$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/8168b368-620e-38d3-8bcc-8fce21790e7d.roa File: 8168b368-620e-38d3-8bcc-8fce21790e7d.roa (raw, json) Hash identifier: uTbgkwOlCA3MPnQ8ks+nTBUGS3mo8Qsswhuh5oFFhTc= Subject key identifier: 99:AD:F3:D5:B9:2D:E0:C8:AE:2B:91:17:53:D8:75:D5:2C:CD:EF:12 Certificate issuer: /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842 Certificate serial: 010D0C9F4328584A46A5B12B034DC57ED31D5E00 Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/8168b368-620e-38d3-8bcc-8fce21790e7d.roa Signing time: Sun 22 Jun 2025 13:01:03 +0000 ROA not before: Sun 22 Jun 2025 13:01:03 +0000 ROA not after: Sat 20 Sep 2025 13:01:03 +0000 asID: 2559 IP address blocks: 198.241.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:46:a5:b1:2b:03:4d:c5:7e:d3:1d:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842 Validity Not Before: Jun 22 13:01:03 2025 GMT Not After : Sep 20 13:01:03 2025 GMT Subject: CN=d56f63d9-e0b1-4c74-8256-d201376ff416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:74:af:73:1e:1e:9f:f4:09:2b:ba:c3:f8:f3: b5:f9:53:9e:e0:ae:50:94:58:46:b5:f0:9d:8f:22: 92:fe:6f:86:06:ff:36:fa:a1:20:dd:02:04:f6:f6: fd:8f:62:c7:4b:fe:29:26:ab:7d:f7:e5:3d:81:a1: 34:6f:ef:4c:72:e6:e8:3d:2f:fb:b4:e7:3e:df:30: 23:71:4a:4f:3e:84:a9:e2:25:ea:d1:da:a8:05:d3: 4b:db:f2:da:05:91:a3:03:64:d0:f9:32:dd:d3:54: c5:4b:d0:3a:32:fb:7c:b0:52:27:a7:97:07:34:4b: 28:51:1a:eb:c6:00:96:ea:b1:4b:8b:c3:89:52:22: 4b:b1:ac:f1:94:bd:1b:7c:d3:cb:66:55:22:bf:43: cb:02:48:3f:8f:8d:2b:0f:8d:f8:c5:87:4e:2d:95: 88:62:55:17:40:69:5b:06:f5:2b:fd:2c:9b:88:98: 7c:1d:50:cd:7d:98:de:ff:50:ff:ea:c8:68:e3:3b: db:68:f4:88:17:8b:5f:51:f6:db:71:3e:1c:4f:63: e9:db:a0:5a:37:7a:dd:ef:21:fa:26:ef:5e:11:a8: 4c:a5:85:af:8e:82:ea:5f:b1:37:b3:77:de:9a:e6: aa:56:5e:d0:cb:8c:8a:50:90:f4:3e:b0:71:4f:d7: 69:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:AD:F3:D5:B9:2D:E0:C8:AE:2B:91:17:53:D8:75:D5:2C:CD:EF:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/8168b368-620e-38d3-8bcc-8fce21790e7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl X509v3 Authority Key Identifier: keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer sbgp-ipAddrBlock: critical IPv4: 198.241.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:c8:f4:af:4f:04:7d:6a:f9:de:a8:7a:2e:e1:64:0d:49:8b: ee:29:84:4e:57:c5:0f:41:aa:76:3b:d7:dd:6a:d0:c5:93:91: e9:4a:3d:2f:27:a2:2d:8d:6f:77:94:28:19:54:f0:bf:f4:cf: 22:6c:d5:00:3b:2c:37:4b:a6:26:4a:1b:33:db:d5:9d:88:f6: a4:5a:89:cb:72:c5:1c:be:dc:17:76:d7:c0:70:e1:44:80:5f: ab:72:7e:51:6f:7a:84:ec:0d:74:2e:be:8f:a4:eb:57:5d:f5: 9f:28:22:f4:6d:79:79:f2:29:72:5b:71:10:0f:1e:de:18:1b: 69:58:29:b1:fc:1c:14:2e:ea:85:31:dd:4c:65:49:de:e3:b3: 45:ca:23:aa:e7:2b:36:87:a5:12:02:93:14:ee:9d:47:8f:eb: 5f:5b:5c:d6:6c:e9:79:25:3e:92:f2:c6:70:5b:fc:73:b9:5f: aa:5c:1c:8c:6c:66:b5:eb:62:28:7e:dd:c9:71:92:5a:57:43: 8c:5b:69:cf:ab:19:5a:df:e8:d1:36:30:5e:e0:e9:31:c5:d1: 10:53:77:0e:bc:c8:2d:3a:03:b2:12:71:76:91:93:a5:d4:ee: 47:af:8a:45:2f:60:18:59:ce:a8:b8:9d:34:99:a2:6f:ef:12: c0:2c:62:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpGpbErA03FftMdXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUwNjQ5N2UtZTljYy00NWNiLTg1ZDYtY2YyZTU4ZTUx ODQyMB4XDTI1MDYyMjEzMDEwM1oXDTI1MDkyMDEzMDEwM1owLzEtMCsGA1UEAxMk ZDU2ZjYzZDktZTBiMS00Yzc0LTgyNTYtZDIwMTM3NmZmNDE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHSvcx4en/QJK7rD+PO1+VOe4K5QlFhGtfCd jyKS/m+GBv82+qEg3QIE9vb9j2LHS/4pJqt99+U9gaE0b+9McuboPS/7tOc+3zAj cUpPPoSp4iXq0dqoBdNL2/LaBZGjA2TQ+TLd01TFS9A6Mvt8sFInp5cHNEsoURrr xgCW6rFLi8OJUiJLsazxlL0bfNPLZlUiv0PLAkg/j40rD434xYdOLZWIYlUXQGlb BvUr/SybiJh8HVDNfZje/1D/6sho4zvbaPSIF4tfUfbbcT4cT2Pp26BaN3rd7yH6 Ju9eEahMpYWvjoLqX7E3s3femuaqVl7Qy4yKUJD0PrBxT9dplQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmt89W5LeDIriuRF1PYddUsze8SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2 NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJlNThlNTE4NDIvODE2OGIzNjgtNjIwZS0z OGQzLThiY2MtOGZjZTIxNzkwZTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGUwNjQ5N2UtZTljYy00NWNiLTg1 ZDYtY2YyZTU4ZTUxODQyLzRlMDY0OTdlLWU5Y2MtNDVjYi04NWQ2LWNmMmU1OGU1 MTg0Mi5jcmwwHwYDVR0jBBgwFoAUV2+fxmb20SnMf8gO5fhHtMv00YEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJl NThlNTE4NDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxvGqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjI9K9PBH1q+d6oei7hZA1Ji+4phE5XxQ9BqnY7191q0MWTkelKPS8n oi2Nb3eUKBlU8L/0zyJs1QA7LDdLpiZKGzPb1Z2I9qRaictyxRy+3Bd218Bw4USA X6tyflFveoTsDXQuvo+k61dd9Z8oIvRteXnyKXJbcRAPHt4YG2lYKbH8HBQu6oUx 3UxlSd7js0XKI6rnKzaHpRICkxTunUeP619bXNZs6XklPpLyxnBb/HO5X6pcHIxs ZrXrYih+3clxklpXQ4xbac+rGVrf6NE2MF7g6THF0RBTdw68yC06A7IScXaRk6XU 7kevikUvYBhZzqi4nTSZom/vEsAsYo0= -----END CERTIFICATE-----Generated at Mon Jun 30 11:57:31 2025 by rpki-client