$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b769440d-4a7e-478f-82a5-04834c8887fe/254b380b-2877-3b52-9210-faa230df58ef.roa File: 254b380b-2877-3b52-9210-faa230df58ef.roa (raw, json) Hash identifier: KcMLegjs+qo5pG2LuxPfLQkIKOyv3T0kJYMCuW8z1xs= Subject key identifier: 19:0F:48:76:C5:B2:39:71:38:F9:90:CE:13:B1:1F:46:D3:F8:9B:58 Certificate issuer: /CN=b769440d-4a7e-478f-82a5-04834c8887fe Certificate serial: 010D0C9F43285849E654EB3E560B352FD09DA000 Authority key identifier: B0:CF:FC:49:E8:8E:7A:E5:0C:08:D4:BA:F5:55:72:38:C0:84:97:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b769440d-4a7e-478f-82a5-04834c8887fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b769440d-4a7e-478f-82a5-04834c8887fe/254b380b-2877-3b52-9210-faa230df58ef.roa Signing time: Mon 19 May 2025 01:00:48 +0000 ROA not before: Mon 19 May 2025 01:00:48 +0000 ROA not after: Sun 17 Aug 2025 01:00:48 +0000 asID: 10980 IP address blocks: 198.167.164.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b769440d-4a7e-478f-82a5-04834c8887fe/b769440d-4a7e-478f-82a5-04834c8887fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b769440d-4a7e-478f-82a5-04834c8887fe/b769440d-4a7e-478f-82a5-04834c8887fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b769440d-4a7e-478f-82a5-04834c8887fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e6:54:eb:3e:56:0b:35:2f:d0:9d:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b769440d-4a7e-478f-82a5-04834c8887fe Validity Not Before: May 19 01:00:48 2025 GMT Not After : Aug 17 01:00:48 2025 GMT Subject: CN=f007f501-c599-44ca-b639-dfa7167fd13b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a0:9a:02:a8:2d:27:69:aa:ff:4d:04:1a:56: 88:60:18:0f:3c:3f:8f:b2:ca:e0:68:9b:76:c3:2c: d1:61:df:28:b0:94:98:83:d4:45:6f:b7:93:4f:31: 2a:92:2f:c0:a4:cb:4b:40:4b:19:4e:74:a3:09:7a: 16:4c:ea:e4:79:af:d0:30:43:ea:88:e5:77:04:48: cf:3d:b8:db:a4:69:b7:d2:32:3a:a4:14:e0:09:43: 64:aa:26:d1:d8:7c:c1:89:da:e2:b5:94:c5:c5:0e: 3e:ce:0c:1b:04:48:c2:01:55:c1:f2:95:e9:3a:51: f2:04:5b:c7:90:d8:44:0e:79:51:35:9b:6f:44:07: 93:68:88:77:45:a7:35:fa:cc:26:b4:71:86:50:4c: f9:4d:6e:40:20:07:4b:a1:45:90:a7:83:14:b0:eb: 85:a5:dd:dc:08:f9:2b:90:c8:65:09:33:dc:fb:1e: 92:e6:4f:12:f7:cf:1e:ab:69:e6:fe:38:e6:43:96: 0b:fa:8b:24:bf:fb:0f:c6:cb:d4:ab:c7:3f:8d:67: 59:24:69:e7:92:51:1f:9c:b5:bd:e2:fe:9c:12:d6: b4:f3:e9:e2:92:01:88:af:30:19:84:ba:ef:ec:86: d0:26:47:eb:99:6f:6e:04:25:b9:f3:a4:88:3e:09: 37:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:0F:48:76:C5:B2:39:71:38:F9:90:CE:13:B1:1F:46:D3:F8:9B:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b769440d-4a7e-478f-82a5-04834c8887fe/254b380b-2877-3b52-9210-faa230df58ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b769440d-4a7e-478f-82a5-04834c8887fe/b769440d-4a7e-478f-82a5-04834c8887fe.crl X509v3 Authority Key Identifier: keyid:B0:CF:FC:49:E8:8E:7A:E5:0C:08:D4:BA:F5:55:72:38:C0:84:97:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b769440d-4a7e-478f-82a5-04834c8887fe.cer sbgp-ipAddrBlock: critical IPv4: 198.167.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:ca:5d:68:71:6a:43:a6:a5:51:01:f3:dd:c9:a4:55:8c:de: c2:3c:6a:cb:e1:b3:fd:3c:5c:4f:b8:f4:54:3c:4e:48:ea:e9: 68:fc:27:66:b7:af:39:f4:2f:52:87:9d:c6:d5:33:29:6e:da: 4d:80:19:4b:cd:3a:6d:77:ae:78:c4:ed:73:6f:f6:4e:72:88: 9b:63:32:04:ff:77:b4:88:37:60:13:f4:33:f9:1d:6e:48:4f: 82:f7:ad:bd:d0:28:4b:4d:9c:fc:f6:02:26:50:b6:db:23:0c: 90:a4:63:5d:19:d8:04:b5:cf:14:a6:c7:c4:c6:d2:d4:ca:f4: 04:e2:8f:84:e5:b6:78:7d:28:9e:48:9b:54:f0:76:7d:aa:9e: 14:1b:0a:bf:81:82:fe:7b:a7:48:42:56:2e:8f:5a:32:29:ac: 6c:a4:2a:10:90:0e:ee:39:dd:8a:9a:e6:6f:78:ca:6d:65:99: f3:a0:06:65:60:7b:fe:86:9a:0d:a9:27:f7:cf:57:ad:a5:85: 8d:54:2b:f9:74:85:41:4b:74:38:72:59:21:9b:38:f7:9f:3a: c1:08:70:43:da:8a:93:fb:b8:66:a9:44:5c:10:b9:47:64:ae: 49:0f:55:44:d7:a5:e6:98:c7:57:0c:ac:f4:d3:68:97:45:ea: bd:71:98:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnmVOs+Vgs1L9CdoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc2OTQ0MGQtNGE3ZS00NzhmLTgyYTUtMDQ4MzRjODg4 N2ZlMB4XDTI1MDUxOTAxMDA0OFoXDTI1MDgxNzAxMDA0OFowLzEtMCsGA1UEAxMk ZjAwN2Y1MDEtYzU5OS00NGNhLWI2MzktZGZhNzE2N2ZkMTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKCaAqgtJ2mq/00EGlaIYBgPPD+PssrgaJt2 wyzRYd8osJSYg9RFb7eTTzEqki/ApMtLQEsZTnSjCXoWTOrkea/QMEPqiOV3BEjP PbjbpGm30jI6pBTgCUNkqibR2HzBidritZTFxQ4+zgwbBEjCAVXB8pXpOlHyBFvH kNhEDnlRNZtvRAeTaIh3Rac1+swmtHGGUEz5TW5AIAdLoUWQp4MUsOuFpd3cCPkr kMhlCTPc+x6S5k8S988eq2nm/jjmQ5YL+oskv/sPxsvUq8c/jWdZJGnnklEfnLW9 4v6cEta08+nikgGIrzAZhLrv7IbQJkfrmW9uBCW586SIPgk3vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBkPSHbFsjlxOPmQzhOxH0bT+JtYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iNzY5 NDQwZC00YTdlLTQ3OGYtODJhNS0wNDgzNGM4ODg3ZmUvMjU0YjM4MGItMjg3Ny0z YjUyLTkyMTAtZmFhMjMwZGY1OGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjc2OTQ0MGQtNGE3ZS00NzhmLTgy YTUtMDQ4MzRjODg4N2ZlL2I3Njk0NDBkLTRhN2UtNDc4Zi04MmE1LTA0ODM0Yzg4 ODdmZS5jcmwwHwYDVR0jBBgwFoAUsM/8SeiOeuUMCNS69VVyOMCEl58wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iNzY5NDQwZC00YTdlLTQ3OGYtODJhNS0wNDgz NGM4ODg3ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxqekMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDKXWhxakOmpVEB893JpFWM3sI8asvhs/08XE+49FQ8Tkjq6Wj8J2a3 rzn0L1KHncbVMylu2k2AGUvNOm13rnjE7XNv9k5yiJtjMgT/d7SIN2AT9DP5HW5I T4L3rb3QKEtNnPz2AiZQttsjDJCkY10Z2AS1zxSmx8TG0tTK9ATij4Tltnh9KJ5I m1Twdn2qnhQbCr+Bgv57p0hCVi6PWjIprGykKhCQDu453Yqa5m94ym1lmfOgBmVg e/6Gmg2pJ/fPV62lhY1UK/l0hUFLdDhyWSGbOPefOsEIcEPaipP7uGapRFwQuUdk rkkPVUTXpeaYx1cMrPTTaJdF6r1xmKo= -----END CERTIFICATE-----Generated at Mon Jun 16 14:54:50 2025 by rpki-client