$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4e4e575f-2ebb-3c9f-995a-2bb1001781c2.roa File: 4e4e575f-2ebb-3c9f-995a-2bb1001781c2.roa (raw, json) Hash identifier: E0c9hRpR8GZUOYhENZKkT+SYLPpyDnHp8qyJ3zjIC48= Subject key identifier: B8:28:82:F9:F7:C5:8D:3B:FC:3D:9F:8B:C2:45:D3:92:AC:5C:FB:86 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584A58CB0B2883E009D047483064 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4e4e575f-2ebb-3c9f-995a-2bb1001781c2.roa Signing time: Sun 29 Jun 2025 01:00:50 +0000 ROA not before: Sun 29 Jun 2025 01:00:50 +0000 ROA not after: Sat 27 Sep 2025 01:00:50 +0000 asID: 398465 IP address blocks: 198.66.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:58:cb:0b:28:83:e0:09:d0:47:48:30:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jun 29 01:00:50 2025 GMT Not After : Sep 27 01:00:50 2025 GMT Subject: CN=f43b5c7b-174c-416d-a003-624158200d36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:df:d0:c1:7b:52:37:d9:dd:ac:cf:75:1a:a0: 07:34:a0:9a:7d:c2:ae:db:74:2b:e5:f3:a3:22:05: d9:19:03:b8:13:be:d4:f1:51:71:89:c1:59:73:9f: 60:8c:3c:8e:16:2e:5d:c1:25:ed:0c:63:0d:94:5a: ea:6f:e8:fc:01:2e:58:c4:0c:ff:d4:d1:d2:a5:fe: d7:13:69:20:f4:a0:e1:b5:69:4d:e9:4d:91:52:4d: 40:9f:81:1f:fb:54:96:a6:41:03:cc:df:40:2d:91: 50:26:df:62:42:4e:b7:d7:f2:a5:dd:ab:93:de:b9: 13:a5:63:f5:08:78:14:c7:10:0f:fb:d3:02:81:b1: b9:f4:ec:8c:6b:97:7d:b9:0d:1f:b2:60:39:b1:89: 8f:fa:99:c2:2a:5d:04:4f:17:3c:56:4b:7e:a9:1f: 75:d8:9f:b5:bf:ee:46:d1:51:a9:77:06:c5:bf:36: 4a:de:35:1a:04:84:b7:ab:79:7e:15:7c:e9:f5:8e: f9:65:41:3f:d3:ba:12:4a:45:5e:e2:ba:4d:4c:f4: c2:1b:8f:4c:e9:1d:ce:1e:3b:4a:86:3e:1a:da:b7: 4d:8a:1b:fc:ae:62:7f:63:e9:91:6d:e8:5b:d2:cd: df:4d:ba:07:2e:2d:0f:b1:18:56:18:dd:69:17:2f: cb:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:28:82:F9:F7:C5:8D:3B:FC:3D:9F:8B:C2:45:D3:92:AC:5C:FB:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4e4e575f-2ebb-3c9f-995a-2bb1001781c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 198.66.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:f7:47:32:d5:0a:39:5e:f1:c4:cc:70:f0:13:69:af:c9:f8: 5e:75:91:af:f7:5e:ec:b2:7b:cd:cb:99:bd:18:f5:87:73:e4: 8a:00:e7:0f:58:70:bb:22:82:20:d9:e5:51:40:1d:da:4d:72: b9:76:4d:e0:f5:3d:aa:03:de:6d:68:a6:24:f0:0b:96:67:e6: 54:25:aa:cf:42:79:70:08:ed:b7:be:b7:95:d3:30:1d:fa:83: 05:d2:39:07:7b:6a:ee:1a:2d:4c:12:e8:ef:08:2b:52:52:bd: 0a:d1:eb:58:68:dc:a0:29:ae:7c:f2:b2:c2:d7:62:d2:3d:67: ca:7d:2e:e3:da:e5:54:79:15:3a:20:1f:3e:f1:27:98:1b:d5: 6b:b2:ae:5a:9b:de:15:55:fc:e4:7d:d9:9a:aa:10:42:c8:34: 63:2a:fa:d1:d7:39:b4:79:8f:fe:45:29:d9:8a:00:9b:08:4f: 71:3f:e4:3a:16:3e:71:b3:3b:79:5c:48:63:60:1c:5d:cc:1b: f1:b8:fe:f9:ab:51:05:05:6c:79:26:e1:9e:a7:61:91:db:13: 5f:c8:b3:b3:a2:38:30:f4:82:98:02:55:bf:de:10:b8:58:94: 6d:12:06:21:1f:8f:9e:c5:9e:6d:c4:e0:00:33:4d:21:2a:09: a6:49:1e:e1 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEpYywsog+AJ0EdIMGQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDYyOTAxMDA1MFoXDTI1MDkyNzAxMDA1MFowLzEtMCsGA1UEAxMk ZjQzYjVjN2ItMTc0Yy00MTZkLWEwMDMtNjI0MTU4MjAwZDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkt/QwXtSN9ndrM91GqAHNKCafcKu23Qr5fOj IgXZGQO4E77U8VFxicFZc59gjDyOFi5dwSXtDGMNlFrqb+j8AS5YxAz/1NHSpf7X E2kg9KDhtWlN6U2RUk1An4Ef+1SWpkEDzN9ALZFQJt9iQk631/Kl3auT3rkTpWP1 CHgUxxAP+9MCgbG59OyMa5d9uQ0fsmA5sYmP+pnCKl0ETxc8Vkt+qR912J+1v+5G 0VGpdwbFvzZK3jUaBIS3q3l+FXzp9Y75ZUE/07oSSkVe4rpNTPTCG49M6R3OHjtK hj4a2rdNihv8rmJ/Y+mRbehb0s3fTboHLi0PsRhWGN1pFy/LeQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFLgogvn3xY07/D2fi8JF05KsXPuGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNGU0ZTU3NWYtMmViYi0z YzlmLTk5NWEtMmJiMTAwMTc4MWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAxkIwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEANfdHMtUKOV7xxMxw8BNpr8n4XnWRr/de7LJ7zcuZvRj1h3PkigDnD1hw uyKCINnlUUAd2k1yuXZN4PU9qgPebWimJPALlmfmVCWqz0J5cAjtt763ldMwHfqD BdI5B3tq7hotTBLo7wgrUlK9CtHrWGjcoCmufPKywtdi0j1nyn0u49rlVHkVOiAf PvEnmBvVa7KuWpveFVX85H3ZmqoQQsg0Yyr60dc5tHmP/kUp2YoAmwhPcT/kOhY+ cbM7eVxIY2AcXcwb8bj++atRBQVseSbhnqdhkdsTX8izs6I4MPSCmAJVv94QuFiU bRIGIR+PnsWebcTgADNNISoJpkke4Q== -----END CERTIFICATE-----Generated at Mon Jun 30 00:08:33 2025 by rpki-client