$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/04c6241e-3a7e-3f9b-a51d-e9c20438ca03.roa File: 04c6241e-3a7e-3f9b-a51d-e9c20438ca03.roa (raw, json) Hash identifier: Tk4eYEThfZvBuJFPFDzCIrSBE0+dyDccqN42XQAr0Hc= Subject key identifier: AC:98:D2:CD:C8:7C:C3:99:52:0D:70:35:19:E4:77:0B:85:BE:15:1A Certificate issuer: /CN=f78a234f-9553-446a-965d-0bfffa402f1b Certificate serial: 010D0C9F43285849F2E54A23374CA319137D6A00 Authority key identifier: C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/04c6241e-3a7e-3f9b-a51d-e9c20438ca03.roa Signing time: Fri 23 May 2025 13:01:03 +0000 ROA not before: Fri 23 May 2025 13:01:03 +0000 ROA not after: Thu 21 Aug 2025 13:01:03 +0000 asID: 22925 IP address blocks: 198.207.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:e5:4a:23:37:4c:a3:19:13:7d:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f78a234f-9553-446a-965d-0bfffa402f1b Validity Not Before: May 23 13:01:03 2025 GMT Not After : Aug 21 13:01:03 2025 GMT Subject: CN=3e4a4951-79f9-4a6b-b7fe-eba1c8d2b310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:cb:ab:7a:e3:bf:8b:88:0e:a9:67:2c:85:cc: a4:1d:0a:4f:dd:6c:2c:88:db:89:59:5a:6c:4c:b7: 87:67:e3:db:ef:d8:03:58:a8:41:87:f4:5b:03:d2: 51:dd:91:4e:08:95:60:98:0b:de:59:40:26:53:a6: 71:41:5f:70:a8:5d:cc:08:e8:2a:9d:02:ef:cd:1d: 0c:db:09:5f:79:c1:fe:74:35:e2:e6:5d:6b:72:88: 59:41:18:92:f3:c2:57:27:91:7d:a8:72:fa:d0:46: 24:4f:15:35:b0:69:c4:87:dd:95:84:c5:6f:ca:17: e5:75:50:4a:93:f6:03:0b:6b:c9:75:da:38:ef:44: 7f:8f:09:ec:0d:8b:7d:16:41:cc:6d:c3:41:3c:b9: 96:b3:79:1f:dc:aa:bf:f4:f9:33:28:f5:26:c9:be: c4:6b:ce:38:0c:c4:09:e8:48:cd:ce:0f:3f:fa:e1: d3:69:e3:08:0c:05:6f:df:1b:3b:8e:12:5c:75:e9: 75:6b:5b:97:0d:6b:71:8d:02:bf:ae:fe:8f:82:79: ad:66:ee:8f:e7:8c:ba:0f:7c:f8:dc:c5:d7:4a:80: 81:1c:78:7a:05:67:da:a2:f5:7c:96:3f:83:ee:2b: a9:63:3f:30:df:88:de:7e:71:fc:a8:e7:c8:11:eb: 08:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:98:D2:CD:C8:7C:C3:99:52:0D:70:35:19:E4:77:0B:85:BE:15:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/04c6241e-3a7e-3f9b-a51d-e9c20438ca03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl X509v3 Authority Key Identifier: keyid:C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer sbgp-ipAddrBlock: critical IPv4: 198.207.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:2a:58:15:8b:ab:96:79:1f:88:d8:34:ba:1e:07:3e:49:67: f3:f7:07:5e:e7:82:5f:5c:54:71:64:eb:35:ea:d7:3b:38:b3: e0:4b:f8:45:c4:14:db:5e:5f:66:c0:53:6c:92:bf:23:38:79: d3:ff:49:15:b1:2f:e7:1b:01:69:52:b0:11:02:dd:a0:b4:f0: ac:ca:3f:c0:cf:c5:39:42:ad:6b:c8:ca:15:87:48:93:1f:ad: 50:e0:e7:a9:8d:c4:92:43:6e:a5:84:c5:2d:a2:51:21:a1:ec: 03:09:f6:a1:56:71:6f:e9:da:bd:94:c3:af:fb:62:03:f5:32: 22:1c:6f:e6:9a:75:2f:3e:c1:99:98:cd:69:19:ec:14:e6:81: e7:28:84:e0:e7:91:2e:39:71:00:52:04:0b:4f:a6:ee:53:62: 2e:63:a7:39:4f:f2:95:44:40:5d:84:26:e9:6e:59:3a:ba:df: 01:d6:4d:98:8d:a0:ef:24:0f:2d:19:32:1a:4e:55:de:32:a6: 37:b0:2c:5d:2f:66:89:b1:12:17:3d:50:9a:8f:c8:1d:bc:f1: 43:a4:25:44:00:ff:0d:87:c5:33:ef:f6:51:3d:77:e6:8e:e0: e0:28:52:c4:d5:d4:b2:bd:b8:1a:de:99:81:37:77:c7:8e:2a: a3:a8:0e:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEny5UojN0yjGRN9agAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjc4YTIzNGYtOTU1My00NDZhLTk2NWQtMGJmZmZhNDAy ZjFiMB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk M2U0YTQ5NTEtNzlmOS00YTZiLWI3ZmUtZWJhMWM4ZDJiMzEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsureuO/i4gOqWcshcykHQpP3WwsiNuJWVps TLeHZ+Pb79gDWKhBh/RbA9JR3ZFOCJVgmAveWUAmU6ZxQV9wqF3MCOgqnQLvzR0M 2wlfecH+dDXi5l1rcohZQRiS88JXJ5F9qHL60EYkTxU1sGnEh92VhMVvyhfldVBK k/YDC2vJddo470R/jwnsDYt9FkHMbcNBPLmWs3kf3Kq/9PkzKPUmyb7Ea844DMQJ 6EjNzg8/+uHTaeMIDAVv3xs7jhJcdel1a1uXDWtxjQK/rv6PgnmtZu6P54y6D3z4 3MXXSoCBHHh6BWfaovV8lj+D7iupYz8w34jefnH8qOfIEesIDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKyY0s3IfMOZUg1wNRnkdwuFvhUaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNzhh MjM0Zi05NTUzLTQ0NmEtOTY1ZC0wYmZmZmE0MDJmMWIvMDRjNjI0MWUtM2E3ZS0z ZjliLWE1MWQtZTljMjA0MzhjYTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjc4YTIzNGYtOTU1My00NDZhLTk2 NWQtMGJmZmZhNDAyZjFiL2Y3OGEyMzRmLTk1NTMtNDQ2YS05NjVkLTBiZmZmYTQw MmYxYi5jcmwwHwYDVR0jBBgwFoAUySL1rL077bzOZt54JOhaPckKjtYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNzhhMjM0Zi05NTUzLTQ0NmEtOTY1ZC0wYmZm ZmE0MDJmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxs8YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJgqWBWLq5Z5H4jYNLoeBz5JZ/P3B17ngl9cVHFk6zXq1zs4s+BL+EXE FNteX2bAU2ySvyM4edP/SRWxL+cbAWlSsBEC3aC08KzKP8DPxTlCrWvIyhWHSJMf rVDg56mNxJJDbqWExS2iUSGh7AMJ9qFWcW/p2r2Uw6/7YgP1MiIcb+aadS8+wZmY zWkZ7BTmgecohODnkS45cQBSBAtPpu5TYi5jpzlP8pVEQF2EJuluWTq63wHWTZiN oO8kDy0ZMhpOVd4ypjewLF0vZomxEhc9UJqPyB288UOkJUQA/w2HxTPv9lE9d+aO 4OAoUsTV1LK9uBremYE3d8eOKqOoDqk= -----END CERTIFICATE-----Generated at Mon Jun 30 18:54:11 2025 by rpki-client