$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/bc90a123-68b1-322a-9457-bc94097ef1ea.roa File: bc90a123-68b1-322a-9457-bc94097ef1ea.roa (raw, json) Hash identifier: CkEDP6UjtK+7zg8VeB5LWJEspnJ9X8a4SOfh4BSz+kQ= Subject key identifier: 84:6E:DA:9B:3E:4A:22:7F:5D:7B:E0:DA:84:07:05:E9:D5:A8:FF:54 Certificate issuer: /CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f Certificate serial: 010D0C9F4328584A5E419484ACE0E6278E877930 Authority key identifier: 3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/bc90a123-68b1-322a-9457-bc94097ef1ea.roa Signing time: Sat 31 May 2025 01:00:50 +0000 ROA not before: Sat 31 May 2025 01:00:50 +0000 ROA not after: Fri 29 Aug 2025 01:00:50 +0000 asID: 14618 IP address blocks: 198.29.16.0/22 maxlen: 24 2602:f9e7:20::/45 maxlen: 48 2602:f9e7:28::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:41:94:84:ac:e0:e6:27:8e:87:79:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f Validity Not Before: May 31 01:00:50 2025 GMT Not After : Aug 29 01:00:50 2025 GMT Subject: CN=ff2badcf-06ee-44a6-8906-e91689fe1103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:0f:03:60:40:00:c0:81:a5:d3:bb:1e:ad:e7: a8:14:23:5f:15:f3:4e:28:33:cb:86:02:90:d8:38: 72:41:c0:df:8a:04:fa:19:40:89:10:31:84:1d:cc: 8d:32:0e:42:e4:ae:5e:42:26:b4:bf:18:d4:35:37: 1d:de:dc:f1:2f:42:6c:ce:a5:d8:6d:63:05:15:b0: 60:9c:c2:40:5c:df:04:7d:08:8b:67:ef:fd:de:70: fc:04:a4:57:c6:4e:f5:d6:f6:3f:68:48:7a:aa:9f: 0a:7a:0f:9e:df:fc:16:2c:17:d6:49:c2:5f:5f:2a: 5a:ee:8c:f6:c1:59:46:31:ac:bf:ea:e9:68:5a:29: 10:5b:11:6e:f0:41:99:8e:f9:c7:1a:8f:c9:5e:f3: 3c:fd:96:ec:fe:8a:c4:30:ba:17:86:06:23:52:bf: 1d:3b:9e:53:b6:50:d0:03:89:86:dc:7b:f9:ec:1a: fe:74:b5:46:4d:9c:68:c0:68:0b:99:2a:6f:de:03: 17:49:a5:cc:37:75:b1:19:19:14:44:22:75:56:fb: a8:9c:3d:e5:ab:a9:d8:95:7a:13:5b:52:a4:f4:9f: c0:ed:db:1a:e3:36:f6:63:46:0a:a5:c0:4b:b8:4e: ec:31:96:11:7e:25:8f:a4:16:14:c0:8c:2e:75:32: 75:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:6E:DA:9B:3E:4A:22:7F:5D:7B:E0:DA:84:07:05:E9:D5:A8:FF:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/bc90a123-68b1-322a-9457-bc94097ef1ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl X509v3 Authority Key Identifier: keyid:3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer sbgp-ipAddrBlock: critical IPv4: 198.29.16.0/22 IPv6: 2602:f9e7:20::-2602:f9e7:2b:ffff:ffff:ffff:ffff:ffff X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:cf:2d:29:0a:82:45:22:37:46:8a:ed:5e:8c:5a:45:9a:5d: 36:fb:44:80:85:ff:0c:df:ef:2c:9d:93:a5:8c:2d:59:68:df: 1a:01:66:e0:c6:0a:0d:5c:1b:ad:21:ea:6d:eb:35:59:ff:98: a2:83:00:00:fb:bb:d9:d5:5d:ba:72:8c:fa:38:7f:44:41:41: 28:74:2f:bb:c0:29:c6:bd:f4:dc:4e:1c:2a:ac:dd:e7:be:3a: f1:83:81:75:08:6c:7d:34:3b:77:6c:c1:a2:47:57:9a:9a:49: 2e:8e:c0:eb:a4:f7:90:09:c5:6c:f0:5f:09:c0:1c:39:02:f0: 59:e9:05:82:42:c3:05:85:6d:8c:aa:53:cd:cf:51:58:a7:3d: f0:51:bb:f4:5e:24:bb:6f:9b:fe:ae:31:a2:45:e3:a6:83:80: 74:0b:68:2e:e0:9c:76:3a:c8:88:36:a1:fb:ce:57:a1:16:f5: bf:4c:dd:f2:e1:ed:42:eb:e0:c0:6d:fd:7f:34:41:46:9c:1c: dc:ad:58:4b:ba:6f:31:e6:2a:c6:a8:9a:09:42:ba:a5:0a:95: 24:d2:0f:69:98:b4:8d:35:7b:c0:6e:24:f4:fd:0b:6e:84:75: be:1d:a9:1e:0c:07:79:72:73:8e:c5:c1:ca:11:8f:e3:aa:11: b1:1f:f0:5d -----BEGIN CERTIFICATE----- MIIGXzCCBUegAwIBAgIUAQ0Mn0MoWEpeQZSErODmJ46HeTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFkMDg2NWUtNzc4Ni00YzY2LTlmOTEtYmMxZjQ2ZjJj MzRmMB4XDTI1MDUzMTAxMDA1MFoXDTI1MDgyOTAxMDA1MFowLzEtMCsGA1UEAxMk ZmYyYmFkY2YtMDZlZS00NGE2LTg5MDYtZTkxNjg5ZmUxMTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2g8DYEAAwIGl07sereeoFCNfFfNOKDPLhgKQ 2DhyQcDfigT6GUCJEDGEHcyNMg5C5K5eQia0vxjUNTcd3tzxL0JszqXYbWMFFbBg nMJAXN8EfQiLZ+/93nD8BKRXxk711vY/aEh6qp8Keg+e3/wWLBfWScJfXypa7oz2 wVlGMay/6uloWikQWxFu8EGZjvnHGo/JXvM8/Zbs/orEMLoXhgYjUr8dO55TtlDQ A4mG3Hv57Br+dLVGTZxowGgLmSpv3gMXSaXMN3WxGRkURCJ1VvuonD3lq6nYlXoT W1Kk9J/A7dsa4zb2Y0YKpcBLuE7sMZYRfiWPpBYUwIwudTJ1zQIDAQABo4IDcTCC A20wHQYDVR0OBBYEFIRu2ps+SiJ/XXvg2oQHBenVqP9UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81YWQw ODY1ZS03Nzg2LTRjNjYtOWY5MS1iYzFmNDZmMmMzNGYvYmM5MGExMjMtNjhiMS0z MjJhLTk0NTctYmM5NDA5N2VmMWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWFkMDg2NWUtNzc4Ni00YzY2LTlm OTEtYmMxZjQ2ZjJjMzRmLzVhZDA4NjVlLTc3ODYtNGM2Ni05ZjkxLWJjMWY0NmYy YzM0Zi5jcmwwHwYDVR0jBBgwFoAUOq+U75raoImJh13K6GCGyUDjDbgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81YWQwODY1ZS03Nzg2LTRjNjYtOWY5MS1iYzFm NDZmMmMzNGYuY2VyMDsGCCsGAQUFBwEHAQH/BCwwKjAMBAIAATAGAwQCxh0QMBoE AgACMBQwEgMHBSYC+ecAIAMHAiYC+ecAKDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBizy0pCoJFIjdGiu1e jFpFml02+0SAhf8M3+8snZOljC1ZaN8aAWbgxgoNXButIept6zVZ/5iigwAA+7vZ 1V26coz6OH9EQUEodC+7wCnGvfTcThwqrN3nvjrxg4F1CGx9NDt3bMGiR1eamkku jsDrpPeQCcVs8F8JwBw5AvBZ6QWCQsMFhW2MqlPNz1FYpz3wUbv0XiS7b5v+rjGi ReOmg4B0C2gu4Jx2OsiINqH7zlehFvW/TN3y4e1C6+DAbf1/NEFGnBzcrVhLum8x 5irGqJoJQrqlCpUk0g9pmLSNNXvAbiT0/QtuhHW+HakeDAd5cnOOxcHKEY/jqhGx H/Bd -----END CERTIFICATE-----Generated at Tue Jul 1 09:11:39 2025 by rpki-client