07:23:17:6c:d0:0a:18:db: a9:b1:b7:6b:f5:55:18:7f:59:98:58:33:b7:6e:b1: a0:fe:11:a9:08:ec:c1:61:82:0c:ba:37:00:8d:13: 6f:2f:61:01:1d:3e:e3:a6:44:ed:53:51:7f:58:3e: 48:a9:05:7e:6e:cc:e7:14:18:d8:74:71:f2:54:11: 6e:fb:8a:2f:39:d5:91:d8:98:82:26:98:b1:e3:36: 84:fe:23:a2:3f:d1:a1:2f:6d:4e:39:60:81:37:ea: 4d:f3:f5:0e:1a:fb:a6:0f:c2:71:79:a6:16:c4:73: 62:84:35:59:20:ad:17:d1:9c:c9:7f:c4:0c:31:1c: 1b:76:91:fc:59:a8:cf:f7:56:1c:12:64:e8:2d:fe: ae:03:12:9a:b4:aa:43:5c:d7:b2:2a:7f:7c:fe:44: 0c:5e:c1:86:08:70:79:f2:a3:c7:99:63:e8:ad:ce: e1:90:df:ab:77:df:90:5a:03:f5:95:9e:9c:bb:bb: 99:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:96:C5:21:9D:9B:E3:13:D4:B3:CE:B5:D8:BE:AD:77:5D:C4:59:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/d7d19c6a-acd3-3622-8cf6-c0e01fce1b12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.crl X509v3 Authority Key Identifier: keyid:A6:A5:1C:03:54:44:75:D8:E8:EF:92:A3:39:97:27:79:C5:07:0F:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer sbgp-ipAddrBlock: critical IPv4: 198.97.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:79:39:22:13:78:a1:b0:66:10:27:9c:4d:4a:27:33:b3:fd: 6c:62:24:8a:8a:00:ea:cc:ea:0f:de:09:44:9f:b0:02:50:54: d2:fb:4f:f9:ec:93:43:72:36:21:40:1b:73:17:e4:61:a9:2a: 0a:9d:c4:3e:71:79:c6:6d:29:86:55:07:19:64:42:91:50:0a: 35:37:3a:76:5f:3f:0a:3b:bc:11:97:02:1c:d3:77:4c:d3:33: ab:c1:01:08:19:ad:57:49:b6:4e:af:7c:cd:86:fb:e4:a0:52: 10:42:80:0d:9b:86:95:6b:ff:c1:2b:a8:24:44:92:a1:5e:bd: 37:c9:8e:05:81:85:1d:cc:33:d8:71:28:3f:cc:4a:cc:9f:40: 1b:16:49:84:eb:9c:56:43:4e:f8:1a:2e:d0:1e:56:fd:40:7b: 13:ff:41:9e:a0:09:83:19:4c:66:43:a8:8e:29:ab:c5:38:89: 2f:36:96:6a:90:17:d4:aa:02:fc:9c:ec:de:ae:06:b4:de:f4: 09:68:33:9b:45:5f:9a:bc:f3:58:b8:7e:dc:ae:14:3a:0c:39: ec:03:a7:b3:75:cb:32:6a:8f:35:ab:6e:d8:f1:5b:27:45:ad: d9:0e:b9:68:4f:5c:b4:a0:ff:f8:d7:c7:6c:a5:86:07:ba:ff: 0d:fd:e3:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEopVWhYJsmPmZk3GwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODAzMTY0MmQtMzViNS00MmVjLThiZWMtMThiN2JjZmUy YmQ4MB4XDTI1MDYxMjAxMDA1MVoXDTI1MDkxMDAxMDA1MVowLzEtMCsGA1UEAxMk OTY0NmJiNzQtNDA3My00MmFmLTkyMDEtY2NlY2Q5ZTg0NTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNk8YvXB+4VNtLhlqL8RNFmROkZtDcRp9NP8 VOrOa4UEAQ//4WRhmtUXFvhvQ9dYLhhaaAxywWPN3B2pkUDPm9PjByMXbNAKGNup sbdr9VUYf1mYWDO3brGg/hGpCOzBYYIMujcAjRNvL2EBHT7jpkTtU1F/WD5IqQV+ bsznFBjYdHHyVBFu+4ovOdWR2JiCJpix4zaE/iOiP9GhL21OOWCBN+pN8/UOGvum D8JxeaYWxHNihDVZIK0X0ZzJf8QMMRwbdpH8WajP91YcEmToLf6uAxKatKpDXNey Kn98/kQMXsGGCHB58qPHmWPorc7hkN+rd9+QWgP1lZ6cu7uZNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMyWxSGdm+MT1LPOtdi+rXddxFnQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84MDMx NjQyZC0zNWI1LTQyZWMtOGJlYy0xOGI3YmNmZTJiZDgvZDdkMTljNmEtYWNkMy0z NjIyLThjZjYtYzBlMDFmY2UxYjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvODAzMTY0MmQtMzViNS00MmVjLThi ZWMtMThiN2JjZmUyYmQ4LzgwMzE2NDJkLTM1YjUtNDJlYy04YmVjLTE4YjdiY2Zl MmJkOC5jcmwwHwYDVR0jBBgwFoAUpqUcA1REddjo75KjOZcnecUHD1cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84MDMxNjQyZC0zNWI1LTQyZWMtOGJlYy0xOGI3 YmNmZTJiZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmHWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGx5OSITeKGwZhAnnE1KJzOz/WxiJIqKAOrM6g/eCUSfsAJQVNL7T/ns k0NyNiFAG3MX5GGpKgqdxD5xecZtKYZVBxlkQpFQCjU3OnZfPwo7vBGXAhzTd0zT M6vBAQgZrVdJtk6vfM2G++SgUhBCgA2bhpVr/8ErqCREkqFevTfJjgWBhR3MM9hx KD/MSsyfQBsWSYTrnFZDTvgaLtAeVv1AexP/QZ6gCYMZTGZDqI4pq8U4iS82lmqQ F9SqAvyc7N6uBrTe9AloM5tFX5q881i4ftyuFDoMOewDp7N1yzJqjzWrbtjxWydF rdkOuWhPXLSg//jXx2ylhge6/w3945c= -----END CERTIFICATE-----Generated at Tue Jun 17 03:33:06 2025 by rpki-client