$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/c0ac7cb8-e117-3e4d-9ccf-fd2894dc266c.roa File: c0ac7cb8-e117-3e4d-9ccf-fd2894dc266c.roa (raw, json) Hash identifier: 9qnTa0nSFxEWdqJdtaxp8LA5YIau6+tX+9RVltwBlUU= Subject key identifier: 3E:B1:29:6A:15:05:4C:49:B5:1E:2D:3E:D0:A4:41:7F:BC:C4:FC:DA Certificate issuer: /CN=4e87c0b3-383a-438c-aa45-1e5df0d0e061 Certificate serial: 010D0C9F4328584A03A551995452DCF3E93B8D00 Authority key identifier: 21:B4:6D:BF:CB:19:2A:8D:29:54:F0:6B:20:82:83:C2:12:1B:7F:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/c0ac7cb8-e117-3e4d-9ccf-fd2894dc266c.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 16509 IP address blocks: 198.175.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:51:99:54:52:dc:f3:e9:3b:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e87c0b3-383a-438c-aa45-1e5df0d0e061 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=6608e5a3-e42a-4722-972b-3faa21c0b042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:95:e8:a2:82:7b:11:6a:da:4d:eb:d7:38:34: e3:16:39:06:48:b3:d7:b0:98:8c:f5:0f:95:b5:07: 94:2d:38:f2:01:db:3a:ea:52:77:f3:06:6d:1f:5f: 1e:d9:a9:89:f6:ea:e5:e6:aa:6b:a2:e1:ef:11:4e: a0:4f:03:4f:2e:d8:cb:eb:2e:9a:31:e1:90:47:71: 1e:86:4e:5a:c9:41:b4:a8:a9:94:65:61:de:d8:d4: fa:03:6f:0d:84:40:49:80:01:00:e0:cd:2f:ae:42: 78:15:14:e3:6d:e9:bd:d4:a5:b0:6d:e0:78:aa:8c: e5:b1:04:6c:d7:6d:d3:a3:2f:05:4e:23:2e:49:8f: 21:a0:26:d0:78:8d:2a:d2:d9:f0:7f:be:df:a4:45: e3:de:03:ee:41:ca:24:ef:55:26:01:25:6c:ba:5e: db:56:13:32:1f:b8:a8:3b:b3:74:48:dc:ea:10:d2: 92:c3:db:aa:69:c8:ea:37:41:c8:73:d3:fc:e8:b0: 6a:7d:ab:2a:7b:26:8f:8e:69:ff:ea:4d:82:41:68: 9f:59:94:06:86:f0:bc:3c:32:0e:03:62:79:54:fe: 86:2b:c1:3f:69:f0:57:a3:b4:3a:51:58:63:fb:04: 2d:e8:be:27:28:cd:3e:26:62:85:1d:e2:04:70:a1: a9:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:B1:29:6A:15:05:4C:49:B5:1E:2D:3E:D0:A4:41:7F:BC:C4:FC:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/c0ac7cb8-e117-3e4d-9ccf-fd2894dc266c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.crl X509v3 Authority Key Identifier: keyid:21:B4:6D:BF:CB:19:2A:8D:29:54:F0:6B:20:82:83:C2:12:1B:7F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer sbgp-ipAddrBlock: critical IPv4: 198.175.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:ff:66:29:d8:1c:8f:eb:fb:98:21:84:d2:b4:f1:21:1b:da: 52:ca:05:f0:ba:8c:88:d7:f4:dd:eb:a0:1b:23:3e:17:d1:db: 63:dc:da:3d:28:c4:5f:ab:45:57:4f:6a:22:7d:fa:d7:cf:01: 39:da:40:7e:6c:d1:26:c3:b8:c0:79:c1:53:54:24:3a:58:ee: 65:05:7f:35:0c:59:97:5e:36:bb:33:b4:2c:06:e4:1b:04:a6: 6a:06:58:ab:02:b5:bc:10:35:4a:d5:0f:74:5e:ea:b4:87:eb: 83:c5:37:74:71:ac:9c:e2:ab:70:05:d6:c5:5a:3f:13:db:a8: 9d:9c:38:49:ab:14:55:0a:e3:88:65:30:33:13:56:61:05:e4: 6e:d4:c4:44:21:b7:17:5a:5f:18:8a:21:aa:1f:aa:3b:c3:ee: a6:f0:13:d6:48:fb:f7:e6:e0:21:2a:d6:de:e4:b1:07:1a:07: e3:85:97:e1:c8:c7:e8:46:db:95:7b:bc:a8:97:80:0a:52:b4: 69:8d:c7:22:18:09:f5:40:31:24:3a:be:96:41:6a:07:fe:7b: a8:41:43:5d:27:d8:8c:ff:b9:81:3c:57:04:01:7d:b4:46:18: e4:7a:52:af:ef:8f:b1:ac:13:b2:92:a0:c9:57:e8:ca:dc:6e: 14:51:ca:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpVGZVFLc8+k7jQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU4N2MwYjMtMzgzYS00MzhjLWFhNDUtMWU1ZGYwZDBl MDYxMB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk NjYwOGU1YTMtZTQyYS00NzIyLTk3MmItM2ZhYTIxYzBiMDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZXoooJ7EWraTevXODTjFjkGSLPXsJiM9Q+V tQeULTjyAds66lJ38wZtH18e2amJ9url5qprouHvEU6gTwNPLtjL6y6aMeGQR3Ee hk5ayUG0qKmUZWHe2NT6A28NhEBJgAEA4M0vrkJ4FRTjbem91KWwbeB4qozlsQRs 123Toy8FTiMuSY8hoCbQeI0q0tnwf77fpEXj3gPuQcok71UmASVsul7bVhMyH7io O7N0SNzqENKSw9uqacjqN0HIc9P86LBqfasqeyaPjmn/6k2CQWifWZQGhvC8PDIO A2J5VP6GK8E/afBXo7Q6UVhj+wQt6L4nKM0+JmKFHeIEcKGpSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD6xKWoVBUxJtR4tPtCkQX+8xPzaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80ZTg3 YzBiMy0zODNhLTQzOGMtYWE0NS0xZTVkZjBkMGUwNjEvYzBhYzdjYjgtZTExNy0z ZTRkLTljY2YtZmQyODk0ZGMyNjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGU4N2MwYjMtMzgzYS00MzhjLWFh NDUtMWU1ZGYwZDBlMDYxLzRlODdjMGIzLTM4M2EtNDM4Yy1hYTQ1LTFlNWRmMGQw ZTA2MS5jcmwwHwYDVR0jBBgwFoAUIbRtv8sZKo0pVPBrIIKDwhIbf9kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80ZTg3YzBiMy0zODNhLTQzOGMtYWE0NS0xZTVk ZjBkMGUwNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxq86MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKL/ZinYHI/r+5ghhNK08SEb2lLKBfC6jIjX9N3roBsjPhfR22Pc2j0o xF+rRVdPaiJ9+tfPATnaQH5s0SbDuMB5wVNUJDpY7mUFfzUMWZdeNrsztCwG5BsE pmoGWKsCtbwQNUrVD3Re6rSH64PFN3RxrJziq3AF1sVaPxPbqJ2cOEmrFFUK44hl MDMTVmEF5G7UxEQhtxdaXxiKIaofqjvD7qbwE9ZI+/fm4CEq1t7ksQcaB+OFl+HI x+hG25V7vKiXgApStGmNxyIYCfVAMSQ6vpZBagf+e6hBQ10n2Iz/uYE8VwQBfbRG GOR6Uq/vj7GsE7KSoMlX6MrcbhRRys0= -----END CERTIFICATE-----Generated at Sun Jun 29 07:38:09 2025 by rpki-client