$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/af1dd4fa-f37f-376d-8986-0397e48786a0.roa File: af1dd4fa-f37f-376d-8986-0397e48786a0.roa (raw, json) Hash identifier: Gddcs/9I0UAWcBhrWsmVGhNo/Z1te/kpVZDrf1oSy2w= Subject key identifier: 89:F9:57:C4:BB:FB:D1:57:B0:4C:02:65:F2:CC:81:00:49:E4:7E:B3 Certificate issuer: /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Certificate serial: 010D0C9F43285849E7BA8455AB0C7AA25861A180 Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/af1dd4fa-f37f-376d-8986-0397e48786a0.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 7265 IP address blocks: 207.98.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:84:55:ab:0c:7a:a2:58:61:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=fd399952-40ab-4644-b453-25201c124540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:cc:73:ba:0f:a1:a1:3e:2e:45:3f:17:95:4c: 3e:59:c0:f0:af:0b:d8:ab:c5:6c:ff:5e:c5:9b:96: f8:e3:c3:d9:aa:04:46:39:d2:54:2b:23:07:74:69: 54:58:77:d4:07:6a:d1:ea:17:c8:88:ec:57:dc:09: 0f:ec:85:61:fe:70:d6:3f:dd:da:b7:4d:e0:d8:3f: 1e:5c:4e:60:4f:f6:f1:85:b4:cb:67:62:dd:e9:bb: cc:0a:15:4f:de:64:22:b2:b2:a5:26:ed:3a:b8:4b: b8:e7:6d:50:ed:9a:7d:bd:a9:9e:97:d0:17:a7:ad: a8:18:f7:b4:d7:d9:e2:77:03:96:be:06:9d:ee:ed: a7:e1:8f:f0:22:61:a8:02:1b:f0:3c:9e:4b:4b:80: 26:b0:f4:df:1b:db:75:b6:bd:1e:83:eb:d4:87:15: 92:1e:81:32:77:d9:77:3d:47:98:36:b8:7c:f1:7c: e8:5d:ca:d9:0e:9b:bf:f6:b3:b6:b1:6d:b0:99:be: 4c:f5:c6:96:69:fd:33:3a:0e:73:2f:99:43:84:75: 8a:aa:42:b1:0e:3c:43:4a:a6:8d:5e:35:76:d8:fe: 11:ed:81:16:1c:d2:be:56:0e:bc:15:cd:62:43:30: b2:a9:ee:ed:df:9e:9c:66:09:8c:af:cf:26:ef:4a: 56:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:F9:57:C4:BB:FB:D1:57:B0:4C:02:65:F2:CC:81:00:49:E4:7E:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/af1dd4fa-f37f-376d-8986-0397e48786a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl X509v3 Authority Key Identifier: keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer sbgp-ipAddrBlock: critical IPv4: 207.98.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:fb:85:ca:6b:db:e7:95:39:16:c6:e6:ff:72:4f:a8:cc:2b: ac:0b:36:71:5f:97:33:73:62:35:1e:57:ef:3c:d0:62:44:44: 89:3f:61:9d:fb:45:33:2d:c2:d6:1f:9f:53:38:3e:8e:8c:d1: 56:a1:5d:52:da:d8:dc:99:c5:30:aa:ae:74:68:c2:94:65:47: ee:45:3f:84:0a:2b:51:f1:f4:54:a2:d1:9e:6f:6a:95:50:f7: 77:61:95:92:6f:70:33:48:e4:a9:27:e9:b6:99:d2:d9:e4:cf: 24:78:e6:97:2e:fb:3e:d3:72:ec:60:7d:7d:23:25:68:e8:14: 25:a9:68:b4:fe:a0:23:86:03:41:ac:7a:30:b6:9e:2c:ea:f5: e0:73:5c:b3:c4:f6:54:c5:1e:81:41:a3:ab:7b:28:ef:8a:79: 48:7c:f9:a3:1e:de:9d:e7:e0:57:fb:80:8c:47:1c:ef:cf:14: b6:cb:72:9d:05:6c:8d:ba:77:16:6d:74:3b:37:0d:72:08:ff: 0c:0a:27:30:60:67:3e:38:32:ff:24:e7:52:80:f9:b1:42:cb: 95:bc:07:ae:f3:b5:f0:5f:19:7b:c6:b3:45:a3:22:11:22:78: 50:d8:ba:f9:1c:ac:a3:d1:35:c7:08:12:d6:93:7e:c9:e3:b1: 9f:9e:17:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnuoRVqwx6olhhoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc2ZTBkMTUtOTk3Ni00NDY2LWI2ZmYtMmQwNjdiN2Vm NWZlMB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk ZmQzOTk5NTItNDBhYi00NjQ0LWI0NTMtMjUyMDFjMTI0NTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcxzug+hoT4uRT8XlUw+WcDwrwvYq8Vs/17F m5b448PZqgRGOdJUKyMHdGlUWHfUB2rR6hfIiOxX3AkP7IVh/nDWP93at03g2D8e XE5gT/bxhbTLZ2Ld6bvMChVP3mQisrKlJu06uEu4521Q7Zp9vamel9AXp62oGPe0 19nidwOWvgad7u2n4Y/wImGoAhvwPJ5LS4AmsPTfG9t1tr0eg+vUhxWSHoEyd9l3 PUeYNrh88XzoXcrZDpu/9rO2sW2wmb5M9caWaf0zOg5zL5lDhHWKqkKxDjxDSqaN XjV22P4R7YEWHNK+Vg68Fc1iQzCyqe7t356cZgmMr88m70pWTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIn5V8S7+9FXsEwCZfLMgQBJ5H6zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZl MGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3ZWY1ZmUvYWYxZGQ0ZmEtZjM3Zi0z NzZkLTg5ODYtMDM5N2U0ODc4NmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjc2ZTBkMTUtOTk3Ni00NDY2LWI2 ZmYtMmQwNjdiN2VmNWZlL2I3NmUwZDE1LTk5NzYtNDQ2Ni1iNmZmLTJkMDY3Yjdl ZjVmZS5jcmwwHwYDVR0jBBgwFoAU3nguavrTBQBY7uiA9RbZaFHzkJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2 N2I3ZWY1ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz2KYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEr7hcpr2+eVORbG5v9yT6jMK6wLNnFflzNzYjUeV+880GJERIk/YZ37 RTMtwtYfn1M4Po6M0VahXVLa2NyZxTCqrnRowpRlR+5FP4QKK1Hx9FSi0Z5vapVQ 93dhlZJvcDNI5Kkn6baZ0tnkzyR45pcu+z7TcuxgfX0jJWjoFCWpaLT+oCOGA0Gs ejC2nizq9eBzXLPE9lTFHoFBo6t7KO+KeUh8+aMe3p3n4Ff7gIxHHO/PFLbLcp0F bI26dxZtdDs3DXII/wwKJzBgZz44Mv8k51KA+bFCy5W8B67ztfBfGXvGs0WjIhEi eFDYuvkcrKPRNccIEtaTfsnjsZ+eF64= -----END CERTIFICATE-----Generated at Mon Jun 30 00:58:51 2025 by rpki-client