$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bb9ba8a2-b36b-3247-9f4d-b86b8e97826f.roa File: bb9ba8a2-b36b-3247-9f4d-b86b8e97826f.roa (raw, json) Hash identifier: qVrJW6aXeSrbV5i1GnI2Eb011HOcveghye3m7yu+7pA= Subject key identifier: 83:2A:04:61:B4:3C:A1:70:51:FF:FE:14:DF:37:F9:EB:28:96:FA:75 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F43285849F715227FADD895C11F6FB5C0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bb9ba8a2-b36b-3247-9f4d-b86b8e97826f.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 1225 IP address blocks: 198.64.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:22:7f:ad:d8:95:c1:1f:6f:b5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=523a363c-a542-4e4c-82ea-778bb4267b8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b9:fe:af:c2:7b:83:b5:f9:3d:a1:d2:fb:ac: d3:dc:06:0e:cf:75:e3:c8:b6:76:d8:ca:8e:93:88: 31:f3:56:c2:8c:13:8d:45:af:69:87:f6:61:59:20: 09:6a:c5:3f:0e:8e:78:89:dd:3d:03:66:2f:e6:4a: f6:67:31:31:e7:82:59:ef:42:8a:d4:a4:f0:bb:8f: ae:fc:6d:74:79:3a:6d:92:3f:87:e9:47:54:93:45: f1:f6:f6:7a:99:c3:e1:48:f6:cb:3d:26:b0:8e:12: 06:0f:3d:65:21:a0:c7:04:73:a7:d3:bf:47:9f:e1: 1c:7a:fa:93:a1:70:da:96:73:50:97:53:79:44:bd: 51:78:cc:90:e2:d8:84:6d:f6:14:9f:20:94:72:62: 42:12:bb:7d:e0:2c:1b:5f:15:2f:9a:99:54:be:59: 6d:f9:25:9a:82:62:33:f1:87:9a:23:1a:b1:b0:67: 56:fc:29:e9:d5:fd:03:0d:6d:f1:8e:63:24:7a:85: 92:ea:7a:1d:80:82:cd:5d:0e:99:d0:e9:0e:ed:6d: 5d:2c:bb:e4:48:20:f6:bc:b4:7a:97:af:ff:9f:00: bf:e2:ae:df:3c:ac:42:b7:ca:c5:20:3f:af:9f:e7: 9c:2e:80:4a:5a:96:a0:2c:27:06:32:9d:d5:6d:e5: 3d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:2A:04:61:B4:3C:A1:70:51:FF:FE:14:DF:37:F9:EB:28:96:FA:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bb9ba8a2-b36b-3247-9f4d-b86b8e97826f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 198.64.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:94:e6:59:1e:ae:7c:7f:53:07:87:97:d8:7d:be:8c:78:35: 93:4c:38:2a:b2:b1:35:9a:9e:a8:85:c0:2f:7d:76:39:19:07: 93:90:8f:f7:23:34:87:ed:b5:98:28:43:27:8a:cd:c5:fb:64: dd:3b:d6:d3:1c:2b:0f:08:f4:53:64:8a:9a:d9:81:0a:00:29: 0f:39:d3:d3:65:d3:cc:5f:59:c3:76:ea:1a:10:ad:e1:e0:31: 1e:fd:36:f6:30:02:f3:5a:b6:8d:69:a4:61:29:a1:c3:1e:d5: fb:da:04:a0:9e:e6:ab:fa:28:d6:c4:f4:7e:ed:a7:14:42:cd: 3f:e5:c1:21:7d:ac:c5:65:61:73:12:71:aa:58:df:04:88:3c: 54:53:da:4f:6a:ea:09:75:c8:e7:75:77:ce:1f:20:ea:6b:f7: fd:8b:c2:72:4c:1c:19:8c:48:f0:78:2f:02:b5:e1:cf:9b:12: c9:ea:82:fb:53:4c:21:1e:32:89:ab:84:a2:5d:82:e9:8d:56: 33:29:4c:a7:bb:30:d6:4f:5b:41:91:aa:8d:60:53:34:ec:e5: 7d:9e:de:8c:36:cb:96:56:7f:9a:26:55:9e:46:83:12:17:d4: 41:45:8b:d2:47:d8:00:7a:c2:67:6c:f7:43:48:a5:28:e3:c9: 0f:6d:a2:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn3FSJ/rdiVwR9vtcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk NTIzYTM2M2MtYTU0Mi00ZTRjLTgyZWEtNzc4YmI0MjY3YjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLn+r8J7g7X5PaHS+6zT3AYOz3XjyLZ22MqO k4gx81bCjBONRa9ph/ZhWSAJasU/Do54id09A2Yv5kr2ZzEx54JZ70KK1KTwu4+u /G10eTptkj+H6UdUk0Xx9vZ6mcPhSPbLPSawjhIGDz1lIaDHBHOn079Hn+EcevqT oXDalnNQl1N5RL1ReMyQ4tiEbfYUnyCUcmJCErt94CwbXxUvmplUvllt+SWagmIz 8YeaIxqxsGdW/Cnp1f0DDW3xjmMkeoWS6nodgILNXQ6Z0OkO7W1dLLvkSCD2vLR6 l6//nwC/4q7fPKxCt8rFID+vn+ecLoBKWpagLCcGMp3VbeU9qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIMqBGG0PKFwUf/+FN83+esolvp1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYmI5YmE4YTItYjM2Yi0z MjQ3LTlmNGQtYjg2YjhlOTc4MjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxkAEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHaU5lkernx/UweHl9h9vox4NZNMOCqysTWanqiFwC99djkZB5OQj/cj NIfttZgoQyeKzcX7ZN071tMcKw8I9FNkiprZgQoAKQ8509Nl08xfWcN26hoQreHg MR79NvYwAvNato1ppGEpocMe1fvaBKCe5qv6KNbE9H7tpxRCzT/lwSF9rMVlYXMS capY3wSIPFRT2k9q6gl1yOd1d84fIOpr9/2LwnJMHBmMSPB4LwK14c+bEsnqgvtT TCEeMomrhKJdgumNVjMpTKe7MNZPW0GRqo1gUzTs5X2e3ow2y5ZWf5omVZ5GgxIX 1EFFi9JH2AB6wmds90NIpSjjyQ9tolw= -----END CERTIFICATE-----Generated at Sun Jun 29 13:41:52 2025 by rpki-client