$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/8631463d-fa88-3c11-b8a3-266ffd71912d.roa File: 8631463d-fa88-3c11-b8a3-266ffd71912d.roa (raw, json) Hash identifier: FaTF3th8T8wtDbohJCyB2brbqwF+T23SvvtZdXjADrk= Subject key identifier: 83:08:66:C8:0D:F9:F9:FC:1E:2A:24:E6:22:AA:18:AE:EC:F6:ED:30 Certificate issuer: /CN=65f8721d-b6b4-4e88-9328-3a834dc36005 Certificate serial: 010D0C9F43285849C904F598B5D30E7C2AE9C200 Authority key identifier: E3:2C:B6:FD:01:50:F1:21:ED:52:65:5E:96:5C:7A:D4:FB:4F:77:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/8631463d-fa88-3c11-b8a3-266ffd71912d.roa Signing time: Thu 08 May 2025 13:01:00 +0000 ROA not before: Thu 08 May 2025 13:01:00 +0000 ROA not after: Wed 06 Aug 2025 13:01:00 +0000 asID: 4226 IP address blocks: 198.91.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:04:f5:98:b5:d3:0e:7c:2a:e9:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65f8721d-b6b4-4e88-9328-3a834dc36005 Validity Not Before: May 8 13:01:00 2025 GMT Not After : Aug 6 13:01:00 2025 GMT Subject: CN=7a1cc90c-f708-4eed-9be8-cd794a4f7339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:dd:62:d2:ac:d5:b5:70:72:91:d5:19:8a:b4: 3b:36:37:53:3f:95:5a:30:5e:36:66:85:f1:c9:46: eb:7c:cf:67:03:df:2f:df:c2:58:05:1f:22:e4:b1: 3f:2c:b4:25:c8:60:5a:ae:be:c5:91:31:14:84:3b: 89:90:01:c6:49:d0:74:48:08:80:8f:2a:c7:18:b1: 29:82:39:69:5d:47:d9:4a:03:5d:98:b9:78:49:af: 82:42:21:aa:53:74:1d:40:b2:5b:2b:b9:58:89:64: 20:b4:de:64:01:9a:cb:44:38:b7:e6:93:f5:cb:2d: 23:02:66:c7:56:3c:c2:d6:dc:3e:c4:b5:db:8e:e6: db:9b:75:eb:1c:43:e3:38:45:23:ce:e2:e4:e6:cb: c7:7d:e8:df:19:5f:9a:2a:d9:12:8d:dc:10:c0:9c: e4:2d:27:f5:9b:d9:0c:a7:a0:04:26:e3:11:d3:23: 9e:8d:06:db:f1:21:3b:59:98:2a:d8:3b:db:a5:51: fd:0a:93:6d:da:d8:64:9f:0a:06:e0:e0:44:a9:15: 0d:96:3d:06:58:5f:fd:80:c4:e3:dc:21:c0:bb:b0: 23:90:86:44:a6:22:2a:75:bd:89:03:23:f3:ce:7f: a8:89:3b:8f:10:9c:89:88:5b:84:6c:61:42:87:29: 29:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:08:66:C8:0D:F9:F9:FC:1E:2A:24:E6:22:AA:18:AE:EC:F6:ED:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/8631463d-fa88-3c11-b8a3-266ffd71912d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.crl X509v3 Authority Key Identifier: keyid:E3:2C:B6:FD:01:50:F1:21:ED:52:65:5E:96:5C:7A:D4:FB:4F:77:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer sbgp-ipAddrBlock: critical IPv4: 198.91.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:79:d0:06:d4:e9:18:5d:99:97:92:06:7d:7d:c1:5c:bd:b0: 28:ea:3c:06:15:11:e9:75:b8:f8:e0:71:e1:e6:42:78:cd:a9: 0d:1b:73:33:86:9b:98:c5:2f:2a:33:df:a8:85:26:0b:8a:73: 85:f9:91:9b:ee:74:a2:11:59:45:92:e3:8d:57:c1:d3:69:d0: 33:11:9d:fd:e4:9b:a5:86:b4:a0:b0:cf:9f:a7:cd:e2:eb:2a: e5:6c:38:04:6a:63:df:df:a7:4f:9a:59:fa:cc:fc:ed:da:61: a4:9e:db:8a:9c:87:49:07:e0:57:cf:a2:4d:e3:76:23:0f:df: 59:b8:c2:c3:19:30:a0:2f:93:cb:41:fe:02:30:7a:2f:55:08: 7e:98:ba:c5:1e:ec:60:7a:91:92:89:d4:5b:ec:82:07:c9:7c: 0c:e3:56:a0:22:64:b9:d6:52:e5:57:b1:01:bd:b9:f9:cc:3e: f8:a0:3c:a7:6d:90:fb:8a:e8:70:a3:cf:99:e4:7e:3f:57:c0: d8:d5:3c:4c:8e:a7:50:99:71:fe:0b:49:92:2f:82:a3:44:d5: a9:ad:af:1e:72:aa:22:ed:27:a0:bc:4a:26:74:72:a7:a8:e3: ac:bc:94:cc:7e:0f:49:2d:91:b0:26:9d:3d:7e:21:4d:f1:77: b1:3d:66:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJBPWYtdMOfCrpwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVmODcyMWQtYjZiNC00ZTg4LTkzMjgtM2E4MzRkYzM2 MDA1MB4XDTI1MDUwODEzMDEwMFoXDTI1MDgwNjEzMDEwMFowLzEtMCsGA1UEAxMk N2ExY2M5MGMtZjcwOC00ZWVkLTliZTgtY2Q3OTRhNGY3MzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn91i0qzVtXBykdUZirQ7NjdTP5VaMF42ZoXx yUbrfM9nA98v38JYBR8i5LE/LLQlyGBarr7FkTEUhDuJkAHGSdB0SAiAjyrHGLEp gjlpXUfZSgNdmLl4Sa+CQiGqU3QdQLJbK7lYiWQgtN5kAZrLRDi35pP1yy0jAmbH VjzC1tw+xLXbjubbm3XrHEPjOEUjzuLk5svHfejfGV+aKtkSjdwQwJzkLSf1m9kM p6AEJuMR0yOejQbb8SE7WZgq2DvbpVH9CpNt2thknwoG4OBEqRUNlj0GWF/9gMTj 3CHAu7AjkIZEpiIqdb2JAyPzzn+oiTuPEJyJiFuEbGFChykpiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIMIZsgN+fn8Hiok5iKqGK7s9u0wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82NWY4 NzIxZC1iNmI0LTRlODgtOTMyOC0zYTgzNGRjMzYwMDUvODYzMTQ2M2QtZmE4OC0z YzExLWI4YTMtMjY2ZmZkNzE5MTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjVmODcyMWQtYjZiNC00ZTg4LTkz MjgtM2E4MzRkYzM2MDA1LzY1Zjg3MjFkLWI2YjQtNGU4OC05MzI4LTNhODM0ZGMz NjAwNS5jcmwwHwYDVR0jBBgwFoAU4yy2/QFQ8SHtUmVellx61PtPd/QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82NWY4NzIxZC1iNmI0LTRlODgtOTMyOC0zYTgz NGRjMzYwMDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExlswMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALN50AbU6RhdmZeSBn19wVy9sCjqPAYVEel1uPjgceHmQnjNqQ0bczOG m5jFLyoz36iFJguKc4X5kZvudKIRWUWS441XwdNp0DMRnf3km6WGtKCwz5+nzeLr KuVsOARqY9/fp0+aWfrM/O3aYaSe24qch0kH4FfPok3jdiMP31m4wsMZMKAvk8tB /gIwei9VCH6YusUe7GB6kZKJ1FvsggfJfAzjVqAiZLnWUuVXsQG9ufnMPvigPKdt kPuK6HCjz5nkfj9XwNjVPEyOp1CZcf4LSZIvgqNE1amtrx5yqiLtJ6C8SiZ0cqeo 46y8lMx+D0ktkbAmnT1+IU3xd7E9Zvg= -----END CERTIFICATE-----Generated at Sun May 11 06:47:00 2025 by rpki-client