$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/cf38211e-a9ed-37ec-9041-432fd370bc59.roa File: cf38211e-a9ed-37ec-9041-432fd370bc59.roa (raw, json) Hash identifier: saXlnuB+iay9Gim+kGdhkKiualILA9h70JIQMkWtGZY= Subject key identifier: CA:86:3F:3B:42:BB:11:8B:2F:DA:01:A7:61:34:7D:A3:42:69:57:B3 Certificate issuer: /CN=84bfb9e8-1bae-4540-9cae-b6811ecadff5 Certificate serial: 010D0C9F432858499F2493B6F301C14A84314BC0 Authority key identifier: 33:87:39:DF:1C:AC:F8:79:BB:E8:E9:5D:84:6F:84:56:83:2C:A5:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/cf38211e-a9ed-37ec-9041-432fd370bc59.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 398653 IP address blocks: 198.62.160.0/24 maxlen: 24 2602:fbd3::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/84bfb9e8-1bae-4540-9cae-b6811ecadff5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/84bfb9e8-1bae-4540-9cae-b6811ecadff5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:93:b6:f3:01:c1:4a:84:31:4b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84bfb9e8-1bae-4540-9cae-b6811ecadff5 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=b349d5e9-5bb1-45db-95cf-deccd86f48c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a2:c3:25:7f:66:80:ba:25:02:be:85:cb:1f: c0:a8:57:64:53:e8:f6:9d:6b:0a:ef:d1:b9:1a:15: fc:1b:9c:dd:21:4e:0b:8c:d9:6c:04:db:b1:45:14: 16:f4:9a:03:5b:00:44:b3:10:94:5a:11:17:16:a1: 5b:f5:d9:29:30:0e:ef:c4:18:e0:a6:36:49:d9:34: f9:c7:26:ce:09:9e:ca:32:9d:61:7e:ea:71:5d:02: 8f:c2:ea:cf:b3:5a:3e:a1:be:c3:55:ab:73:4b:a1: 30:cc:a1:ee:2d:d8:fe:89:cf:a9:70:71:34:37:21: 67:ed:a0:82:de:bb:7d:60:1c:70:82:3e:a7:c9:77: 89:6b:0d:51:3a:b3:20:8d:6d:ea:89:35:01:dd:03: 6a:d1:b3:e1:37:e6:b9:d1:24:c5:fc:aa:20:74:d8: 62:e4:23:89:e8:e7:00:c5:7c:50:22:7c:d5:ca:75: 78:24:a7:76:40:86:16:13:d4:f2:79:74:d3:50:99: 73:34:2c:53:af:e5:a6:a7:5b:57:bf:40:6a:70:bc: 0e:0d:10:ad:0f:bc:5a:1d:0c:56:90:ca:59:7b:1d: 8d:4c:d9:ea:84:fc:a6:16:b1:ff:ca:68:2a:fb:0a: 85:8e:35:81:b8:01:56:24:a0:c2:65:e1:24:13:1b: c7:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:86:3F:3B:42:BB:11:8B:2F:DA:01:A7:61:34:7D:A3:42:69:57:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/cf38211e-a9ed-37ec-9041-432fd370bc59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/84bfb9e8-1bae-4540-9cae-b6811ecadff5.crl X509v3 Authority Key Identifier: keyid:33:87:39:DF:1C:AC:F8:79:BB:E8:E9:5D:84:6F:84:56:83:2C:A5:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5.cer sbgp-ipAddrBlock: critical IPv4: 198.62.160.0/24 IPv6: 2602:fbd3::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:10:6f:53:7d:c1:d3:0d:06:57:df:5f:4e:06:07:54:67:13: da:a1:d0:54:ec:b9:cd:2a:8c:98:38:5a:e5:fb:ec:af:a0:f8: b7:ef:a8:32:14:96:f0:92:ed:08:75:3c:a1:e2:1b:56:f0:74: bd:16:61:f6:39:48:53:3c:79:a1:db:3c:54:29:74:ae:f0:02: 20:bf:ba:81:dd:df:d3:d0:39:58:ef:59:94:12:6b:6e:e4:39: 13:f4:39:7a:22:58:3e:7e:9d:b7:2a:6d:cd:ef:7a:7d:45:28: 6a:a1:31:26:5b:f8:cb:49:a2:fb:d3:51:02:21:91:30:c3:24: df:55:7b:43:6f:7a:fe:20:40:d0:11:3c:af:1e:51:30:57:25: 29:42:db:e2:9b:ea:04:63:c7:26:63:58:61:7a:49:e9:b1:d9: 16:27:21:85:ec:a2:f4:27:d8:78:1f:13:b4:13:08:b6:4c:90: 9c:36:2a:09:ef:6e:96:57:c2:bc:64:8f:22:ae:5b:58:c6:9c: d6:ae:be:79:7b:44:45:2c:ad:a4:6f:a6:02:8a:9c:43:a0:94: 25:49:91:e5:8b:63:7c:34:df:8a:a2:88:1f:36:96:f1:54:b8: ce:14:4b:7c:04:cb:5b:70:52:a7:cd:5b:9d:58:ee:65:52:ff: 40:ec:49:cf -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEmfJJO28wHBSoQxS8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRiZmI5ZTgtMWJhZS00NTQwLTljYWUtYjY4MTFlY2Fk ZmY1MB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk YjM0OWQ1ZTktNWJiMS00NWRiLTk1Y2YtZGVjY2Q4NmY0OGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKLDJX9mgLolAr6Fyx/AqFdkU+j2nWsK79G5 GhX8G5zdIU4LjNlsBNuxRRQW9JoDWwBEsxCUWhEXFqFb9dkpMA7vxBjgpjZJ2TT5 xybOCZ7KMp1hfupxXQKPwurPs1o+ob7DVatzS6EwzKHuLdj+ic+pcHE0NyFn7aCC 3rt9YBxwgj6nyXeJaw1ROrMgjW3qiTUB3QNq0bPhN+a50STF/KogdNhi5COJ6OcA xXxQInzVynV4JKd2QIYWE9TyeXTTUJlzNCxTr+Wmp1tXv0BqcLwODRCtD7xaHQxW kMpZex2NTNnqhPymFrH/ymgq+wqFjjWBuAFWJKDCZeEkExvHLQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFMqGPztCuxGLL9oBp2E0faNCaVezMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84NGJm YjllOC0xYmFlLTQ1NDAtOWNhZS1iNjgxMWVjYWRmZjUvY2YzODIxMWUtYTllZC0z N2VjLTkwNDEtNDMyZmQzNzBiYzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODRiZmI5ZTgtMWJhZS00NTQwLTlj YWUtYjY4MTFlY2FkZmY1Lzg0YmZiOWU4LTFiYWUtNDU0MC05Y2FlLWI2ODExZWNh ZGZmNS5jcmwwHwYDVR0jBBgwFoAUM4c53xys+Hm76OldhG+EVoMspWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84NGJmYjllOC0xYmFlLTQ1NDAtOWNhZS1iNjgx MWVjYWRmZjUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAxj6gMA4E AgACMAgDBgAmAvvTADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQABEG9TfcHTDQZX319OBgdUZxPaodBU7LnN KoyYOFrl++yvoPi376gyFJbwku0IdTyh4htW8HS9FmH2OUhTPHmh2zxUKXSu8AIg v7qB3d/T0DlY71mUEmtu5DkT9Dl6Ilg+fp23Km3N73p9RShqoTEmW/jLSaL701EC IZEwwyTfVXtDb3r+IEDQETyvHlEwVyUpQtvim+oEY8cmY1hheknpsdkWJyGF7KL0 J9h4HxO0Ewi2TJCcNioJ726WV8K8ZI8irltYxpzWrr55e0RFLK2kb6YCipxDoJQl SZHli2N8NN+KoogfNpbxVLjOFEt8BMtbcFKnzVudWO5lUv9A7EnP -----END CERTIFICATE-----Generated at Sun May 11 09:28:12 2025 by rpki-client