$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/5b047369-1853-3c0b-830c-d67137c9c298.roa File: 5b047369-1853-3c0b-830c-d67137c9c298.roa (raw, json) Hash identifier: nE09L/CzUANnWlWYTU+RfkdtfDYs8DJAW806iOXY6vc= Subject key identifier: D2:87:38:FE:47:BC:AE:29:A8:C3:30:AB:90:DF:69:BF:E0:A0:0A:C9 Certificate issuer: /CN=aa899632-aef6-4a3b-b807-edc1ca4303b6 Certificate serial: 010D0C9F4328584A3FAAD5E04BF21AEE47B2A080 Authority key identifier: A3:C0:2A:63:A2:78:54:B6:D0:E4:50:4D:89:68:EE:BA:7B:0D:57:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/5b047369-1853-3c0b-830c-d67137c9c298.roa Signing time: Fri 20 Jun 2025 01:00:51 +0000 ROA not before: Fri 20 Jun 2025 01:00:51 +0000 ROA not after: Thu 18 Sep 2025 01:00:51 +0000 asID: 59 IP address blocks: 198.51.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3f:aa:d5:e0:4b:f2:1a:ee:47:b2:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa899632-aef6-4a3b-b807-edc1ca4303b6 Validity Not Before: Jun 20 01:00:51 2025 GMT Not After : Sep 18 01:00:51 2025 GMT Subject: CN=6c7c971a-c613-4e7c-ac38-7e6617998dab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:04:26:72:91:04:fe:fd:bd:c0:88:36:6c:a4: 85:bd:13:f3:30:d2:3b:b5:4f:49:fb:fc:4d:c7:2f: fb:ff:8f:5c:f0:41:5b:08:94:36:af:26:43:c6:ea: ba:37:02:35:d2:dc:dd:55:77:ab:d2:4a:66:25:60: 53:a4:16:81:ed:e6:c2:90:5b:33:23:5a:4f:9e:f8: c7:02:71:68:61:a5:d5:d5:a8:ab:6b:42:71:bd:e5: 0f:f2:c1:e2:43:8e:af:bf:2e:09:f5:25:c2:09:3f: 31:c5:ff:ce:ac:c0:e6:2d:91:4f:74:b1:24:68:90: 3f:3b:7b:28:a8:d0:8f:8d:8e:e8:43:17:d6:d3:ee: 56:b7:50:d1:57:25:e1:77:92:33:76:fb:27:95:58: 80:f2:f3:bb:8b:51:2b:a7:76:e0:b8:0b:0a:2b:86: f6:6f:96:84:16:10:30:94:c3:b9:19:8f:a7:c3:c0: 4d:76:ef:0d:f7:3a:db:20:30:af:fc:74:74:05:3b: e7:f1:f5:d4:14:9d:73:ac:1d:8d:d8:ae:89:63:26: e5:1a:24:46:b5:d1:db:bd:e7:8d:76:bd:91:a7:83: 9a:29:6b:05:38:5e:38:c9:b7:c6:69:86:72:84:c0: 3c:dd:73:20:29:84:68:7f:56:cc:07:f5:ae:46:5c: e0:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:87:38:FE:47:BC:AE:29:A8:C3:30:AB:90:DF:69:BF:E0:A0:0A:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/5b047369-1853-3c0b-830c-d67137c9c298.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.crl X509v3 Authority Key Identifier: keyid:A3:C0:2A:63:A2:78:54:B6:D0:E4:50:4D:89:68:EE:BA:7B:0D:57:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer sbgp-ipAddrBlock: critical IPv4: 198.51.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:f7:5a:1d:22:d3:3b:d2:63:92:1b:50:48:95:fe:7c:c9:25: df:8c:71:4f:3a:83:b4:12:fa:13:e6:39:da:3d:ea:49:27:0f: a1:dc:4c:22:ab:7c:3a:01:04:9e:7e:ae:13:c3:21:72:92:3f: af:ff:18:28:eb:db:e1:c3:72:90:81:fc:2d:16:f9:18:ea:a9: f3:ac:3a:1c:81:27:58:fa:ee:9b:ae:29:08:0d:cb:30:ef:b4: 9e:5e:98:1e:fc:00:e9:57:6a:0b:30:24:61:13:d6:63:05:56: 0a:d8:9e:0b:ef:ce:da:c6:11:9f:24:6a:57:b7:84:3a:c6:d6: 13:89:bf:f8:e8:6b:44:ae:ff:e6:95:dc:ee:23:8a:be:91:d9: f2:ef:ad:d4:b0:29:f6:46:05:9f:10:8c:ff:9a:a5:82:e4:49: 36:a2:69:1d:29:7a:b4:06:19:7e:59:18:7b:63:b8:03:89:7f: 6b:7c:dd:98:61:4f:5f:3f:a0:97:35:c5:7e:54:f0:a8:11:a3: ba:a8:41:19:ac:ab:31:3f:0d:88:50:f6:07:65:55:fd:40:67: fe:6c:1b:d3:9a:b7:c1:0e:3e:f5:63:45:61:f4:a9:16:79:cf: eb:4e:a2:3d:46:f5:5f:4b:18:d6:66:7d:62:31:39:e4:a6:f9: 68:e2:78:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo/qtXgS/Ia7keyoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE4OTk2MzItYWVmNi00YTNiLWI4MDctZWRjMWNhNDMw M2I2MB4XDTI1MDYyMDAxMDA1MVoXDTI1MDkxODAxMDA1MVowLzEtMCsGA1UEAxMk NmM3Yzk3MWEtYzYxMy00ZTdjLWFjMzgtN2U2NjE3OTk4ZGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAQmcpEE/v29wIg2bKSFvRPzMNI7tU9J+/xN xy/7/49c8EFbCJQ2ryZDxuq6NwI10tzdVXer0kpmJWBTpBaB7ebCkFszI1pPnvjH AnFoYaXV1aira0JxveUP8sHiQ46vvy4J9SXCCT8xxf/OrMDmLZFPdLEkaJA/O3so qNCPjY7oQxfW0+5Wt1DRVyXhd5IzdvsnlViA8vO7i1Erp3bguAsKK4b2b5aEFhAw lMO5GY+nw8BNdu8N9zrbIDCv/HR0BTvn8fXUFJ1zrB2N2K6JYyblGiRGtdHbveeN dr2Rp4OaKWsFOF44ybfGaYZyhMA83XMgKYRof1bMB/WuRlzgJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNKHOP5HvK4pqMMwq5Dfab/goArJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hYTg5 OTYzMi1hZWY2LTRhM2ItYjgwNy1lZGMxY2E0MzAzYjYvNWIwNDczNjktMTg1My0z YzBiLTgzMGMtZDY3MTM3YzljMjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWE4OTk2MzItYWVmNi00YTNiLWI4 MDctZWRjMWNhNDMwM2I2L2FhODk5NjMyLWFlZjYtNGEzYi1iODA3LWVkYzFjYTQz MDNiNi5jcmwwHwYDVR0jBBgwFoAUo8AqY6J4VLbQ5FBNiWjuunsNV40wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hYTg5OTYzMi1hZWY2LTRhM2ItYjgwNy1lZGMx Y2E0MzAzYjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxjP+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACL3Wh0i0zvSY5IbUEiV/nzJJd+McU86g7QS+hPmOdo96kknD6HcTCKr fDoBBJ5+rhPDIXKSP6//GCjr2+HDcpCB/C0W+RjqqfOsOhyBJ1j67puuKQgNyzDv tJ5emB78AOlXagswJGET1mMFVgrYngvvztrGEZ8kale3hDrG1hOJv/joa0Su/+aV 3O4jir6R2fLvrdSwKfZGBZ8QjP+apYLkSTaiaR0perQGGX5ZGHtjuAOJf2t83Zhh T18/oJc1xX5U8KgRo7qoQRmsqzE/DYhQ9gdlVf1AZ/5sG9Oat8EOPvVjRWH0qRZ5 z+tOoj1G9V9LGNZmfWIxOeSm+WjieM0= -----END CERTIFICATE-----Generated at Tue Jul 1 18:32:57 2025 by rpki-client