$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/19bc1e4c-e5d3-37e4-8456-2ad81839b583.roa File: 19bc1e4c-e5d3-37e4-8456-2ad81839b583.roa (raw, json) Hash identifier: YuTDiQeW2HkAz/piJu1/0nCeCy5WEDTrO/wOt9rBTSo= Subject key identifier: 47:5D:0F:4A:31:99:83:7C:D6:2C:25:A4:F2:0E:99:CA:A5:FA:00:80 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584A331AFD9FDEC1B46234887200 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/19bc1e4c-e5d3-37e4-8456-2ad81839b583.roa Signing time: Sun 15 Jun 2025 13:01:02 +0000 ROA not before: Sun 15 Jun 2025 13:01:02 +0000 ROA not after: Sat 13 Sep 2025 13:01:02 +0000 asID: 54600 IP address blocks: 198.20.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:33:1a:fd:9f:de:c1:b4:62:34:88:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jun 15 13:01:02 2025 GMT Not After : Sep 13 13:01:02 2025 GMT Subject: CN=39df7a01-2ccb-466b-a8a6-c5aea9a9c526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5d:e0:02:03:64:42:a1:37:f1:0a:88:41:39: 2f:7a:a6:a1:30:34:b8:cd:64:70:10:bd:e7:30:6a: 38:f0:0a:7e:75:26:4d:78:2e:1f:92:80:6c:ad:d1: 65:19:cf:ae:e8:7c:ec:bb:8a:1e:7c:94:48:09:85: 1d:06:98:fd:be:ee:01:40:1a:cf:4c:41:1d:56:f5: 1e:77:ff:27:f6:e2:b8:ff:a0:18:f2:5d:a2:f1:8a: 04:63:a5:57:d9:93:f8:20:7e:b3:ed:05:2c:cf:0d: 66:ff:a7:eb:d2:63:3d:df:90:12:41:da:00:0d:5d: b3:0f:dc:34:59:aa:3a:e4:e5:39:ac:ab:07:c4:40: de:83:e7:9f:53:9b:d3:ea:1e:e4:a2:b2:3b:59:0a: f8:69:3b:96:72:69:0c:5b:cb:90:ee:31:33:0c:0d: 36:ad:bf:62:a8:8f:a0:fd:b5:7f:04:99:9b:2e:23: 34:99:53:7a:8c:c7:46:15:2c:23:5c:19:75:d5:7a: 8a:08:81:72:ca:0c:00:a5:ba:df:07:1d:e7:17:75: 32:0d:05:ce:57:48:1a:3e:a1:6c:d3:c9:96:ce:96: a7:b7:8c:f7:d2:01:08:04:35:95:1e:9c:5c:71:df: 07:10:c8:af:c1:d4:4a:1c:81:10:9d:0b:68:e1:f5: 28:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:5D:0F:4A:31:99:83:7C:D6:2C:25:A4:F2:0E:99:CA:A5:FA:00:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/19bc1e4c-e5d3-37e4-8456-2ad81839b583.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 198.20.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:20:73:22:72:cf:0d:c5:80:ec:57:33:61:5b:0d:e4:9d:fd: f0:37:b0:29:f8:66:e8:72:0c:68:16:3a:88:7b:9d:3c:a3:c6: f4:ab:c1:93:85:37:20:b9:21:44:34:74:88:22:f9:db:87:2a: 65:0e:3f:df:60:bb:32:50:ea:0a:19:57:18:65:b4:6c:f9:bb: 68:50:d9:48:29:2e:34:44:e4:70:48:eb:c4:58:ae:0f:4a:0b: 2e:f8:48:27:2e:95:fa:17:ca:74:b1:da:49:ef:ef:95:58:c7: 68:6b:91:8a:9d:34:8b:3a:90:9b:8c:69:65:db:b2:4b:f6:88: ca:d5:d1:f0:db:e3:f6:e3:69:44:31:3c:f8:f7:43:b9:6b:c4: 57:0b:c9:97:25:2d:fc:4a:41:d5:86:6b:80:95:48:cd:87:84: aa:7c:c0:d5:82:65:26:eb:58:9c:11:63:30:68:7a:ec:68:50: 8b:d9:cc:7e:61:3b:d5:d7:e6:9c:d8:71:ab:69:59:ca:42:45: a6:68:e3:ba:54:b3:4e:26:97:ca:01:08:b9:81:8f:76:d4:b8: cc:c4:72:1e:d2:a8:91:0d:2e:ef:fe:48:e4:00:0f:e8:e0:fe: 76:7d:eb:3f:a4:03:66:8b:cd:90:7d:01:97:18:ed:df:ac:9e: 86:b9:90:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEozGv2f3sG0YjSIcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDYxNTEzMDEwMloXDTI1MDkxMzEzMDEwMlowLzEtMCsGA1UEAxMk MzlkZjdhMDEtMmNjYi00NjZiLWE4YTYtYzVhZWE5YTljNTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqF3gAgNkQqE38QqIQTkveqahMDS4zWRwEL3n MGo48Ap+dSZNeC4fkoBsrdFlGc+u6Hzsu4oefJRICYUdBpj9vu4BQBrPTEEdVvUe d/8n9uK4/6AY8l2i8YoEY6VX2ZP4IH6z7QUszw1m/6fr0mM935ASQdoADV2zD9w0 Wao65OU5rKsHxEDeg+efU5vT6h7korI7WQr4aTuWcmkMW8uQ7jEzDA02rb9iqI+g /bV/BJmbLiM0mVN6jMdGFSwjXBl11XqKCIFyygwApbrfBx3nF3UyDQXOV0gaPqFs 08mWzpant4z30gEIBDWVHpxccd8HEMivwdRKHIEQnQto4fUoLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEddD0oxmYN81iwlpPIOmcql+gCAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMTliYzFlNGMtZTVkMy0z N2U0LTg0NTYtMmFkODE4MzliNTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxhScMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADEgcyJyzw3FgOxXM2FbDeSd/fA3sCn4ZuhyDGgWOoh7nTyjxvSrwZOF NyC5IUQ0dIgi+duHKmUOP99guzJQ6goZVxhltGz5u2hQ2UgpLjRE5HBI68RYrg9K Cy74SCculfoXynSx2knv75VYx2hrkYqdNIs6kJuMaWXbskv2iMrV0fDb4/bjaUQx PPj3Q7lrxFcLyZclLfxKQdWGa4CVSM2HhKp8wNWCZSbrWJwRYzBoeuxoUIvZzH5h O9XX5pzYcatpWcpCRaZo47pUs04ml8oBCLmBj3bUuMzEch7SqJENLu/+SOQAD+jg /nZ96z+kA2aLzZB9AZcY7d+snoa5kCQ= -----END CERTIFICATE-----Generated at Sun Jun 29 23:31:47 2025 by rpki-client