$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/da28cf00-8f8b-3953-a50b-406aac3a4726.roa File: da28cf00-8f8b-3953-a50b-406aac3a4726.roa (raw, json) Hash identifier: yJpcas8O25446TbphHSwHbm3fHvK4506lAcW11FokiI= Subject key identifier: D1:3D:32:58:1E:1A:E0:9C:77:A0:24:60:F7:F2:22:FB:29:18:59:1C Certificate issuer: /CN=faf569a5-954e-480e-9904-712ec61652b7 Certificate serial: 010D0C9F4328584A497070AFF8DCE300C9862900 Authority key identifier: 06:32:5E:FB:8B:27:C3:34:23:E2:86:F6:6C:02:1A:A9:B4:81:29:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/da28cf00-8f8b-3953-a50b-406aac3a4726.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 202013 IP address blocks: 198.161.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/faf569a5-954e-480e-9904-712ec61652b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/faf569a5-954e-480e-9904-712ec61652b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:70:af:f8:dc:e3:00:c9:86:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=faf569a5-954e-480e-9904-712ec61652b7 Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=1f9cceb9-0fa1-476e-ba6a-810efe04222e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:6c:ef:6c:68:6d:59:14:3c:c2:ff:c8:d0:bb: 59:f0:4d:b2:81:d6:16:3c:28:95:b5:f7:cd:24:d9: da:1d:22:92:b8:c3:fa:40:74:95:22:f3:0f:11:69: 87:4c:d1:ad:3d:e7:c2:59:e7:da:06:01:da:2c:8c: 79:19:33:ca:f5:80:2c:5f:67:2d:bf:64:84:29:c2: 97:fb:c0:27:2c:c3:1c:3a:bf:f9:70:d0:c1:8b:36: 1e:f5:8f:d6:1b:15:a5:de:39:62:c6:96:c2:5b:dc: 63:58:c7:26:9a:f9:a5:19:9d:a5:e9:29:b7:78:53: 4a:02:73:3f:10:64:ca:0a:a4:1f:46:d7:b7:9b:74: d0:f7:6f:5a:23:a4:5c:88:f0:57:74:4d:c7:98:c0: 03:fd:70:e2:f6:83:61:ee:8b:1e:35:b2:9b:29:b2: 20:67:34:20:de:75:7b:0c:15:e0:9b:f0:de:2c:62: 22:a9:5d:86:ec:48:bf:a8:5f:34:5e:07:b8:88:a9: 22:a0:c6:e1:8a:4f:b1:5c:2f:7b:12:b0:e3:aa:e9: fa:ea:a3:c5:25:f4:af:92:fe:a7:6a:36:c9:1b:77: 26:1e:fb:fa:a2:de:61:6d:ea:d1:10:87:e2:38:87: 0a:81:10:4e:fe:30:9a:2f:a2:9b:4e:3e:11:cf:af: 86:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:3D:32:58:1E:1A:E0:9C:77:A0:24:60:F7:F2:22:FB:29:18:59:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/da28cf00-8f8b-3953-a50b-406aac3a4726.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/faf569a5-954e-480e-9904-712ec61652b7.crl X509v3 Authority Key Identifier: keyid:06:32:5E:FB:8B:27:C3:34:23:E2:86:F6:6C:02:1A:A9:B4:81:29:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7.cer sbgp-ipAddrBlock: critical IPv4: 198.161.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:1d:1b:41:4c:ad:15:4c:94:b0:08:31:b6:27:51:66:f3:75: 9a:1c:35:53:71:24:28:f9:f1:0b:c3:8d:85:3d:d0:e6:74:eb: dd:ce:57:89:76:cf:68:0b:18:b2:57:d0:ae:9e:fb:58:a7:ca: 30:3b:d7:e1:43:d7:03:39:de:db:04:3e:df:ea:a0:35:a4:91: e8:7b:61:c7:c8:8d:ff:99:fd:fc:7c:a1:8b:57:6c:52:b1:70: 8a:3f:51:dc:e9:dd:29:e6:6f:95:9a:3a:77:c9:cd:d0:3c:6f: 3e:97:9b:a3:a7:a4:cd:df:f2:30:2c:de:76:c9:53:36:b2:be: 23:e6:03:5d:83:ca:39:8b:78:f5:b7:eb:63:99:42:f4:b9:6b: 80:da:17:b2:df:95:44:9f:e1:b4:13:fc:ed:6a:c3:f2:e1:b9: 99:1b:b6:b1:1d:cd:3d:63:08:d2:27:ab:b5:73:29:14:8a:d0: ee:b5:01:f9:44:08:12:ef:a8:9d:e2:f4:25:d4:78:6a:29:e1: f6:79:56:30:16:66:4e:24:f0:78:cd:05:0b:39:0e:ea:88:bc: 16:82:c5:7e:20:33:9f:08:05:f8:dd:c9:00:b5:3c:a8:e3:82: 4f:25:a0:90:ef:ed:57:8b:99:da:0d:3d:32:d0:9e:6f:42:4d: fa:16:92:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcHCv+NzjAMmGKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmFmNTY5YTUtOTU0ZS00ODBlLTk5MDQtNzEyZWM2MTY1 MmI3MB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk MWY5Y2NlYjktMGZhMS00NzZlLWJhNmEtODEwZWZlMDQyMjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGzvbGhtWRQ8wv/I0LtZ8E2ygdYWPCiVtffN JNnaHSKSuMP6QHSVIvMPEWmHTNGtPefCWefaBgHaLIx5GTPK9YAsX2ctv2SEKcKX +8AnLMMcOr/5cNDBizYe9Y/WGxWl3jlixpbCW9xjWMcmmvmlGZ2l6Sm3eFNKAnM/ EGTKCqQfRte3m3TQ929aI6RciPBXdE3HmMAD/XDi9oNh7oseNbKbKbIgZzQg3nV7 DBXgm/DeLGIiqV2G7Ei/qF80Xge4iKkioMbhik+xXC97ErDjqun66qPFJfSvkv6n ajbJG3cmHvv6ot5hberREIfiOIcKgRBO/jCaL6KbTj4Rz6+GBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNE9MlgeGuCcd6AkYPfyIvspGFkcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9mYWY1 NjlhNS05NTRlLTQ4MGUtOTkwNC03MTJlYzYxNjUyYjcvZGEyOGNmMDAtOGY4Yi0z OTUzLWE1MGItNDA2YWFjM2E0NzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZmFmNTY5YTUtOTU0ZS00ODBlLTk5 MDQtNzEyZWM2MTY1MmI3L2ZhZjU2OWE1LTk1NGUtNDgwZS05OTA0LTcxMmVjNjE2 NTJiNy5jcmwwHwYDVR0jBBgwFoAUBjJe+4snwzQj4ob2bAIaqbSBKUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9mYWY1NjlhNS05NTRlLTQ4MGUtOTkwNC03MTJl YzYxNjUyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqGoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEsdG0FMrRVMlLAIMbYnUWbzdZocNVNxJCj58QvDjYU90OZ0693OV4l2 z2gLGLJX0K6e+1inyjA71+FD1wM53tsEPt/qoDWkkeh7YcfIjf+Z/fx8oYtXbFKx cIo/Udzp3Snmb5WaOnfJzdA8bz6Xm6OnpM3f8jAs3nbJUzayviPmA12DyjmLePW3 62OZQvS5a4DaF7LflUSf4bQT/O1qw/LhuZkbtrEdzT1jCNInq7VzKRSK0O61AflE CBLvqJ3i9CXUeGop4fZ5VjAWZk4k8HjNBQs5DuqIvBaCxX4gM58IBfjdyQC1PKjj gk8loJDv7VeLmdoNPTLQnm9CTfoWkjg= -----END CERTIFICATE-----Generated at Sun Jun 29 21:06:57 2025 by rpki-client