$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/59d53a3d-8223-3e3c-a175-786b0e4fb45a.roa File: 59d53a3d-8223-3e3c-a175-786b0e4fb45a.roa (raw, json) Hash identifier: 28PK5Jy9MhmVDtWUuzOHuAxMyPayyaJnWdog6LjPLEc= Subject key identifier: 07:0F:8E:96:A0:A1:5E:EC:68:CB:2E:CF:B1:8B:7E:FD:10:B2:B2:0C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849F01A8FCCBF57EA1D538A4040 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/59d53a3d-8223-3e3c-a175-786b0e4fb45a.roa Signing time: Thu 22 May 2025 13:01:05 +0000 ROA not before: Thu 22 May 2025 13:01:05 +0000 ROA not after: Wed 20 Aug 2025 13:01:05 +0000 asID: 13335 IP address blocks: 198.41.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f0:1a:8f:cc:bf:57:ea:1d:53:8a:40:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 22 13:01:05 2025 GMT Not After : Aug 20 13:01:05 2025 GMT Subject: CN=987b068b-a236-45a3-8653-322dfa28aa60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e1:b8:17:83:95:55:86:b8:cc:45:ed:41:96: c2:b1:43:d5:49:5d:08:c4:fb:ed:4b:59:75:f4:8a: 98:2b:88:ee:c3:d2:86:e4:74:e3:10:9d:52:ed:21: f9:cf:f6:35:95:24:ea:7e:87:76:69:57:e4:6e:3d: b2:e1:d7:45:c4:c3:f3:b4:53:41:73:83:52:80:9a: 4d:49:6b:f2:b7:e7:c9:75:d7:a4:37:cd:f5:1d:db: b0:9d:2f:99:c5:44:ff:c4:61:74:64:4e:d1:35:17: cd:6f:32:87:f3:1e:ea:38:aa:88:d6:e5:ad:4b:b9: df:64:8e:51:57:98:7d:24:f5:63:99:a0:d7:b1:6c: de:e1:30:07:5a:9c:51:7b:29:af:7b:4a:1f:d2:09: 95:d5:a4:a6:42:5b:9c:be:48:8a:9c:6d:a1:8c:85: 5a:a5:27:a1:3c:7a:0e:51:1e:d0:50:aa:0a:5c:48: 1c:d9:65:e9:67:da:c6:fb:2f:f7:b0:81:50:cc:82: 60:08:98:de:d5:32:cd:d4:13:86:bb:3b:37:4a:fa: 1f:c2:b8:29:25:7e:ab:bc:6b:04:66:4a:32:f6:67: f9:7f:e6:84:83:63:a4:d5:9d:78:15:4d:db:6f:c3: ba:30:83:f8:a3:a2:76:d8:aa:f7:a5:d0:7d:f0:c8: c3:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:0F:8E:96:A0:A1:5E:EC:68:CB:2E:CF:B1:8B:7E:FD:10:B2:B2:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/59d53a3d-8223-3e3c-a175-786b0e4fb45a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 198.41.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:80:6a:97:ba:a0:47:3d:07:4e:63:6a:6d:d3:76:f2:08:0b: 88:7e:31:2d:9f:32:de:bf:74:63:0a:49:e6:a4:b1:f8:c5:93: d4:62:20:c2:6f:8e:17:46:36:c6:bd:f5:0b:eb:8c:e4:1a:4f: ff:43:a9:bb:23:ff:46:85:2a:bb:51:ca:ab:e0:e5:d3:13:ae: 75:1b:7d:a2:82:08:d8:fb:af:42:c3:9d:f0:6f:c3:25:da:e2: 7b:3e:16:b7:8c:66:86:be:23:39:1b:03:4f:60:32:30:78:1c: 63:6f:ba:d1:4f:ec:03:d9:2c:10:11:59:51:53:6e:29:d9:64: 45:66:3d:37:e8:e1:e2:bd:1d:ad:3a:0d:a7:8b:bf:29:dc:07: 69:cd:11:ae:0f:08:ae:a3:fb:f0:58:25:e3:16:fc:e9:8b:6c: cf:e4:94:7e:21:ac:5a:9d:91:d6:82:bf:5d:ac:37:be:03:16: a2:9c:22:d9:8a:98:3e:25:f2:9e:6f:b3:a8:bd:1b:7f:fa:a7: 76:68:c3:c9:de:3c:13:2d:60:a3:17:77:0a:7e:c0:f3:a8:52: ed:e6:ce:65:71:cd:2e:06:77:06:69:3f:ed:dd:41:32:f2:59: 10:ee:86:b4:2b:9e:bc:e3:0a:d3:5f:ed:b7:7c:95:73:5d:00: d0:f9:a2:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnwGo/Mv1fqHVOKQEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMjEzMDEwNVoXDTI1MDgyMDEzMDEwNVowLzEtMCsGA1UEAxMk OTg3YjA2OGItYTIzNi00NWEzLTg2NTMtMzIyZGZhMjhhYTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOG4F4OVVYa4zEXtQZbCsUPVSV0IxPvtS1l1 9IqYK4juw9KG5HTjEJ1S7SH5z/Y1lSTqfod2aVfkbj2y4ddFxMPztFNBc4NSgJpN SWvyt+fJddekN831HduwnS+ZxUT/xGF0ZE7RNRfNbzKH8x7qOKqI1uWtS7nfZI5R V5h9JPVjmaDXsWze4TAHWpxReymve0of0gmV1aSmQlucvkiKnG2hjIVapSehPHoO UR7QUKoKXEgc2WXpZ9rG+y/3sIFQzIJgCJje1TLN1BOGuzs3SvofwrgpJX6rvGsE Zkoy9mf5f+aEg2Ok1Z14FU3bb8O6MIP4o6J22Kr3pdB98MjD4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAcPjpagoV7saMsuz7GLfv0QsrIMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNTlkNTNhM2QtODIyMy0z ZTNjLWExNzUtNzg2YjBlNGZiNDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxincMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK+Aape6oEc9B05jam3TdvIIC4h+MS2fMt6/dGMKSeaksfjFk9RiIMJv jhdGNsa99QvrjOQaT/9Dqbsj/0aFKrtRyqvg5dMTrnUbfaKCCNj7r0LDnfBvwyXa 4ns+FreMZoa+IzkbA09gMjB4HGNvutFP7APZLBARWVFTbinZZEVmPTfo4eK9Ha06 DaeLvyncB2nNEa4PCK6j+/BYJeMW/OmLbM/klH4hrFqdkdaCv12sN74DFqKcItmK mD4l8p5vs6i9G3/6p3Zow8nePBMtYKMXdwp+wPOoUu3mzmVxzS4GdwZpP+3dQTLy WRDuhrQrnrzjCtNf7bd8lXNdAND5omk= -----END CERTIFICATE-----Generated at Thu Jun 5 18:34:31 2025 by rpki-client