$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/298e19e8-b0ac-38aa-82ff-af63bd135582.roa File: 298e19e8-b0ac-38aa-82ff-af63bd135582.roa (raw, json) Hash identifier: vABciYb+KJRQL3ZqaAiLKMm/kMeevqgf870PrrqbnIY= Subject key identifier: 60:92:77:D9:75:58:01:9A:B2:ED:2F:74:95:3A:D4:69:17:83:24:14 Certificate issuer: /CN=21428d3a-0040-4c60-9202-cd68b2fd51de Certificate serial: 010D0C9F43285849E91F9D343DAEEDE84206FE80 Authority key identifier: 3A:AB:39:2A:FD:92:FC:E2:7B:FA:D0:E7:DF:2A:44:C7:3E:38:3E:FD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/298e19e8-b0ac-38aa-82ff-af63bd135582.roa Signing time: Tue 20 May 2025 01:00:49 +0000 ROA not before: Tue 20 May 2025 01:00:49 +0000 ROA not after: Mon 18 Aug 2025 01:00:49 +0000 asID: 16509 IP address blocks: 198.207.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/21428d3a-0040-4c60-9202-cd68b2fd51de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/21428d3a-0040-4c60-9202-cd68b2fd51de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e9:1f:9d:34:3d:ae:ed:e8:42:06:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21428d3a-0040-4c60-9202-cd68b2fd51de Validity Not Before: May 20 01:00:49 2025 GMT Not After : Aug 18 01:00:49 2025 GMT Subject: CN=9d114ca6-6b7a-4fda-89b5-1ab9a1472f91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7d:33:0b:d3:51:d0:7e:ad:a7:65:49:63:fd: 94:bb:50:83:4e:28:2f:63:8b:8f:04:e4:e4:34:04: cc:0f:d7:a2:46:09:60:8a:ee:8b:02:32:55:3b:38: 2c:5d:20:bc:13:61:1d:82:1a:2b:26:49:30:b6:5d: ec:0b:17:b8:65:6e:e4:4c:1a:cf:60:64:8b:e0:36: 7d:fc:3d:9d:6c:83:45:39:1d:b3:21:9a:9b:3a:cb: 3c:ed:93:6f:16:fd:4d:10:ea:67:07:13:b8:05:b9: 17:3a:ec:f6:af:e3:fd:62:ca:6d:50:cb:c3:c8:2f: c5:dd:99:b9:ff:58:95:6a:26:3e:fa:75:22:cf:a9: 3c:6e:42:d6:ec:7d:df:0f:5d:61:1f:4b:f8:82:1c: e2:fe:c4:8f:86:bd:62:fe:d1:87:2e:04:67:e5:15: 56:01:83:d6:0b:22:a8:1e:d2:48:7d:cb:bc:77:0f: 71:87:1d:c2:dd:5a:16:33:19:d4:05:08:e7:1f:a1: c9:aa:e2:74:64:57:c8:89:99:ae:1a:50:38:ee:20: b1:18:77:c0:d8:14:30:fc:ba:97:78:6d:d2:fd:23: 84:9d:b4:42:50:6d:e0:78:91:18:97:6b:fb:2c:09: 8c:da:ef:ce:e9:c4:ef:2b:0e:e0:51:7b:1a:3d:ee: 59:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:92:77:D9:75:58:01:9A:B2:ED:2F:74:95:3A:D4:69:17:83:24:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/298e19e8-b0ac-38aa-82ff-af63bd135582.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/21428d3a-0040-4c60-9202-cd68b2fd51de.crl X509v3 Authority Key Identifier: keyid:3A:AB:39:2A:FD:92:FC:E2:7B:FA:D0:E7:DF:2A:44:C7:3E:38:3E:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de.cer sbgp-ipAddrBlock: critical IPv4: 198.207.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:14:d3:7c:19:dc:43:e3:42:c2:9b:1d:68:84:d4:19:ba:9d: 37:e3:20:86:12:79:c5:6c:f6:92:42:92:88:c8:61:da:cf:fa: 71:1c:79:8f:da:d5:b4:6a:6b:85:f2:0f:86:57:51:13:d2:93: 7e:7d:2d:7b:8e:c5:a6:a1:0d:5a:ad:48:b5:ff:9d:ba:63:67: b2:56:17:cd:95:a4:61:78:40:59:31:e8:87:e2:84:df:b9:6b: 22:2a:89:3a:6c:d3:57:c6:43:ad:9a:75:48:cc:33:13:55:bf: a9:e9:4d:5f:a5:07:f0:39:4d:7d:00:cb:83:88:8c:2e:ae:3b: 15:94:fb:90:53:34:35:2a:e0:24:1c:61:06:6b:ab:76:8f:90: e3:1d:a4:9d:22:6d:9f:aa:1f:52:49:99:92:29:6f:9a:53:27: 65:f8:14:76:96:07:db:26:b2:ef:8b:fe:0a:14:1f:6a:2f:78: 96:fe:80:6d:61:f7:f6:4d:0a:aa:31:e8:5f:92:2c:a4:53:9c: bb:f6:6a:7c:5a:02:85:a9:7a:5d:00:09:2a:14:65:00:5b:fa: 06:df:6a:56:e5:2d:8e:88:d7:e6:a1:94:7b:69:fc:9a:ac:51: 4f:00:71:cd:df:b0:24:3f:4c:8d:5d:bd:95:59:af:f3:52:d4: 89:c8:c6:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnpH500Pa7t6EIG/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE0MjhkM2EtMDA0MC00YzYwLTkyMDItY2Q2OGIyZmQ1 MWRlMB4XDTI1MDUyMDAxMDA0OVoXDTI1MDgxODAxMDA0OVowLzEtMCsGA1UEAxMk OWQxMTRjYTYtNmI3YS00ZmRhLTg5YjUtMWFiOWExNDcyZjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoH0zC9NR0H6tp2VJY/2Uu1CDTigvY4uPBOTk NATMD9eiRglgiu6LAjJVOzgsXSC8E2EdghorJkkwtl3sCxe4ZW7kTBrPYGSL4DZ9 /D2dbINFOR2zIZqbOss87ZNvFv1NEOpnBxO4BbkXOuz2r+P9YsptUMvDyC/F3Zm5 /1iVaiY++nUiz6k8bkLW7H3fD11hH0v4ghzi/sSPhr1i/tGHLgRn5RVWAYPWCyKo HtJIfcu8dw9xhx3C3VoWMxnUBQjnH6HJquJ0ZFfIiZmuGlA47iCxGHfA2BQw/LqX eG3S/SOEnbRCUG3geJEYl2v7LAmM2u/O6cTvKw7gUXsaPe5ZmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGCSd9l1WAGasu0vdJU61GkXgyQUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yMTQy OGQzYS0wMDQwLTRjNjAtOTIwMi1jZDY4YjJmZDUxZGUvMjk4ZTE5ZTgtYjBhYy0z OGFhLTgyZmYtYWY2M2JkMTM1NTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjE0MjhkM2EtMDA0MC00YzYwLTky MDItY2Q2OGIyZmQ1MWRlLzIxNDI4ZDNhLTAwNDAtNGM2MC05MjAyLWNkNjhiMmZk NTFkZS5jcmwwHwYDVR0jBBgwFoAUOqs5Kv2S/OJ7+tDn3ypExz44Pv0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yMTQyOGQzYS0wMDQwLTRjNjAtOTIwMi1jZDY4 YjJmZDUxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxs+pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4U03wZ3EPjQsKbHWiE1Bm6nTfjIIYSecVs9pJCkojIYdrP+nEceY/a 1bRqa4XyD4ZXURPSk359LXuOxaahDVqtSLX/nbpjZ7JWF82VpGF4QFkx6IfihN+5 ayIqiTps01fGQ62adUjMMxNVv6npTV+lB/A5TX0Ay4OIjC6uOxWU+5BTNDUq4CQc YQZrq3aPkOMdpJ0ibZ+qH1JJmZIpb5pTJ2X4FHaWB9smsu+L/goUH2oveJb+gG1h 9/ZNCqox6F+SLKRTnLv2anxaAoWpel0ACSoUZQBb+gbfalblLY6I1+ahlHtp/Jqs UU8Acc3fsCQ/TI1dvZVZr/NS1InIxq4= -----END CERTIFICATE-----Generated at Sat Jun 14 18:51:43 2025 by rpki-client