$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/562e8b85-e75a-32e0-977d-0b1d100f753f.roa File: 562e8b85-e75a-32e0-977d-0b1d100f753f.roa (raw, json) Hash identifier: qa3hIUciDNqsqDbFW3xV1jNBkii79Q0Hh6iYquseHM0= Subject key identifier: FB:E7:CD:85:2A:AE:13:58:9F:7F:4F:E4:DD:01:4C:87:0E:66:32:C5 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F43285849C67CB256851EA15F6B21F0C0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/562e8b85-e75a-32e0-977d-0b1d100f753f.roa Signing time: Wed 07 May 2025 15:15:08 +0000 ROA not before: Wed 07 May 2025 15:15:08 +0000 ROA not after: Tue 05 Aug 2025 15:15:08 +0000 asID: 199527 IP address blocks: 198.144.96.0/21 maxlen: 21 198.144.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c6:7c:b2:56:85:1e:a1:5f:6b:21:f0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: May 7 15:15:08 2025 GMT Not After : Aug 5 15:15:08 2025 GMT Subject: CN=bb3cd61e-b465-421a-912b-0e63b5092426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b2:f7:a0:50:12:c1:31:dc:86:a0:db:93:fb: 96:f2:af:76:55:b1:29:dc:ac:8c:4e:f7:91:e6:b1: a0:17:4c:95:46:ea:61:9c:64:38:be:22:4f:97:99: dc:34:94:bf:09:bc:e3:7a:25:2f:c5:5a:86:ce:e0: 3a:4e:48:c2:02:e0:22:70:89:98:f7:2c:c7:d0:e9: 13:8a:d5:66:0d:0c:ae:7a:db:61:0c:9d:1e:2b:da: 31:f8:1c:fb:40:f8:42:a6:50:03:a3:a7:40:21:98: 3a:71:e3:3d:15:7a:0c:1b:e1:c2:49:bf:14:17:22: db:27:62:75:79:9a:0c:b2:23:77:c8:80:eb:e3:2f: 92:b9:48:ce:f3:1a:ba:ae:ea:3a:b4:29:08:11:9c: cd:62:8d:b7:d9:bd:5f:d3:78:96:00:1d:a7:c0:81: bc:26:05:4a:76:85:03:b7:71:a0:71:ac:e7:a2:93: 1e:12:e0:6c:c7:cb:8c:f9:bf:2f:03:01:f6:69:73: 60:fd:84:35:06:02:76:c8:72:d3:bd:fa:0d:c8:11: 25:88:50:2f:c7:2d:18:23:28:f5:58:55:0f:9c:75: 3e:59:0d:8c:bb:a5:47:37:08:75:fe:d5:87:6a:cc: 9d:f2:f5:cf:1d:03:92:92:55:6d:30:8d:6c:02:08: e9:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:E7:CD:85:2A:AE:13:58:9F:7F:4F:E4:DD:01:4C:87:0E:66:32:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/562e8b85-e75a-32e0-977d-0b1d100f753f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 198.144.96.0/21 198.144.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:b5:d7:24:dd:17:51:a7:ea:6e:66:b1:7a:c4:73:74:c5:be: d8:ee:cd:10:d6:16:ea:0d:2a:d0:41:91:92:79:c8:1c:2e:f9: 67:60:00:3c:88:60:d7:2d:55:cc:53:dd:5a:0a:1e:c0:b8:20: a9:ac:08:85:8f:e4:d3:a4:6a:37:4f:f0:f6:9e:fd:0a:d5:21: e9:02:84:f7:17:64:3a:f1:63:10:53:92:c0:0d:52:1c:7f:dd: 83:21:7d:ee:68:b1:9d:8f:b3:c5:08:70:5f:68:a2:67:0b:02: 6d:24:8e:0c:ad:a6:4b:3f:34:7f:0c:08:80:e4:a8:2b:df:6e: cc:a8:c7:43:a5:c6:36:8b:d5:63:6c:2f:f5:2c:60:6c:6b:74: 4a:69:49:2e:4c:36:ef:29:22:a2:36:e8:1a:f7:df:8d:51:af: c4:f5:fb:70:e7:8d:e7:d7:e2:bf:62:44:33:68:b0:eb:97:11: 28:81:0c:9a:b3:40:a6:7f:ed:f4:37:ed:f6:e7:81:25:93:39: f6:bb:30:de:e3:e0:73:aa:34:58:15:4f:aa:51:3d:56:3d:5c: 02:e9:11:55:79:d2:79:d0:3d:80:c2:8d:52:87:1c:c6:aa:fc: 73:4f:9c:79:d3:32:46:57:ca:e6:1b:35:35:c4:37:d9:8c:28: 47:77:73:13 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEnGfLJWhR6hX2sh8MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDUwNzE1MTUwOFoXDTI1MDgwNTE1MTUwOFowLzEtMCsGA1UEAxMk YmIzY2Q2MWUtYjQ2NS00MjFhLTkxMmItMGU2M2I1MDkyNDI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrL3oFASwTHchqDbk/uW8q92VbEp3KyMTveR 5rGgF0yVRuphnGQ4viJPl5ncNJS/CbzjeiUvxVqGzuA6TkjCAuAicImY9yzH0OkT itVmDQyuetthDJ0eK9ox+Bz7QPhCplADo6dAIZg6ceM9FXoMG+HCSb8UFyLbJ2J1 eZoMsiN3yIDr4y+SuUjO8xq6ruo6tCkIEZzNYo232b1f03iWAB2nwIG8JgVKdoUD t3GgcaznopMeEuBsx8uM+b8vAwH2aXNg/YQ1BgJ2yHLTvfoNyBEliFAvxy0YIyj1 WFUPnHU+WQ2Mu6VHNwh1/tWHasyd8vXPHQOSklVtMI1sAgjpmQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFPvnzYUqrhNYn39P5N0BTIcOZjLFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNTYyZThiODUtZTc1YS0z MmUwLTk3N2QtMGIxZDEwMGY3NTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDxpBgAwQD xpBwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHK11yTdF1Gn6m5msXrEc3TFvtjuzRDWFuoNKtBBkZJ5yBwu +WdgADyIYNctVcxT3VoKHsC4IKmsCIWP5NOkajdP8Pae/QrVIekChPcXZDrxYxBT ksANUhx/3YMhfe5osZ2Ps8UIcF9oomcLAm0kjgytpks/NH8MCIDkqCvfbsyox0Ol xjaL1WNsL/UsYGxrdEppSS5MNu8pIqI26Br3341Rr8T1+3DnjefX4r9iRDNosOuX ESiBDJqzQKZ/7fQ37fbngSWTOfa7MN7j4HOqNFgVT6pRPVY9XALpEVV50nnQPYDC jVKHHMaq/HNPnHnTMkZXyuYbNTXEN9mMKEd3cxM= -----END CERTIFICATE-----Generated at Wed May 14 12:43:01 2025 by rpki-client