$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/be400544-19f0-3ed1-bf3c-e5f9ab3730af.roa File: be400544-19f0-3ed1-bf3c-e5f9ab3730af.roa (raw, json) Hash identifier: sHd4iOoxfyregfLI4g3rQ3gLBKFb54fsCbxdj2Ze2ws= Subject key identifier: 8F:C7:6E:77:BA:F8:CD:C2:91:D6:7C:A8:1B:21:6E:B7:8A:80:95:D6 Certificate issuer: /CN=bc3951ec-0f8a-49d2-bec7-41a9657e87f5 Certificate serial: 010D0C9F4328584A4F05CC9FFFF5BF62DC834C20 Authority key identifier: 00:96:DD:99:13:E4:C1:00:CA:66:7C:56:A6:9F:2F:41:B9:D4:5C:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/be400544-19f0-3ed1-bf3c-e5f9ab3730af.roa Signing time: Wed 25 Jun 2025 13:01:04 +0000 ROA not before: Wed 25 Jun 2025 13:01:04 +0000 ROA not after: Tue 23 Sep 2025 13:01:04 +0000 asID: 14041 IP address blocks: 198.59.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4f:05:cc:9f:ff:f5:bf:62:dc:83:4c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc3951ec-0f8a-49d2-bec7-41a9657e87f5 Validity Not Before: Jun 25 13:01:04 2025 GMT Not After : Sep 23 13:01:04 2025 GMT Subject: CN=b436bc80-04a5-4d40-8e77-9eabb1762cf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:1d:34:72:f2:7f:b2:3b:7f:71:0b:fe:8a:44: bb:7b:eb:1b:7d:8c:dd:21:e2:d3:95:87:f8:c3:a2: f4:e1:f0:4e:0b:8a:ff:be:dd:68:12:36:f5:8f:f5: cc:46:2e:ad:6d:96:f1:1c:f5:49:9f:7b:25:06:c6: 2b:14:a1:22:dc:13:7e:bf:a9:01:f2:c0:49:6e:7a: 7a:c0:f3:4c:0f:66:4a:70:0f:0b:cb:f3:dd:62:4a: 48:5f:0c:27:c5:75:6f:c8:d8:bd:29:f8:04:0c:e7: d6:2e:bb:2a:50:9f:fd:68:24:3b:8c:94:3f:fd:0b: 2b:b9:08:be:71:fa:3f:b4:f1:0d:6d:a1:b7:5b:ee: 1f:5b:c0:21:89:13:cf:13:39:94:93:ed:75:74:46: 7e:53:47:fa:1c:76:46:db:b9:6e:49:e7:63:2b:17: c9:20:70:6b:38:c8:4e:9c:2d:cd:0e:5b:e2:78:0b: 76:76:e3:6c:89:0b:4d:30:6e:88:78:c6:36:dc:3d: b3:62:b0:90:5b:15:7f:cf:c2:aa:47:49:c3:44:2f: fa:5c:a5:48:a6:e2:b1:97:bc:15:f2:d8:78:d1:82: 38:6b:42:d5:2c:ea:13:c3:de:77:3f:bc:79:72:36: 1e:01:eb:3c:52:2c:aa:6b:50:2d:f1:2e:a1:a8:2c: a2:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:C7:6E:77:BA:F8:CD:C2:91:D6:7C:A8:1B:21:6E:B7:8A:80:95:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/be400544-19f0-3ed1-bf3c-e5f9ab3730af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.crl X509v3 Authority Key Identifier: keyid:00:96:DD:99:13:E4:C1:00:CA:66:7C:56:A6:9F:2F:41:B9:D4:5C:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.cer sbgp-ipAddrBlock: critical IPv4: 198.59.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:27:85:f1:a4:f8:8e:9b:2b:2f:9e:d0:25:c2:a2:55:a5:78: cc:33:92:d1:6c:4b:53:f0:a7:c9:16:fc:c9:c2:8e:7d:3e:a9: b1:74:8b:a6:3a:57:ff:2e:a0:1e:28:27:e7:4a:98:58:92:42: 78:c7:dd:48:a5:67:7d:26:06:a2:d5:5f:1a:04:12:4c:24:93: 5b:10:04:da:d6:7d:79:1c:09:6b:88:42:1e:4e:52:fc:d4:a7: 53:12:de:1d:73:b8:ab:44:bd:8d:98:21:bc:58:c8:14:49:39: d9:c7:06:e1:39:30:0e:99:d0:62:fd:20:fe:6f:26:2c:16:37: 3e:30:64:55:8a:5e:7c:26:7f:9f:a9:97:5e:d7:1c:1c:bf:20: 53:de:0a:c8:3c:ab:93:3d:3e:77:5a:b5:5c:70:42:74:6e:0e: 47:0c:ff:e7:88:55:04:af:39:35:85:e9:13:df:6d:9c:08:41: 87:bf:fb:7f:2f:99:6e:c5:48:94:a4:4d:76:08:e6:e7:91:b1: 05:ce:de:1e:5b:49:aa:cd:1a:62:8d:ae:71:d8:b2:30:b9:24: 55:7d:a0:48:53:b8:0e:ef:64:e4:b8:8b:e2:cf:34:4e:70:b1: 07:45:64:21:c8:fa:a2:37:b0:14:8f:95:70:ef:a1:95:6f:27: 00:aa:2d:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpPBcyf//W/YtyDTCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMzOTUxZWMtMGY4YS00OWQyLWJlYzctNDFhOTY1N2U4 N2Y1MB4XDTI1MDYyNTEzMDEwNFoXDTI1MDkyMzEzMDEwNFowLzEtMCsGA1UEAxMk YjQzNmJjODAtMDRhNS00ZDQwLThlNzctOWVhYmIxNzYyY2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3B00cvJ/sjt/cQv+ikS7e+sbfYzdIeLTlYf4 w6L04fBOC4r/vt1oEjb1j/XMRi6tbZbxHPVJn3slBsYrFKEi3BN+v6kB8sBJbnp6 wPNMD2ZKcA8Ly/PdYkpIXwwnxXVvyNi9KfgEDOfWLrsqUJ/9aCQ7jJQ//QsruQi+ cfo/tPENbaG3W+4fW8AhiRPPEzmUk+11dEZ+U0f6HHZG27luSedjKxfJIHBrOMhO nC3NDlvieAt2duNsiQtNMG6IeMY23D2zYrCQWxV/z8KqR0nDRC/6XKVIpuKxl7wV 8th40YI4a0LVLOoTw953P7x5cjYeAes8Uiyqa1At8S6hqCyiyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI/Hbne6+M3CkdZ8qBshbreKgJXWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iYzM5 NTFlYy0wZjhhLTQ5ZDItYmVjNy00MWE5NjU3ZTg3ZjUvYmU0MDA1NDQtMTlmMC0z ZWQxLWJmM2MtZTVmOWFiMzczMGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYmMzOTUxZWMtMGY4YS00OWQyLWJl YzctNDFhOTY1N2U4N2Y1L2JjMzk1MWVjLTBmOGEtNDlkMi1iZWM3LTQxYTk2NTdl ODdmNS5jcmwwHwYDVR0jBBgwFoAUAJbdmRPkwQDKZnxWpp8vQbnUXDEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iYzM5NTFlYy0wZjhhLTQ5ZDItYmVjNy00MWE5 NjU3ZTg3ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGxjvAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHonhfGk+I6bKy+e0CXColWleMwzktFsS1Pwp8kW/MnCjn0+qbF0i6Y6 V/8uoB4oJ+dKmFiSQnjH3UilZ30mBqLVXxoEEkwkk1sQBNrWfXkcCWuIQh5OUvzU p1MS3h1zuKtEvY2YIbxYyBRJOdnHBuE5MA6Z0GL9IP5vJiwWNz4wZFWKXnwmf5+p l17XHBy/IFPeCsg8q5M9PndatVxwQnRuDkcM/+eIVQSvOTWF6RPfbZwIQYe/+38v mW7FSJSkTXYI5ueRsQXO3h5bSarNGmKNrnHYsjC5JFV9oEhTuA7vZOS4i+LPNE5w sQdFZCHI+qI3sBSPlXDvoZVvJwCqLQU= -----END CERTIFICATE-----Generated at Mon Jun 30 01:06:36 2025 by rpki-client