$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/98ec1644-b246-368b-8d98-08a95f6ef23b.roa File: 98ec1644-b246-368b-8d98-08a95f6ef23b.roa (raw, json) Hash identifier: 1AM5hxP2TduTl+2A3+KNVtfIt6/f3CTQL1BFbd0JKBg= Subject key identifier: D8:C0:BE:EA:4E:32:2F:D5:56:A5:1C:E7:E1:2B:13:53:F5:B7:98:00 Certificate issuer: /CN=0c27bc55-b041-47cd-84eb-f3e9707acff1 Certificate serial: 010D0C9F4328584A0C05505E83AC283EFE19CF80 Authority key identifier: C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/98ec1644-b246-368b-8d98-08a95f6ef23b.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 53828 IP address blocks: 216.40.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:50:5e:83:ac:28:3e:fe:19:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c27bc55-b041-47cd-84eb-f3e9707acff1 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=8e21f2bc-c40f-46e3-a083-9db19bda5002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3a:46:6d:1c:21:91:60:86:af:f1:e8:9e:48: 7b:37:47:09:bc:99:32:c6:ca:77:02:db:c5:9c:73: 48:59:cc:46:e2:98:78:9a:da:e6:50:0d:be:79:dc: f5:01:32:79:f2:7b:65:44:0f:cb:e4:58:33:0d:b0: 33:a1:97:3e:6c:ba:9b:58:d2:d4:65:7e:a2:41:39: 9d:59:c3:63:ec:29:04:6b:df:c3:80:5d:c5:14:f4: 8e:94:59:16:e7:b8:b0:2d:9b:48:1e:2b:b1:3b:5c: 05:1a:31:46:3a:70:c4:50:db:1e:da:1e:bf:e6:fa: 56:b0:0c:c8:51:92:f9:41:0b:d3:72:6c:d8:1f:17: 4b:94:84:dd:7c:5c:2f:0d:85:c3:5e:87:fe:67:c5: 20:91:f2:3a:fa:33:c3:80:ba:f8:75:dd:1d:cb:c8: 52:09:32:3d:f6:f7:0f:ef:e0:de:0c:a8:a0:28:c9: 58:1f:6c:10:0a:09:5f:ab:f1:44:54:2c:e3:1e:19: a7:80:0e:ea:e9:52:23:45:c2:f9:65:2f:87:09:c5: 02:4b:e0:85:61:a7:33:62:85:71:84:02:a6:98:81: 54:26:84:38:71:ba:36:2b:c1:58:1d:90:ca:d7:2e: 9e:6f:d8:7f:fc:37:63:7f:08:d7:51:0f:51:26:80: ed:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C0:BE:EA:4E:32:2F:D5:56:A5:1C:E7:E1:2B:13:53:F5:B7:98:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/98ec1644-b246-368b-8d98-08a95f6ef23b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl X509v3 Authority Key Identifier: keyid:C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer sbgp-ipAddrBlock: critical IPv4: 216.40.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:8c:bd:11:63:9b:52:05:71:6e:43:11:14:a4:cd:f5:32:55: b0:3b:ae:8c:4e:89:df:4e:72:76:62:d0:6c:a4:e3:c1:9f:29: f3:c0:65:60:14:ac:24:7d:99:97:95:f1:f3:cf:6a:9f:8f:58: 1e:86:e9:77:e7:6f:20:39:43:2c:ef:56:4f:a8:1c:fd:7a:31: da:26:c6:f6:dd:49:97:0b:57:82:a0:95:22:76:a5:e5:46:10: 7e:4c:3f:32:b9:e4:de:16:ae:d0:7e:e8:4c:f1:c7:f9:23:40: 77:dd:13:43:38:6c:b1:1c:b1:de:57:e6:5d:6f:bb:a6:a9:f9: 30:59:bd:9b:7e:dc:a5:f9:03:d8:af:3c:88:f4:ea:60:66:ba: a6:7e:54:e8:fa:f5:e6:1c:2a:73:5d:1d:8a:c2:9a:57:58:4c: 1d:35:9a:7e:3c:a8:b3:09:c7:ae:5e:09:df:12:97:00:e1:24: c9:24:e4:2e:b5:0f:2c:b0:ed:40:5a:26:83:73:b5:82:6b:12: ff:60:4e:f2:b2:ac:0a:9d:99:24:51:cd:d4:13:c5:bf:fe:09: 9a:f2:19:87:02:0d:1f:1a:b0:67:7c:bf:d0:72:c9:3a:35:31: d0:cd:32:64:e9:ed:c6:fa:4a:12:b2:65:e6:49:36:30:ed:fe: ab:25:e8:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBVBeg6woPv4Zz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMyN2JjNTUtYjA0MS00N2NkLTg0ZWItZjNlOTcwN2Fj ZmYxMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk OGUyMWYyYmMtYzQwZi00NmUzLWEwODMtOWRiMTliZGE1MDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDpGbRwhkWCGr/Honkh7N0cJvJkyxsp3AtvF nHNIWcxG4ph4mtrmUA2+edz1ATJ58ntlRA/L5FgzDbAzoZc+bLqbWNLUZX6iQTmd WcNj7CkEa9/DgF3FFPSOlFkW57iwLZtIHiuxO1wFGjFGOnDEUNse2h6/5vpWsAzI UZL5QQvTcmzYHxdLlITdfFwvDYXDXof+Z8UgkfI6+jPDgLr4dd0dy8hSCTI99vcP 7+DeDKigKMlYH2wQCglfq/FEVCzjHhmngA7q6VIjRcL5ZS+HCcUCS+CFYaczYoVx hAKmmIFUJoQ4cbo2K8FYHZDK1y6eb9h//DdjfwjXUQ9RJoDtFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNjAvupOMi/VVqUc5+ErE1P1t5gAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzI3 YmM1NS1iMDQxLTQ3Y2QtODRlYi1mM2U5NzA3YWNmZjEvOThlYzE2NDQtYjI0Ni0z NjhiLThkOTgtMDhhOTVmNmVmMjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGMyN2JjNTUtYjA0MS00N2NkLTg0 ZWItZjNlOTcwN2FjZmYxLzBjMjdiYzU1LWIwNDEtNDdjZC04NGViLWYzZTk3MDdh Y2ZmMS5jcmwwHwYDVR0jBBgwFoAUxGYN+fPG33iLV0S/f1yezNk2Bp8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzI3YmM1NS1iMDQxLTQ3Y2QtODRlYi1mM2U5 NzA3YWNmZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2CgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFWMvRFjm1IFcW5DERSkzfUyVbA7roxOid9OcnZi0Gyk48GfKfPAZWAU rCR9mZeV8fPPap+PWB6G6XfnbyA5QyzvVk+oHP16MdomxvbdSZcLV4KglSJ2peVG EH5MPzK55N4WrtB+6Ezxx/kjQHfdE0M4bLEcsd5X5l1vu6ap+TBZvZt+3KX5A9iv PIj06mBmuqZ+VOj69eYcKnNdHYrCmldYTB01mn48qLMJx65eCd8SlwDhJMkk5C61 Dyyw7UBaJoNztYJrEv9gTvKyrAqdmSRRzdQTxb/+CZryGYcCDR8asGd8v9ByyTo1 MdDNMmTp7cb6ShKyZeZJNjDt/qsl6P8= -----END CERTIFICATE-----Generated at Tue Jul 1 00:35:55 2025 by rpki-client