$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/598b60af-a9fd-3d61-8246-e2f5a34319b5.roa File: 598b60af-a9fd-3d61-8246-e2f5a34319b5.roa (raw, json) Hash identifier: db7FdNzgirXvr3ZAOtiKuXHugUGQ4t7SM0KhPlYldj8= Subject key identifier: E0:38:E6:76:E9:EB:23:EE:63:AE:E5:72:33:79:64:1D:E1:FE:7C:23 Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44 Certificate serial: 010D0C9F4328584A00DAB4B553E533C7538B6200 Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/598b60af-a9fd-3d61-8246-e2f5a34319b5.roa Signing time: Wed 28 May 2025 13:01:04 +0000 ROA not before: Wed 28 May 2025 13:01:04 +0000 ROA not after: Tue 26 Aug 2025 13:01:04 +0000 asID: 396306 IP address blocks: 216.208.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:da:b4:b5:53:e5:33:c7:53:8b:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44 Validity Not Before: May 28 13:01:04 2025 GMT Not After : Aug 26 13:01:04 2025 GMT Subject: CN=3ab9ebca-7932-4dcc-a34f-29b672adcdb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:5e:9e:0b:74:0d:31:00:f8:47:bf:d0:eb:93: 4f:a1:a4:69:ac:d0:42:f8:e7:03:4d:17:17:b5:5d: a5:86:92:a2:69:8a:40:b7:bf:98:cb:39:61:86:d2: 38:e2:67:f4:cf:d6:79:d0:cb:f6:ab:65:31:5f:e1: d8:93:fa:00:e8:27:72:4e:c6:87:2d:43:e3:aa:33: 4c:1b:51:a7:1a:a3:22:43:98:2b:08:e1:a1:c3:fa: a5:ee:74:f7:11:34:99:48:c2:b0:90:e6:16:49:59: dc:8e:9e:9a:ce:13:52:0a:27:e9:4a:06:fe:18:77: 3e:9b:2c:68:8b:2d:31:bb:7c:23:5c:57:3a:95:6f: 5b:2e:4d:62:77:cb:9c:a0:06:24:10:51:e9:f6:9d: 96:a6:2f:63:db:54:54:8e:ce:45:5a:18:94:46:32: eb:1d:0b:45:94:6b:ec:a5:bb:d1:e8:63:2a:0c:9a: 34:73:10:83:04:01:ef:29:1e:0c:dd:68:6c:60:7b: 33:31:07:2f:bb:aa:e3:be:5c:39:05:f5:ce:48:62: c6:01:88:fc:82:18:3d:85:9a:c8:b0:1e:1c:9e:20: 1f:fe:d4:de:02:8b:28:8e:8a:4a:d3:86:1f:52:7e: 72:74:0b:f4:65:1e:90:05:18:5c:8b:d3:b6:b7:56: 24:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:38:E6:76:E9:EB:23:EE:63:AE:E5:72:33:79:64:1D:E1:FE:7C:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/598b60af-a9fd-3d61-8246-e2f5a34319b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl X509v3 Authority Key Identifier: keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer sbgp-ipAddrBlock: critical IPv4: 216.208.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:85:8d:55:85:19:a7:c0:9b:7d:5d:1e:01:37:54:21:84:29: ed:e4:81:e8:09:33:22:09:62:6e:77:d2:90:d8:48:a3:a1:aa: e7:9d:f0:42:f1:13:21:41:a3:7f:5b:0f:dc:9c:72:cd:71:00: 87:d1:36:fb:09:cb:bb:a9:ed:8a:fc:29:f8:e7:53:8b:af:02: 7b:1c:12:da:1b:fb:9e:c6:ac:69:88:3a:21:63:ec:42:ad:2f: 35:31:f7:11:0d:4a:4d:ba:d9:d1:d7:82:7b:f5:78:ad:ea:15: ed:66:5d:70:eb:4e:d4:96:57:9b:e3:ab:39:8b:0d:63:a5:c0: 27:d6:4c:e1:20:02:d1:0e:1b:be:f9:84:66:8e:f4:c0:d5:92: d2:ea:53:91:be:d7:92:04:15:55:ae:98:de:7e:a7:fb:b6:e5: c9:04:46:f1:6b:d5:78:14:0e:a7:cf:31:b4:18:df:47:0b:52: 32:94:64:52:dc:39:2f:2b:17:e0:0e:fe:89:14:13:76:1b:a2: 7b:ba:c5:a5:e9:43:f0:b3:93:01:ef:16:89:77:94:e0:8c:ce: a2:7e:92:5e:bc:4e:f5:d6:9e:26:0d:b8:b9:07:90:d5:16:4e: 88:e3:d8:99:1d:11:d5:de:43:a2:f1:a3:33:a3:1b:af:5d:42: 46:e0:be:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoA2rS1U+Uzx1OLYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0 YjQ0MB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk M2FiOWViY2EtNzkzMi00ZGNjLWEzNGYtMjliNjcyYWRjZGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlF6eC3QNMQD4R7/Q65NPoaRprNBC+OcDTRcX tV2lhpKiaYpAt7+YyzlhhtI44mf0z9Z50Mv2q2UxX+HYk/oA6CdyTsaHLUPjqjNM G1GnGqMiQ5grCOGhw/ql7nT3ETSZSMKwkOYWSVncjp6azhNSCifpSgb+GHc+myxo iy0xu3wjXFc6lW9bLk1id8ucoAYkEFHp9p2Wpi9j21RUjs5FWhiURjLrHQtFlGvs pbvR6GMqDJo0cxCDBAHvKR4M3WhsYHszMQcvu6rjvlw5BfXOSGLGAYj8ghg9hZrI sB4cniAf/tTeAosojopK04YfUn5ydAv0ZR6QBRhci9O2t1YkxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOA45nbp6yPuY67lcjN5ZB3h/nwjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvNTk4YjYwYWYtYTlmZC0z ZDYxLTgyNDYtZTJmNWEzNDMxOWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5 NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2NB5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKFjVWFGafAm31dHgE3VCGEKe3kgegJMyIJYm530pDYSKOhqued8ELx EyFBo39bD9yccs1xAIfRNvsJy7up7Yr8KfjnU4uvAnscEtob+57GrGmIOiFj7EKt LzUx9xENSk262dHXgnv1eK3qFe1mXXDrTtSWV5vjqzmLDWOlwCfWTOEgAtEOG775 hGaO9MDVktLqU5G+15IEFVWumN5+p/u25ckERvFr1XgUDqfPMbQY30cLUjKUZFLc OS8rF+AO/okUE3Ybonu6xaXpQ/CzkwHvFol3lOCMzqJ+kl68TvXWniYNuLkHkNUW Tojj2JkdEdXeQ6LxozOjG69dQkbgvmg= -----END CERTIFICATE-----Generated at Tue Jul 1 07:05:43 2025 by rpki-client