$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8c6862c7-9ea1-37f4-b829-ff6fde68d01c.roa File: 8c6862c7-9ea1-37f4-b829-ff6fde68d01c.roa (raw, json) Hash identifier: 2oUsJMN5CMbLPP6zzXMMOtvtJZL2SgZb3T1RFmzd2yo= Subject key identifier: 66:7C:5D:56:66:76:8A:88:AE:74:EC:70:D2:78:42:18:34:11:5D:D5 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285849DF5A53189295E976224CAA00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8c6862c7-9ea1-37f4-b829-ff6fde68d01c.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 30036 IP address blocks: 198.40.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:53:18:92:95:e9:76:22:4c:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=23a5b823-e7d5-45ac-a79c-dd9d4e4e59b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:24:5b:05:c4:3b:10:4a:73:b7:34:ce:a0:f4: c2:22:dd:ee:81:ab:28:4f:a5:33:74:f2:8b:f8:5f: ec:82:25:55:7e:fa:b6:f1:ee:19:b0:42:c1:cb:2e: 68:0e:b1:4f:35:63:2a:62:2a:9f:8d:ac:b4:ef:d5: 5e:44:f0:b2:b4:bd:70:ff:70:43:7c:26:d5:67:7e: f3:16:90:11:65:ee:c2:e3:9e:df:70:77:ff:5d:35: 14:4f:7e:af:3a:c6:78:e2:60:b2:75:27:79:94:c4: 1c:14:11:f1:24:f1:bb:65:76:40:11:04:74:b0:74: 66:f4:b2:67:b7:3f:95:b1:4f:10:c0:f2:e1:31:71: 1a:d9:ee:d8:15:21:d6:fb:4e:24:42:82:e1:54:6c: 0c:a0:5b:3b:1b:cf:17:5f:38:3b:f1:49:34:aa:9d: e0:ca:39:c2:40:ff:41:c0:d6:5b:bb:12:55:09:5e: 7c:cf:5a:08:f4:07:37:30:57:0e:6d:54:35:16:a9: f9:58:8c:fd:0a:8d:92:2b:5f:7c:6a:49:f1:0c:f0: 12:bb:80:79:38:f4:4e:2b:13:cc:57:8b:bc:ca:4b: 2a:9c:0a:40:cb:82:5e:53:f4:c2:8a:f8:a4:1a:65: ad:28:ce:09:e3:dc:cc:eb:2f:66:19:77:9d:62:63: 80:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:7C:5D:56:66:76:8A:88:AE:74:EC:70:D2:78:42:18:34:11:5D:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8c6862c7-9ea1-37f4-b829-ff6fde68d01c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 198.40.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:dd:0c:3a:52:64:90:aa:e3:4e:c2:d7:71:d5:94:0a:c9:5b: 4d:01:13:89:96:c7:4d:bb:9e:bf:a6:c2:3b:e4:23:85:18:9f: c4:c9:bb:bc:3d:37:0e:d6:23:61:dd:50:a6:22:d1:cd:f3:09: 56:57:75:6a:3a:f8:8d:aa:be:cd:e4:90:ea:bd:e7:e6:bd:0d: 51:b0:dc:9d:87:fc:d5:83:4f:b0:b2:80:2d:46:d0:1f:e9:79: 91:48:2e:d7:59:54:b6:91:0b:02:7a:8b:d9:c2:d1:6b:57:9a: 42:ae:17:39:70:b2:ca:3f:6e:4d:62:ce:16:2d:b3:20:08:35: cc:35:4f:90:0f:48:f3:a8:0a:7b:88:4f:0f:2b:26:45:35:9f: e0:97:b3:73:23:6a:3d:ed:34:5c:b6:20:2d:58:d5:71:bc:ae: c4:7d:92:ba:5b:2d:15:3d:db:30:6b:51:3a:b6:c2:db:6b:50: 90:79:ae:e3:ad:cd:3d:19:0e:8d:7c:13:f6:12:b1:1b:81:89: 40:7a:22:0b:4c:6e:eb:80:4b:73:04:5d:a0:26:2f:f8:62:27: ae:76:56:48:88:72:ec:ff:49:19:01:00:a6:57:4d:44:29:a0: dd:73:0d:32:30:b0:80:ae:4a:5d:fb:10:85:ce:2b:4d:f2:60: 4c:a2:4b:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfWlMYkpXpdiJMqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk MjNhNWI4MjMtZTdkNS00NWFjLWE3OWMtZGQ5ZDRlNGU1OWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyRbBcQ7EEpztzTOoPTCIt3ugasoT6UzdPKL +F/sgiVVfvq28e4ZsELByy5oDrFPNWMqYiqfjay079VeRPCytL1w/3BDfCbVZ37z FpARZe7C457fcHf/XTUUT36vOsZ44mCydSd5lMQcFBHxJPG7ZXZAEQR0sHRm9LJn tz+VsU8QwPLhMXEa2e7YFSHW+04kQoLhVGwMoFs7G88XXzg78Uk0qp3gyjnCQP9B wNZbuxJVCV58z1oI9Ac3MFcObVQ1Fqn5WIz9Co2SK198aknxDPASu4B5OPROKxPM V4u8yksqnApAy4JeU/TCivikGmWtKM4J49zM6y9mGXedYmOAkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZ8XVZmdoqIrnTscNJ4Qhg0EV3VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOGM2ODYyYzctOWVhMS0z N2Y0LWI4MjktZmY2ZmRlNjhkMDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxijhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADjdDDpSZJCq407C13HVlArJW00BE4mWx027nr+mwjvkI4UYn8TJu7w9 Nw7WI2HdUKYi0c3zCVZXdWo6+I2qvs3kkOq95+a9DVGw3J2H/NWDT7CygC1G0B/p eZFILtdZVLaRCwJ6i9nC0WtXmkKuFzlwsso/bk1izhYtsyAINcw1T5APSPOoCnuI Tw8rJkU1n+CXs3Mjaj3tNFy2IC1Y1XG8rsR9krpbLRU92zBrUTq2wttrUJB5ruOt zT0ZDo18E/YSsRuBiUB6IgtMbuuAS3MEXaAmL/hiJ652VkiIcuz/SRkBAKZXTUQp oN1zDTIwsICuSl37EIXOK03yYEyiS00= -----END CERTIFICATE-----Generated at Mon Jun 30 14:12:35 2025 by rpki-client