$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0cfd6db9-1498-3cfa-a73f-8a2b22c61159.roa File: 0cfd6db9-1498-3cfa-a73f-8a2b22c61159.roa (raw, json) Hash identifier: 79qKAiXNRhHg0nKqcHGGwJ0a3n7ixGCPw3fKhViGoyk= Subject key identifier: 87:30:EF:AC:C9:F2:C4:74:8C:8E:E8:80:3D:EE:F7:8B:3F:7E:FF:97 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849F01A9B5FE269C1E258B03180 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0cfd6db9-1498-3cfa-a73f-8a2b22c61159.roa Signing time: Thu 22 May 2025 13:01:05 +0000 ROA not before: Thu 22 May 2025 13:01:05 +0000 ROA not after: Wed 20 Aug 2025 13:01:05 +0000 asID: 13335 IP address blocks: 198.41.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f0:1a:9b:5f:e2:69:c1:e2:58:b0:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 22 13:01:05 2025 GMT Not After : Aug 20 13:01:05 2025 GMT Subject: CN=d6b76931-1e4a-4c38-9a7f-50d810d99fa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:7f:e6:22:ee:ef:a9:48:1c:f8:f2:5b:60:72: 24:f9:8b:ca:36:2d:1c:b9:6a:01:1d:56:08:ed:91: c5:28:94:8c:8f:51:47:6d:cf:ce:7e:99:fb:e9:17: ea:69:1d:04:78:f4:8e:eb:cc:56:45:aa:e2:03:14: 2b:f1:f6:41:59:b7:53:08:41:a1:f2:ad:21:23:82: f5:46:a9:1f:31:48:0f:44:be:4a:b7:4b:4d:ff:63: b6:98:30:4d:f7:5a:41:3a:2d:2f:9b:9d:6d:0b:72: 8d:c6:3c:f7:55:86:17:3f:65:b7:b2:8c:15:88:8c: 12:eb:ac:89:d0:5c:8a:77:26:6a:f6:e8:3e:0e:10: 3a:83:ae:05:63:af:7e:1e:c2:4a:28:0a:0a:a7:bf: 92:ac:1e:57:15:5e:ca:86:7c:ef:a4:28:72:d3:56: 79:87:34:f4:30:e1:d8:98:75:3a:de:f6:ab:7a:59: 39:ee:f8:a1:89:e0:89:cc:4f:c0:a0:d2:bc:a8:be: 61:8c:d4:25:3b:93:94:c4:1d:f2:4a:06:58:83:66: ae:32:f2:51:7e:92:1c:3f:a9:c3:6b:ec:2e:54:77: aa:51:2f:d4:d6:52:40:83:fa:9a:85:98:64:41:41: 7b:4a:95:d7:ff:f1:72:b6:4f:24:bd:0f:67:36:91: 25:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:30:EF:AC:C9:F2:C4:74:8C:8E:E8:80:3D:EE:F7:8B:3F:7E:FF:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0cfd6db9-1498-3cfa-a73f-8a2b22c61159.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 198.41.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:74:80:c4:4d:01:56:c2:1f:fc:9c:c8:55:91:3d:2f:35:53: 81:d0:b1:81:e9:4d:7a:2e:11:06:23:8e:d6:19:0d:6a:9d:9c: 51:55:95:50:26:0c:57:f3:52:c0:23:38:d9:b5:ed:3c:69:3e: 4e:cb:5f:c8:29:60:09:4e:87:0f:dc:9c:2c:54:77:61:0c:99: 6e:ee:f7:68:21:8c:47:45:cd:f9:d2:c4:df:c6:1f:3b:b2:85: 6b:c0:bf:a1:c1:b4:4a:d2:3c:91:93:0f:34:ec:fd:d3:8d:e6: 33:da:02:2a:86:fd:2a:99:5b:28:3a:8a:5b:28:99:b4:a7:25: fd:2d:cf:9f:11:5a:57:85:78:7e:e1:e1:90:2f:27:4d:41:13: d5:42:ff:2d:dc:ba:fa:a1:a6:58:24:1b:5a:93:b4:f7:c7:da: 97:fa:c1:51:ff:17:69:c1:12:79:80:75:17:d7:7d:97:44:ac: 3e:f9:e8:f2:ac:d5:79:c3:6e:3b:b8:39:bf:d7:00:2c:0b:6a: f8:3a:63:d0:8c:a9:4a:06:dd:7f:1f:de:f2:c4:da:39:33:fc: da:f1:5d:b9:b1:7f:f7:91:e7:89:31:91:2b:0d:b8:f0:b6:87: 67:f8:fc:31:c7:fa:d7:18:23:ac:71:32:2d:a0:d2:aa:48:e9: 44:e6:81:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnwGptf4mnB4liwMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMjEzMDEwNVoXDTI1MDgyMDEzMDEwNVowLzEtMCsGA1UEAxMk ZDZiNzY5MzEtMWU0YS00YzM4LTlhN2YtNTBkODEwZDk5ZmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3/mIu7vqUgc+PJbYHIk+YvKNi0cuWoBHVYI 7ZHFKJSMj1FHbc/Ofpn76RfqaR0EePSO68xWRariAxQr8fZBWbdTCEGh8q0hI4L1 RqkfMUgPRL5Kt0tN/2O2mDBN91pBOi0vm51tC3KNxjz3VYYXP2W3sowViIwS66yJ 0FyKdyZq9ug+DhA6g64FY69+HsJKKAoKp7+SrB5XFV7KhnzvpChy01Z5hzT0MOHY mHU63varelk57vihieCJzE/AoNK8qL5hjNQlO5OUxB3ySgZYg2auMvJRfpIcP6nD a+wuVHeqUS/U1lJAg/qahZhkQUF7SpXX//Fytk8kvQ9nNpElBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIcw76zJ8sR0jI7ogD3u94s/fv+XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMGNmZDZkYjktMTQ5OC0z Y2ZhLWE3M2YtOGEyYjIyYzYxMTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxinzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIB0gMRNAVbCH/ycyFWRPS81U4HQsYHpTXouEQYjjtYZDWqdnFFVlVAm DFfzUsAjONm17TxpPk7LX8gpYAlOhw/cnCxUd2EMmW7u92ghjEdFzfnSxN/GHzuy hWvAv6HBtErSPJGTDzTs/dON5jPaAiqG/SqZWyg6ilsombSnJf0tz58RWleFeH7h 4ZAvJ01BE9VC/y3cuvqhplgkG1qTtPfH2pf6wVH/F2nBEnmAdRfXfZdErD756PKs 1XnDbju4Ob/XACwLavg6Y9CMqUoG3X8f3vLE2jkz/NrxXbmxf/eR54kxkSsNuPC2 h2f4/DHH+tcYI6xxMi2g0qpI6UTmgZM= -----END CERTIFICATE-----Generated at Thu Jun 5 18:42:36 2025 by rpki-client