$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/b388c415-7d7e-3eed-8eef-44a4d358c737.roa File: b388c415-7d7e-3eed-8eef-44a4d358c737.roa (raw, json) Hash identifier: hEUwYqRtsusppM4WsF2BFZoxjwbw7Ktp2GW9343U8NE= Subject key identifier: 63:4F:2F:01:F0:2D:FB:47:3A:DB:EB:A9:DE:98:94:93:86:BA:35:6D Certificate issuer: /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Certificate serial: 010D0C9F43285849EA85250031C1BB52906281D8 Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/b388c415-7d7e-3eed-8eef-44a4d358c737.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 394177 IP address blocks: 158.62.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:25:00:31:c1:bb:52:90:62:81:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=45ada523-49f7-41f7-b867-9b87dfdf56dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c3:5a:6b:21:ed:11:a5:14:49:a9:d9:56:8c: 4f:14:20:c0:02:63:da:79:61:ec:ff:91:2d:86:94: 4c:c8:f8:a3:2f:04:1b:bb:4a:ed:94:56:3a:5d:05: fb:41:10:06:3b:7f:7d:cb:ca:6d:b9:da:2b:49:ec: f9:4d:30:55:3e:22:05:f4:ec:c5:21:85:1f:4a:19: f7:7f:f0:19:27:49:3c:55:93:55:a6:89:0a:72:3a: de:20:fb:0a:7d:db:ca:92:f0:6a:f2:5f:b6:1f:f9: 6a:4d:42:88:2b:ef:f3:4d:94:93:cf:90:dc:b8:43: 2d:2f:86:1c:84:b1:9d:2c:fb:83:c5:99:3c:3a:8c: e9:37:2c:a8:32:71:62:f8:94:3f:92:bd:b8:6d:32: f9:8e:95:22:61:ba:70:60:22:15:47:35:f7:8a:86: 79:16:7f:4d:ce:95:b1:c3:01:8d:9f:6a:07:2a:63: 75:9a:f3:9c:9c:fc:ad:8e:d5:03:fb:eb:02:c2:5c: 65:c6:f9:7e:60:31:dd:e3:b5:4b:f5:e3:e2:27:be: 0f:2a:d7:7e:0c:06:ef:9f:b4:66:71:31:a1:85:92: 26:b5:08:ab:27:94:0c:67:72:b4:5b:8c:a4:29:d8: 38:e9:10:9b:5a:ab:97:9c:da:33:8b:f1:02:70:75: 0a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:4F:2F:01:F0:2D:FB:47:3A:DB:EB:A9:DE:98:94:93:86:BA:35:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/b388c415-7d7e-3eed-8eef-44a4d358c737.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl X509v3 Authority Key Identifier: keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer sbgp-ipAddrBlock: critical IPv4: 158.62.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:04:b8:31:4e:c1:69:0c:c5:bd:30:b9:f3:59:31:94:de:07: 29:2b:fb:e2:60:4b:1a:f2:77:df:1d:d6:b6:89:e8:7d:7e:5e: 55:91:9b:8b:50:29:76:f6:f6:ce:29:3b:81:1b:b8:03:89:de: 1a:f8:1d:98:c7:1e:20:4a:65:cb:e6:35:fd:e4:1a:aa:ee:59: 5b:15:5b:e2:70:aa:0e:b7:09:27:59:1b:f6:85:e9:e7:03:ca: 6b:68:c6:22:dc:9f:c2:d3:07:1d:e5:f6:e2:2d:76:20:7c:9d: 20:8f:38:75:de:3e:59:64:a1:00:af:5f:d9:5a:15:ec:a2:ed: 19:f4:8f:f7:6a:b2:71:10:a9:a9:74:4a:b7:50:5b:44:fc:e3: 69:6b:99:b5:e6:98:5f:25:3f:03:86:4b:83:b6:42:25:2f:57: 89:60:d5:55:ce:34:ec:b3:b6:25:80:66:c1:00:d8:7e:62:2f: d8:02:de:89:71:8c:0b:b2:2e:f9:ea:d4:de:94:ac:2c:25:03: 1e:b0:d4:47:d5:cc:21:4c:ef:8e:be:52:1e:5e:a0:a8:fd:58: 8d:2a:2b:4b:18:81:6e:f6:f7:e9:f2:a5:d7:d8:a1:ae:de:a1: 34:83:fb:c4:06:cd:76:23:83:fe:ca:cb:6a:ac:f2:28:fb:62: e2:66:28:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhSUAMcG7UpBigdgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBlOTcyZTctYWUxZS00NDhjLThlNmMtOGY4MWY3M2I3 N2ExMB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk NDVhZGE1MjMtNDlmNy00MWY3LWI4NjctOWI4N2RmZGY1NmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysNaayHtEaUUSanZVoxPFCDAAmPaeWHs/5Et hpRMyPijLwQbu0rtlFY6XQX7QRAGO399y8ptudorSez5TTBVPiIF9OzFIYUfShn3 f/AZJ0k8VZNVpokKcjreIPsKfdvKkvBq8l+2H/lqTUKIK+/zTZSTz5DcuEMtL4Yc hLGdLPuDxZk8OozpNyyoMnFi+JQ/kr24bTL5jpUiYbpwYCIVRzX3ioZ5Fn9NzpWx wwGNn2oHKmN1mvOcnPytjtUD++sCwlxlxvl+YDHd47VL9ePiJ74PKtd+DAbvn7Rm cTGhhZImtQirJ5QMZ3K0W4ykKdg46RCbWquXnNozi/ECcHUKawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGNPLwHwLftHOtvrqd6YlJOGujVtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5 NzJlNy1hZTFlLTQ0OGMtOGU2Yy04ZjgxZjczYjc3YTEvYjM4OGM0MTUtN2Q3ZS0z ZWVkLThlZWYtNDRhNGQzNThjNzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBlOTcyZTctYWUxZS00NDhjLThl NmMtOGY4MWY3M2I3N2ExLzIwZTk3MmU3LWFlMWUtNDQ4Yy04ZTZjLThmODFmNzNi NzdhMS5jcmwwHwYDVR0jBBgwFoAU9m6h5/hh+dd0ACy7mBw7ijSGX0cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5NzJlNy1hZTFlLTQ0OGMtOGU2Yy04Zjgx ZjczYjc3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnj7GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQEuDFOwWkMxb0wufNZMZTeBykr++JgSxryd98d1raJ6H1+XlWRm4tQ KXb29s4pO4EbuAOJ3hr4HZjHHiBKZcvmNf3kGqruWVsVW+Jwqg63CSdZG/aF6ecD ymtoxiLcn8LTBx3l9uItdiB8nSCPOHXePllkoQCvX9laFeyi7Rn0j/dqsnEQqal0 SrdQW0T842lrmbXmmF8lPwOGS4O2QiUvV4lg1VXONOyztiWAZsEA2H5iL9gC3olx jAuyLvnq1N6UrCwlAx6w1EfVzCFM746+Uh5eoKj9WI0qK0sYgW729+nypdfYoa7e oTSD+8QGzXYjg/7Ky2qs8ij7YuJmKDg= -----END CERTIFICATE-----Generated at Sun Jun 29 10:31:39 2025 by rpki-client