$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/ce89f34d-3850-3cf3-b6f0-b3c075e1850d.roa File: ce89f34d-3850-3cf3-b6f0-b3c075e1850d.roa (raw, json) Hash identifier: WqIaoBs4BrXV20vDmSX+6dcwImZcrTBSaYVGUFhzo68= Subject key identifier: 76:76:D6:98:85:48:67:1F:0E:1D:E6:7F:70:6E:6F:00:80:16:B9:D2 Certificate issuer: /CN=7f6f21d4-30bb-4323-bd07-2383bae60aac Certificate serial: 010D0C9F4328584A3B7AFE56B2F2FA822D8D9780 Authority key identifier: CB:76:9E:6D:40:34:B9:7F:A9:F4:17:2B:D3:79:9E:10:8A:BC:C1:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/ce89f34d-3850-3cf3-b6f0-b3c075e1850d.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 14860 IP address blocks: 198.36.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/7f6f21d4-30bb-4323-bd07-2383bae60aac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/7f6f21d4-30bb-4323-bd07-2383bae60aac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7a:fe:56:b2:f2:fa:82:2d:8d:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f6f21d4-30bb-4323-bd07-2383bae60aac Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=ad1f3983-5a02-4a74-a02c-b6ce61b76046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2f:99:f1:f5:fc:ac:03:ca:27:6b:05:99:6c: 37:d1:f4:66:76:fc:b6:5a:fe:56:c5:fe:ac:09:f8: d4:99:dd:2d:cf:0d:28:94:7d:5a:ad:ae:eb:e3:bc: 1f:47:40:04:20:0e:43:e6:4b:0e:66:13:3d:7e:66: e7:12:3a:b3:1c:02:7b:e5:e6:ee:e9:8f:a9:44:cd: 5a:5a:87:e3:a3:69:e7:15:04:80:0e:22:88:47:4d: 3c:12:0a:2d:50:ad:7c:f2:63:21:d3:c2:2e:1a:e3: 25:4e:c9:7b:d2:cf:10:c3:d3:47:30:df:d2:87:10: 46:60:bf:56:6c:b2:71:1f:29:ba:a2:5b:d6:1a:d5: a7:b7:0d:43:5a:7a:73:68:ee:06:04:52:03:e4:52: 6e:16:18:d3:42:69:d6:72:10:7e:8a:0f:43:1a:4a: 90:ec:e3:66:32:e3:65:55:a9:3f:17:85:a4:00:a8: 89:7c:56:09:65:d5:57:88:fc:a0:f9:36:57:51:9d: 9d:24:19:48:18:85:40:f4:cb:80:ad:cc:b3:ff:1f: b3:6a:8a:c5:b4:6a:b8:47:0d:2e:89:e5:f0:f2:90: a2:f9:9b:5c:e1:57:51:56:95:28:b7:ab:f2:f9:5d: f8:b3:08:dd:77:cb:0d:11:25:1c:38:2f:8b:80:4f: d5:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:76:D6:98:85:48:67:1F:0E:1D:E6:7F:70:6E:6F:00:80:16:B9:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/ce89f34d-3850-3cf3-b6f0-b3c075e1850d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/7f6f21d4-30bb-4323-bd07-2383bae60aac.crl X509v3 Authority Key Identifier: keyid:CB:76:9E:6D:40:34:B9:7F:A9:F4:17:2B:D3:79:9E:10:8A:BC:C1:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac.cer sbgp-ipAddrBlock: critical IPv4: 198.36.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:e6:c9:55:bd:28:da:f4:f9:91:a2:02:f9:7b:c3:78:fe:f9: 90:aa:46:ff:08:a6:a0:de:ca:d9:64:79:b1:ca:a1:0d:24:3e: a3:78:0e:0d:df:0b:a2:be:f3:fc:d2:c2:23:25:63:8d:ab:ca: 73:53:42:2e:c8:af:85:f6:37:dc:e6:86:98:a1:40:41:33:58: cc:81:cf:b8:1c:b8:54:fb:55:79:91:d5:42:56:be:79:27:cc: e0:9a:6f:b4:ba:e2:d2:ef:77:1f:7a:4d:31:88:29:8b:f8:23: c4:7d:4b:97:a5:ba:94:33:1d:af:2b:fd:88:35:54:c2:f3:0d: f0:f6:d6:a1:f9:4f:f1:15:8a:b3:5d:77:04:bf:27:26:f8:5a: bb:45:f8:8d:71:f5:66:3c:02:e8:52:4c:8f:61:e4:7c:6c:03: 9d:b8:9a:a9:f3:1a:41:dc:e5:63:56:ad:e7:dd:79:15:f4:fb: 56:fb:3e:24:d0:72:d1:67:99:9f:f9:b3:25:ce:55:d8:95:00: ac:2b:4b:d6:24:1b:aa:3c:9b:36:0e:05:c7:79:b6:ff:9e:92: 1c:96:17:3f:ff:20:14:36:f1:70:84:e8:d1:8c:00:41:c0:f3: d3:f7:30:45:39:00:34:c2:c4:d2:71:70:de:02:70:6e:6b:9b: 72:f1:d9:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7ev5WsvL6gi2Nl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2Y2ZjIxZDQtMzBiYi00MzIzLWJkMDctMjM4M2JhZTYw YWFjMB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk YWQxZjM5ODMtNWEwMi00YTc0LWEwMmMtYjZjZTYxYjc2MDQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAli+Z8fX8rAPKJ2sFmWw30fRmdvy2Wv5Wxf6s CfjUmd0tzw0olH1ara7r47wfR0AEIA5D5ksOZhM9fmbnEjqzHAJ75ebu6Y+pRM1a Wofjo2nnFQSADiKIR008EgotUK188mMh08IuGuMlTsl70s8Qw9NHMN/ShxBGYL9W bLJxHym6olvWGtWntw1DWnpzaO4GBFID5FJuFhjTQmnWchB+ig9DGkqQ7ONmMuNl Vak/F4WkAKiJfFYJZdVXiPyg+TZXUZ2dJBlIGIVA9MuArcyz/x+zaorFtGq4Rw0u ieXw8pCi+Ztc4VdRVpUot6vy+V34swjdd8sNESUcOC+LgE/VaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZ21piFSGcfDh3mf3BubwCAFrnSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ZjZm MjFkNC0zMGJiLTQzMjMtYmQwNy0yMzgzYmFlNjBhYWMvY2U4OWYzNGQtMzg1MC0z Y2YzLWI2ZjAtYjNjMDc1ZTE4NTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2Y2ZjIxZDQtMzBiYi00MzIzLWJk MDctMjM4M2JhZTYwYWFjLzdmNmYyMWQ0LTMwYmItNDMyMy1iZDA3LTIzODNiYWU2 MGFhYy5jcmwwHwYDVR0jBBgwFoAUy3aebUA0uX+p9Bcr03meEIq8wRowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ZjZmMjFkNC0zMGJiLTQzMjMtYmQwNy0yMzgz YmFlNjBhYWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExiQwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETmyVW9KNr0+ZGiAvl7w3j++ZCqRv8IpqDeytlkebHKoQ0kPqN4Dg3f C6K+8/zSwiMlY42rynNTQi7Ir4X2N9zmhpihQEEzWMyBz7gcuFT7VXmR1UJWvnkn zOCab7S64tLvdx96TTGIKYv4I8R9S5elupQzHa8r/Yg1VMLzDfD21qH5T/EVirNd dwS/Jyb4WrtF+I1x9WY8AuhSTI9h5HxsA524mqnzGkHc5WNWrefdeRX0+1b7PiTQ ctFnmZ/5syXOVdiVAKwrS9YkG6o8mzYOBcd5tv+ekhyWFz//IBQ28XCE6NGMAEHA 89P3MEU5ADTCxNJxcN4CcG5rm3Lx2QQ= -----END CERTIFICATE-----Generated at Mon Jun 30 19:06:10 2025 by rpki-client