$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0/d15da3a2-08ce-3992-8b01-fd2369adaa65.roa File: d15da3a2-08ce-3992-8b01-fd2369adaa65.roa (raw, json) Hash identifier: q82nqomq+p2hKTdtBVCrur9BSM/DR+Ib+1ZOWvdEZUU= Subject key identifier: 1E:96:4C:85:D9:31:32:18:2E:3D:26:CB:6B:59:C9:E7:3A:67:26:0F Certificate issuer: /CN=85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0 Certificate serial: 010D0C9F43285849AA4F6D7EAD4CACFF1FAB6380 Authority key identifier: 60:5F:56:E1:A0:0D:78:93:15:89:04:48:61:73:EB:08:F7:02:3E:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0/d15da3a2-08ce-3992-8b01-fd2369adaa65.roa Signing time: Sun 27 Apr 2025 13:01:01 +0000 ROA not before: Sun 27 Apr 2025 13:01:01 +0000 ROA not after: Sat 26 Jul 2025 13:01:01 +0000 asID: 62752 IP address blocks: 198.51.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0/85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0/85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:4f:6d:7e:ad:4c:ac:ff:1f:ab:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0 Validity Not Before: Apr 27 13:01:01 2025 GMT Not After : Jul 26 13:01:01 2025 GMT Subject: CN=0fa352b9-27e1-41db-8027-ed1e7c7f02b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1e:9a:ef:2f:11:f2:43:2e:db:ae:94:05:b0: 53:7a:a4:04:df:0c:ac:c3:f9:c7:6a:ad:a2:d0:de: 5b:58:f2:8c:ed:45:42:65:87:41:74:3d:4f:b1:eb: cc:35:84:1f:71:c3:8e:7d:cb:73:1f:aa:85:8e:f4: a6:2b:73:04:d9:fc:77:34:cb:82:44:97:54:1e:01: e1:61:61:cb:46:39:3c:bb:5b:49:2e:23:e3:42:5e: b6:90:71:99:0e:af:ea:54:bc:cf:ff:9b:d1:bc:d4: 30:ef:7a:1f:5a:18:ca:d3:cb:e1:f6:a4:32:41:ab: 60:8e:fa:0a:d2:c6:07:72:f2:b5:50:ed:49:aa:bd: 2f:5c:4b:2b:97:6f:f0:34:80:45:a6:5f:eb:58:15: e8:e8:ce:e7:c0:11:bb:e4:25:12:d3:b9:ed:59:51: f1:da:d9:3e:c9:bc:fa:7a:05:aa:eb:2c:57:3d:cc: 75:35:13:1f:12:ba:4c:83:29:dd:36:37:68:25:a8: db:5b:99:6e:7a:bc:95:18:88:77:f9:20:68:38:78: fd:ac:61:73:ac:35:fa:f2:b4:70:da:84:86:1d:84: 4a:22:37:cb:58:64:ac:c7:7d:f3:d7:ca:ad:f0:5f: d6:d5:97:04:92:d7:3c:ca:0e:14:43:3d:3b:25:48: 94:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:96:4C:85:D9:31:32:18:2E:3D:26:CB:6B:59:C9:E7:3A:67:26:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0/d15da3a2-08ce-3992-8b01-fd2369adaa65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0/85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0.crl X509v3 Authority Key Identifier: keyid:60:5F:56:E1:A0:0D:78:93:15:89:04:48:61:73:EB:08:F7:02:3E:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/85e2c460-9b4b-457b-bb2c-a2b00f7a0dd0.cer sbgp-ipAddrBlock: critical IPv4: 198.51.75.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:27:e5:17:38:d3:3d:b2:36:93:47:68:1c:f4:72:2c:59:89: bf:62:38:ca:4c:5b:36:36:d4:19:72:da:05:45:26:4a:7a:e1: d3:5a:e3:f2:81:26:95:43:10:22:ef:20:a8:02:41:22:75:7b: 51:5c:be:e5:6a:bb:59:80:4b:65:81:bc:31:9c:f2:0d:66:63: ed:e4:4f:e3:9b:93:df:22:35:7f:7b:fa:40:21:b6:6d:09:61: 98:86:c1:fc:fe:e5:05:34:df:41:1b:fb:78:c0:d6:9d:aa:b1: 76:ce:d3:c7:4a:34:04:12:a1:8e:97:8f:cf:db:c0:9d:5c:60: 1c:b9:44:70:63:b3:1f:10:31:98:3f:12:52:48:b7:58:7f:a5: e0:b3:69:79:61:d5:c4:c9:ab:57:e2:60:36:4d:4d:42:48:0b: 3a:02:f8:c5:6b:7d:93:3c:c1:96:c7:8f:98:fc:a8:8d:74:bb: 70:40:e1:14:8b:18:15:52:14:3b:d8:69:97:dc:7f:f5:f9:41: 2c:51:dd:0f:d3:0d:9c:49:24:60:c9:15:70:06:8a:b1:9e:07: d0:c8:be:5e:69:3e:1e:95:fc:9e:99:b8:4a:52:cc:dc:dc:6f: 5e:e8:ba:c0:83:b7:ed:e4:cc:ad:22:7c:d7:c9:9e:d8:85:25: ff:8b:fb:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmqT21+rUys/x+rY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMmM0NjAtOWI0Yi00NTdiLWJiMmMtYTJiMDBmN2Ew ZGQwMB4XDTI1MDQyNzEzMDEwMVoXDTI1MDcyNjEzMDEwMVowLzEtMCsGA1UEAxMk MGZhMzUyYjktMjdlMS00MWRiLTgwMjctZWQxZTdjN2YwMmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlh6a7y8R8kMu266UBbBTeqQE3wysw/nHaq2i 0N5bWPKM7UVCZYdBdD1PsevMNYQfccOOfctzH6qFjvSmK3ME2fx3NMuCRJdUHgHh YWHLRjk8u1tJLiPjQl62kHGZDq/qVLzP/5vRvNQw73ofWhjK08vh9qQyQatgjvoK 0sYHcvK1UO1Jqr0vXEsrl2/wNIBFpl/rWBXo6M7nwBG75CUS07ntWVHx2tk+ybz6 egWq6yxXPcx1NRMfErpMgyndNjdoJajbW5lueryVGIh3+SBoOHj9rGFzrDX68rRw 2oSGHYRKIjfLWGSsx33z18qt8F/W1ZcEktc8yg4UQz07JUiUDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB6WTIXZMTIYLj0my2tZyec6ZyYPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NWUy YzQ2MC05YjRiLTQ1N2ItYmIyYy1hMmIwMGY3YTBkZDAvZDE1ZGEzYTItMDhjZS0z OTkyLThiMDEtZmQyMzY5YWRhYTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODVlMmM0NjAtOWI0Yi00NTdiLWJi MmMtYTJiMDBmN2EwZGQwLzg1ZTJjNDYwLTliNGItNDU3Yi1iYjJjLWEyYjAwZjdh MGRkMC5jcmwwHwYDVR0jBBgwFoAUYF9W4aANeJMViQRIYXPrCPcCPokwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84NWUyYzQ2MC05YjRiLTQ1N2ItYmIyYy1hMmIw MGY3YTBkZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxjNLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKgn5Rc40z2yNpNHaBz0cixZib9iOMpMWzY21Bly2gVFJkp64dNa4/KB JpVDECLvIKgCQSJ1e1FcvuVqu1mAS2WBvDGc8g1mY+3kT+Obk98iNX97+kAhtm0J YZiGwfz+5QU030Eb+3jA1p2qsXbO08dKNAQSoY6Xj8/bwJ1cYBy5RHBjsx8QMZg/ ElJIt1h/peCzaXlh1cTJq1fiYDZNTUJICzoC+MVrfZM8wZbHj5j8qI10u3BA4RSL GBVSFDvYaZfcf/X5QSxR3Q/TDZxJJGDJFXAGirGeB9DIvl5pPh6V/J6ZuEpSzNzc b17ousCDt+3kzK0ifNfJntiFJf+L+xE= -----END CERTIFICATE-----Generated at Mon Jun 30 07:42:05 2025 by rpki-client