$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8ff4e861-6a2b-3df6-a5c2-780a4680e8e1.roa File: 8ff4e861-6a2b-3df6-a5c2-780a4680e8e1.roa (raw, json) Hash identifier: sCtBbT+DY4NJRKrmUnF2Fa16mjn9mZs3xxjaXnthYDA= Subject key identifier: 50:2C:D9:60:E0:99:4C:D6:B0:AE:F5:83:20:40:F1:C7:8C:75:C9:A1 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285849DF5A540C828C657FF4071140 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8ff4e861-6a2b-3df6-a5c2-780a4680e8e1.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 30036 IP address blocks: 198.40.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:54:0c:82:8c:65:7f:f4:07:11:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=ebbf996a-77fb-47cb-8a94-1ab0e3704d9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:60:14:69:94:f8:9e:0f:9d:12:bf:e7:32:50: 56:54:9b:7c:75:ff:c2:94:e2:7c:82:4e:16:36:9a: fe:35:94:13:c4:a5:3d:a5:cf:40:5b:ee:cd:d9:43: 56:28:7b:71:d7:85:56:64:fa:62:fd:20:e1:79:be: 88:43:3a:c2:77:b1:50:95:52:5b:a0:c9:6a:ee:25: bc:21:61:23:b2:fa:0e:88:ce:01:73:43:91:df:af: 61:68:69:c5:87:67:2b:3a:28:9d:31:ef:41:08:f3: 65:e7:c5:9a:31:c6:03:59:97:ae:e9:1b:85:71:e6: a5:3c:ad:66:6d:1c:b5:c1:13:b1:c0:f4:60:09:85: 1c:87:87:2d:f2:59:44:1b:73:a7:6b:28:c5:46:ef: 30:ff:0f:06:f5:8f:60:d5:83:6c:05:be:fd:9a:a8: e8:55:62:0d:21:d0:89:84:e5:61:43:b3:3c:96:89: 78:b0:47:c0:81:02:f6:43:f2:f9:c9:77:c9:3e:7a: 8d:35:f1:27:47:a1:45:c7:7e:53:e3:f8:7c:62:96: d6:c1:d3:5d:a5:ac:0d:aa:30:aa:23:74:c0:ba:d4: a2:ee:8f:0d:83:c9:e0:e9:e3:e7:43:4a:3d:8b:a6: 0b:42:78:c4:f0:76:b6:f6:dc:0b:44:2c:26:15:af: 79:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:2C:D9:60:E0:99:4C:D6:B0:AE:F5:83:20:40:F1:C7:8C:75:C9:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8ff4e861-6a2b-3df6-a5c2-780a4680e8e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 198.40.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:00:b4:a8:f5:d3:82:45:8d:09:d6:e3:15:8b:17:2c:a8:43: 02:c0:25:8b:14:1a:27:77:cf:20:f8:9d:33:c8:ba:9a:08:c8: 80:40:87:19:84:b5:cc:aa:8c:46:8e:37:10:c1:95:66:e9:f2: 6a:84:11:10:de:8b:9d:b1:df:f4:cd:2e:f1:6c:c2:fd:ba:f9: a9:d1:35:98:12:12:e2:f1:91:9e:f8:2a:64:4d:41:ff:6c:ac: 0d:f9:71:95:b9:4d:5b:bd:74:13:04:24:5f:02:9f:48:f7:3e: 77:47:f0:30:04:ad:56:bf:06:5a:e7:9c:af:90:4a:25:cd:23: 2d:65:6b:df:a9:3e:bd:94:ae:aa:49:32:a3:fd:1d:ff:70:72: e7:29:c2:be:a5:be:24:d4:14:86:39:07:2a:ec:ae:f8:b3:e7: 25:6b:b3:a1:53:c6:1e:8a:e4:33:79:16:59:1e:17:86:0e:46: 7c:73:97:63:1c:f2:78:26:4b:d6:2f:db:d3:7a:fa:29:ff:27: b3:96:5c:0f:81:f8:3f:01:82:b1:00:79:3a:28:ea:54:da:60: e6:03:e5:69:f7:93:44:39:49:97:61:ba:bb:8a:51:34:10:6c: a6:1c:31:94:db:f9:bf:fb:2a:01:30:a2:e0:7d:7b:08:ce:5b: 09:4b:46:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfWlQMgoxlf/QHEUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk ZWJiZjk5NmEtNzdmYi00N2NiLThhOTQtMWFiMGUzNzA0ZDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWAUaZT4ng+dEr/nMlBWVJt8df/ClOJ8gk4W Npr+NZQTxKU9pc9AW+7N2UNWKHtx14VWZPpi/SDheb6IQzrCd7FQlVJboMlq7iW8 IWEjsvoOiM4Bc0OR369haGnFh2crOiidMe9BCPNl58WaMcYDWZeu6RuFcealPK1m bRy1wROxwPRgCYUch4ct8llEG3OnayjFRu8w/w8G9Y9g1YNsBb79mqjoVWINIdCJ hOVhQ7M8lol4sEfAgQL2Q/L5yXfJPnqNNfEnR6FFx35T4/h8YpbWwdNdpawNqjCq I3TAutSi7o8Ng8ng6ePnQ0o9i6YLQnjE8Ha29twLRCwmFa95aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFAs2WDgmUzWsK71gyBA8ceMdcmhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOGZmNGU4NjEtNmEyYi0z ZGY2LWE1YzItNzgwYTQ2ODBlOGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxijrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAAtKj104JFjQnW4xWLFyyoQwLAJYsUGid3zyD4nTPIupoIyIBAhxmE tcyqjEaONxDBlWbp8mqEERDei52x3/TNLvFswv26+anRNZgSEuLxkZ74KmRNQf9s rA35cZW5TVu9dBMEJF8Cn0j3PndH8DAErVa/BlrnnK+QSiXNIy1la9+pPr2UrqpJ MqP9Hf9wcucpwr6lviTUFIY5Byrsrviz5yVrs6FTxh6K5DN5FlkeF4YORnxzl2Mc 8ngmS9Yv29N6+in/J7OWXA+B+D8BgrEAeToo6lTaYOYD5Wn3k0Q5SZdhuruKUTQQ bKYcMZTb+b/7KgEwouB9ewjOWwlLRuY= -----END CERTIFICATE-----Generated at Tue Jul 1 09:43:08 2025 by rpki-client