$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/f7c2d0bc-7fba-3c1a-b69a-e8c0639810bc.roa File: f7c2d0bc-7fba-3c1a-b69a-e8c0639810bc.roa (raw, json) Hash identifier: Y+9TPvQi7UfiY/4X249lTHvetaRRhRrI4MGajHvvbG0= Subject key identifier: 9E:9C:DF:5C:F5:C0:AD:A9:3C:51:92:34:2E:83:E0:C3:D7:60:F9:BF Certificate issuer: /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842 Certificate serial: 010D0C9F4328584A5A3078B6490032D69F1B7700 Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/f7c2d0bc-7fba-3c1a-b69a-e8c0639810bc.roa Signing time: Sun 29 Jun 2025 13:01:03 +0000 ROA not before: Sun 29 Jun 2025 13:01:03 +0000 ROA not after: Sat 27 Sep 2025 13:01:03 +0000 asID: 2559 IP address blocks: 198.217.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5a:30:78:b6:49:00:32:d6:9f:1b:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842 Validity Not Before: Jun 29 13:01:03 2025 GMT Not After : Sep 27 13:01:03 2025 GMT Subject: CN=fc179689-8cfa-4fd3-bd2a-4ed39e6dad5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0f:da:a1:78:41:2d:5f:43:4c:c1:29:58:e8: 32:01:76:9c:e8:dc:bd:c0:0a:80:bc:fb:b5:54:26: 4d:d0:ac:ad:5c:34:d0:30:e8:85:77:a5:8d:da:2c: ba:e3:91:ef:7d:50:8a:6b:27:8e:bf:18:9a:84:8b: 79:cd:15:00:83:ee:97:cd:2b:c4:4e:c0:1c:15:66: e5:f3:99:11:29:cb:44:77:d1:f6:34:c6:d4:be:35: b4:1d:eb:bc:b8:a5:f2:a3:1a:6d:a0:f2:12:33:c3: 9b:80:98:b4:34:58:a0:32:11:db:96:a9:66:f3:ff: c1:80:cd:e0:c3:39:bd:b8:e7:56:d9:37:cb:c1:cf: 8a:c6:d5:55:23:e9:f4:7b:98:6d:f6:81:17:0b:89: 7d:6f:f8:6e:5b:13:6b:dc:68:db:16:db:20:15:92: b1:0c:ad:6a:60:f7:c8:e7:27:f1:44:f9:41:16:ee: 2c:95:d2:53:c2:a4:99:16:fd:8d:dd:9b:96:b6:bb: 72:26:c7:21:59:24:bf:3f:b1:73:f4:00:ee:c3:1a: 49:c2:a5:f8:e7:4e:53:6a:db:fc:f4:39:9c:14:9e: 71:03:df:2d:a7:af:10:45:5f:cd:17:bf:db:85:47: 21:22:b8:b6:df:bd:b4:2c:52:eb:8a:e2:ea:59:74: d6:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:9C:DF:5C:F5:C0:AD:A9:3C:51:92:34:2E:83:E0:C3:D7:60:F9:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/f7c2d0bc-7fba-3c1a-b69a-e8c0639810bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl X509v3 Authority Key Identifier: keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer sbgp-ipAddrBlock: critical IPv4: 198.217.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:50:9e:fc:07:ed:e7:67:10:fb:6a:52:9b:82:85:2e:f6:d8: ae:66:84:54:0b:a4:f3:46:55:21:a5:48:29:26:b0:01:6d:77: 05:f5:cc:5b:ab:89:76:bb:31:2b:14:b3:15:91:9f:39:b5:ba: 20:ed:c8:d5:74:a2:f2:52:df:91:8f:66:60:63:72:ca:a1:8c: 04:d7:bc:d2:eb:fd:8e:f2:7e:67:0d:05:a8:fa:c0:2f:a1:80: 30:41:8a:4e:90:41:c9:42:0a:80:52:4b:86:77:54:eb:f7:bb: 67:c1:fa:04:0f:7d:81:26:a2:99:57:42:11:cc:b4:0c:1c:6e: 78:6f:bd:3e:1e:ef:ea:f0:97:8e:e8:94:bf:49:f7:63:95:d0: e3:ce:c1:47:ce:9b:88:b0:24:55:2c:1d:15:1d:9b:ac:61:45: 33:39:b5:e8:a8:68:92:0f:8b:50:4a:23:d1:c9:7c:63:3c:2f: fa:96:30:f3:3e:83:9f:a8:ed:50:b9:53:dc:41:73:6f:a1:08: 2f:8d:03:20:40:56:17:3d:0f:29:c9:73:2f:08:c8:13:1e:d6: 91:8a:61:93:74:07:c5:00:d2:5a:8a:6a:ec:38:8a:57:57:a5: e8:5b:e8:ed:e7:0e:50:90:26:5f:7e:38:6f:d0:61:c7:b2:68: 4f:82:eb:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpaMHi2SQAy1p8bdwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUwNjQ5N2UtZTljYy00NWNiLTg1ZDYtY2YyZTU4ZTUx ODQyMB4XDTI1MDYyOTEzMDEwM1oXDTI1MDkyNzEzMDEwM1owLzEtMCsGA1UEAxMk ZmMxNzk2ODktOGNmYS00ZmQzLWJkMmEtNGVkMzllNmRhZDVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxg/aoXhBLV9DTMEpWOgyAXac6Ny9wAqAvPu1 VCZN0KytXDTQMOiFd6WN2iy645HvfVCKayeOvxiahIt5zRUAg+6XzSvETsAcFWbl 85kRKctEd9H2NMbUvjW0Heu8uKXyoxptoPISM8ObgJi0NFigMhHblqlm8//BgM3g wzm9uOdW2TfLwc+KxtVVI+n0e5ht9oEXC4l9b/huWxNr3GjbFtsgFZKxDK1qYPfI 5yfxRPlBFu4sldJTwqSZFv2N3ZuWtrtyJschWSS/P7Fz9ADuwxpJwqX4505Tatv8 9DmcFJ5xA98tp68QRV/NF7/bhUchIri23720LFLriuLqWXTWkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ6c31z1wK2pPFGSNC6D4MPXYPm/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2 NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJlNThlNTE4NDIvZjdjMmQwYmMtN2ZiYS0z YzFhLWI2OWEtZThjMDYzOTgxMGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGUwNjQ5N2UtZTljYy00NWNiLTg1 ZDYtY2YyZTU4ZTUxODQyLzRlMDY0OTdlLWU5Y2MtNDVjYi04NWQ2LWNmMmU1OGU1 MTg0Mi5jcmwwHwYDVR0jBBgwFoAUV2+fxmb20SnMf8gO5fhHtMv00YEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJl NThlNTE4NDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxtmIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNQnvwH7ednEPtqUpuChS722K5mhFQLpPNGVSGlSCkmsAFtdwX1zFur iXa7MSsUsxWRnzm1uiDtyNV0ovJS35GPZmBjcsqhjATXvNLr/Y7yfmcNBaj6wC+h gDBBik6QQclCCoBSS4Z3VOv3u2fB+gQPfYEmoplXQhHMtAwcbnhvvT4e7+rwl47o lL9J92OV0OPOwUfOm4iwJFUsHRUdm6xhRTM5teioaJIPi1BKI9HJfGM8L/qWMPM+ g5+o7VC5U9xBc2+hCC+NAyBAVhc9DynJcy8IyBMe1pGKYZN0B8UA0lqKauw4ildX pehb6O3nDlCQJl9+OG/QYceyaE+C640= -----END CERTIFICATE-----Generated at Mon Jun 30 10:59:45 2025 by rpki-client