$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/5382c986-e3a5-3ea7-b4c7-3474882f9a83.roa File: 5382c986-e3a5-3ea7-b4c7-3474882f9a83.roa (raw, json) Hash identifier: uAMxrLoI+rkS492AFhE6HAZslKycCriGCeAAaquMqj8= Subject key identifier: 64:6D:C2:4F:D4:27:AE:E1:4E:4E:8F:E9:5F:A1:89:54:C9:0A:F3:39 Certificate issuer: /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Certificate serial: 010D0C9F43285849B9AA083ECB852D989CB8ED20 Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/5382c986-e3a5-3ea7-b4c7-3474882f9a83.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 5645 IP address blocks: 198.84.128.0/17 maxlen: 17 198.84.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:aa:08:3e:cb:85:2d:98:9c:b8:ed:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=61eb1847-6290-49f8-bcbb-7c5707a1402b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:bb:af:6e:9d:a9:e2:6f:27:8c:d2:7c:d7:90: ba:0f:f5:97:a6:92:cb:7f:20:2f:b7:46:02:d3:ef: 2c:01:bc:c1:c4:6f:9a:d0:92:a3:ca:14:0e:be:4e: bd:56:a4:d7:12:db:e1:28:cc:41:ca:51:9d:6f:1f: b6:a7:5c:06:5c:23:20:97:14:c0:0b:0f:9c:42:2b: 36:b6:81:56:72:0c:e2:13:d5:3c:56:f0:05:4e:f1: c6:c4:38:e4:41:30:06:b8:31:a9:df:73:ae:cd:83: 05:80:ba:10:a1:e8:87:a3:d4:4b:b0:8c:f7:2f:8a: 5c:1a:9c:0e:db:a0:37:6e:0b:c2:84:15:dc:b7:29: 30:e8:4f:74:88:a1:c5:f6:47:18:23:d9:69:52:2c: c7:36:17:51:1a:f3:60:d2:72:40:40:8a:ed:69:31: 10:7c:7b:3a:ca:26:ae:ab:ed:28:ed:c6:e3:69:2f: 1c:7d:48:5f:22:cb:bd:19:ff:f9:6a:9e:d0:22:ca: 78:d6:71:22:71:38:31:80:41:b0:ca:0d:82:b8:b6: 94:df:2e:59:1d:de:51:f2:2b:b6:ec:d1:03:33:70: fe:64:ce:67:a4:42:43:ce:49:86:8c:1a:a2:11:3f: 7d:4b:28:ef:da:1b:48:97:86:50:92:c2:2e:22:47: 38:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:6D:C2:4F:D4:27:AE:E1:4E:4E:8F:E9:5F:A1:89:54:C9:0A:F3:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/5382c986-e3a5-3ea7-b4c7-3474882f9a83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl X509v3 Authority Key Identifier: keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer sbgp-ipAddrBlock: critical IPv4: 198.84.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:83:6f:02:85:0c:2c:23:bd:27:34:55:5b:35:ba:fb:7e:2c: f6:9d:7b:26:7b:0a:e5:aa:28:83:0c:4b:3a:10:06:79:04:8f: 91:97:d9:1a:64:f5:10:87:d8:aa:d1:78:9c:11:6a:04:cb:be: 8b:f0:a8:80:b0:56:4a:1a:db:28:3f:27:24:93:9a:3c:08:76: 91:70:b9:9a:99:15:22:c9:b2:91:14:d1:9f:d5:dc:0e:91:db: d2:b4:d0:fb:fc:9e:df:87:7d:06:7f:b0:84:44:2a:c2:37:e3: 7f:d3:3a:04:a5:f1:18:1f:98:c9:67:e7:44:3b:73:45:6f:4d: 2d:d7:1a:21:01:94:8e:a6:95:16:e3:83:9d:69:19:5b:c9:00: 0d:7e:32:8a:b8:58:e5:e8:7c:24:d5:c1:f1:60:d5:d5:b3:16: 16:f7:1c:ea:a8:13:c4:88:53:a7:84:2d:53:ff:17:3d:c6:95: 61:01:76:69:d0:e6:53:1b:82:72:4b:bc:98:aa:67:cc:f4:22: e9:29:63:0f:8e:2e:d8:05:34:ee:57:63:89:88:20:87:d3:97: 19:26:e6:6a:11:c1:3c:c2:c7:8b:69:03:e6:0f:51:3f:dc:29: 68:a8:e4:49:cb:1c:7d:cb:03:e8:69:54:0b:77:7a:22:ca:cb: e3:5b:0d:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qgg+y4UtmJy47SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMyZTRjNTctZjU4OC00NmMyLWE3NTItNzA4YWU2ZWZi MWNjMB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk NjFlYjE4NDctNjI5MC00OWY4LWJjYmItN2M1NzA3YTE0MDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7uvbp2p4m8njNJ815C6D/WXppLLfyAvt0YC 0+8sAbzBxG+a0JKjyhQOvk69VqTXEtvhKMxBylGdbx+2p1wGXCMglxTACw+cQis2 toFWcgziE9U8VvAFTvHGxDjkQTAGuDGp33OuzYMFgLoQoeiHo9RLsIz3L4pcGpwO 26A3bgvChBXctykw6E90iKHF9kcYI9lpUizHNhdRGvNg0nJAQIrtaTEQfHs6yiau q+0o7cbjaS8cfUhfIsu9Gf/5ap7QIsp41nEicTgxgEGwyg2CuLaU3y5ZHd5R8iu2 7NEDM3D+ZM5npEJDzkmGjBqiET99Syjv2htIl4ZQksIuIkc4vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGRtwk/UJ67hTk6P6V+hiVTJCvM5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJl NGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhhZTZlZmIxY2MvNTM4MmM5ODYtZTNhNS0z ZWE3LWI0YzctMzQ3NDg4MmY5YTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzMyZTRjNTctZjU4OC00NmMyLWE3 NTItNzA4YWU2ZWZiMWNjL2MzMmU0YzU3LWY1ODgtNDZjMi1hNzUyLTcwOGFlNmVm YjFjYy5jcmwwHwYDVR0jBBgwFoAUUqWFDIVSmXcpEHqku+uQmHRQ8IkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJlNGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhh ZTZlZmIxY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHxlSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+DbwKFDCwjvSc0VVs1uvt+LPadeyZ7CuWqKIMMSzoQBnkEj5GX2Rpk 9RCH2KrReJwRagTLvovwqICwVkoa2yg/JySTmjwIdpFwuZqZFSLJspEU0Z/V3A6R 29K00Pv8nt+HfQZ/sIREKsI343/TOgSl8RgfmMln50Q7c0VvTS3XGiEBlI6mlRbj g51pGVvJAA1+Moq4WOXofCTVwfFg1dWzFhb3HOqoE8SIU6eELVP/Fz3GlWEBdmnQ 5lMbgnJLvJiqZ8z0IukpYw+OLtgFNO5XY4mIIIfTlxkm5moRwTzCx4tpA+YPUT/c KWio5EnLHH3LA+hpVAt3eiLKy+NbDfM= -----END CERTIFICATE-----Generated at Wed May 7 14:27:34 2025 by rpki-client