$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/20e4df6e-c0d2-3b21-b5a2-c6ea7c71490b.roa File: 20e4df6e-c0d2-3b21-b5a2-c6ea7c71490b.roa (raw, json) Hash identifier: 29R0bINjDyUEFgNlgCe+j802L7Ff7vdVquDtyS+0Utw= Subject key identifier: DA:CD:34:1A:68:6A:77:C9:11:6B:70:FB:40:D1:4B:A8:48:ED:C5:FB Certificate issuer: /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842 Certificate serial: 010D0C9F4328584A46A5B11CE6D8AAED6838ED80 Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/20e4df6e-c0d2-3b21-b5a2-c6ea7c71490b.roa Signing time: Sun 22 Jun 2025 13:01:03 +0000 ROA not before: Sun 22 Jun 2025 13:01:03 +0000 ROA not after: Sat 20 Sep 2025 13:01:03 +0000 asID: 2559 IP address blocks: 198.241.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:46:a5:b1:1c:e6:d8:aa:ed:68:38:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842 Validity Not Before: Jun 22 13:01:03 2025 GMT Not After : Sep 20 13:01:03 2025 GMT Subject: CN=31e8fccd-4e47-41d2-86a1-6f78204bcdf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:4d:1e:f5:09:d4:c9:49:d8:12:26:bf:7f:6f: a5:5e:01:ee:2e:ef:ec:c8:2b:6b:ae:d3:7f:c7:5f: c2:2e:84:9d:0e:51:70:95:59:0a:7d:79:83:01:e9: b8:51:bb:5f:6e:b5:84:fc:89:e7:2d:9f:cf:94:10: e9:a9:87:f1:85:7f:5a:69:c1:ec:65:0a:a4:e1:a0: 05:36:cc:3f:fc:da:21:f4:26:99:5c:6a:2e:e5:87: 59:ac:ba:52:b6:d3:fa:93:25:14:28:dd:27:e7:d7: 17:b4:4e:eb:96:53:7d:11:9d:5d:10:c9:aa:6a:59: ac:8c:81:3f:e4:4a:ed:80:d1:fd:bf:4c:26:9c:b2: cc:5f:bf:92:f2:dc:08:8f:02:d5:55:07:c3:ac:52: 3a:fe:ee:7a:23:90:c2:a6:18:e5:82:88:32:1f:81: f5:cf:47:71:85:99:7f:d9:fd:75:9f:7f:c4:1c:02: 05:0b:93:05:78:9f:16:fb:f4:5a:4c:a2:e7:02:2c: 0f:75:2a:5e:2b:78:cb:bd:74:c9:45:b7:49:17:fc: f1:7a:71:86:22:dd:1a:8e:0b:a8:af:82:00:56:a4: 56:df:ef:81:7a:06:bd:4f:58:20:c9:2b:7f:e3:9a: 3b:ff:47:7a:ef:11:03:f3:6e:8c:2b:46:9c:73:04: a7:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:CD:34:1A:68:6A:77:C9:11:6B:70:FB:40:D1:4B:A8:48:ED:C5:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/20e4df6e-c0d2-3b21-b5a2-c6ea7c71490b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl X509v3 Authority Key Identifier: keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer sbgp-ipAddrBlock: critical IPv4: 198.241.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:de:a6:84:f2:da:47:25:28:89:7b:e9:b3:73:56:35:01:7f: e9:d2:e1:16:12:1d:c9:4b:b4:ed:46:fc:08:89:79:c5:eb:c2: 59:c7:72:45:0a:45:4a:58:f3:e9:d8:58:7f:2f:89:52:2e:90: b1:d4:9a:76:6c:f7:eb:63:70:66:09:a5:d0:9b:fc:54:39:63: 5d:9f:4a:cf:af:97:3f:d7:69:1e:25:29:f1:e6:d5:10:4b:3e: db:9a:c1:b3:18:3e:0d:ae:c0:17:37:17:04:1c:f8:3e:b2:19: 68:8a:2d:22:ce:ff:f8:7f:17:0f:8e:c5:3d:98:96:ec:ca:47: c5:75:e4:e6:c1:7b:6f:4d:33:81:da:c2:bb:65:fe:b9:3a:ab: 5d:3b:47:ff:e7:d9:8a:30:49:88:4b:dc:c9:13:bf:c4:34:f1: 43:07:5c:c4:55:0a:a5:e9:41:97:b5:13:88:26:ec:f2:03:24: 33:94:4c:6f:c8:91:69:e7:83:84:9d:57:b1:51:bc:11:2f:37: 76:48:07:d6:fe:1d:24:27:e9:8c:83:69:6b:a1:c9:c1:c1:f4: b6:99:db:49:b0:e9:46:1b:3d:91:67:1e:58:37:a4:08:29:02: 0e:58:a1:c3:75:14:03:9e:62:1d:c1:d9:c4:43:6f:45:9f:8e: 92:50:a0:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpGpbEc5tiq7Wg47YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUwNjQ5N2UtZTljYy00NWNiLTg1ZDYtY2YyZTU4ZTUx ODQyMB4XDTI1MDYyMjEzMDEwM1oXDTI1MDkyMDEzMDEwM1owLzEtMCsGA1UEAxMk MzFlOGZjY2QtNGU0Ny00MWQyLTg2YTEtNmY3ODIwNGJjZGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk00e9QnUyUnYEia/f2+lXgHuLu/syCtrrtN/ x1/CLoSdDlFwlVkKfXmDAem4UbtfbrWE/InnLZ/PlBDpqYfxhX9aacHsZQqk4aAF Nsw//Noh9CaZXGou5YdZrLpSttP6kyUUKN0n59cXtE7rllN9EZ1dEMmqalmsjIE/ 5ErtgNH9v0wmnLLMX7+S8twIjwLVVQfDrFI6/u56I5DCphjlgogyH4H1z0dxhZl/ 2f11n3/EHAIFC5MFeJ8W+/RaTKLnAiwPdSpeK3jLvXTJRbdJF/zxenGGIt0ajguo r4IAVqRW3++Bega9T1ggySt/45o7/0d67xED826MK0accwSn/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNrNNBpoanfJEWtw+0DRS6hI7cX7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2 NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJlNThlNTE4NDIvMjBlNGRmNmUtYzBkMi0z YjIxLWI1YTItYzZlYTdjNzE0OTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGUwNjQ5N2UtZTljYy00NWNiLTg1 ZDYtY2YyZTU4ZTUxODQyLzRlMDY0OTdlLWU5Y2MtNDVjYi04NWQ2LWNmMmU1OGU1 MTg0Mi5jcmwwHwYDVR0jBBgwFoAUV2+fxmb20SnMf8gO5fhHtMv00YEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJl NThlNTE4NDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxvGoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKXepoTy2kclKIl76bNzVjUBf+nS4RYSHclLtO1G/AiJecXrwlnHckUK RUpY8+nYWH8viVIukLHUmnZs9+tjcGYJpdCb/FQ5Y12fSs+vlz/XaR4lKfHm1RBL PtuawbMYPg2uwBc3FwQc+D6yGWiKLSLO//h/Fw+OxT2YluzKR8V15ObBe29NM4Ha wrtl/rk6q107R//n2YowSYhL3MkTv8Q08UMHXMRVCqXpQZe1E4gm7PIDJDOUTG/I kWnng4SdV7FRvBEvN3ZIB9b+HSQn6YyDaWuhycHB9LaZ20mw6UYbPZFnHlg3pAgp Ag5YocN1FAOeYh3B2cRDb0WfjpJQoDA= -----END CERTIFICATE-----Generated at Mon Jun 30 10:31:26 2025 by rpki-client