$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/d69391f3-6e1a-3ee4-8354-30ffcd168588.roa File: d69391f3-6e1a-3ee4-8354-30ffcd168588.roa (raw, json) Hash identifier: hQ560v7jQh0mxTcp88Wcnkkxf0fHm9nPg/AOy7fVtfs= Subject key identifier: 0C:15:70:D0:60:7E:A3:2B:A0:CE:E3:F6:84:DE:6F:B1:AE:BE:98:1A Certificate issuer: /CN=0605680b-ca76-43b6-81d9-2ac50993c59e Certificate serial: 010D0C9F4328584A549B1BE27F308D0A5ABBF334 Authority key identifier: 49:48:66:C9:D8:4D:D9:14:35:F0:D0:67:A8:07:5B:30:95:FA:F4:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/d69391f3-6e1a-3ee4-8354-30ffcd168588.roa Signing time: Fri 27 Jun 2025 13:01:05 +0000 ROA not before: Fri 27 Jun 2025 13:01:05 +0000 ROA not after: Thu 25 Sep 2025 13:01:05 +0000 asID: 11758 IP address blocks: 198.231.28.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/0605680b-ca76-43b6-81d9-2ac50993c59e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/0605680b-ca76-43b6-81d9-2ac50993c59e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:54:9b:1b:e2:7f:30:8d:0a:5a:bb:f3:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0605680b-ca76-43b6-81d9-2ac50993c59e Validity Not Before: Jun 27 13:01:05 2025 GMT Not After : Sep 25 13:01:05 2025 GMT Subject: CN=1a08d152-6581-42bd-ab95-b3856e397da5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ce:d5:85:15:8c:3d:da:d6:78:19:27:e2:1b: 7d:ce:7e:91:27:90:6f:9c:ee:29:c5:aa:1a:db:e5: eb:16:67:aa:ff:93:ef:fb:d6:95:c1:67:b5:0d:27: 19:8a:58:d2:cd:40:2f:70:b3:21:57:b3:92:c7:ea: 9b:a9:73:5d:f3:e2:05:18:68:1c:e3:24:92:72:32: b9:69:3c:79:6e:81:4d:37:3e:a8:c6:c4:d8:2e:fe: ed:48:57:09:d6:fe:8a:32:42:a3:9f:1e:d9:32:6e: a5:28:47:7c:5b:a6:ad:3c:4f:b4:79:cf:11:b8:65: d4:bb:84:57:e2:6a:26:12:85:ff:9a:53:14:ad:4f: 54:03:a6:16:95:9b:65:f3:57:33:eb:4a:1c:ec:df: a5:29:14:02:1d:87:3b:c6:e9:62:ef:e6:5b:78:88: f0:9e:85:1f:79:23:6a:d7:b6:fb:86:67:2d:f9:d2: 37:83:7f:83:af:5b:35:ad:88:9a:f3:33:01:55:06: 65:80:de:55:cd:35:d9:0b:00:3d:7a:da:30:18:d0: ce:85:09:f7:b2:4a:24:5d:e2:ae:d5:39:30:53:99: 90:11:15:a5:8d:a6:5e:0c:c4:2d:83:0f:29:57:32: 3a:92:d7:23:0e:d0:e1:36:44:2e:aa:5e:a1:78:09: 65:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:15:70:D0:60:7E:A3:2B:A0:CE:E3:F6:84:DE:6F:B1:AE:BE:98:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/d69391f3-6e1a-3ee4-8354-30ffcd168588.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/0605680b-ca76-43b6-81d9-2ac50993c59e.crl X509v3 Authority Key Identifier: keyid:49:48:66:C9:D8:4D:D9:14:35:F0:D0:67:A8:07:5B:30:95:FA:F4:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e.cer sbgp-ipAddrBlock: critical IPv4: 198.231.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:9f:48:f3:60:f5:b2:20:cc:1f:14:62:e8:fb:2d:0b:6f:0a: 89:25:45:cc:06:c6:76:b2:59:ae:65:0b:66:ab:1d:d8:82:80: 96:96:1c:3b:12:8d:17:02:84:12:9e:15:5b:6b:35:f9:54:d3: 5b:24:35:c0:e4:36:c1:b9:eb:56:ec:48:da:eb:ac:c2:53:05: d5:d1:17:fb:ae:99:f8:06:15:32:f2:6d:c4:79:87:fa:0e:3f: 1c:aa:37:7c:9c:6a:5b:78:f9:49:f9:9d:21:bd:ea:9e:29:e3: a5:9e:17:7e:70:a0:fe:b5:91:72:ac:84:3d:b2:42:0f:dd:a8: e7:80:95:01:03:62:6b:ab:6f:4b:e6:66:46:e1:30:a8:56:f9: 81:35:22:9f:7a:aa:37:7b:0c:a2:6f:b9:d9:b2:6e:37:24:dc: a2:15:72:3b:a6:50:ae:78:16:59:1e:4d:f9:ac:ae:66:c7:5a: ff:a5:f2:98:9d:50:e0:75:73:eb:e8:ad:0a:26:1e:09:ac:97: 7e:99:9a:65:fb:c9:f2:0d:57:b0:d9:7a:97:70:7a:6a:ce:4a: d9:33:13:ba:f5:57:c4:40:e6:4a:51:87:0c:09:a3:6f:4b:6c: d9:3f:ba:39:67:7e:f3:dd:11:ab:a1:11:73:d4:66:a5:39:3e: aa:96:f4:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpUmxvifzCNClq78zQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDYwNTY4MGItY2E3Ni00M2I2LTgxZDktMmFjNTA5OTNj NTllMB4XDTI1MDYyNzEzMDEwNVoXDTI1MDkyNTEzMDEwNVowLzEtMCsGA1UEAxMk MWEwOGQxNTItNjU4MS00MmJkLWFiOTUtYjM4NTZlMzk3ZGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgs7VhRWMPdrWeBkn4ht9zn6RJ5BvnO4pxaoa 2+XrFmeq/5Pv+9aVwWe1DScZiljSzUAvcLMhV7OSx+qbqXNd8+IFGGgc4ySScjK5 aTx5boFNNz6oxsTYLv7tSFcJ1v6KMkKjnx7ZMm6lKEd8W6atPE+0ec8RuGXUu4RX 4momEoX/mlMUrU9UA6YWlZtl81cz60oc7N+lKRQCHYc7xuli7+ZbeIjwnoUfeSNq 17b7hmct+dI3g3+Dr1s1rYia8zMBVQZlgN5VzTXZCwA9etowGNDOhQn3skokXeKu 1TkwU5mQERWljaZeDMQtgw8pVzI6ktcjDtDhNkQuql6heAllMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAwVcNBgfqMroM7j9oTeb7GuvpgaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wNjA1 NjgwYi1jYTc2LTQzYjYtODFkOS0yYWM1MDk5M2M1OWUvZDY5MzkxZjMtNmUxYS0z ZWU0LTgzNTQtMzBmZmNkMTY4NTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDYwNTY4MGItY2E3Ni00M2I2LTgx ZDktMmFjNTA5OTNjNTllLzA2MDU2ODBiLWNhNzYtNDNiNi04MWQ5LTJhYzUwOTkz YzU5ZS5jcmwwHwYDVR0jBBgwFoAUSUhmydhN2RQ18NBnqAdbMJX69FwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wNjA1NjgwYi1jYTc2LTQzYjYtODFkOS0yYWM1 MDk5M2M1OWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxuccMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGfSPNg9bIgzB8UYuj7LQtvCoklRcwGxnayWa5lC2arHdiCgJaWHDsS jRcChBKeFVtrNflU01skNcDkNsG561bsSNrrrMJTBdXRF/uumfgGFTLybcR5h/oO PxyqN3ycalt4+Un5nSG96p4p46WeF35woP61kXKshD2yQg/dqOeAlQEDYmurb0vm ZkbhMKhW+YE1Ip96qjd7DKJvudmybjck3KIVcjumUK54FlkeTfmsrmbHWv+l8pid UOB1c+vorQomHgmsl36ZmmX7yfINV7DZepdwemrOStkzE7r1V8RA5kpRhwwJo29L bNk/ujlnfvPdEauhEXPUZqU5PqqW9Hc= -----END CERTIFICATE-----Generated at Mon Jun 30 05:40:52 2025 by rpki-client