$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/6a21c2dd-f822-3713-80c4-aa6f2568feef.roa File: 6a21c2dd-f822-3713-80c4-aa6f2568feef.roa (raw, json) Hash identifier: 3sMoUWDFCQnKZaxVrDPvNpc5JzAdL++7WoYMa64AMAU= Subject key identifier: 58:CC:62:1E:1E:C6:CC:FC:9F:1D:18:74:8A:16:69:88:5B:8B:EA:60 Certificate issuer: /CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78 Certificate serial: 010D0C9F4328584A41104E6474FDA41A51D39E00 Authority key identifier: A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/6a21c2dd-f822-3713-80c4-aa6f2568feef.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 19551 IP address blocks: 198.143.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:4e:64:74:fd:a4:1a:51:d3:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78 Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=afce444e-21c2-4707-a5a2-2085fcec4fbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:2d:a6:0c:25:d1:6a:27:da:2f:b6:29:c8:4b: 5a:33:24:89:14:ed:87:71:63:5d:76:3f:18:d7:8c: e4:61:c9:68:05:1f:bf:59:ed:0c:5b:f9:38:56:e2: d4:ae:03:4a:98:7b:df:ff:0d:df:c0:cc:1c:36:b4: 0a:ad:f5:80:f7:62:f4:05:3f:c3:1b:70:91:0b:5c: c3:e8:49:e1:a0:55:8e:8a:76:79:de:48:56:64:1f: fe:8b:02:a3:8d:70:d4:10:ec:d7:44:d9:b7:ef:6e: a9:55:92:fb:6b:fb:8a:58:c1:f5:31:76:70:00:93: e2:95:f1:89:31:f7:13:7e:f9:cb:5c:9d:aa:93:29: a4:57:20:38:65:e4:94:bf:20:69:e1:67:2e:13:f1: af:b8:50:4a:c6:38:ea:a7:3d:f6:dc:51:66:91:93: 0d:e4:6d:77:ee:52:5e:09:f5:67:bb:3e:a4:70:ab: 41:43:40:0f:1b:15:d3:2d:ce:b6:67:7f:11:ec:b3: 6f:fa:34:e9:d1:b6:1a:05:4e:4e:63:92:01:ed:d1: 79:8e:c9:6d:a8:b6:d6:9d:0c:4d:2e:59:df:7d:f0: 4a:fb:b2:14:65:a1:a2:e0:9e:3c:ef:90:2a:0b:7c: d7:e2:ff:b4:e8:2c:ea:54:d1:80:0b:53:89:72:25: f4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:CC:62:1E:1E:C6:CC:FC:9F:1D:18:74:8A:16:69:88:5B:8B:EA:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/6a21c2dd-f822-3713-80c4-aa6f2568feef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.crl X509v3 Authority Key Identifier: keyid:A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer sbgp-ipAddrBlock: critical IPv4: 198.143.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:58:13:f7:53:32:f9:9b:29:6f:0a:cf:f1:8a:6b:12:c1:9d: 06:65:a4:ee:b2:33:34:0c:c2:26:09:b8:f2:1f:2f:c8:0a:f7: c7:9d:83:d8:49:9a:2e:9f:cb:a0:35:1f:a6:e7:a2:e7:99:ce: 5b:1e:05:7f:98:61:d9:9f:a3:6a:1a:cd:22:b0:f6:25:49:d5: 35:3a:82:20:05:1c:be:c4:5f:43:cc:06:81:0d:85:b6:9d:23: 94:6c:62:43:aa:8b:df:7f:64:c2:bd:89:e8:d4:83:ba:e7:64: a6:7b:c6:9e:3b:8b:11:69:e3:ea:3d:d6:b2:18:21:04:51:cb: b8:44:07:83:c5:7f:ae:45:01:96:8a:7c:95:a9:01:cf:2d:cf: ca:a0:f6:d3:79:0e:ee:12:2e:d3:05:6a:4b:17:c2:04:60:66: b4:e8:96:20:9c:d6:5c:a7:e1:db:fc:58:f0:3c:be:54:ba:34: ff:b4:bc:22:20:5b:52:f8:ee:a9:83:2e:62:a8:39:e0:3e:e9: b2:6a:a8:43:93:2e:57:0d:e1:6c:33:1f:46:d6:c3:be:22:b8: 67:ac:e5:54:0c:a4:0b:6e:0c:df:50:95:98:3c:a1:ab:d3:71: 79:7e:df:ce:cf:4a:a8:fe:08:8b:aa:e0:23:ba:9c:6e:bc:41: 8b:bf:44:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpBEE5kdP2kGlHTngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzQxYjdlOTYtYTZmMC00NGQzLWFlY2MtOTI5NGQ2YmNj Yzc4MB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk YWZjZTQ0NGUtMjFjMi00NzA3LWE1YTItMjA4NWZjZWM0ZmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAky2mDCXRaifaL7YpyEtaMySJFO2HcWNddj8Y 14zkYcloBR+/We0MW/k4VuLUrgNKmHvf/w3fwMwcNrQKrfWA92L0BT/DG3CRC1zD 6EnhoFWOinZ53khWZB/+iwKjjXDUEOzXRNm3726pVZL7a/uKWMH1MXZwAJPilfGJ MfcTfvnLXJ2qkymkVyA4ZeSUvyBp4WcuE/GvuFBKxjjqpz323FFmkZMN5G137lJe CfVnuz6kcKtBQ0APGxXTLc62Z38R7LNv+jTp0bYaBU5OY5IB7dF5jsltqLbWnQxN LlnfffBK+7IUZaGi4J4875AqC3zX4v+06CzqVNGAC1OJciX0PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFjMYh4exsz8nx0YdIoWaYhbi+pgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNDFi N2U5Ni1hNmYwLTQ0ZDMtYWVjYy05Mjk0ZDZiY2NjNzgvNmEyMWMyZGQtZjgyMi0z NzEzLTgwYzQtYWE2ZjI1NjhmZWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzQxYjdlOTYtYTZmMC00NGQzLWFl Y2MtOTI5NGQ2YmNjYzc4LzM0MWI3ZTk2LWE2ZjAtNDRkMy1hZWNjLTkyOTRkNmJj Y2M3OC5jcmwwHwYDVR0jBBgwFoAUoPBBeGGMSJbPqYzGmlOLQFAosrUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNDFiN2U5Ni1hNmYwLTQ0ZDMtYWVjYy05Mjk0 ZDZiY2NjNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFxo8gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRYE/dTMvmbKW8Kz/GKaxLBnQZlpO6yMzQMwiYJuPIfL8gK98edg9hJ mi6fy6A1H6bnoueZzlseBX+YYdmfo2oazSKw9iVJ1TU6giAFHL7EX0PMBoENhbad I5RsYkOqi99/ZMK9iejUg7rnZKZ7xp47ixFp4+o91rIYIQRRy7hEB4PFf65FAZaK fJWpAc8tz8qg9tN5Du4SLtMFaksXwgRgZrToliCc1lyn4dv8WPA8vlS6NP+0vCIg W1L47qmDLmKoOeA+6bJqqEOTLlcN4WwzH0bWw74iuGes5VQMpAtuDN9QlZg8oavT cXl+387PSqj+CIuq4CO6nG68QYu/RO0= -----END CERTIFICATE-----Generated at Sun Jun 29 17:51:14 2025 by rpki-client