$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/eb4f3dda-fc1e-3e2b-8eae-576ef396c7a2.roa File: eb4f3dda-fc1e-3e2b-8eae-576ef396c7a2.roa (raw, json) Hash identifier: XBAqSlQzciVF72CF8gkXplpa7LhAOKpPlZhGtIqjdt0= Subject key identifier: D0:C4:0F:1C:EA:48:48:08:01:BA:22:F7:68:40:49:56:56:B5:C8:A7 Certificate issuer: /CN=1f4a5fa9-723d-410e-a75f-ffc7662c530a Certificate serial: 010D0C9F43285849C4D4C2D223CB2628EA960780 Authority key identifier: 81:34:75:FE:DC:F5:F0:A4:06:EA:39:8E:4F:60:97:68:60:C5:3D:4F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/eb4f3dda-fc1e-3e2b-8eae-576ef396c7a2.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 14618 IP address blocks: 198.99.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/1f4a5fa9-723d-410e-a75f-ffc7662c530a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/1f4a5fa9-723d-410e-a75f-ffc7662c530a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:c2:d2:23:cb:26:28:ea:96:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f4a5fa9-723d-410e-a75f-ffc7662c530a Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=b99162f2-b40b-4809-a22b-5017dbb05c2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:af:41:f2:65:8f:3a:29:23:23:12:c0:40:f1: a3:d0:e6:6f:88:02:f2:e5:d7:6e:ea:95:a8:f6:3b: d0:c9:fb:ce:61:05:a0:c0:e1:fc:44:5b:e4:62:d1: ba:3a:ce:ce:df:9c:14:38:48:12:d4:d1:26:80:4f: f6:72:13:9b:da:30:d8:00:14:93:15:ae:7d:20:a2: dd:ca:90:18:6d:57:22:77:bb:ae:b8:93:2b:ca:99: 83:ff:fb:db:8d:13:dd:a0:1e:e6:5e:9c:06:f3:46: 7a:35:f4:37:de:ce:f5:2a:8e:b9:1b:a8:14:de:06: e8:ab:b5:2e:df:7f:4b:84:b2:e5:de:e0:eb:79:71: ea:a1:51:85:98:e6:0e:ff:25:15:c0:68:c6:40:2b: a0:43:f3:d5:51:4b:2a:b3:71:c4:63:7d:9d:34:d4: 5f:e9:29:04:a8:1c:a1:c1:df:04:ef:19:c6:c1:05: ca:87:5e:13:bc:d3:93:dc:01:34:eb:6a:84:31:47: d5:59:36:cd:c6:e3:44:b5:75:4e:4f:be:82:12:8d: f7:b5:b7:de:f9:e7:5c:c1:01:78:7e:5c:74:c2:15: 4a:1d:0b:d6:d4:be:63:f7:37:aa:71:89:50:12:cc: 8b:c6:80:47:e8:5e:58:95:fd:d0:c0:68:d3:75:11: ec:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:C4:0F:1C:EA:48:48:08:01:BA:22:F7:68:40:49:56:56:B5:C8:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/eb4f3dda-fc1e-3e2b-8eae-576ef396c7a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/1f4a5fa9-723d-410e-a75f-ffc7662c530a.crl X509v3 Authority Key Identifier: keyid:81:34:75:FE:DC:F5:F0:A4:06:EA:39:8E:4F:60:97:68:60:C5:3D:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a.cer sbgp-ipAddrBlock: critical IPv4: 198.99.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:a0:38:71:32:67:e6:37:05:9c:59:08:dd:6c:16:6a:f5:2b: 58:d5:42:b4:8d:ec:8f:40:7f:fc:c0:bf:ce:03:63:9d:a8:bf: 4e:a2:cb:66:55:ae:5f:c9:9a:07:c5:60:4b:c2:d4:a8:75:9d: 91:10:be:cd:20:7e:d1:0a:45:20:e9:b8:b0:6c:48:f9:c5:b1: fb:b3:c6:d8:7f:ba:18:c6:0e:12:31:20:86:18:ea:ab:f1:82: 03:ae:37:e2:cb:44:d4:ea:c4:e1:22:8b:d0:de:80:a0:70:d1: 46:ab:7d:f9:0f:7a:63:a4:66:e2:bd:ff:28:a2:ba:75:c2:2d: 19:26:fd:64:8a:a1:ce:e5:53:dc:b1:c2:f8:ff:bb:85:a0:a3: 13:0a:d1:a8:56:39:a5:94:5f:49:67:34:fc:85:9e:17:ce:e4: a0:2f:d9:19:99:dd:ad:c7:ed:4d:6f:75:79:00:a5:d2:d5:0c: 81:f7:b2:25:a4:86:d5:48:e4:1e:ef:1e:1c:b7:5b:ff:31:3c: 4b:7c:94:2d:8f:ae:00:00:46:78:21:48:33:e2:ff:48:3e:77: d3:f5:b1:ba:b6:a3:d4:18:14:1e:51:1c:ca:b4:f1:fb:01:c0: a7:7d:99:ef:31:97:6f:a8:37:51:3e:1d:97:95:50:f2:e7:d8: 74:a5:00:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnE1MLSI8smKOqWB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY0YTVmYTktNzIzZC00MTBlLWE3NWYtZmZjNzY2MmM1 MzBhMB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk Yjk5MTYyZjItYjQwYi00ODA5LWEyMmItNTAxN2RiYjA1YzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkK9B8mWPOikjIxLAQPGj0OZviALy5ddu6pWo 9jvQyfvOYQWgwOH8RFvkYtG6Os7O35wUOEgS1NEmgE/2chOb2jDYABSTFa59IKLd ypAYbVcid7uuuJMrypmD//vbjRPdoB7mXpwG80Z6NfQ33s71Ko65G6gU3gboq7Uu 339LhLLl3uDreXHqoVGFmOYO/yUVwGjGQCugQ/PVUUsqs3HEY32dNNRf6SkEqByh wd8E7xnGwQXKh14TvNOT3AE062qEMUfVWTbNxuNEtXVOT76CEo33tbfe+edcwQF4 flx0whVKHQvW1L5j9zeqcYlQEsyLxoBH6F5Ylf3QwGjTdRHslwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDEDxzqSEgIAboi92hASVZWtcinMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZjRh NWZhOS03MjNkLTQxMGUtYTc1Zi1mZmM3NjYyYzUzMGEvZWI0ZjNkZGEtZmMxZS0z ZTJiLThlYWUtNTc2ZWYzOTZjN2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWY0YTVmYTktNzIzZC00MTBlLWE3 NWYtZmZjNzY2MmM1MzBhLzFmNGE1ZmE5LTcyM2QtNDEwZS1hNzVmLWZmYzc2NjJj NTMwYS5jcmwwHwYDVR0jBBgwFoAUgTR1/tz18KQG6jmOT2CXaGDFPU8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZjRhNWZhOS03MjNkLTQxMGUtYTc1Zi1mZmM3 NjYyYzUzMGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmOKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6gOHEyZ+Y3BZxZCN1sFmr1K1jVQrSN7I9Af/zAv84DY52ov06iy2ZV rl/JmgfFYEvC1Kh1nZEQvs0gftEKRSDpuLBsSPnFsfuzxth/uhjGDhIxIIYY6qvx ggOuN+LLRNTqxOEii9DegKBw0UarffkPemOkZuK9/yiiunXCLRkm/WSKoc7lU9yx wvj/u4WgoxMK0ahWOaWUX0lnNPyFnhfO5KAv2RmZ3a3H7U1vdXkApdLVDIH3siWk htVI5B7vHhy3W/8xPEt8lC2PrgAARnghSDPi/0g+d9P1sbq2o9QYFB5RHMq08fsB wKd9me8xl2+oN1E+HZeVUPLn2HSlAME= -----END CERTIFICATE-----Generated at Sun Jun 29 01:46:17 2025 by rpki-client