$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/655fb139-547c-4d10-b4e3-9ca47b909ae1/40862018-14f1-3891-b0b0-c848dd5b0a55.roa File: 40862018-14f1-3891-b0b0-c848dd5b0a55.roa (raw, json) Hash identifier: 0ELrTZzH5P7C7vJeJcQEucAp+tLopXv63mo0+M1qu+8= Subject key identifier: C8:91:16:A6:7D:85:47:DB:A4:09:E2:9F:9A:4E:22:39:CD:40:11:95 Certificate issuer: /CN=655fb139-547c-4d10-b4e3-9ca47b909ae1 Certificate serial: 010D0C9F4328584A45403E3800FCDE5D450C9380 Authority key identifier: D2:D9:2E:AD:0E:44:76:E7:13:56:5D:87:8E:BD:93:4C:26:5A:C7:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/655fb139-547c-4d10-b4e3-9ca47b909ae1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/655fb139-547c-4d10-b4e3-9ca47b909ae1/40862018-14f1-3891-b0b0-c848dd5b0a55.roa Signing time: Sun 22 Jun 2025 01:00:50 +0000 ROA not before: Sun 22 Jun 2025 01:00:50 +0000 ROA not after: Sat 20 Sep 2025 01:00:50 +0000 asID: 16796 IP address blocks: 198.163.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/655fb139-547c-4d10-b4e3-9ca47b909ae1/655fb139-547c-4d10-b4e3-9ca47b909ae1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/655fb139-547c-4d10-b4e3-9ca47b909ae1/655fb139-547c-4d10-b4e3-9ca47b909ae1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/655fb139-547c-4d10-b4e3-9ca47b909ae1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:45:40:3e:38:00:fc:de:5d:45:0c:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=655fb139-547c-4d10-b4e3-9ca47b909ae1 Validity Not Before: Jun 22 01:00:50 2025 GMT Not After : Sep 20 01:00:50 2025 GMT Subject: CN=4c0fbbc9-c8a3-4744-a5e9-78f625d0bc26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:77:d3:42:ed:11:c6:50:2d:33:b7:48:96:26: d9:df:be:78:bf:f6:58:8c:56:54:c5:d3:a0:c6:e7: 3c:62:ff:4f:fa:bd:2d:51:04:15:5b:00:e8:bf:5c: da:2b:65:99:2b:9e:5b:95:a0:74:32:28:ce:21:8d: c5:13:e1:84:82:b2:c4:bb:c0:1d:c4:02:ab:62:6c: ee:84:4c:87:0b:64:e2:f9:67:e3:33:ab:c4:72:36: 80:c7:5f:38:a1:f3:30:fb:37:99:44:e3:e2:59:1b: dc:98:48:9f:68:54:ae:b8:32:14:0a:19:b3:43:f0: 85:72:1b:d6:f9:23:97:73:cc:2c:12:a8:77:95:ab: 30:73:79:80:19:be:42:ff:57:f7:7a:33:d2:6d:c8: bf:07:7a:79:ba:26:94:3b:c0:76:68:9d:f2:9d:57: fd:5e:47:99:87:8b:13:e7:5e:a8:f1:68:e9:4d:60: f3:b8:07:d1:3a:36:81:d1:93:5b:e8:46:13:59:35: 41:8d:b0:e8:95:8d:30:1c:6c:14:aa:50:af:ea:09: ac:4a:a8:c7:6a:b4:85:27:3d:a5:f2:8d:c8:9c:6d: fc:bc:5e:64:a3:eb:63:9f:71:44:92:fa:20:30:a4: 9f:b2:f9:2c:54:64:30:1d:2a:47:4d:e7:b3:31:ef: 7b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:91:16:A6:7D:85:47:DB:A4:09:E2:9F:9A:4E:22:39:CD:40:11:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/655fb139-547c-4d10-b4e3-9ca47b909ae1/40862018-14f1-3891-b0b0-c848dd5b0a55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/655fb139-547c-4d10-b4e3-9ca47b909ae1/655fb139-547c-4d10-b4e3-9ca47b909ae1.crl X509v3 Authority Key Identifier: keyid:D2:D9:2E:AD:0E:44:76:E7:13:56:5D:87:8E:BD:93:4C:26:5A:C7:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/655fb139-547c-4d10-b4e3-9ca47b909ae1.cer sbgp-ipAddrBlock: critical IPv4: 198.163.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:9d:8c:c0:ef:15:d9:5c:9d:e8:db:c8:ae:7a:21:5a:11:e8: eb:c2:9c:88:2b:66:5a:1a:ec:c3:50:18:85:0d:e4:69:6f:b1: ff:f8:a4:23:7c:f7:38:66:75:ab:21:85:dd:23:b6:46:ad:ff: 69:6a:89:10:af:74:fb:5d:59:1b:27:e4:09:88:1d:fc:0d:61: cc:f9:cd:0b:b7:2a:12:9f:6a:bd:4a:78:86:ed:fa:e4:d3:0f: 5d:8d:42:e8:09:fe:4d:88:33:0f:d3:56:32:22:e7:31:92:e7: e7:be:04:b7:20:4a:b4:95:d2:ca:bc:c6:e1:48:10:bb:64:51: ef:27:6c:78:c4:dc:85:67:e3:df:ef:7a:f9:81:10:43:b3:d8: 25:91:07:14:7a:bd:9b:ab:eb:76:08:0c:ca:37:0b:4d:70:65: e1:1a:c4:10:09:3b:4d:9b:c5:af:63:18:06:60:82:9a:89:2d: 2a:db:0f:4f:0d:0a:97:a4:ee:16:54:e4:2b:01:d0:69:c3:d7: 9d:eb:ef:f1:3b:1f:47:c2:5d:d0:09:08:ea:66:b8:e4:b7:65: a8:e9:53:6b:c4:9e:22:d9:66:46:bd:53:fb:e7:2c:e1:29:fe: aa:2b:a3:ec:1a:76:21:b5:9d:97:4b:11:51:a0:fd:5a:69:45: c5:02:fb:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpFQD44APzeXUUMk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjU1ZmIxMzktNTQ3Yy00ZDEwLWI0ZTMtOWNhNDdiOTA5 YWUxMB4XDTI1MDYyMjAxMDA1MFoXDTI1MDkyMDAxMDA1MFowLzEtMCsGA1UEAxMk NGMwZmJiYzktYzhhMy00NzQ0LWE1ZTktNzhmNjI1ZDBiYzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnfTQu0RxlAtM7dIlibZ3754v/ZYjFZUxdOg xuc8Yv9P+r0tUQQVWwDov1zaK2WZK55blaB0MijOIY3FE+GEgrLEu8AdxAKrYmzu hEyHC2Ti+WfjM6vEcjaAx184ofMw+zeZROPiWRvcmEifaFSuuDIUChmzQ/CFchvW +SOXc8wsEqh3laswc3mAGb5C/1f3ejPSbci/B3p5uiaUO8B2aJ3ynVf9XkeZh4sT 516o8WjpTWDzuAfROjaB0ZNb6EYTWTVBjbDolY0wHGwUqlCv6gmsSqjHarSFJz2l 8o3InG38vF5ko+tjn3FEkvogMKSfsvksVGQwHSpHTeezMe97+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMiRFqZ9hUfbpAnin5pOIjnNQBGVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82NTVm YjEzOS01NDdjLTRkMTAtYjRlMy05Y2E0N2I5MDlhZTEvNDA4NjIwMTgtMTRmMS0z ODkxLWIwYjAtYzg0OGRkNWIwYTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjU1ZmIxMzktNTQ3Yy00ZDEwLWI0 ZTMtOWNhNDdiOTA5YWUxLzY1NWZiMTM5LTU0N2MtNGQxMC1iNGUzLTljYTQ3Yjkw OWFlMS5jcmwwHwYDVR0jBBgwFoAU0tkurQ5EducTVl2Hjr2TTCZax6gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82NTVmYjEzOS01NDdjLTRkMTAtYjRlMy05Y2E0 N2I5MDlhZTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqMDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOdjMDvFdlcnejbyK56IVoR6OvCnIgrZloa7MNQGIUN5Glvsf/4pCN8 9zhmdashhd0jtkat/2lqiRCvdPtdWRsn5AmIHfwNYcz5zQu3KhKfar1KeIbt+uTT D12NQugJ/k2IMw/TVjIi5zGS5+e+BLcgSrSV0sq8xuFIELtkUe8nbHjE3IVn49/v evmBEEOz2CWRBxR6vZur63YIDMo3C01wZeEaxBAJO02bxa9jGAZggpqJLSrbD08N Cpek7hZU5CsB0GnD153r7/E7H0fCXdAJCOpmuOS3ZajpU2vEniLZZka9U/vnLOEp /qoro+wadiG1nZdLEVGg/VppRcUC+28= -----END CERTIFICATE-----Generated at Tue Jul 1 18:16:57 2025 by rpki-client