$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/521cdfd3-e2d0-3d53-951f-67811b5957ef.roa File: 521cdfd3-e2d0-3d53-951f-67811b5957ef.roa (raw, json) Hash identifier: CapoN+Q8beb9YH9MfnUmJuN1dlFnCQPn4yXD5vdNGyQ= Subject key identifier: 69:3A:FD:CB:26:6D:56:89:2C:79:57:58:19:42:81:C3:42:69:1C:1F Certificate issuer: /CN=d2584a20-171d-406f-91e5-a70a19be13b8 Certificate serial: 010D0C9F4328584A5E60604A448DD39CE0E242B4 Authority key identifier: 56:7A:2E:3B:A3:B5:29:D6:1C:46:DF:5F:10:7D:3C:C0:8F:C3:13:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/521cdfd3-e2d0-3d53-951f-67811b5957ef.roa Signing time: Tue 01 Jul 2025 01:00:50 +0000 ROA not before: Tue 01 Jul 2025 01:00:50 +0000 ROA not after: Mon 29 Sep 2025 01:00:50 +0000 asID: 36517 IP address blocks: 198.148.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/d2584a20-171d-406f-91e5-a70a19be13b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/d2584a20-171d-406f-91e5-a70a19be13b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:60:60:4a:44:8d:d3:9c:e0:e2:42:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2584a20-171d-406f-91e5-a70a19be13b8 Validity Not Before: Jul 1 01:00:50 2025 GMT Not After : Sep 29 01:00:50 2025 GMT Subject: CN=ba613920-0633-4cb2-8c9c-75fee79d66c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f7:9b:89:20:77:ef:a1:40:be:08:e1:e4:02: 6a:56:79:63:9d:56:2d:70:40:51:8a:b4:2a:f8:18: 27:af:bb:44:11:55:78:d4:71:21:1a:9b:02:7a:10: ab:9f:42:47:81:6f:e4:83:be:ec:05:82:51:57:c0: 00:93:a7:90:b3:8f:9d:e9:26:5b:3f:2d:80:43:93: 2c:fa:6e:e7:7c:36:19:8f:15:e8:ed:fc:8f:da:59: 31:cd:68:a8:98:6f:02:6c:ac:bf:ec:94:d8:34:73: dd:3a:17:aa:81:fb:2c:70:2e:c5:3b:43:31:96:95: cf:bc:c4:ff:d2:47:82:01:9c:d7:b7:fb:fc:5f:fb: b0:a0:a6:33:df:2c:e8:29:3c:f8:95:95:ba:e8:7d: 53:da:03:af:2a:23:f1:0f:6e:6e:a4:60:40:1c:65: bc:2a:14:ff:81:da:4d:3d:3a:52:9f:ce:63:1c:7e: 39:aa:3a:9c:4b:07:81:ff:26:ef:c6:8f:39:b2:5b: 7c:4f:ef:4c:7b:86:41:a6:2e:b3:26:e7:6f:47:9a: 66:68:12:55:f3:2f:7a:ac:9f:84:7b:10:62:4f:3e: b5:91:6b:6f:e2:4d:62:42:30:90:60:da:3c:c9:24: a2:bc:67:e9:60:45:f4:f4:0f:18:69:34:ff:76:db: 7c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:3A:FD:CB:26:6D:56:89:2C:79:57:58:19:42:81:C3:42:69:1C:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/521cdfd3-e2d0-3d53-951f-67811b5957ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/d2584a20-171d-406f-91e5-a70a19be13b8.crl X509v3 Authority Key Identifier: keyid:56:7A:2E:3B:A3:B5:29:D6:1C:46:DF:5F:10:7D:3C:C0:8F:C3:13:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8.cer sbgp-ipAddrBlock: critical IPv4: 198.148.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption de:f8:34:76:0f:e7:2a:6c:a2:2f:af:17:35:1c:ea:3f:e3:e9: 0c:f0:b3:ee:f9:af:cb:ca:c6:f2:87:71:f2:87:11:aa:74:48: db:82:be:d5:dd:9a:9e:49:c9:ab:e4:45:63:42:1a:fd:49:95: 3a:44:53:9f:13:c8:17:00:36:53:f1:ed:a0:d3:b1:99:33:a9: ee:41:81:71:cc:44:ae:bb:5b:68:9c:bd:53:90:4f:30:9f:05: f4:97:32:5f:50:26:aa:28:5b:9b:1b:1a:ad:6c:53:36:c9:49: 08:d5:86:5a:76:12:73:b8:88:d2:1b:71:7d:93:0a:22:f9:d2: 99:d6:d3:ae:eb:de:40:48:64:60:30:f0:ae:d5:7b:13:35:25: 98:96:bd:28:b6:e9:d0:29:b1:84:54:ee:1d:72:41:97:0d:e2: 34:98:39:f6:e2:4e:df:8b:d6:ba:d3:c5:07:c2:2b:fc:d9:82: 97:65:35:ed:69:a0:fb:c2:d4:b6:a7:8d:98:17:d4:56:b1:ca: 15:8d:0a:c2:b1:0a:c6:3f:c0:1c:d0:cf:bf:69:48:27:76:d8: be:a5:32:d9:7d:5b:aa:4a:cc:9c:bf:18:c2:e8:58:da:a2:f5: 0a:10:28:7d:14:62:33:6d:33:74:bc:e0:40:43:25:e8:3b:da: 37:83:3a:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpeYGBKRI3TnODiQrQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDI1ODRhMjAtMTcxZC00MDZmLTkxZTUtYTcwYTE5YmUx M2I4MB4XDTI1MDcwMTAxMDA1MFoXDTI1MDkyOTAxMDA1MFowLzEtMCsGA1UEAxMk YmE2MTM5MjAtMDYzMy00Y2IyLThjOWMtNzVmZWU3OWQ2NmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPebiSB376FAvgjh5AJqVnljnVYtcEBRirQq +Bgnr7tEEVV41HEhGpsCehCrn0JHgW/kg77sBYJRV8AAk6eQs4+d6SZbPy2AQ5Ms +m7nfDYZjxXo7fyP2lkxzWiomG8CbKy/7JTYNHPdOheqgfsscC7FO0MxlpXPvMT/ 0keCAZzXt/v8X/uwoKYz3yzoKTz4lZW66H1T2gOvKiPxD25upGBAHGW8KhT/gdpN PTpSn85jHH45qjqcSweB/ybvxo85slt8T+9Me4ZBpi6zJudvR5pmaBJV8y96rJ+E exBiTz61kWtv4k1iQjCQYNo8ySSivGfpYEX09A8YaTT/dtt8sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGk6/csmbVaJLHlXWBlCgcNCaRwfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kMjU4 NGEyMC0xNzFkLTQwNmYtOTFlNS1hNzBhMTliZTEzYjgvNTIxY2RmZDMtZTJkMC0z ZDUzLTk1MWYtNjc4MTFiNTk1N2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZDI1ODRhMjAtMTcxZC00MDZmLTkx ZTUtYTcwYTE5YmUxM2I4L2QyNTg0YTIwLTE3MWQtNDA2Zi05MWU1LWE3MGExOWJl MTNiOC5jcmwwHwYDVR0jBBgwFoAUVnouO6O1KdYcRt9fEH08wI/DEwswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9kMjU4NGEyMC0xNzFkLTQwNmYtOTFlNS1hNzBh MTliZTEzYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpSEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAN74NHYP5ypsoi+vFzUc6j/j6Qzws+75r8vKxvKHcfKHEap0SNuCvtXd mp5JyavkRWNCGv1JlTpEU58TyBcANlPx7aDTsZkzqe5BgXHMRK67W2icvVOQTzCf BfSXMl9QJqooW5sbGq1sUzbJSQjVhlp2EnO4iNIbcX2TCiL50pnW067r3kBIZGAw 8K7VexM1JZiWvSi26dApsYRU7h1yQZcN4jSYOfbiTt+L1rrTxQfCK/zZgpdlNe1p oPvC1LanjZgX1FaxyhWNCsKxCsY/wBzQz79pSCd22L6lMtl9W6pKzJy/GMLoWNqi 9QoQKH0UYjNtM3S84EBDJeg72jeDOlg= -----END CERTIFICATE-----Generated at Tue Jul 8 01:00:05 2025 by rpki-client