$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9986c58-4c7a-450f-9355-1382b40eb86e/07cdf4ff-3d86-3034-9063-bc02000bef1e.roa File: 07cdf4ff-3d86-3034-9063-bc02000bef1e.roa (raw, json) Hash identifier: nCQV+gF1CboyE0JIF08qqyddyxsF0GH/bLngpat4ags= Subject key identifier: 7D:8F:13:3D:93:38:EE:4C:9A:54:34:D9:EA:37:7F:C1:F7:F5:77:7C Certificate issuer: /CN=e9986c58-4c7a-450f-9355-1382b40eb86e Certificate serial: 010D0C9F43285849EEB5040ED2DB1DC783298C80 Authority key identifier: 93:39:46:E8:CC:9A:E5:5A:55:8B:D1:88:85:97:2B:D5:C8:E6:1D:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9986c58-4c7a-450f-9355-1382b40eb86e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9986c58-4c7a-450f-9355-1382b40eb86e/07cdf4ff-3d86-3034-9063-bc02000bef1e.roa Signing time: Thu 22 May 2025 01:00:51 +0000 ROA not before: Thu 22 May 2025 01:00:51 +0000 ROA not after: Wed 20 Aug 2025 01:00:51 +0000 asID: 23166 IP address blocks: 198.98.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9986c58-4c7a-450f-9355-1382b40eb86e/e9986c58-4c7a-450f-9355-1382b40eb86e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9986c58-4c7a-450f-9355-1382b40eb86e/e9986c58-4c7a-450f-9355-1382b40eb86e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9986c58-4c7a-450f-9355-1382b40eb86e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ee:b5:04:0e:d2:db:1d:c7:83:29:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9986c58-4c7a-450f-9355-1382b40eb86e Validity Not Before: May 22 01:00:51 2025 GMT Not After : Aug 20 01:00:51 2025 GMT Subject: CN=6e6678e2-ae73-4e5d-b4af-74e39f15ed38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:13:a9:ec:ce:e8:44:f0:af:b1:81:45:46:da: 66:3d:fe:69:e5:dc:ea:61:2a:42:da:a4:17:35:84: bc:88:e2:dc:6d:2a:d4:63:3e:76:bd:f0:ce:fa:65: aa:8a:d7:65:cd:24:91:53:74:d8:fd:ca:9f:d6:96: 0f:80:72:f2:b7:2d:fc:58:99:33:ab:76:86:73:a6: 4d:3d:fd:82:ca:7f:b4:19:b3:0d:92:4f:84:a3:69: d0:15:fb:5c:d2:e0:ca:56:fd:3e:46:5a:f4:7b:c2: a8:08:b0:37:88:ef:67:f4:55:10:ca:da:b9:02:e8: 24:ce:0f:ed:9c:52:41:5f:e6:a8:c5:36:19:51:86: 43:b1:84:01:13:e0:7c:ae:64:38:28:ea:27:fd:46: 5d:54:71:4f:6f:9c:a5:0d:d7:9c:80:70:f5:25:c9: 2c:ff:bc:28:ca:52:7e:87:a0:04:53:62:dd:eb:48: 3d:6a:75:ed:e1:8e:66:74:65:98:0f:03:ec:d2:9d: 91:0b:b8:66:c0:54:48:43:71:01:2c:c1:1d:73:7e: 0c:d2:d7:1a:d4:12:ba:a1:63:35:0f:50:5a:51:2c: 1a:10:c1:ca:23:8f:11:33:f9:8c:53:bd:9c:4b:0f: 81:a9:c6:32:32:82:b6:aa:38:b6:72:11:2e:71:0d: 0e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:8F:13:3D:93:38:EE:4C:9A:54:34:D9:EA:37:7F:C1:F7:F5:77:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9986c58-4c7a-450f-9355-1382b40eb86e/07cdf4ff-3d86-3034-9063-bc02000bef1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9986c58-4c7a-450f-9355-1382b40eb86e/e9986c58-4c7a-450f-9355-1382b40eb86e.crl X509v3 Authority Key Identifier: keyid:93:39:46:E8:CC:9A:E5:5A:55:8B:D1:88:85:97:2B:D5:C8:E6:1D:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9986c58-4c7a-450f-9355-1382b40eb86e.cer sbgp-ipAddrBlock: critical IPv4: 198.98.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:8b:99:23:46:3b:73:a2:99:30:ff:2a:f9:6a:22:ea:0f:dd: d9:43:ab:c3:89:31:f2:64:38:5a:64:26:ca:fd:91:53:72:ee: 21:65:89:a0:6f:48:1d:14:44:75:6d:dd:18:06:bd:1a:f0:bf: bd:04:54:5c:85:4e:34:49:b0:b9:62:2b:a0:6c:8a:d1:84:89: 09:5d:66:f5:7f:e0:a1:2c:55:25:9c:39:c4:74:d7:9a:8e:b9: 66:59:aa:11:44:f1:dc:c1:0f:a8:46:de:2b:6f:f2:b9:cb:e9: 1f:bb:d9:3e:b9:c9:ce:74:04:a7:3a:ee:ca:ee:a0:5f:e1:59: 29:6c:a8:49:08:22:58:76:5c:85:ec:dc:06:e1:d2:f7:ee:c9: 5b:02:0c:19:84:c0:0f:59:d9:11:70:bd:5e:f3:76:f0:7a:73: 4d:f6:c2:c0:68:6b:8e:46:c8:bd:e7:c1:99:97:ec:c4:12:e0: 04:ac:e5:98:0c:af:d5:f5:26:03:08:8e:79:54:dd:f6:e1:ba: f7:da:76:27:a0:f5:5e:6c:01:fc:b0:c9:e8:36:1b:fd:ab:f8: bc:18:0a:20:9f:d6:7d:37:c6:59:59:d5:d8:bb:9d:12:ab:a6: 8a:8b:c7:18:14:34:c7:63:e6:a5:e5:21:80:62:e9:73:80:58: bf:89:9f:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnutQQO0tsdx4MpjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk5ODZjNTgtNGM3YS00NTBmLTkzNTUtMTM4MmI0MGVi ODZlMB4XDTI1MDUyMjAxMDA1MVoXDTI1MDgyMDAxMDA1MVowLzEtMCsGA1UEAxMk NmU2Njc4ZTItYWU3My00ZTVkLWI0YWYtNzRlMzlmMTVlZDM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBOp7M7oRPCvsYFFRtpmPf5p5dzqYSpC2qQX NYS8iOLcbSrUYz52vfDO+mWqitdlzSSRU3TY/cqf1pYPgHLyty38WJkzq3aGc6ZN Pf2Cyn+0GbMNkk+Eo2nQFftc0uDKVv0+Rlr0e8KoCLA3iO9n9FUQytq5Augkzg/t nFJBX+aoxTYZUYZDsYQBE+B8rmQ4KOon/UZdVHFPb5ylDdecgHD1Jcks/7woylJ+ h6AEU2Ld60g9anXt4Y5mdGWYDwPs0p2RC7hmwFRIQ3EBLMEdc34M0tca1BK6oWM1 D1BaUSwaEMHKI48RM/mMU72cSw+BqcYyMoK2qji2chEucQ0OSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH2PEz2TOO5MmlQ02eo3f8H39Xd8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lOTk4 NmM1OC00YzdhLTQ1MGYtOTM1NS0xMzgyYjQwZWI4NmUvMDdjZGY0ZmYtM2Q4Ni0z MDM0LTkwNjMtYmMwMjAwMGJlZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTk5ODZjNTgtNGM3YS00NTBmLTkz NTUtMTM4MmI0MGViODZlL2U5OTg2YzU4LTRjN2EtNDUwZi05MzU1LTEzODJiNDBl Yjg2ZS5jcmwwHwYDVR0jBBgwFoAUkzlG6Mya5VpVi9GIhZcr1cjmHSIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lOTk4NmM1OC00YzdhLTQ1MGYtOTM1NS0xMzgy YjQwZWI4NmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmINMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyLmSNGO3OimTD/KvlqIuoP3dlDq8OJMfJkOFpkJsr9kVNy7iFliaBv SB0URHVt3RgGvRrwv70EVFyFTjRJsLliK6BsitGEiQldZvV/4KEsVSWcOcR015qO uWZZqhFE8dzBD6hG3itv8rnL6R+72T65yc50BKc67sruoF/hWSlsqEkIIlh2XIXs 3Abh0vfuyVsCDBmEwA9Z2RFwvV7zdvB6c032wsBoa45GyL3nwZmX7MQS4ASs5ZgM r9X1JgMIjnlU3fbhuvfadieg9V5sAfywyeg2G/2r+LwYCiCf1n03xllZ1di7nRKr poqLxxgUNMdj5qXlIYBi6XOAWL+Jn5s= -----END CERTIFICATE-----Generated at Tue Jul 1 09:07:40 2025 by rpki-client