$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/c95d2b0f-c456-373f-981b-14f4a65414b4.roa File: c95d2b0f-c456-373f-981b-14f4a65414b4.roa (raw, json) Hash identifier: oJAqNOx5QK135qu1RixC8eNEPSgifO64KCWHlB00QGI= Subject key identifier: 3A:9A:87:5B:DA:B5:E0:DD:D6:72:5B:47:E3:72:C9:09:52:27:9A:33 Certificate issuer: /CN=cd00198f-a530-490c-8ef5-5c31ac9b88ee Certificate serial: 010D0C9F4328584A4C64F997DDC91CB681880BAC Authority key identifier: EE:B2:E7:54:17:4E:31:C9:7A:0D:15:E5:72:45:5D:67:1D:F3:92:BF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/c95d2b0f-c456-373f-981b-14f4a65414b4.roa Signing time: Tue 24 Jun 2025 14:25:39 +0000 ROA not before: Tue 24 Jun 2025 14:25:39 +0000 ROA not after: Mon 22 Sep 2025 14:25:39 +0000 asID: 18540 IP address blocks: 216.230.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/cd00198f-a530-490c-8ef5-5c31ac9b88ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/cd00198f-a530-490c-8ef5-5c31ac9b88ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:64:f9:97:dd:c9:1c:b6:81:88:0b:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd00198f-a530-490c-8ef5-5c31ac9b88ee Validity Not Before: Jun 24 14:25:39 2025 GMT Not After : Sep 22 14:25:39 2025 GMT Subject: CN=7aa494bd-a425-4213-a611-e2f9e91676a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:d1:78:ee:0a:ed:26:90:d7:a6:1a:bb:b2:af: af:6d:c7:67:89:e6:a5:2f:ba:1c:5d:e1:5e:78:4f: 92:f2:fe:07:8c:99:03:e3:f8:98:80:14:c2:42:36: ce:36:ea:0a:a0:21:1d:89:c2:4d:14:4a:08:4e:4f: 4c:1f:00:c4:58:f3:ac:14:ab:1d:a7:4c:46:c2:e9: 41:9a:68:70:43:01:f9:2c:3c:8b:13:f3:c7:3e:98: 28:da:e9:74:9e:59:8c:af:fc:3e:51:a1:59:0d:cf: 33:84:8f:59:59:47:4a:1e:fe:d7:fb:da:7b:ec:76: a5:5d:c0:b5:b8:20:54:c4:8f:50:6e:15:82:2b:62: c8:95:b5:2f:f0:85:1b:9d:a7:ec:8e:e1:4e:6e:4b: 97:9a:f7:c8:4c:5c:fc:d4:34:38:64:8d:9d:59:89: 42:83:29:53:7e:c7:06:ab:46:ff:24:ac:12:6d:dc: ac:90:d3:ca:7c:23:c6:64:70:cb:df:9d:2c:aa:f2: 74:c5:f6:4a:5e:9d:35:8c:48:68:18:ab:fb:a4:18: ad:99:b0:4e:6b:6c:05:fd:79:da:6f:2e:7f:8b:66: 25:6f:43:f3:4d:73:4e:b8:53:8c:ba:88:40:1a:1e: 44:18:42:00:f3:29:11:89:3c:60:d7:03:26:ac:24: 65:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:9A:87:5B:DA:B5:E0:DD:D6:72:5B:47:E3:72:C9:09:52:27:9A:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/c95d2b0f-c456-373f-981b-14f4a65414b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/cd00198f-a530-490c-8ef5-5c31ac9b88ee.crl X509v3 Authority Key Identifier: keyid:EE:B2:E7:54:17:4E:31:C9:7A:0D:15:E5:72:45:5D:67:1D:F3:92:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee.cer sbgp-ipAddrBlock: critical IPv4: 216.230.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:a3:a3:d3:41:1b:a8:ec:68:c2:d6:a9:69:68:f9:15:34:ff: 85:8b:1a:ce:47:6f:56:32:cb:1e:e6:76:86:03:5d:10:73:ed: 59:d8:f2:83:68:38:25:3a:8f:87:8a:2c:bc:67:b2:0d:9f:3f: 04:b8:92:79:8b:59:a5:9c:8b:7d:84:f6:69:19:82:21:44:e1: be:bd:57:bb:0d:80:2a:67:2a:3c:0b:d3:71:9f:2b:23:1b:4c: 62:62:bd:ff:54:2e:1a:af:d1:a0:a2:9b:a9:b5:af:0a:14:90: 21:1f:d5:41:9f:6f:6d:d5:70:b2:e7:d4:20:19:39:0d:00:5c: b8:19:90:34:98:9b:b1:1f:9d:c0:58:0a:2a:5f:75:a8:10:5f: 1b:5a:2f:e5:6c:73:e6:06:fb:99:b4:89:cc:f0:ac:d0:a6:d0: f3:48:f3:ea:86:a2:bd:22:ca:c4:30:b5:19:df:c7:13:d9:2b: 22:12:90:92:d2:20:68:a6:5f:49:6f:5d:f4:56:bd:59:81:d1: 26:1d:5b:26:d8:bf:6e:b6:7e:ec:26:2d:cd:61:7c:49:9f:33: b7:72:9c:cc:bf:4b:13:25:b5:6c:b0:d0:49:96:1d:8c:4c:a7: 76:56:27:0b:35:4f:81:ef:cc:2e:af:dd:8c:ad:57:29:2e:46: 9e:0e:ad:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMZPmX3ckctoGIC6wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QwMDE5OGYtYTUzMC00OTBjLThlZjUtNWMzMWFjOWI4 OGVlMB4XDTI1MDYyNDE0MjUzOVoXDTI1MDkyMjE0MjUzOVowLzEtMCsGA1UEAxMk N2FhNDk0YmQtYTQyNS00MjEzLWE2MTEtZTJmOWU5MTY3NmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtF47grtJpDXphq7sq+vbcdniealL7ocXeFe eE+S8v4HjJkD4/iYgBTCQjbONuoKoCEdicJNFEoITk9MHwDEWPOsFKsdp0xGwulB mmhwQwH5LDyLE/PHPpgo2ul0nlmMr/w+UaFZDc8zhI9ZWUdKHv7X+9p77HalXcC1 uCBUxI9QbhWCK2LIlbUv8IUbnafsjuFObkuXmvfITFz81DQ4ZI2dWYlCgylTfscG q0b/JKwSbdyskNPKfCPGZHDL350sqvJ0xfZKXp01jEhoGKv7pBitmbBOa2wF/Xna by5/i2Ylb0PzTXNOuFOMuohAGh5EGEIA8ykRiTxg1wMmrCRl7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDqah1vateDd1nJbR+NyyQlSJ5ozMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZDAw MTk4Zi1hNTMwLTQ5MGMtOGVmNS01YzMxYWM5Yjg4ZWUvYzk1ZDJiMGYtYzQ1Ni0z NzNmLTk4MWItMTRmNGE2NTQxNGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2QwMDE5OGYtYTUzMC00OTBjLThl ZjUtNWMzMWFjOWI4OGVlL2NkMDAxOThmLWE1MzAtNDkwYy04ZWY1LTVjMzFhYzli ODhlZS5jcmwwHwYDVR0jBBgwFoAU7rLnVBdOMcl6DRXlckVdZx3zkr8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jZDAwMTk4Zi1hNTMwLTQ5MGMtOGVmNS01YzMx YWM5Yjg4ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2OYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSjo9NBG6jsaMLWqWlo+RU0/4WLGs5Hb1Yyyx7mdoYDXRBz7VnY8oNo OCU6j4eKLLxnsg2fPwS4knmLWaWci32E9mkZgiFE4b69V7sNgCpnKjwL03GfKyMb TGJivf9ULhqv0aCim6m1rwoUkCEf1UGfb23VcLLn1CAZOQ0AXLgZkDSYm7EfncBY CipfdagQXxtaL+Vsc+YG+5m0iczwrNCm0PNI8+qGor0iysQwtRnfxxPZKyISkJLS IGimX0lvXfRWvVmB0SYdWybYv262fuwmLc1hfEmfM7dynMy/SxMltWyw0EmWHYxM p3ZWJws1T4HvzC6v3YytVykuRp4OrQA= -----END CERTIFICATE-----Generated at Mon Jun 30 07:15:36 2025 by rpki-client