$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0e1ec699-9ded-3ccf-abec-995729c62c29.roa File: 0e1ec699-9ded-3ccf-abec-995729c62c29.roa (raw, json) Hash identifier: ygJAgqf3sDNn8WbqY0fWdCGE5gBzkmp2NAvBF+eIcsU= Subject key identifier: 89:C1:4C:6F:14:57:E6:C1:48:06:61:EA:CA:A6:CF:BE:4C:08:78:30 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584A45403529EEA22CEBF1BB5F72 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0e1ec699-9ded-3ccf-abec-995729c62c29.roa Signing time: Sun 22 Jun 2025 01:00:50 +0000 ROA not before: Sun 22 Jun 2025 01:00:50 +0000 ROA not after: Sat 20 Sep 2025 01:00:50 +0000 asID: 401152 IP address blocks: 198.20.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:45:40:35:29:ee:a2:2c:eb:f1:bb:5f:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jun 22 01:00:50 2025 GMT Not After : Sep 20 01:00:50 2025 GMT Subject: CN=380c359d-fe0d-4b34-ba4d-8bf516e1d209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f0:d2:57:0d:92:7e:44:27:a3:f9:5a:d3:ae: 71:c7:bd:b2:28:b0:f8:4e:0c:55:47:31:40:81:1b: 8b:82:80:7b:14:cf:4a:4d:0a:f5:f6:f7:1b:b3:71: e4:aa:0a:cc:0c:d0:1d:be:9f:cb:a4:dd:85:7f:26: c5:bc:cc:23:1e:3d:c8:75:95:9f:b8:b5:4e:ce:f1: 2d:9d:e9:41:aa:b2:fa:bf:02:5f:9b:1f:e5:ff:43: b0:84:07:b8:27:7c:c8:a9:fb:7f:b0:24:48:5e:a3: 33:9f:54:86:00:62:e4:43:03:bc:ce:c8:39:fe:d1: 16:95:a9:00:76:b2:00:76:54:e6:71:35:cd:80:0b: 68:ab:d2:fa:e3:a9:85:b9:e7:67:d7:81:e5:85:3e: 45:ce:7e:23:5c:69:a0:cf:59:35:27:fd:93:0f:08: cc:a0:0e:2a:0f:39:78:71:67:f9:e6:a3:4e:d6:7b: 3a:cb:df:6b:1b:97:93:a6:79:cf:b7:ec:4d:a6:b9: 1e:73:6b:ce:f2:5f:d5:53:35:54:6b:64:3f:78:a4: 05:0c:67:55:82:eb:07:fc:75:49:fe:20:a1:48:61: 7c:06:60:93:58:78:81:05:e2:4d:fe:8f:84:16:26: b7:b0:8c:e4:3c:73:2b:d6:6e:ef:ca:5c:00:e4:de: ab:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:C1:4C:6F:14:57:E6:C1:48:06:61:EA:CA:A6:CF:BE:4C:08:78:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0e1ec699-9ded-3ccf-abec-995729c62c29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 198.20.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:88:51:48:c5:2b:6c:ea:9e:39:df:b7:32:d0:b8:7f:60:e8: 6d:f7:47:7b:81:3d:44:82:c2:38:9c:2f:d6:a8:22:c7:fa:86: 3c:9e:3c:5e:44:8b:e2:db:fa:d3:e3:2e:cf:f1:bb:c7:aa:25: 20:9d:e4:25:cf:de:91:10:af:12:ab:6b:ff:6d:e3:18:c8:b3: 9d:ed:92:42:0e:6d:ba:bd:2f:5e:c7:96:37:45:47:5b:0a:01: b3:aa:49:fa:27:f4:0a:cd:69:85:99:2b:1a:6a:c3:80:9f:99: 11:cf:08:12:24:ad:90:02:3e:45:42:22:d7:77:b2:6b:81:b8: 50:70:81:b8:1f:ef:1e:77:0a:50:73:19:6e:55:7d:84:15:49: 3b:a3:01:fc:3f:d5:de:7d:df:7f:7f:8d:6d:9f:8a:d1:58:6f: 85:d8:a2:c7:b6:2a:63:a6:60:f4:88:1a:a1:fa:a6:23:a7:1a: ba:35:88:db:38:46:49:26:93:f1:9d:ca:3d:8e:7d:39:1b:c4: c3:fb:93:66:6f:3f:20:49:c2:5f:cc:9c:0c:0c:24:06:14:3f: 31:1e:79:93:cb:84:f7:3d:ae:c5:83:b0:fc:11:3d:7c:7e:61: e5:0f:59:93:00:ae:76:c4:15:bc:e9:a0:ba:6c:99:c5:b4:b9: 9f:03:1d:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpFQDUp7qIs6/G7X3IwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDYyMjAxMDA1MFoXDTI1MDkyMDAxMDA1MFowLzEtMCsGA1UEAxMk MzgwYzM1OWQtZmUwZC00YjM0LWJhNGQtOGJmNTE2ZTFkMjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPDSVw2SfkQno/la065xx72yKLD4TgxVRzFA gRuLgoB7FM9KTQr19vcbs3HkqgrMDNAdvp/LpN2FfybFvMwjHj3IdZWfuLVOzvEt nelBqrL6vwJfmx/l/0OwhAe4J3zIqft/sCRIXqMzn1SGAGLkQwO8zsg5/tEWlakA drIAdlTmcTXNgAtoq9L646mFuedn14HlhT5Fzn4jXGmgz1k1J/2TDwjMoA4qDzl4 cWf55qNO1ns6y99rG5eTpnnPt+xNprkec2vO8l/VUzVUa2Q/eKQFDGdVgusH/HVJ /iChSGF8BmCTWHiBBeJN/o+EFia3sIzkPHMr1m7vylwA5N6r3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFInBTG8UV+bBSAZh6sqmz75MCHgwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMGUxZWM2OTktOWRlZC0z Y2NmLWFiZWMtOTk1NzI5YzYyYzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxhSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKSIUUjFK2zqnjnftzLQuH9g6G33R3uBPUSCwjicL9aoIsf6hjyePF5E i+Lb+tPjLs/xu8eqJSCd5CXP3pEQrxKra/9t4xjIs53tkkIObbq9L17HljdFR1sK AbOqSfon9ArNaYWZKxpqw4CfmRHPCBIkrZACPkVCItd3smuBuFBwgbgf7x53ClBz GW5VfYQVSTujAfw/1d59339/jW2fitFYb4XYose2KmOmYPSIGqH6piOnGro1iNs4 Rkkmk/Gdyj2OfTkbxMP7k2ZvPyBJwl/MnAwMJAYUPzEeeZPLhPc9rsWDsPwRPXx+ YeUPWZMArnbEFbzpoLpsmcW0uZ8DHXg= -----END CERTIFICATE-----Generated at Sun Jun 29 17:50:00 2025 by rpki-client