$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/a86e256b-b4bb-3be0-aaf7-201e06e81a58.roa File: a86e256b-b4bb-3be0-aaf7-201e06e81a58.roa (raw, json) Hash identifier: PIDKQOdck1Wm7IkxuWyW4apxyyDvgRk9HG571pjMI9k= Subject key identifier: D7:2B:81:3B:C4:42:3D:7B:E3:45:47:C2:42:31:C3:33:D5:30:46:B2 Certificate issuer: /CN=ab85686b-bac3-40d2-b46e-f2593fb0bc6b Certificate serial: 010D0C9F4328584A146558957943C0EDB782CA00 Authority key identifier: 0E:5E:F6:3E:A7:FF:42:C0:84:5C:18:ED:96:19:B7:6D:8A:D9:86:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/a86e256b-b4bb-3be0-aaf7-201e06e81a58.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 399668 IP address blocks: 198.206.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:58:95:79:43:c0:ed:b7:82:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab85686b-bac3-40d2-b46e-f2593fb0bc6b Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=03d27286-1293-4e6e-b7c7-98ca9ff4541e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:29:be:d7:22:72:d1:e2:34:8b:83:7c:62:4e: 2b:e0:83:4c:c6:2b:54:7e:c9:84:b1:aa:c1:85:27: e2:b9:9b:17:05:fc:0a:09:8e:66:3a:5b:3c:35:a7: 8e:5f:f4:23:8f:b2:9f:17:55:0a:30:29:3a:b8:6f: e5:91:b2:62:01:ad:34:69:73:0f:16:5f:bf:41:b2: 1b:fe:b4:19:58:1b:67:06:47:db:e9:2a:81:c2:35: d3:63:01:c4:4a:34:f3:fb:c5:1d:42:1d:0c:22:29: 8d:9c:74:b8:29:8a:8e:3e:33:d2:5b:65:ff:91:ee: b9:44:ff:28:de:53:5d:8f:da:bb:0e:35:ea:00:50: 02:87:25:b6:92:84:c6:1e:1e:ab:96:1c:c3:e8:a5: a0:0a:b8:26:b7:59:f9:df:01:d1:d7:cb:eb:21:14: 00:9e:6d:36:54:bf:62:81:6f:f9:9f:31:48:03:11: 10:96:e9:9d:f6:fa:f9:86:7a:90:f8:4b:89:b9:b0: f5:b3:6f:82:fd:8d:ee:76:a5:f7:87:57:20:11:eb: 67:f0:ce:12:93:21:9b:4d:f8:0f:74:02:79:34:29: 6f:76:73:b7:00:b9:30:30:6c:93:ad:04:7f:5c:dc: 0c:8b:3c:45:a5:63:09:ea:c9:66:b4:d2:9c:63:d1: 63:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:2B:81:3B:C4:42:3D:7B:E3:45:47:C2:42:31:C3:33:D5:30:46:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/a86e256b-b4bb-3be0-aaf7-201e06e81a58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.crl X509v3 Authority Key Identifier: keyid:0E:5E:F6:3E:A7:FF:42:C0:84:5C:18:ED:96:19:B7:6D:8A:D9:86:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.cer sbgp-ipAddrBlock: critical IPv4: 198.206.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:05:ac:a9:d3:2c:45:86:39:c7:e5:0e:89:83:43:eb:4a:fa: dc:8f:42:2b:0a:5a:a2:b4:0c:df:87:56:4b:11:93:26:f2:d6: ca:66:c0:28:d6:62:c8:93:70:a9:61:09:01:4e:cd:13:98:77: dc:4a:08:1a:1d:60:8c:ad:25:35:d3:8f:a6:2b:ff:77:16:50: cf:53:0d:29:fb:92:32:43:04:49:e2:20:64:1f:99:f0:e8:5f: 05:4a:9c:eb:a1:87:d6:91:e9:24:24:f5:5d:41:20:64:7e:1e: 6b:ff:ee:43:b6:d9:b0:ab:b6:20:6c:68:0b:ae:91:72:98:8b: 25:5b:e2:7f:a1:29:17:df:47:86:18:5b:72:43:e2:4e:7a:0f: 8c:0d:91:bc:d1:4d:33:80:68:5c:a0:7f:61:70:6f:78:ae:99: 79:9e:79:e9:7b:99:6c:26:5d:4b:9b:50:eb:60:ad:81:73:85: 6e:74:2e:52:7f:3d:65:78:15:65:00:8c:3a:fc:53:76:22:94: 39:f4:88:11:fb:9f:ad:74:02:e9:bd:05:70:44:fb:95:e1:b7: 0c:f8:29:a1:42:5b:4f:e6:e1:34:66:d3:79:0a:c8:ec:ef:53: ff:c4:6b:fc:7f:74:cd:28:e0:53:47:40:89:03:50:4c:23:d4: ff:0f:f5:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZViVeUPA7beCygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4NTY4NmItYmFjMy00MGQyLWI0NmUtZjI1OTNmYjBi YzZiMB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk MDNkMjcyODYtMTI5My00ZTZlLWI3YzctOThjYTlmZjQ1NDFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwim+1yJy0eI0i4N8Yk4r4INMxitUfsmEsarB hSfiuZsXBfwKCY5mOls8NaeOX/Qjj7KfF1UKMCk6uG/lkbJiAa00aXMPFl+/QbIb /rQZWBtnBkfb6SqBwjXTYwHESjTz+8UdQh0MIimNnHS4KYqOPjPSW2X/ke65RP8o 3lNdj9q7DjXqAFAChyW2koTGHh6rlhzD6KWgCrgmt1n53wHR18vrIRQAnm02VL9i gW/5nzFIAxEQlumd9vr5hnqQ+EuJubD1s2+C/Y3udqX3h1cgEetn8M4SkyGbTfgP dAJ5NClvdnO3ALkwMGyTrQR/XNwMizxFpWMJ6slmtNKcY9Fj2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNcrgTvEQj1740VHwkIxwzPVMEayMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYjg1 Njg2Yi1iYWMzLTQwZDItYjQ2ZS1mMjU5M2ZiMGJjNmIvYTg2ZTI1NmItYjRiYi0z YmUwLWFhZjctMjAxZTA2ZTgxYTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWI4NTY4NmItYmFjMy00MGQyLWI0 NmUtZjI1OTNmYjBiYzZiL2FiODU2ODZiLWJhYzMtNDBkMi1iNDZlLWYyNTkzZmIw YmM2Yi5jcmwwHwYDVR0jBBgwFoAUDl72Pqf/QsCEXBjtlhm3bYrZhr4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYjg1Njg2Yi1iYWMzLTQwZDItYjQ2ZS1mMjU5 M2ZiMGJjNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxs6dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8FrKnTLEWGOcflDomDQ+tK+tyPQisKWqK0DN+HVksRkyby1spmwCjW YsiTcKlhCQFOzROYd9xKCBodYIytJTXTj6Yr/3cWUM9TDSn7kjJDBEniIGQfmfDo XwVKnOuhh9aR6SQk9V1BIGR+Hmv/7kO22bCrtiBsaAuukXKYiyVb4n+hKRffR4YY W3JD4k56D4wNkbzRTTOAaFygf2Fwb3iumXmeeel7mWwmXUubUOtgrYFzhW50LlJ/ PWV4FWUAjDr8U3YilDn0iBH7n610Aum9BXBE+5Xhtwz4KaFCW0/m4TRm03kKyOzv U//Ea/x/dM0o4FNHQIkDUEwj1P8P9Ug= -----END CERTIFICATE-----Generated at Tue Jun 10 01:03:01 2025 by rpki-client