$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/17f19ab6-a1b2-33e9-9c93-70dd528f9072.roa File: 17f19ab6-a1b2-33e9-9c93-70dd528f9072.roa (raw, json) Hash identifier: l/4HYZl+piXyYePsRU7KhdL/rseBRvN2DVj+ZVi9EiU= Subject key identifier: CE:CE:08:51:AA:9E:A6:1C:AC:16:5C:D8:5E:5B:BA:CF:40:3A:38:39 Certificate issuer: /CN=cc3ad4cd-0893-42fc-a743-e36058983069 Certificate serial: 010D0C9F4328584A00DAC8A16F05B5711F777580 Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/17f19ab6-a1b2-33e9-9c93-70dd528f9072.roa Signing time: Wed 28 May 2025 13:01:04 +0000 ROA not before: Wed 28 May 2025 13:01:04 +0000 ROA not after: Tue 26 Aug 2025 13:01:04 +0000 asID: 6461 IP address blocks: 198.100.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:da:c8:a1:6f:05:b5:71:1f:77:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069 Validity Not Before: May 28 13:01:04 2025 GMT Not After : Aug 26 13:01:04 2025 GMT Subject: CN=4d2f2ad0-315b-4d5d-a6dc-848ec35d4d8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:80:b6:32:d9:ed:5e:f5:03:88:c0:aa:e2:22: 51:ef:cd:9d:29:d3:87:f1:0a:f2:70:8c:eb:93:8c: 7a:63:bf:e5:50:f4:e4:34:89:4e:3a:fc:68:e5:77: d6:51:2e:b3:d0:c8:5c:a4:81:3c:c5:ce:3a:31:0b: f7:04:58:4c:2b:06:b6:88:ef:ae:26:f1:c6:6e:06: db:a7:9f:45:9e:ae:6d:4c:ff:1e:01:88:1e:64:75: 59:e6:8d:58:b8:86:90:8e:1a:09:5e:d7:94:c3:a0: e6:96:cc:55:83:7d:a3:81:47:4e:98:77:9b:27:29: c8:6b:0f:82:66:18:c5:80:0a:78:79:c4:b5:87:d5: ec:59:f9:0f:4b:d6:c3:c2:b8:8a:5b:91:1f:0a:bc: 7d:d8:e9:bc:b8:63:08:a8:f8:36:f8:12:10:1e:22: b1:74:7a:de:a3:e6:a8:13:b3:e8:09:ab:58:4b:94: 6d:48:33:fa:90:6e:1a:61:7f:ee:81:3d:c3:2c:2e: 10:89:74:b2:2b:23:32:46:38:a9:f3:89:d1:04:d9: 3d:24:f6:83:e8:02:2d:4d:8a:3f:f2:bd:11:a3:f6: 74:a5:dd:20:b1:b0:e2:0a:5a:ce:cc:cf:eb:06:f2: f6:7f:09:44:15:bd:df:c3:2d:82:ee:25:f0:46:7e: 8d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:CE:08:51:AA:9E:A6:1C:AC:16:5C:D8:5E:5B:BA:CF:40:3A:38:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/17f19ab6-a1b2-33e9-9c93-70dd528f9072.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl X509v3 Authority Key Identifier: keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer sbgp-ipAddrBlock: critical IPv4: 198.100.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:dc:34:cf:3b:d5:b0:14:44:3c:df:f3:7f:e8:69:bf:89:f1: 16:90:1c:cf:c4:d0:b5:a2:6a:4c:7a:f4:e9:61:ba:9f:4d:02: e8:63:c6:ec:4b:07:ec:ee:fb:b4:83:74:e1:54:37:b1:12:80: 9c:c4:e5:b6:c1:45:da:26:73:44:e6:41:ba:bc:32:a3:22:b1: 90:fa:ab:30:6b:4f:ac:55:23:81:40:68:98:32:80:a0:74:85: 3a:93:8e:da:9d:61:95:49:5f:1f:7f:8f:37:90:cb:b7:22:61: 1e:c3:b3:83:47:01:d9:31:81:2e:56:ab:f6:59:86:3b:d7:0f: 54:52:fe:a0:e5:63:f5:e0:ec:25:87:4a:94:dc:42:05:06:26: f7:ad:60:cb:3b:75:eb:02:c0:3e:a6:66:d3:4d:b7:f9:e3:4e: e4:49:fe:d1:dc:90:a8:3d:4d:7e:c7:ba:b1:5e:25:86:31:31: 61:ad:9f:91:c4:df:60:bd:58:69:2d:47:6b:95:9b:c5:81:08: a1:44:a6:55:ef:30:9b:d2:a7:65:20:4b:c6:1a:19:84:7a:35: 5b:7e:89:01:5e:a8:47:53:96:97:e7:14:87:6f:85:09:9b:76: b7:b7:10:69:20:b1:0e:75:4f:e7:b4:8a:41:e4:72:98:ee:c7: a4:fc:74:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoA2sihbwW1cR93dYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2MzYWQ0Y2QtMDg5My00MmZjLWE3NDMtZTM2MDU4OTgz MDY5MB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk NGQyZjJhZDAtMzE1Yi00ZDVkLWE2ZGMtODQ4ZWMzNWQ0ZDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2oC2MtntXvUDiMCq4iJR782dKdOH8QrycIzr k4x6Y7/lUPTkNIlOOvxo5XfWUS6z0MhcpIE8xc46MQv3BFhMKwa2iO+uJvHGbgbb p59Fnq5tTP8eAYgeZHVZ5o1YuIaQjhoJXteUw6DmlsxVg32jgUdOmHebJynIaw+C ZhjFgAp4ecS1h9XsWfkPS9bDwriKW5EfCrx92Om8uGMIqPg2+BIQHiKxdHreo+ao E7PoCatYS5RtSDP6kG4aYX/ugT3DLC4QiXSyKyMyRjip84nRBNk9JPaD6AItTYo/ 8r0Ro/Z0pd0gsbDiClrOzM/rBvL2fwlEFb3fwy2C7iXwRn6NOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM7OCFGqnqYcrBZc2F5bus9AOjg5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNh ZDRjZC0wODkzLTQyZmMtYTc0My1lMzYwNTg5ODMwNjkvMTdmMTlhYjYtYTFiMi0z M2U5LTljOTMtNzBkZDUyOGY5MDcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2MzYWQ0Y2QtMDg5My00MmZjLWE3 NDMtZTM2MDU4OTgzMDY5L2NjM2FkNGNkLTA4OTMtNDJmYy1hNzQzLWUzNjA1ODk4 MzA2OS5jcmwwHwYDVR0jBBgwFoAU0BkzYCA5uLEoc26e1umhhrVK+64wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNhZDRjZC0wODkzLTQyZmMtYTc0My1lMzYw NTg5ODMwNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxmSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFXcNM871bAURDzf83/oab+J8RaQHM/E0LWiakx69Olhup9NAuhjxuxL B+zu+7SDdOFUN7ESgJzE5bbBRdomc0TmQbq8MqMisZD6qzBrT6xVI4FAaJgygKB0 hTqTjtqdYZVJXx9/jzeQy7ciYR7Ds4NHAdkxgS5Wq/ZZhjvXD1RS/qDlY/Xg7CWH SpTcQgUGJvetYMs7desCwD6mZtNNt/njTuRJ/tHckKg9TX7HurFeJYYxMWGtn5HE 32C9WGktR2uVm8WBCKFEplXvMJvSp2UgS8YaGYR6NVt+iQFeqEdTlpfnFIdvhQmb dre3EGkgsQ51T+e0ikHkcpjux6T8dFU= -----END CERTIFICATE-----Generated at Fri Jun 6 05:03:47 2025 by rpki-client