$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/8e361a8f-c2a7-30c1-872e-d892d5132b12.roa File: 8e361a8f-c2a7-30c1-872e-d892d5132b12.roa (raw, json) Hash identifier: 2A+6ec3P9x5aU8AcqQx3w+FOjxj9FDZer049/rHznr4= Subject key identifier: 1B:AB:29:08:B1:16:9F:BC:D0:F6:57:B5:AF:20:33:41:65:03:E5:2C Certificate issuer: /CN=2a85302a-1502-4116-b560-4c2d2155f989 Certificate serial: 010D0C9F4328584A225AC8C87A05007FFA0D9BB0 Authority key identifier: 58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/8e361a8f-c2a7-30c1-872e-d892d5132b12.roa Signing time: Mon 09 Jun 2025 13:01:01 +0000 ROA not before: Mon 09 Jun 2025 13:01:01 +0000 ROA not after: Sun 07 Sep 2025 13:01:01 +0000 asID: 16509 IP address blocks: 198.169.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:22:5a:c8:c8:7a:05:00:7f:fa:0d:9b:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a85302a-1502-4116-b560-4c2d2155f989 Validity Not Before: Jun 9 13:01:01 2025 GMT Not After : Sep 7 13:01:01 2025 GMT Subject: CN=c25399dd-2de3-4a14-9f4e-b28e00c91923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:00:bc:24:3d:bc:22:83:1f:82:a3:5c:8f:61: 88:ea:cf:52:ea:5d:5c:91:cc:44:de:8f:fc:9e:ea: ec:e2:fa:b4:e2:e1:10:f4:e0:12:62:99:de:ad:b3: f9:83:e6:ca:b0:b6:c9:47:a8:4e:48:ce:a2:1d:2c: 70:a8:56:e8:ee:3c:21:65:28:2f:8c:b7:bc:50:0a: d6:78:d7:a2:50:03:9a:39:1d:da:70:1c:36:a3:10: 5a:6c:8d:a2:81:82:ce:23:f6:ce:79:f5:14:7f:04: 52:fc:fd:c0:27:6c:4d:89:ff:7c:dc:f3:3e:ba:98: c7:14:05:f8:7e:43:25:b9:bb:e5:00:14:48:9f:b5: 8d:6c:88:b1:07:65:f8:08:18:04:37:d4:6f:bd:00: d5:4a:9b:ba:73:e2:af:d8:8c:d5:92:07:49:c1:ef: fb:38:54:78:13:3d:ee:ca:6c:86:db:b2:97:37:a4: 91:d5:11:75:67:2b:da:0c:91:28:1e:a0:29:28:04: 70:7f:d2:f8:e3:42:cc:39:96:9c:ff:d5:37:01:82: 22:e4:6a:0e:ca:18:60:8c:19:44:f6:f2:3f:ae:52: 4a:e9:e3:2b:b3:88:d1:95:06:82:56:04:d2:86:3f: e3:d4:5f:50:19:40:04:7f:88:39:9e:0e:0c:3b:8e: 53:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:AB:29:08:B1:16:9F:BC:D0:F6:57:B5:AF:20:33:41:65:03:E5:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/8e361a8f-c2a7-30c1-872e-d892d5132b12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl X509v3 Authority Key Identifier: keyid:58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer sbgp-ipAddrBlock: critical IPv4: 198.169.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:16:c5:d4:ce:31:11:f9:6d:38:4b:79:a5:49:ef:b9:c1:2c: be:f3:7b:f4:d1:55:73:76:9c:47:1c:01:56:a0:aa:60:64:3e: f1:f9:0f:82:26:2b:54:42:35:97:09:80:88:4f:03:d0:32:34: 72:fd:71:a2:1d:7b:71:8f:09:54:4c:f6:a2:07:0a:e2:fc:30: 9f:b2:8c:ce:6d:a6:4f:18:97:df:c5:de:67:b7:b2:67:37:e7: 4f:ae:69:b1:94:28:fc:94:fc:f5:99:ef:ae:2c:43:4b:e0:8f: 95:bb:71:77:d2:11:6e:4e:cd:e8:68:d6:3b:5c:59:3f:eb:c6: 60:a0:13:7f:80:30:e6:c1:b1:69:86:9f:1c:28:fa:55:d9:36: 15:77:7e:a4:35:13:a2:67:6e:bf:9c:28:62:3e:16:f6:ba:89: ae:02:3e:9c:d6:62:b1:6c:74:a8:3a:26:5a:c0:30:80:0a:af: 4a:8b:47:05:a9:be:a2:7f:f9:82:43:c4:1f:c9:90:5b:27:9a: 4f:af:41:57:11:65:f6:59:54:0e:cb:9f:27:59:9c:50:77:30: c3:a9:4d:8f:81:0d:fc:00:98:04:de:fd:4f:52:e9:53:6b:59: 28:d4:a9:8c:8c:84:a5:df:05:ad:88:fc:5b:bf:0a:3e:8f:ab: 8e:7f:45:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoiWsjIegUAf/oNm7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE4NTMwMmEtMTUwMi00MTE2LWI1NjAtNGMyZDIxNTVm OTg5MB4XDTI1MDYwOTEzMDEwMVoXDTI1MDkwNzEzMDEwMVowLzEtMCsGA1UEAxMk YzI1Mzk5ZGQtMmRlMy00YTE0LTlmNGUtYjI4ZTAwYzkxOTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQC8JD28IoMfgqNcj2GI6s9S6l1ckcxE3o/8 nurs4vq04uEQ9OASYpnerbP5g+bKsLbJR6hOSM6iHSxwqFbo7jwhZSgvjLe8UArW eNeiUAOaOR3acBw2oxBabI2igYLOI/bOefUUfwRS/P3AJ2xNif983PM+upjHFAX4 fkMlubvlABRIn7WNbIixB2X4CBgEN9RvvQDVSpu6c+Kv2IzVkgdJwe/7OFR4Ez3u ymyG27KXN6SR1RF1ZyvaDJEoHqApKARwf9L440LMOZac/9U3AYIi5GoOyhhgjBlE 9vI/rlJK6eMrs4jRlQaCVgTShj/j1F9QGUAEf4g5ng4MO45T5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBurKQixFp+80PZXta8gM0FlA+UsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYTg1 MzAyYS0xNTAyLTQxMTYtYjU2MC00YzJkMjE1NWY5ODkvOGUzNjFhOGYtYzJhNy0z MGMxLTg3MmUtZDg5MmQ1MTMyYjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmE4NTMwMmEtMTUwMi00MTE2LWI1 NjAtNGMyZDIxNTVmOTg5LzJhODUzMDJhLTE1MDItNDExNi1iNTYwLTRjMmQyMTU1 Zjk4OS5jcmwwHwYDVR0jBBgwFoAUWPHGtsyKAI0BxiFTG/ayayXzzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYTg1MzAyYS0xNTAyLTQxMTYtYjU2MC00YzJk MjE1NWY5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqkCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMWxdTOMRH5bThLeaVJ77nBLL7ze/TRVXN2nEccAVagqmBkPvH5D4Im K1RCNZcJgIhPA9AyNHL9caIde3GPCVRM9qIHCuL8MJ+yjM5tpk8Yl9/F3me3smc3 50+uabGUKPyU/PWZ764sQ0vgj5W7cXfSEW5Ozeho1jtcWT/rxmCgE3+AMObBsWmG nxwo+lXZNhV3fqQ1E6Jnbr+cKGI+Fva6ia4CPpzWYrFsdKg6JlrAMIAKr0qLRwWp vqJ/+YJDxB/JkFsnmk+vQVcRZfZZVA7LnydZnFB3MMOpTY+BDfwAmATe/U9S6VNr WSjUqYyMhKXfBa2I/Fu/Cj6Pq45/RcI= -----END CERTIFICATE-----Generated at Sat Jun 14 06:29:17 2025 by rpki-client