$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0329ca24-543b-3e14-bff3-7ef70cd0936e.roa File: 0329ca24-543b-3e14-bff3-7ef70cd0936e.roa (raw, json) Hash identifier: Uwxdr51d1QjT3wHSifkIGQlWppZa88wlfQYBcrzzZIU= Subject key identifier: 3E:E1:47:83:DC:C7:DF:51:9A:19:90:46:FD:00:2C:B5:49:ED:1E:63 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849F01A8F71286CBB6270C97180 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0329ca24-543b-3e14-bff3-7ef70cd0936e.roa Signing time: Thu 22 May 2025 13:01:05 +0000 ROA not before: Thu 22 May 2025 13:01:05 +0000 ROA not after: Wed 20 Aug 2025 13:01:05 +0000 asID: 13335 IP address blocks: 198.41.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f0:1a:8f:71:28:6c:bb:62:70:c9:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 22 13:01:05 2025 GMT Not After : Aug 20 13:01:05 2025 GMT Subject: CN=2b030e9a-bbed-419a-9e35-934ead517761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:db:0c:3d:53:d7:b1:5e:37:e9:5d:d0:ce:54: 79:dd:1f:1d:94:4a:97:37:f0:f6:f2:f2:13:27:bb: 62:98:20:af:d4:2f:50:ea:a7:bd:88:d2:1c:99:d7: 1e:29:b5:35:d7:e9:b9:e8:88:78:46:03:56:a5:97: e5:22:76:60:2f:d1:31:d7:74:7f:98:5c:0f:5a:3a: bf:9d:a7:c2:02:b2:a4:3d:3a:81:cd:94:33:93:b0: 19:67:e3:2d:f7:f7:11:0c:c9:83:4d:3e:eb:2b:62: fc:cb:46:f7:d8:8d:76:c2:c0:9b:6a:73:fe:fa:43: 18:9b:bd:af:01:a2:03:8b:c5:92:52:50:eb:87:c5: b6:cf:cb:20:17:fb:43:2e:51:c5:cb:b4:f5:56:1b: a6:96:a8:ed:03:36:cc:16:c5:30:e2:ef:99:15:85: b1:22:cf:5a:27:22:ed:79:90:a8:d4:78:28:7a:91: 40:3b:4a:82:bc:73:1e:44:9b:6f:7b:b6:f3:cf:c2: 5e:31:07:1d:2e:70:ab:d6:0a:94:60:a2:20:92:87: be:5d:44:67:b8:35:c7:e1:d4:c6:e0:bb:25:bb:ef: f7:a2:aa:c7:3c:28:11:74:76:af:1a:9e:97:51:e0: d4:4a:c6:89:94:21:44:05:76:3e:bc:d1:b5:c5:7a: 15:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:E1:47:83:DC:C7:DF:51:9A:19:90:46:FD:00:2C:B5:49:ED:1E:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0329ca24-543b-3e14-bff3-7ef70cd0936e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 198.41.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:75:6a:c6:32:2e:a9:d3:d6:a0:c9:8a:49:32:b4:92:f1:02: 0e:63:d7:07:1e:79:5a:b5:e3:7b:28:f5:8e:e5:15:ef:99:61: bf:16:84:47:38:f6:b6:c4:ef:05:5f:85:88:00:f4:6d:db:25: ca:47:29:6e:21:f1:ac:3c:47:f9:8c:e6:df:f7:20:f1:6e:26: 0c:96:41:81:92:af:61:6f:83:8c:a3:7f:0e:9a:a3:68:bf:a4: e3:b7:bd:67:ab:93:9d:61:42:05:a9:22:22:7e:eb:12:0f:80: 2b:a2:3c:65:a0:1a:37:44:fc:a0:c4:a5:40:d7:1f:ba:8a:e3: 2a:a9:9b:2f:bc:2d:17:54:c1:38:24:29:52:34:ff:6a:4d:d0: a3:d9:a4:45:b7:15:65:73:c7:48:73:0e:7b:0e:84:9e:a0:9a: 6e:a9:39:14:b8:31:bf:a3:1c:19:5a:53:4c:12:d4:1e:0f:62: 1b:b4:7d:15:35:ee:28:e5:4b:f3:99:51:09:b3:5e:a7:8c:d2: 18:05:66:57:1c:41:d3:51:16:f6:13:f9:cc:2a:ee:9a:a8:cb: 0a:f3:01:15:fd:f7:45:73:26:83:d2:a9:ed:ab:eb:41:70:87: c1:c0:5a:de:ee:f1:fe:1e:4d:bd:6b:7e:bc:1b:4b:3e:ac:c7: a3:6e:49:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnwGo9xKGy7YnDJcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMjEzMDEwNVoXDTI1MDgyMDEzMDEwNVowLzEtMCsGA1UEAxMk MmIwMzBlOWEtYmJlZC00MTlhLTllMzUtOTM0ZWFkNTE3NzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA99sMPVPXsV436V3QzlR53R8dlEqXN/D28vIT J7timCCv1C9Q6qe9iNIcmdceKbU11+m56Ih4RgNWpZflInZgL9Ex13R/mFwPWjq/ nafCArKkPTqBzZQzk7AZZ+Mt9/cRDMmDTT7rK2L8y0b32I12wsCbanP++kMYm72v AaIDi8WSUlDrh8W2z8sgF/tDLlHFy7T1VhumlqjtAzbMFsUw4u+ZFYWxIs9aJyLt eZCo1HgoepFAO0qCvHMeRJtve7bzz8JeMQcdLnCr1gqUYKIgkoe+XURnuDXH4dTG 4Lslu+/3oqrHPCgRdHavGp6XUeDUSsaJlCFEBXY+vNG1xXoVEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD7hR4Pcx99RmhmQRv0ALLVJ7R5jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDMyOWNhMjQtNTQzYi0z ZTE0LWJmZjMtN2VmNzBjZDA5MzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxinUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAR1asYyLqnT1qDJikkytJLxAg5j1wceeVq143so9Y7lFe+ZYb8WhEc4 9rbE7wVfhYgA9G3bJcpHKW4h8aw8R/mM5t/3IPFuJgyWQYGSr2Fvg4yjfw6ao2i/ pOO3vWerk51hQgWpIiJ+6xIPgCuiPGWgGjdE/KDEpUDXH7qK4yqpmy+8LRdUwTgk KVI0/2pN0KPZpEW3FWVzx0hzDnsOhJ6gmm6pORS4Mb+jHBlaU0wS1B4PYhu0fRU1 7ijlS/OZUQmzXqeM0hgFZlccQdNRFvYT+cwq7pqoywrzARX990VzJoPSqe2r60Fw h8HAWt7u8f4eTb1rfrwbSz6sx6NuSQc= -----END CERTIFICATE-----Generated at Sat Jun 7 04:49:18 2025 by rpki-client