$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/2c99c21e-0bd7-31ad-90df-40b918e4402f.roa File: 2c99c21e-0bd7-31ad-90df-40b918e4402f.roa (raw, json) Hash identifier: /Xn1eUB6Yf8PBpuK+JioMoFY9KHAk5/TKSwwqhZUOPE= Subject key identifier: BB:74:B9:9E:19:22:64:21:C7:9B:12:52:A7:07:95:5C:F1:BD:11:D6 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F43285849B14E79F0F9E1FD423FB51380 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/2c99c21e-0bd7-31ad-90df-40b918e4402f.roa Signing time: Wed 30 Apr 2025 01:10:01 +0000 ROA not before: Wed 30 Apr 2025 01:10:01 +0000 ROA not after: Tue 29 Jul 2025 01:10:01 +0000 asID: 137899 IP address blocks: 198.44.184.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4e:79:f0:f9:e1:fd:42:3f:b5:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Apr 30 01:10:01 2025 GMT Not After : Jul 29 01:10:01 2025 GMT Subject: CN=b33dfbba-d66e-4820-8eed-74940e203ca0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:86:7c:b9:e4:c8:ec:fe:31:ce:a5:70:7b:1d: 74:54:41:62:b9:cf:1c:59:b9:65:ee:1e:a6:0d:2a: c4:9d:d3:41:0f:2a:59:d0:7a:82:75:d4:3e:08:e3: 2f:2e:ec:2f:db:6b:c9:78:38:78:4e:be:64:b0:ec: 69:9c:a0:29:46:57:f1:20:55:bf:5e:41:35:3e:35: 4e:d3:67:a3:b2:59:00:70:31:fe:80:cd:a2:ac:3b: 8a:e4:c8:b4:28:67:d3:0a:92:ea:f0:de:12:46:6c: ee:3e:89:5b:af:59:14:dc:fb:5d:1a:97:fe:d5:25: a3:26:60:e7:5c:7f:83:f1:28:03:46:59:3e:41:2d: d9:de:99:20:ae:c7:dd:85:3a:99:a5:c0:c9:b8:8a: 11:d7:15:d2:cd:98:e6:2b:1d:78:f2:9a:6c:b1:a6: ea:93:00:8c:0a:24:4f:5a:73:41:8b:e8:ad:a9:19: a4:6e:cd:ca:03:74:a0:a1:b8:5d:fe:40:b3:bb:4d: 9c:72:90:78:f3:6e:8a:73:85:dd:85:b3:d5:e6:58: 8f:7c:f1:8f:6a:5a:34:a3:d5:0c:4e:80:44:9b:fa: 64:b4:0e:b6:b0:25:8c:63:6d:57:76:2c:46:c8:5a: e3:df:23:c2:7b:0d:f9:39:55:cd:57:dd:58:d9:81: 2e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:74:B9:9E:19:22:64:21:C7:9B:12:52:A7:07:95:5C:F1:BD:11:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/2c99c21e-0bd7-31ad-90df-40b918e4402f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 198.44.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:b3:f9:6d:93:50:5c:78:59:08:36:92:06:97:ab:22:2b:43: 3d:97:9c:dc:fd:b8:d7:5b:2c:85:3d:f8:b3:93:cd:30:24:61: 86:f5:f8:d9:39:f2:22:14:a6:da:0d:b5:e2:4d:4a:d3:01:09: ac:62:a8:f5:5f:94:c6:89:f7:e0:1b:47:df:ac:bb:5b:09:42: b8:7e:06:b7:07:a5:a0:92:f8:26:d8:c1:86:6a:7b:36:22:3e: 97:f0:c2:8b:2f:6a:63:ac:c7:6b:d1:78:7b:c6:c1:a2:1a:e9: d4:49:44:eb:f6:cd:5f:fb:2a:da:6a:0b:78:d2:e3:52:c3:c1: c2:4e:50:f3:0e:c0:eb:dd:1d:97:f4:1f:81:ef:34:15:9f:3f: ee:2d:81:2c:bb:4a:e6:25:da:55:8a:49:12:67:01:58:93:81: 9c:f7:a9:2a:7c:f9:3a:99:78:c8:e3:80:91:84:3f:71:6f:74: b8:61:fb:3d:1f:40:73:11:51:6e:4d:0d:6b:5c:34:20:39:d8: c7:dc:77:6c:87:6a:d4:de:06:05:47:a0:cc:43:0a:6b:04:77: d4:7e:f3:63:67:39:cc:95:e1:6e:d4:1e:a1:ad:12:99:db:54: 65:d0:09:a4:88:a0:75:9e:b3:cd:9c:20:23:c7:a9:ab:ba:96: ae:a9:5f:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxTnnw+eH9Qj+1E4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI1MDQzMDAxMTAwMVoXDTI1MDcyOTAxMTAwMVowLzEtMCsGA1UEAxMk YjMzZGZiYmEtZDY2ZS00ODIwLThlZWQtNzQ5NDBlMjAzY2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoZ8ueTI7P4xzqVwex10VEFiuc8cWbll7h6m DSrEndNBDypZ0HqCddQ+COMvLuwv22vJeDh4Tr5ksOxpnKApRlfxIFW/XkE1PjVO 02ejslkAcDH+gM2irDuK5Mi0KGfTCpLq8N4SRmzuPolbr1kU3PtdGpf+1SWjJmDn XH+D8SgDRlk+QS3Z3pkgrsfdhTqZpcDJuIoR1xXSzZjmKx148ppssabqkwCMCiRP WnNBi+itqRmkbs3KA3Sgobhd/kCzu02ccpB4826Kc4XdhbPV5liPfPGPalo0o9UM ToBEm/pktA62sCWMY21XdixGyFrj3yPCew35OVXNV91Y2YEuvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLt0uZ4ZImQhx5sSUqcHlVzxvRHWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvMmM5OWMyMWUtMGJkNy0z MWFkLTkwZGYtNDBiOTE4ZTQ0MDJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxiy4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ+z+W2TUFx4WQg2kgaXqyIrQz2XnNz9uNdbLIU9+LOTzTAkYYb1+Nk5 8iIUptoNteJNStMBCaxiqPVflMaJ9+AbR9+su1sJQrh+BrcHpaCS+CbYwYZqezYi PpfwwosvamOsx2vReHvGwaIa6dRJROv2zV/7KtpqC3jS41LDwcJOUPMOwOvdHZf0 H4HvNBWfP+4tgSy7SuYl2lWKSRJnAViTgZz3qSp8+TqZeMjjgJGEP3FvdLhh+z0f QHMRUW5NDWtcNCA52Mfcd2yHatTeBgVHoMxDCmsEd9R+82NnOcyV4W7UHqGtEpnb VGXQCaSIoHWes82cICPHqau6lq6pXwE= -----END CERTIFICATE-----Generated at Mon May 12 05:23:57 2025 by rpki-client