$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa6b84f9-271a-420e-904b-b25ba5f52b05/cbce5523-5180-3812-9884-27aa96e077f1.roa File: cbce5523-5180-3812-9884-27aa96e077f1.roa (raw, json) Hash identifier: tRVdwivQRW5KAuLW9FV6aA+cdexenvg37jeSvGdlYZw= Subject key identifier: B5:44:5D:0D:09:11:76:65:31:FD:6F:18:0B:27:12:48:C9:2C:E6:B8 Certificate issuer: /CN=aa6b84f9-271a-420e-904b-b25ba5f52b05 Certificate serial: 010D0C9F4328584A125061428E2EAAC42E83C580 Authority key identifier: 7D:4E:33:3E:10:FB:69:81:93:75:C1:D6:C0:3C:17:7B:F9:4B:5D:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa6b84f9-271a-420e-904b-b25ba5f52b05.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa6b84f9-271a-420e-904b-b25ba5f52b05/cbce5523-5180-3812-9884-27aa96e077f1.roa Signing time: Tue 03 Jun 2025 19:07:16 +0000 ROA not before: Tue 03 Jun 2025 19:07:16 +0000 ROA not after: Mon 01 Sep 2025 19:07:16 +0000 asID: 395155 IP address blocks: 198.179.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa6b84f9-271a-420e-904b-b25ba5f52b05/aa6b84f9-271a-420e-904b-b25ba5f52b05.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa6b84f9-271a-420e-904b-b25ba5f52b05/aa6b84f9-271a-420e-904b-b25ba5f52b05.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa6b84f9-271a-420e-904b-b25ba5f52b05.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:12:50:61:42:8e:2e:aa:c4:2e:83:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa6b84f9-271a-420e-904b-b25ba5f52b05 Validity Not Before: Jun 3 19:07:16 2025 GMT Not After : Sep 1 19:07:16 2025 GMT Subject: CN=b08ba531-8f61-43d8-8438-4b751939f218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:6a:90:e7:00:13:7b:cd:5c:59:b7:70:ca:66: ab:0e:9f:4f:1c:b6:7d:8c:e5:44:73:4d:fc:09:1f: c0:68:3b:c6:32:2d:77:21:db:cd:c3:bc:47:54:b2: d5:05:1a:b1:5b:dd:c6:6b:6d:72:b4:6a:59:fc:c2: a0:6c:60:44:e0:e0:29:72:17:6e:d2:f4:3c:99:13: 51:26:cd:c5:b7:35:76:02:54:68:0f:c9:41:ff:3c: bc:f9:db:3b:ee:44:ed:8a:7f:9e:2b:26:b8:06:56: 91:d5:a1:d3:bb:b6:35:7a:26:e8:e9:c9:0b:29:bb: 64:4e:82:b6:be:0a:47:90:1c:04:c7:f9:f0:b7:61: 4c:fa:c6:e6:96:f0:11:05:95:ed:25:16:bb:6b:c0: 25:64:bf:78:8a:cc:d5:38:54:b5:e1:4e:b3:32:7c: 7a:59:6f:cb:5e:51:ca:0a:f9:79:ea:5e:7b:98:c7: 32:7e:24:1e:45:69:ac:42:ff:8d:fc:55:3d:37:48: 33:e8:71:fb:b0:6d:2d:40:15:d4:a3:e7:20:6c:87: f7:6c:37:e4:ec:d1:60:49:56:0f:00:b4:07:95:59: 6f:ff:9d:f0:c0:6e:88:84:7c:6a:9a:b2:24:d5:88: d4:2a:fb:09:d1:ff:ed:f3:c2:16:2d:a8:33:5e:61: 88:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:44:5D:0D:09:11:76:65:31:FD:6F:18:0B:27:12:48:C9:2C:E6:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa6b84f9-271a-420e-904b-b25ba5f52b05/cbce5523-5180-3812-9884-27aa96e077f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa6b84f9-271a-420e-904b-b25ba5f52b05/aa6b84f9-271a-420e-904b-b25ba5f52b05.crl X509v3 Authority Key Identifier: keyid:7D:4E:33:3E:10:FB:69:81:93:75:C1:D6:C0:3C:17:7B:F9:4B:5D:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa6b84f9-271a-420e-904b-b25ba5f52b05.cer sbgp-ipAddrBlock: critical IPv4: 198.179.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:9b:2d:a9:3f:73:5d:cf:13:27:bf:9f:c5:ed:55:91:a0:c8: e7:1f:68:98:f3:77:86:17:0e:e5:e0:f5:42:39:ec:e0:f4:db: 49:57:a1:a7:0d:b9:12:e0:79:72:47:ee:8f:5f:d2:4b:75:44: f6:74:6d:8f:4d:e7:c5:72:88:f2:7e:ea:5c:53:44:cb:1c:e1: b4:84:c6:d2:b1:db:08:77:79:ff:12:cf:d9:8c:9a:e7:55:75: fa:9e:58:db:7f:93:52:fd:3e:e1:71:bb:2a:31:75:31:78:e3: 09:40:03:9b:dc:46:9f:84:7f:24:da:7c:2e:95:01:b1:0f:d6: 3f:71:34:ae:68:10:8d:7a:2b:26:40:db:61:b7:29:30:3f:33: 32:dc:ec:77:41:7b:29:f2:b8:20:e2:26:47:3a:f0:95:70:7e: a3:1e:95:33:5f:d4:be:d0:57:3b:a0:8e:f8:6d:2e:e6:82:34: 88:23:4a:22:f5:84:ad:ca:e5:4a:de:74:73:16:3b:82:54:3c: fa:e5:9f:23:6f:a1:0c:fd:0b:fa:27:ef:b1:12:cd:8a:51:a3: 03:92:05:b4:9d:64:2e:be:f7:df:1a:ee:32:c0:42:e6:25:bb: 9c:d4:2d:51:db:9b:28:96:8b:61:37:cf:50:73:42:c1:44:98: 7c:f9:94:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoSUGFCji6qxC6DxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE2Yjg0ZjktMjcxYS00MjBlLTkwNGItYjI1YmE1ZjUy YjA1MB4XDTI1MDYwMzE5MDcxNloXDTI1MDkwMTE5MDcxNlowLzEtMCsGA1UEAxMk YjA4YmE1MzEtOGY2MS00M2Q4LTg0MzgtNGI3NTE5MzlmMjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmqQ5wATe81cWbdwymarDp9PHLZ9jOVEc038 CR/AaDvGMi13IdvNw7xHVLLVBRqxW93Ga21ytGpZ/MKgbGBE4OApchdu0vQ8mRNR Js3FtzV2AlRoD8lB/zy8+ds77kTtin+eKya4BlaR1aHTu7Y1eibo6ckLKbtkToK2 vgpHkBwEx/nwt2FM+sbmlvARBZXtJRa7a8AlZL94iszVOFS14U6zMnx6WW/LXlHK Cvl56l57mMcyfiQeRWmsQv+N/FU9N0gz6HH7sG0tQBXUo+cgbIf3bDfk7NFgSVYP ALQHlVlv/53wwG6IhHxqmrIk1YjUKvsJ0f/t88IWLagzXmGILQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLVEXQ0JEXZlMf1vGAsnEkjJLOa4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hYTZi ODRmOS0yNzFhLTQyMGUtOTA0Yi1iMjViYTVmNTJiMDUvY2JjZTU1MjMtNTE4MC0z ODEyLTk4ODQtMjdhYTk2ZTA3N2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYWE2Yjg0ZjktMjcxYS00MjBlLTkw NGItYjI1YmE1ZjUyYjA1L2FhNmI4NGY5LTI3MWEtNDIwZS05MDRiLWIyNWJhNWY1 MmIwNS5jcmwwHwYDVR0jBBgwFoAUfU4zPhD7aYGTdcHWwDwXe/lLXQMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hYTZiODRmOS0yNzFhLTQyMGUtOTA0Yi1iMjVi YTVmNTJiMDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxrOrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGbLak/c13PEye/n8XtVZGgyOcfaJjzd4YXDuXg9UI57OD020lXoacN uRLgeXJH7o9f0kt1RPZ0bY9N58VyiPJ+6lxTRMsc4bSExtKx2wh3ef8Sz9mMmudV dfqeWNt/k1L9PuFxuyoxdTF44wlAA5vcRp+EfyTafC6VAbEP1j9xNK5oEI16KyZA 22G3KTA/MzLc7HdBeynyuCDiJkc68JVwfqMelTNf1L7QVzugjvhtLuaCNIgjSiL1 hK3K5UredHMWO4JUPPrlnyNvoQz9C/on77ESzYpRowOSBbSdZC6+998a7jLAQuYl u5zULVHbmyiWi2E3z1BzQsFEmHz5lFI= -----END CERTIFICATE-----Generated at Thu Jul 3 23:12:20 2025 by rpki-client