$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a456a73-032d-4675-8f0a-2db7b1e58168/825702a4-e267-3fed-801c-e21c3ef74911.roa File: 825702a4-e267-3fed-801c-e21c3ef74911.roa (raw, json) Hash identifier: c2CcScetfLfZ658XuxhNbiUSxs8vWKyYqRGJTyVKP6M= Subject key identifier: 51:F0:C0:D0:E0:73:31:7C:82:79:57:2B:80:F8:0A:D2:40:65:27:FE Certificate issuer: /CN=5a456a73-032d-4675-8f0a-2db7b1e58168 Certificate serial: 010D0C9F43285849DF5A677F31AAE11317488900 Authority key identifier: 85:9F:34:F5:35:BE:D5:53:DD:C1:EF:BB:7F:3D:49:7A:46:55:57:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a456a73-032d-4675-8f0a-2db7b1e58168.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a456a73-032d-4675-8f0a-2db7b1e58168/825702a4-e267-3fed-801c-e21c3ef74911.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 53594 IP address blocks: 198.200.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a456a73-032d-4675-8f0a-2db7b1e58168/5a456a73-032d-4675-8f0a-2db7b1e58168.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a456a73-032d-4675-8f0a-2db7b1e58168/5a456a73-032d-4675-8f0a-2db7b1e58168.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a456a73-032d-4675-8f0a-2db7b1e58168.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:67:7f:31:aa:e1:13:17:48:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a456a73-032d-4675-8f0a-2db7b1e58168 Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=7fcba7c7-598d-464c-931e-ecfc2e38ec65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:0f:ac:a6:bd:90:13:2f:56:6f:c0:fe:71:6c: b8:3c:d6:17:e2:62:09:e6:78:c4:c9:c7:aa:fb:ad: ab:d4:63:76:f7:86:42:95:04:ee:11:e8:af:aa:68: fb:78:e1:44:9c:2a:d2:29:83:3e:8a:e1:57:1e:2a: dd:4b:07:e9:dd:81:aa:5c:d6:3f:66:c0:fe:40:af: 62:13:f3:2e:cf:ad:a1:7b:21:68:e0:06:04:1e:d9: 91:e0:d0:b3:34:3d:03:0c:9d:cf:8f:d5:a3:a2:57: d7:24:84:de:b8:a2:1f:de:ae:c4:29:ed:30:7e:91: c8:52:fe:dc:2b:69:d9:9c:ef:d0:63:cd:a4:a0:d6: 64:b1:78:c2:86:94:55:6d:a7:e1:d9:a5:07:e4:b9: ad:f3:ea:0d:1a:be:9a:1e:01:28:4b:88:8d:fc:7d: f3:d2:7d:b9:de:72:55:c8:a4:43:a9:c6:2f:14:53: 57:aa:ea:c4:db:f2:b7:90:23:d5:a7:49:80:53:af: 9f:79:0d:5f:ae:59:02:f9:1c:58:95:f5:13:a5:cf: 8e:f5:bc:1a:fd:b5:26:4f:75:45:e1:60:17:ff:64: bf:e8:b9:e3:25:49:cf:c3:0a:46:2c:dd:97:90:18: ad:1f:82:ff:37:4a:92:56:09:f9:be:5c:a8:94:d4: 36:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:F0:C0:D0:E0:73:31:7C:82:79:57:2B:80:F8:0A:D2:40:65:27:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a456a73-032d-4675-8f0a-2db7b1e58168/825702a4-e267-3fed-801c-e21c3ef74911.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a456a73-032d-4675-8f0a-2db7b1e58168/5a456a73-032d-4675-8f0a-2db7b1e58168.crl X509v3 Authority Key Identifier: keyid:85:9F:34:F5:35:BE:D5:53:DD:C1:EF:BB:7F:3D:49:7A:46:55:57:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a456a73-032d-4675-8f0a-2db7b1e58168.cer sbgp-ipAddrBlock: critical IPv4: 198.200.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:39:72:3e:94:6f:9a:58:82:ad:69:4e:16:56:2e:ed:42:52: 65:1d:ce:28:d7:57:cf:c9:85:ce:17:b5:95:ec:6e:d0:95:69: f0:e0:73:84:b0:c1:e1:ae:53:f9:3f:ab:b6:d9:36:b0:2b:b4: 22:4c:67:b0:9e:76:05:40:16:5c:d2:c7:84:84:84:1f:9d:c4: 6a:6c:ef:99:8d:9d:bb:6e:f3:6a:69:75:e2:99:21:3d:08:bd: 64:1f:79:34:ba:db:60:ac:21:4b:87:66:75:94:18:6d:5f:7e: ef:fa:44:f1:e4:c1:1e:4f:ab:7c:f1:94:26:81:07:e0:8b:57: 9e:65:a8:95:92:db:e3:f6:c4:60:e5:2b:24:b3:31:5e:1b:06: 1a:ce:44:a6:5e:41:93:80:db:d0:d3:e0:f0:ab:89:fd:a0:22: b3:f6:36:e2:8e:1e:4d:1a:76:7f:4e:ba:5a:f8:b8:a1:fc:d5: fa:cd:6b:0c:94:93:da:5f:5b:32:07:41:cc:b0:2b:1a:e1:3c: 47:b2:d3:a0:ab:64:f7:01:f6:bd:08:77:dc:40:57:f1:0b:98: e3:0c:a0:74:2c:96:b7:5f:8d:1b:46:73:60:12:d7:c9:3c:15: 5d:2d:da:57:30:38:43:d1:0e:ec:78:5b:97:7c:f9:b7:9a:0b: 16:0e:5c:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfWmd/MarhExdIiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWE0NTZhNzMtMDMyZC00Njc1LThmMGEtMmRiN2IxZTU4 MTY4MB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk N2ZjYmE3YzctNTk4ZC00NjRjLTkzMWUtZWNmYzJlMzhlYzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3A+spr2QEy9Wb8D+cWy4PNYX4mIJ5njEyceq +62r1GN294ZClQTuEeivqmj7eOFEnCrSKYM+iuFXHirdSwfp3YGqXNY/ZsD+QK9i E/Muz62heyFo4AYEHtmR4NCzND0DDJ3Pj9WjolfXJITeuKIf3q7EKe0wfpHIUv7c K2nZnO/QY82koNZksXjChpRVbafh2aUH5Lmt8+oNGr6aHgEoS4iN/H3z0n253nJV yKRDqcYvFFNXqurE2/K3kCPVp0mAU6+feQ1frlkC+RxYlfUTpc+O9bwa/bUmT3VF 4WAX/2S/6LnjJUnPwwpGLN2XkBitH4L/N0qSVgn5vlyolNQ2sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFHwwNDgczF8gnlXK4D4CtJAZSf+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81YTQ1 NmE3My0wMzJkLTQ2NzUtOGYwYS0yZGI3YjFlNTgxNjgvODI1NzAyYTQtZTI2Ny0z ZmVkLTgwMWMtZTIxYzNlZjc0OTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNWE0NTZhNzMtMDMyZC00Njc1LThm MGEtMmRiN2IxZTU4MTY4LzVhNDU2YTczLTAzMmQtNDY3NS04ZjBhLTJkYjdiMWU1 ODE2OC5jcmwwHwYDVR0jBBgwFoAUhZ809TW+1VPdwe+7fz1JekZVV8gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81YTQ1NmE3My0wMzJkLTQ2NzUtOGYwYS0yZGI3 YjFlNTgxNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxsgcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB85cj6Ub5pYgq1pThZWLu1CUmUdzijXV8/Jhc4XtZXsbtCVafDgc4Sw weGuU/k/q7bZNrArtCJMZ7CedgVAFlzSx4SEhB+dxGps75mNnbtu82ppdeKZIT0I vWQfeTS622CsIUuHZnWUGG1ffu/6RPHkwR5Pq3zxlCaBB+CLV55lqJWS2+P2xGDl KySzMV4bBhrORKZeQZOA29DT4PCrif2gIrP2NuKOHk0adn9Oulr4uKH81frNawyU k9pfWzIHQcywKxrhPEey06CrZPcB9r0Id9xAV/ELmOMMoHQslrdfjRtGc2AS18k8 FV0t2lcwOEPRDux4W5d8+beaCxYOXGw= -----END CERTIFICATE-----Generated at Thu Jul 3 00:44:05 2025 by rpki-client