$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d583dbef-fd91-4a47-a2e9-6fab66d8dd4b/061348a2-718a-3f0e-aadf-22705c6c3f7e.roa File: 061348a2-718a-3f0e-aadf-22705c6c3f7e.roa (raw, json) Hash identifier: 7w/USmZvZGOCiZirWPQhjsiO5FfQkz62ufQzZOKsoO8= Subject key identifier: 7D:8C:C1:CE:CD:E0:50:81:79:72:9B:A0:7D:17:72:55:8C:3E:0B:90 Certificate issuer: /CN=d583dbef-fd91-4a47-a2e9-6fab66d8dd4b Certificate serial: 010D0C9F43285849911FECD37B2C005574656A80 Authority key identifier: 6D:E8:6E:80:1C:21:D1:8C:28:12:67:4E:6E:36:58:55:6C:67:33:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d583dbef-fd91-4a47-a2e9-6fab66d8dd4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d583dbef-fd91-4a47-a2e9-6fab66d8dd4b/061348a2-718a-3f0e-aadf-22705c6c3f7e.roa Signing time: Fri 18 Apr 2025 12:30:22 +0000 ROA not before: Fri 18 Apr 2025 12:30:22 +0000 ROA not after: Thu 17 Jul 2025 12:30:22 +0000 asID: 14618 IP address blocks: 198.144.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d583dbef-fd91-4a47-a2e9-6fab66d8dd4b/d583dbef-fd91-4a47-a2e9-6fab66d8dd4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d583dbef-fd91-4a47-a2e9-6fab66d8dd4b/d583dbef-fd91-4a47-a2e9-6fab66d8dd4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d583dbef-fd91-4a47-a2e9-6fab66d8dd4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:1f:ec:d3:7b:2c:00:55:74:65:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d583dbef-fd91-4a47-a2e9-6fab66d8dd4b Validity Not Before: Apr 18 12:30:22 2025 GMT Not After : Jul 17 12:30:22 2025 GMT Subject: CN=61cf4d4e-3125-446b-8e33-63ec69355f39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:94:6d:2a:c8:99:c2:eb:94:99:e7:4e:8d:10: 6a:c6:72:53:aa:4d:bd:79:e4:e9:0b:41:f3:d1:19: 3d:6d:be:df:74:4d:5c:06:1f:37:74:46:36:1a:6b: 26:16:02:d0:5f:dd:81:4d:a1:4d:21:cd:4f:a5:99: e4:17:48:c6:32:57:6f:e2:e2:57:91:97:59:e1:c4: 7e:1a:2a:6f:ba:4f:43:24:fc:0f:35:4f:61:10:63: 71:83:f4:86:be:46:0b:ea:c9:cb:3b:f1:39:64:93: f4:38:eb:eb:79:9d:2b:e2:8d:c2:17:04:b2:0c:c5: 17:64:70:2e:02:b4:ba:00:4a:d2:06:ff:7e:71:d2: 46:d0:27:8b:ac:1b:29:7c:62:dd:e3:16:07:de:a6: 6a:d8:e3:64:5c:0a:42:fc:cb:28:b1:2a:f6:24:26: ab:ca:4e:1b:ef:72:e0:b9:91:2c:e9:a2:d0:cf:e0: a6:68:0d:f0:70:51:ee:97:a3:17:d9:d4:95:a2:04: 1c:b7:28:0d:fe:15:d2:76:3a:cf:6f:be:d8:c3:27: c3:79:56:70:f0:68:71:d6:c5:c5:7b:30:af:cb:33: 84:d5:c2:6a:4e:69:93:3b:ae:16:50:5e:f3:99:c4: d9:c3:2c:9a:ed:02:45:bb:ef:69:dd:a1:a7:17:47: f1:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:8C:C1:CE:CD:E0:50:81:79:72:9B:A0:7D:17:72:55:8C:3E:0B:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d583dbef-fd91-4a47-a2e9-6fab66d8dd4b/061348a2-718a-3f0e-aadf-22705c6c3f7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d583dbef-fd91-4a47-a2e9-6fab66d8dd4b/d583dbef-fd91-4a47-a2e9-6fab66d8dd4b.crl X509v3 Authority Key Identifier: keyid:6D:E8:6E:80:1C:21:D1:8C:28:12:67:4E:6E:36:58:55:6C:67:33:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d583dbef-fd91-4a47-a2e9-6fab66d8dd4b.cer sbgp-ipAddrBlock: critical IPv4: 198.144.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:0a:07:b4:c1:5d:9c:b4:2f:35:a2:b5:8c:e1:1c:fd:e0:2d: 8b:92:70:63:eb:b4:f2:ba:f3:4a:c6:47:b3:6a:ac:9f:56:2a: 36:fc:bb:81:ae:9a:83:42:6e:e5:1c:2e:2d:5b:9c:78:86:8a: eb:26:81:5c:6f:07:7b:0e:d3:58:d7:68:98:5e:9e:a3:9a:d7: 4c:c9:32:36:12:1f:f6:3b:0d:40:ac:0a:35:67:ec:13:b6:a3: bb:c2:95:1e:02:4b:80:3a:7d:1b:83:52:bc:66:3d:df:aa:c8: 73:6a:d4:7f:d8:1b:4a:b2:71:a4:07:0e:01:a9:1a:81:ae:52: 0c:2c:b2:5e:2e:e7:91:4c:a8:62:c3:f4:6f:38:5e:a7:3c:53: b4:b9:1a:5c:29:b1:70:68:72:17:56:61:09:be:17:74:24:68: 7d:2a:13:34:0a:0b:75:92:7d:08:66:47:8b:b2:a9:4a:57:a9: db:b9:3e:91:aa:d7:bc:10:b4:8e:8f:93:07:f3:db:84:05:d7: ac:6c:2d:70:70:63:4d:6c:1d:79:83:6e:b3:6a:0b:39:83:1a: 0f:f7:5e:93:5f:e6:64:02:2d:98:6d:67:2b:f2:e3:e9:96:31: f6:4f:c6:d7:6f:88:ca:a8:cb:e2:b0:c6:f8:f4:1a:a8:ea:61: 09:d7:54:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRH+zTeywAVXRlaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDU4M2RiZWYtZmQ5MS00YTQ3LWEyZTktNmZhYjY2ZDhk ZDRiMB4XDTI1MDQxODEyMzAyMloXDTI1MDcxNzEyMzAyMlowLzEtMCsGA1UEAxMk NjFjZjRkNGUtMzEyNS00NDZiLThlMzMtNjNlYzY5MzU1ZjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5RtKsiZwuuUmedOjRBqxnJTqk29eeTpC0Hz 0Rk9bb7fdE1cBh83dEY2GmsmFgLQX92BTaFNIc1PpZnkF0jGMldv4uJXkZdZ4cR+ Gipvuk9DJPwPNU9hEGNxg/SGvkYL6snLO/E5ZJP0OOvreZ0r4o3CFwSyDMUXZHAu ArS6AErSBv9+cdJG0CeLrBspfGLd4xYH3qZq2ONkXApC/MsosSr2JCaryk4b73Lg uZEs6aLQz+CmaA3wcFHul6MX2dSVogQctygN/hXSdjrPb77YwyfDeVZw8Ghx1sXF ezCvyzOE1cJqTmmTO64WUF7zmcTZwyya7QJFu+9p3aGnF0fxswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH2Mwc7N4FCBeXKboH0XclWMPguQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNTgz ZGJlZi1mZDkxLTRhNDctYTJlOS02ZmFiNjZkOGRkNGIvMDYxMzQ4YTItNzE4YS0z ZjBlLWFhZGYtMjI3MDVjNmMzZjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZDU4M2RiZWYtZmQ5MS00YTQ3LWEy ZTktNmZhYjY2ZDhkZDRiL2Q1ODNkYmVmLWZkOTEtNGE0Ny1hMmU5LTZmYWI2NmQ4 ZGQ0Yi5jcmwwHwYDVR0jBBgwFoAUbehugBwh0YwoEmdObjZYVWxnM/8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kNTgzZGJlZi1mZDkxLTRhNDctYTJlOS02ZmFi NjZkOGRkNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxpAQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAKB7TBXZy0LzWitYzhHP3gLYuScGPrtPK680rGR7NqrJ9WKjb8u4Gu moNCbuUcLi1bnHiGiusmgVxvB3sO01jXaJhenqOa10zJMjYSH/Y7DUCsCjVn7BO2 o7vClR4CS4A6fRuDUrxmPd+qyHNq1H/YG0qycaQHDgGpGoGuUgwssl4u55FMqGLD 9G84Xqc8U7S5GlwpsXBochdWYQm+F3QkaH0qEzQKC3WSfQhmR4uyqUpXqdu5PpGq 17wQtI6Pkwfz24QF16xsLXBwY01sHXmDbrNqCzmDGg/3XpNf5mQCLZhtZyvy4+mW MfZPxtdviMqoy+Kwxvj0GqjqYQnXVLQ= -----END CERTIFICATE-----Generated at Sat Apr 26 13:24:09 2025 by rpki-client