$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ac9a4ddd-a4d3-42f8-a810-268e79a03184/bb6bcf47-6554-3d34-b9c5-9aab2d0a8500.roa File: bb6bcf47-6554-3d34-b9c5-9aab2d0a8500.roa (raw, json) Hash identifier: PcUJP5cPJyKbyza51RV5ZhtjuPuzssiYreO7BqFCfrQ= Subject key identifier: 78:62:C5:75:EC:BF:5F:DD:E6:91:A4:F2:14:07:9B:B9:75:F7:70:7D Certificate issuer: /CN=ac9a4ddd-a4d3-42f8-a810-268e79a03184 Certificate serial: 010D0C9F4328584A3CE02578D1AC27B2C3D93520 Authority key identifier: E5:08:02:F7:F3:99:DD:37:5A:81:CB:66:EA:25:F4:E0:59:FB:7A:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ac9a4ddd-a4d3-42f8-a810-268e79a03184.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ac9a4ddd-a4d3-42f8-a810-268e79a03184/bb6bcf47-6554-3d34-b9c5-9aab2d0a8500.roa Signing time: Thu 19 Jun 2025 01:00:50 +0000 ROA not before: Thu 19 Jun 2025 01:00:50 +0000 ROA not after: Wed 17 Sep 2025 01:00:50 +0000 asID: 54957 IP address blocks: 198.162.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ac9a4ddd-a4d3-42f8-a810-268e79a03184/ac9a4ddd-a4d3-42f8-a810-268e79a03184.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ac9a4ddd-a4d3-42f8-a810-268e79a03184/ac9a4ddd-a4d3-42f8-a810-268e79a03184.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ac9a4ddd-a4d3-42f8-a810-268e79a03184.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:e0:25:78:d1:ac:27:b2:c3:d9:35:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a4ddd-a4d3-42f8-a810-268e79a03184 Validity Not Before: Jun 19 01:00:50 2025 GMT Not After : Sep 17 01:00:50 2025 GMT Subject: CN=22023c64-55bb-45b0-b1b2-17a4d67e8fec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:4a:ba:68:72:5b:38:e6:f8:97:51:1b:90:51: d4:2e:79:c1:11:9e:bc:4a:4c:d8:b3:df:82:9e:ab: 4f:68:d8:4c:d3:53:12:2f:1b:31:4a:75:f2:47:11: 3a:76:79:e3:0b:be:44:24:8f:87:0d:3e:af:d9:7e: 47:08:71:38:9b:fb:82:03:56:28:35:24:83:ee:ff: 70:1d:44:6a:da:bb:ff:34:a5:dd:48:70:a2:8c:d0: 44:7a:0b:f3:b9:29:5b:ee:68:62:d3:51:c0:6c:31: 61:c9:e5:48:e5:b7:55:e1:d9:18:64:ca:21:18:c1: d5:11:90:c0:5e:2b:5a:7c:e2:e8:ff:6b:73:28:ea: af:ca:4c:59:49:06:b6:c0:3c:58:ea:ee:ee:09:b6: d6:56:1b:a9:a5:31:83:7e:c4:aa:41:6d:86:ba:3f: 9d:df:6f:8c:00:70:ed:2c:22:91:da:53:b9:57:93: b3:15:7d:dd:60:14:f7:99:66:31:e4:0b:c9:85:d9: c3:8d:85:06:19:67:96:22:88:78:0d:52:ee:8e:2f: 6d:62:62:0d:45:8c:1d:ea:bc:d9:8a:4f:c1:1c:aa: 63:b3:08:a6:ab:95:d8:18:41:33:27:c6:24:d9:10: 01:05:15:1c:fc:b2:24:aa:7e:d9:e6:cf:90:d1:c9: 33:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:62:C5:75:EC:BF:5F:DD:E6:91:A4:F2:14:07:9B:B9:75:F7:70:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ac9a4ddd-a4d3-42f8-a810-268e79a03184/bb6bcf47-6554-3d34-b9c5-9aab2d0a8500.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ac9a4ddd-a4d3-42f8-a810-268e79a03184/ac9a4ddd-a4d3-42f8-a810-268e79a03184.crl X509v3 Authority Key Identifier: keyid:E5:08:02:F7:F3:99:DD:37:5A:81:CB:66:EA:25:F4:E0:59:FB:7A:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ac9a4ddd-a4d3-42f8-a810-268e79a03184.cer sbgp-ipAddrBlock: critical IPv4: 198.162.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:67:94:3e:b8:d5:13:bf:c0:e3:a1:d8:89:df:a0:a9:ce:18: 3e:72:e0:78:45:f8:f0:5f:4c:14:84:45:fd:be:9c:27:69:ac: 9b:5c:d8:52:23:15:c6:66:fc:a7:e4:2e:93:0d:b7:57:4a:ad: 8d:ca:e5:ce:3d:bc:7f:8f:70:77:be:cb:3f:7e:11:24:ca:82: f1:49:46:f2:53:6d:45:1b:94:f5:79:47:4c:44:1c:8b:4b:ef: f6:36:c0:97:8a:07:2a:bf:9d:52:df:6e:e7:4e:73:ca:3c:9e: 25:d9:4e:52:b5:26:f5:19:47:bb:61:3f:2f:77:af:7b:d0:82: be:ef:15:39:b3:30:ee:25:42:de:48:b5:fe:66:4b:bb:c4:a0: 4c:a8:9b:63:95:ee:7d:44:ed:17:d2:4c:1b:bc:6b:e3:24:9b: ec:ec:97:05:da:9a:bd:31:75:b7:83:68:30:73:32:ac:49:45: 2b:63:66:4c:d1:84:f0:d9:23:15:88:54:d8:9d:9e:ec:26:0b: fa:9b:22:f4:62:c3:09:7d:f9:fc:6a:24:7c:1c:d8:b3:8b:0c: 1f:3e:f7:03:58:75:2d:7a:d5:60:2b:0b:e5:63:70:5a:e3:17: b4:0c:99:70:ff:35:10:bf:b2:63:15:93:81:9c:a6:84:3b:bb: 84:1e:31:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo84CV40awnssPZNSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTRkZGQtYTRkMy00MmY4LWE4MTAtMjY4ZTc5YTAz MTg0MB4XDTI1MDYxOTAxMDA1MFoXDTI1MDkxNzAxMDA1MFowLzEtMCsGA1UEAxMk MjIwMjNjNjQtNTViYi00NWIwLWIxYjItMTdhNGQ2N2U4ZmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUq6aHJbOOb4l1EbkFHULnnBEZ68SkzYs9+C nqtPaNhM01MSLxsxSnXyRxE6dnnjC75EJI+HDT6v2X5HCHE4m/uCA1YoNSSD7v9w HURq2rv/NKXdSHCijNBEegvzuSlb7mhi01HAbDFhyeVI5bdV4dkYZMohGMHVEZDA XitafOLo/2tzKOqvykxZSQa2wDxY6u7uCbbWVhuppTGDfsSqQW2Guj+d32+MAHDt LCKR2lO5V5OzFX3dYBT3mWYx5AvJhdnDjYUGGWeWIoh4DVLuji9tYmINRYwd6rzZ ik/BHKpjswimq5XYGEEzJ8Yk2RABBRUc/LIkqn7Z5s+Q0ckzFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHhixXXsv1/d5pGk8hQHm7l193B9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hYzlh NGRkZC1hNGQzLTQyZjgtYTgxMC0yNjhlNzlhMDMxODQvYmI2YmNmNDctNjU1NC0z ZDM0LWI5YzUtOWFhYjJkMGE4NTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWM5YTRkZGQtYTRkMy00MmY4LWE4 MTAtMjY4ZTc5YTAzMTg0L2FjOWE0ZGRkLWE0ZDMtNDJmOC1hODEwLTI2OGU3OWEw MzE4NC5jcmwwHwYDVR0jBBgwFoAU5QgC9/OZ3Tdagctm6iX04Fn7eocwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hYzlhNGRkZC1hNGQzLTQyZjgtYTgxMC0yNjhl NzlhMDMxODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqLhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRnlD641RO/wOOh2InfoKnOGD5y4HhF+PBfTBSERf2+nCdprJtc2FIj FcZm/KfkLpMNt1dKrY3K5c49vH+PcHe+yz9+ESTKgvFJRvJTbUUblPV5R0xEHItL 7/Y2wJeKByq/nVLfbudOc8o8niXZTlK1JvUZR7thPy93r3vQgr7vFTmzMO4lQt5I tf5mS7vEoEyom2OV7n1E7RfSTBu8a+Mkm+zslwXamr0xdbeDaDBzMqxJRStjZkzR hPDZIxWIVNidnuwmC/qbIvRiwwl9+fxqJHwc2LOLDB8+9wNYdS161WArC+VjcFrj F7QMmXD/NRC/smMVk4GcpoQ7u4QeMcU= -----END CERTIFICATE-----Generated at Tue Jul 1 11:42:01 2025 by rpki-client