$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2f861b26-c03e-31fa-ae19-11f336173cdc.roa File: 2f861b26-c03e-31fa-ae19-11f336173cdc.roa (raw, json) Hash identifier: R8VhzCg1Np0flTG4bLI7J8X780w0iUXIg1/I0K7J9n8= Subject key identifier: FF:3E:7F:B9:F6:97:58:AE:F3:45:BC:5D:77:E1:5C:2D:02:A4:ED:7B Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849F715482F7926C58D40BE4A80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2f861b26-c03e-31fa-ae19-11f336173cdc.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 202623 IP address blocks: 198.41.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:48:2f:79:26:c5:8d:40:be:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=64e23ac5-8670-4df2-b67e-5f10d5f70c77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ea:f5:1a:b6:60:39:0c:38:5c:07:32:c8:69: 80:c9:be:4d:ea:a4:a0:70:0b:25:e3:ef:fc:e8:fd: b9:d2:40:64:d3:37:e7:78:3e:b5:02:a3:25:6f:ac: c0:27:9c:de:7c:87:45:cf:59:0f:9f:27:8c:12:52: db:8a:e7:5e:81:a5:a4:93:cf:6f:f2:72:a0:a8:2a: 86:f7:b4:1a:14:5a:b3:bd:bc:e4:fa:30:1c:7a:5c: aa:75:50:8c:79:88:b8:1a:42:1b:f7:61:be:e9:24: c2:e9:ce:f6:44:cc:91:14:37:f4:2d:81:4d:83:60: 40:9a:10:ac:16:5e:fe:bf:93:1b:8c:ac:ca:a5:a9: 15:ae:22:84:77:ae:97:a3:a8:c8:12:c1:fe:41:f4: 27:92:c6:6f:e4:4c:10:f4:a8:1e:bc:c4:97:32:02: 98:6f:2b:87:ca:7a:9f:16:97:89:f3:44:e7:e0:25: 59:8a:bb:66:d6:2b:e2:3d:cb:c5:1b:9b:59:57:c2: 4a:a3:2b:b8:14:e9:ad:21:a4:14:ac:18:d5:53:88: 8c:79:cd:c2:3b:98:b0:f9:6d:a4:79:42:bc:25:60: e9:69:7f:34:5d:2a:ea:38:4d:db:22:0a:ac:3b:ed: bd:4c:72:31:aa:55:e7:7a:98:d2:57:d0:5e:8a:57: f5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:3E:7F:B9:F6:97:58:AE:F3:45:BC:5D:77:E1:5C:2D:02:A4:ED:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2f861b26-c03e-31fa-ae19-11f336173cdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 198.41.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:66:df:52:0f:a2:6e:76:2c:4a:81:2f:ce:63:6c:11:e5:64: df:49:ec:1a:91:e1:6a:d2:1e:0d:c3:82:98:99:f2:4f:34:1e: ee:cc:7b:97:41:63:db:ed:c7:9e:29:40:c1:04:43:2c:ec:69: 9a:10:65:f7:95:18:d1:f0:53:5c:d1:69:ba:c4:75:7b:8b:cd: 1d:72:c8:d9:2e:d0:db:b0:67:7d:7d:52:2c:d7:7e:bb:6c:08: 1b:7b:2c:59:6c:db:9d:9c:ce:d7:8e:0b:c1:80:19:23:25:e2: bf:db:c1:85:42:ce:a4:f7:1c:93:9b:45:3a:c0:ee:aa:86:d2: 89:ce:58:08:fd:f4:77:b0:8d:63:8f:46:ec:6b:ef:a7:56:cc: d8:02:c4:95:47:18:f6:2e:bc:81:29:ca:5e:6e:88:a2:78:2c: 60:72:d9:56:41:c4:54:4d:56:b9:59:60:58:92:62:c1:25:1b: 4a:ea:9f:c7:a9:df:8a:ae:d5:46:62:59:0d:19:42:4c:e9:14: bc:0f:dd:9f:36:41:3a:6c:d5:06:27:2d:82:86:92:96:a6:b9: 0d:19:8e:84:e9:9b:6f:dc:af:7a:16:3a:a4:8b:9f:ab:e5:7d: bd:46:b2:4c:a1:5c:6d:e2:fb:da:6e:22:d8:4b:14:0c:9f:c1: 30:c3:61:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn3FUgveSbFjUC+SoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk NjRlMjNhYzUtODY3MC00ZGYyLWI2N2UtNWYxMGQ1ZjcwYzc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOr1GrZgOQw4XAcyyGmAyb5N6qSgcAsl4+/8 6P250kBk0zfneD61AqMlb6zAJ5zefIdFz1kPnyeMElLbiudegaWkk89v8nKgqCqG 97QaFFqzvbzk+jAcelyqdVCMeYi4GkIb92G+6STC6c72RMyRFDf0LYFNg2BAmhCs Fl7+v5MbjKzKpakVriKEd66Xo6jIEsH+QfQnksZv5EwQ9KgevMSXMgKYbyuHynqf FpeJ80Tn4CVZirtm1iviPcvFG5tZV8JKoyu4FOmtIaQUrBjVU4iMec3CO5iw+W2k eUK8JWDpaX80XSrqOE3bIgqsO+29THIxqlXnepjSV9Beilf1AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP8+f7n2l1iu80W8XXfhXC0CpO17MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmY4NjFiMjYtYzAzZS0z MWZhLWFlMTktMTFmMzM2MTczY2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCximUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNm31IPom52LEqBL85jbBHlZN9J7BqR4WrSHg3DgpiZ8k80Hu7Me5dB Y9vtx54pQMEEQyzsaZoQZfeVGNHwU1zRabrEdXuLzR1yyNku0NuwZ319UizXfrts CBt7LFls252czteOC8GAGSMl4r/bwYVCzqT3HJObRTrA7qqG0onOWAj99HewjWOP Ruxr76dWzNgCxJVHGPYuvIEpyl5uiKJ4LGBy2VZBxFRNVrlZYFiSYsElG0rqn8ep 34qu1UZiWQ0ZQkzpFLwP3Z82QTps1QYnLYKGkpamuQ0ZjoTpm2/cr3oWOqSLn6vl fb1GskyhXG3i+9puIthLFAyfwTDDYVo= -----END CERTIFICATE-----Generated at Sat Jun 7 10:44:08 2025 by rpki-client