$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/3c654cd0-fe6f-388f-ad8a-e7dd0576c29a.roa File: 3c654cd0-fe6f-388f-ad8a-e7dd0576c29a.roa (raw, json) Hash identifier: eFldeGl6V1VshFBrCO8IKB+wcaNjkzsWhzoMVf4cGvQ= Subject key identifier: E1:74:AF:7D:F3:01:27:C0:50:CD:B0:CC:5B:A7:B7:E0:22:9C:4A:98 Certificate issuer: /CN=111c4633-f730-480a-8516-3382e9a5eda3 Certificate serial: 010D0C9F4328584A348012C33B334AF6D7752E40 Authority key identifier: 4D:ED:C7:C0:B0:EB:0A:39:CC:65:17:32:30:C8:B6:53:88:23:6C:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/3c654cd0-fe6f-388f-ad8a-e7dd0576c29a.roa Signing time: Mon 16 Jun 2025 01:00:49 +0000 ROA not before: Mon 16 Jun 2025 01:00:49 +0000 ROA not after: Sun 14 Sep 2025 01:00:49 +0000 asID: 13538 IP address blocks: 198.32.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/111c4633-f730-480a-8516-3382e9a5eda3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/111c4633-f730-480a-8516-3382e9a5eda3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:34:80:12:c3:3b:33:4a:f6:d7:75:2e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=111c4633-f730-480a-8516-3382e9a5eda3 Validity Not Before: Jun 16 01:00:49 2025 GMT Not After : Sep 14 01:00:49 2025 GMT Subject: CN=f00f87c1-9478-4bfb-966d-8b3c37058df0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:be:c0:8c:c0:7b:a5:4b:7e:dc:4c:bf:00:bc: 48:f2:a5:e8:98:83:5a:53:87:e5:75:fa:f0:cb:7d: 69:20:4b:ee:e6:04:b7:c9:86:bc:47:34:e3:b5:a8: 1a:b7:e6:74:46:e2:da:41:40:1d:98:dd:6b:6d:ac: 3b:17:fe:3a:57:2c:38:cb:ac:85:3a:f8:ea:e9:1a: 98:49:90:09:c2:4d:1b:19:f6:4b:b9:65:3c:77:5d: ce:21:76:c0:38:32:35:36:85:e0:94:7e:fd:eb:65: 45:60:b5:06:0e:98:da:e3:6d:9e:42:3f:aa:41:ad: ec:3b:e7:ce:1f:37:89:56:44:3d:c2:19:34:ea:2e: d2:19:14:ae:c3:2b:6f:78:a5:d5:db:2f:e0:ed:53: 24:c7:a5:f8:07:02:ad:96:36:eb:cf:43:8d:a8:21: 9d:56:eb:9e:8e:ec:48:c4:66:ad:55:4f:e2:a9:73: 76:3f:ac:5b:2c:15:ea:44:6c:ac:d7:1f:da:a0:60: 78:09:2b:67:be:48:d5:3f:fa:82:ca:e5:12:b2:27: 65:93:59:5e:aa:39:b7:2e:f2:81:69:8f:66:ca:d9: 1e:b0:6c:8b:bb:48:d3:ae:01:7f:86:66:0a:99:65: ef:ad:d5:ad:d5:cd:08:88:cd:98:d4:f3:8a:02:07: d0:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:74:AF:7D:F3:01:27:C0:50:CD:B0:CC:5B:A7:B7:E0:22:9C:4A:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/3c654cd0-fe6f-388f-ad8a-e7dd0576c29a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/111c4633-f730-480a-8516-3382e9a5eda3.crl X509v3 Authority Key Identifier: keyid:4D:ED:C7:C0:B0:EB:0A:39:CC:65:17:32:30:C8:B6:53:88:23:6C:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3.cer sbgp-ipAddrBlock: critical IPv4: 198.32.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:d0:38:13:13:b2:c2:5a:37:cd:e0:a5:9d:12:88:ba:ce:09: 93:d4:a0:cd:99:44:09:f5:de:40:96:0f:f4:d7:1f:01:14:c2: 85:29:24:0d:b0:84:76:f3:ba:ae:04:c2:cf:f0:02:79:be:b0: 6d:8b:d6:b3:1f:01:2d:0a:02:da:58:4c:18:33:74:3e:24:fc: 7d:90:92:f7:f1:61:92:ec:e8:da:fe:71:c3:69:f2:05:cd:c0: 38:6a:2c:fe:43:fe:75:c4:b1:d1:f0:67:27:07:28:ca:16:83: 29:e6:9c:e5:92:c9:aa:83:e0:78:be:68:91:09:ef:23:fe:78: da:1a:26:41:67:7b:78:58:9e:5f:18:48:27:d1:01:3f:a3:0f: 64:8d:74:dc:93:27:84:d8:f9:69:95:05:00:30:3b:bd:61:91: f4:7d:0c:b3:9a:31:50:30:ba:47:04:a1:98:67:67:21:7f:25: 66:dd:35:c7:72:a4:69:00:f0:22:e4:1b:e3:dc:79:96:0d:f3: 37:3a:52:41:72:68:eb:33:90:f2:e9:23:57:00:8d:07:bf:2d: 6c:35:b8:0a:bc:6f:27:17:d9:6e:6b:9c:16:cd:01:68:35:22: 78:cb:cb:38:20:31:2b:1e:ed:88:63:7b:2e:88:16:35:d4:dd: 76:0a:77:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo0gBLDOzNK9td1LkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTExYzQ2MzMtZjczMC00ODBhLTg1MTYtMzM4MmU5YTVl ZGEzMB4XDTI1MDYxNjAxMDA0OVoXDTI1MDkxNDAxMDA0OVowLzEtMCsGA1UEAxMk ZjAwZjg3YzEtOTQ3OC00YmZiLTk2NmQtOGIzYzM3MDU4ZGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjr7AjMB7pUt+3Ey/ALxI8qXomINaU4fldfrw y31pIEvu5gS3yYa8RzTjtagat+Z0RuLaQUAdmN1rbaw7F/46Vyw4y6yFOvjq6RqY SZAJwk0bGfZLuWU8d13OIXbAODI1NoXglH7962VFYLUGDpja422eQj+qQa3sO+fO HzeJVkQ9whk06i7SGRSuwytveKXV2y/g7VMkx6X4BwKtljbrz0ONqCGdVuuejuxI xGatVU/iqXN2P6xbLBXqRGys1x/aoGB4CStnvkjVP/qCyuUSsidlk1leqjm3LvKB aY9mytkesGyLu0jTrgF/hmYKmWXvrdWt1c0IiM2Y1POKAgfQPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOF0r33zASfAUM2wzFunt+AinEqYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xMTFj NDYzMy1mNzMwLTQ4MGEtODUxNi0zMzgyZTlhNWVkYTMvM2M2NTRjZDAtZmU2Zi0z ODhmLWFkOGEtZTdkZDA1NzZjMjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMTExYzQ2MzMtZjczMC00ODBhLTg1 MTYtMzM4MmU5YTVlZGEzLzExMWM0NjMzLWY3MzAtNDgwYS04NTE2LTMzODJlOWE1 ZWRhMy5jcmwwHwYDVR0jBBgwFoAUTe3HwLDrCjnMZRcyMMi2U4gjbEQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xMTFjNDYzMy1mNzMwLTQ4MGEtODUxNi0zMzgy ZTlhNWVkYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxiCSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEbQOBMTssJaN83gpZ0SiLrOCZPUoM2ZRAn13kCWD/TXHwEUwoUpJA2w hHbzuq4Ews/wAnm+sG2L1rMfAS0KAtpYTBgzdD4k/H2QkvfxYZLs6Nr+ccNp8gXN wDhqLP5D/nXEsdHwZycHKMoWgynmnOWSyaqD4Hi+aJEJ7yP+eNoaJkFne3hYnl8Y SCfRAT+jD2SNdNyTJ4TY+WmVBQAwO71hkfR9DLOaMVAwukcEoZhnZyF/JWbdNcdy pGkA8CLkG+PceZYN8zc6UkFyaOszkPLpI1cAjQe/LWw1uAq8bycX2W5rnBbNAWg1 InjLyzggMSse7Yhjey6IFjXU3XYKdxc= -----END CERTIFICATE-----Generated at Fri Jul 4 21:12:01 2025 by rpki-client