$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/5ff297e9-0b93-336f-a807-5fd81fc10453.roa File: 5ff297e9-0b93-336f-a807-5fd81fc10453.roa (raw, json) Hash identifier: k1hHCu95UnvXEbLoJ1BnIqXA0yUhSRVtQ5oZcRU/1Yo= Subject key identifier: 83:48:7C:4D:1E:47:C5:4C:45:4B:CB:72:AE:A7:7E:0E:E4:13:EB:A2 Certificate issuer: /CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059 Certificate serial: 010D0C9F4328584A3A15857F92C7B56C3D8A4880 Authority key identifier: B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/5ff297e9-0b93-336f-a807-5fd81fc10453.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 40788 IP address blocks: 198.2.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:85:7f:92:c7:b5:6c:3d:8a:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=19701da1-913d-4fe3-8c18-62ca6ec61308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:58:61:b7:2a:e1:81:d1:a4:6e:82:2b:c2:26: fe:2a:4d:3a:d6:f6:61:16:ba:c7:a2:39:0e:61:bd: cf:9c:cc:8d:f4:d5:66:67:fe:5b:c7:36:19:9f:e5: cf:85:0a:9f:e3:1b:81:5d:96:51:fd:e9:c0:bf:9a: 8c:30:69:8f:31:53:45:45:77:bf:cb:6f:f1:d5:41: 75:86:a3:5a:1d:99:57:b9:05:f2:64:a5:37:ef:63: 98:24:67:d8:87:76:af:77:a6:11:82:9b:c9:18:1f: d3:f8:e0:2a:74:19:39:a0:18:ba:c4:64:18:1d:cb: 64:7d:f6:90:24:fb:21:f6:1a:99:16:1a:08:bb:cc: b1:68:45:9a:d5:64:61:04:d3:6c:96:6d:af:38:53: 81:d3:9b:1d:ab:99:59:51:51:91:71:19:50:5d:31: d4:21:6f:4c:c4:17:3a:d4:be:70:82:d5:00:3f:0e: 97:90:14:81:a4:d8:b7:f2:b0:63:87:98:5c:30:d7: cf:87:09:ac:88:de:26:e8:98:c6:f3:c1:e1:e4:d2: 4f:dd:9f:eb:c9:52:bf:b8:85:6e:d0:02:7c:98:50: 07:2c:87:f9:87:07:3c:b9:8c:dc:a6:7f:3d:b5:12: 15:ee:e3:34:3c:37:bb:2e:e0:b0:2a:a2:23:bd:63: b0:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:48:7C:4D:1E:47:C5:4C:45:4B:CB:72:AE:A7:7E:0E:E4:13:EB:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/5ff297e9-0b93-336f-a807-5fd81fc10453.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.crl X509v3 Authority Key Identifier: keyid:B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer sbgp-ipAddrBlock: critical IPv4: 198.2.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:88:d1:cb:14:5f:9e:30:b2:fc:01:6b:df:7f:d1:27:94:fe: fd:ea:5c:44:9c:05:7d:8f:3e:8d:f3:18:1e:26:d9:d5:88:86: 4e:b1:84:13:d3:85:f3:a3:b7:80:e5:98:76:f0:c8:e9:53:87: bd:a2:23:2f:4c:54:15:3e:bc:5e:a8:81:aa:0f:cc:bf:9a:9a: f4:f5:26:97:d2:ea:4f:a1:56:62:37:0f:d4:f0:9f:1f:9e:c5: 04:25:fa:2a:6d:9e:86:07:d2:3d:4b:01:bd:01:c8:2d:5e:d6: 18:bf:b2:c9:2b:4d:f0:3c:ed:e8:52:37:af:24:77:59:46:71: db:b0:99:3a:96:b1:ef:c9:3f:90:1d:23:9c:be:f4:08:e4:08: fd:fc:2f:39:21:95:10:08:c8:4a:14:de:dc:8c:cc:56:b4:4a: 76:e0:10:25:be:b4:f7:6e:8c:a5:36:fe:46:1e:3a:24:67:98: 04:56:66:77:6d:b6:c9:d6:a1:97:9d:c5:c4:8b:a0:37:4e:b2: ac:1f:31:13:dc:32:c1:66:d7:a1:d5:2a:39:4b:aa:c9:9c:ff: 53:76:69:7e:07:2a:65:f2:70:d3:7e:22:7c:5d:24:26:e0:bf: 7b:b2:ca:d0:7c:8c:36:e8:9a:b2:30:45:76:94:3b:fc:0d:77: ae:88:fd:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FYV/kse1bD2KSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWMyOWEwYmUtNzJhOC00ODk0LThjMGMtZjRkMjZlM2Fl MDU5MB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk MTk3MDFkYTEtOTEzZC00ZmUzLThjMTgtNjJjYTZlYzYxMzA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1hhtyrhgdGkboIrwib+Kk061vZhFrrHojkO Yb3PnMyN9NVmZ/5bxzYZn+XPhQqf4xuBXZZR/enAv5qMMGmPMVNFRXe/y2/x1UF1 hqNaHZlXuQXyZKU372OYJGfYh3avd6YRgpvJGB/T+OAqdBk5oBi6xGQYHctkffaQ JPsh9hqZFhoIu8yxaEWa1WRhBNNslm2vOFOB05sdq5lZUVGRcRlQXTHUIW9MxBc6 1L5wgtUAPw6XkBSBpNi38rBjh5hcMNfPhwmsiN4m6JjG88Hh5NJP3Z/ryVK/uIVu 0AJ8mFAHLIf5hwc8uYzcpn89tRIV7uM0PDe7LuCwKqIjvWOwwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFINIfE0eR8VMRUvLcq6nfg7kE+uiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xYzI5 YTBiZS03MmE4LTQ4OTQtOGMwYy1mNGQyNmUzYWUwNTkvNWZmMjk3ZTktMGI5My0z MzZmLWE4MDctNWZkODFmYzEwNDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMWMyOWEwYmUtNzJhOC00ODk0LThj MGMtZjRkMjZlM2FlMDU5LzFjMjlhMGJlLTcyYTgtNDg5NC04YzBjLWY0ZDI2ZTNh ZTA1OS5jcmwwHwYDVR0jBBgwFoAUt+lHh3Pe7UatcsY/Em0QrrFWmR4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xYzI5YTBiZS03MmE4LTQ4OTQtOGMwYy1mNGQy NmUzYWUwNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGxgJAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKGI0csUX54wsvwBa99/0SeU/v3qXEScBX2PPo3zGB4m2dWIhk6xhBPT hfOjt4DlmHbwyOlTh72iIy9MVBU+vF6ogaoPzL+amvT1JpfS6k+hVmI3D9Twnx+e xQQl+iptnoYH0j1LAb0ByC1e1hi/sskrTfA87ehSN68kd1lGcduwmTqWse/JP5Ad I5y+9AjkCP38LzkhlRAIyEoU3tyMzFa0SnbgECW+tPdujKU2/kYeOiRnmARWZndt tsnWoZedxcSLoDdOsqwfMRPcMsFm16HVKjlLqsmc/1N2aX4HKmXycNN+InxdJCbg v3uyytB8jDbomrIwRXaUO/wNd66I/fE= -----END CERTIFICATE-----Generated at Mon Jun 30 11:05:26 2025 by rpki-client