$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/abe5e627-cd52-35a6-9fbe-72257d82a48e.roa File: abe5e627-cd52-35a6-9fbe-72257d82a48e.roa (raw, json) Hash identifier: 0WCu0BSUUa08EIo10dISlepmt8PV62I9hXx9Vd/4ws4= Subject key identifier: C5:2E:8C:AB:A9:E2:1E:B2:35:7C:F5:6D:0B:4B:52:6D:33:31:21:7F Certificate issuer: /CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5 Certificate serial: 010D0C9F4328584A6DBB45F9C41DE5FE9D50B880 Authority key identifier: 40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/abe5e627-cd52-35a6-9fbe-72257d82a48e.roa Signing time: Sun 06 Jul 2025 13:01:03 +0000 ROA not before: Sun 06 Jul 2025 13:01:03 +0000 ROA not after: Sat 04 Oct 2025 13:01:03 +0000 asID: 292 IP address blocks: 198.128.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6d:bb:45:f9:c4:1d:e5:fe:9d:50:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5 Validity Not Before: Jul 6 13:01:03 2025 GMT Not After : Oct 4 13:01:03 2025 GMT Subject: CN=4c5c85e2-b0a9-485d-b71c-2f45139819ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f3:db:19:cc:2d:62:3e:56:1c:9c:a4:44:ae: 3b:a7:e4:3e:5b:29:16:3b:f6:42:9f:08:30:6f:b2: 4c:39:69:09:ca:fc:0a:3f:d3:71:0c:80:7d:fd:97: e1:d9:7c:38:eb:d5:47:11:b2:9a:35:6a:20:81:ff: 3e:3b:ba:45:e2:e1:3e:f8:6f:6d:f2:7b:f1:bd:9a: 80:9c:52:58:1f:5c:d0:1b:5c:72:a0:4d:a0:22:71: c2:64:e4:48:9d:ff:06:fd:22:88:e3:72:90:b6:00: 5b:38:b4:17:3d:cb:12:f2:90:6e:25:95:2e:10:54: 63:14:32:e6:43:3c:88:04:ea:d0:6e:ab:fe:f6:97: 68:35:67:46:97:9b:5e:34:25:18:a5:40:7b:5d:f9: ac:01:1e:3d:e8:c7:af:ea:d7:91:09:27:04:d4:5d: 74:f6:a6:ed:40:98:b8:d2:bb:95:54:68:61:52:ab: cf:d7:97:e3:24:4d:af:9e:6f:22:cb:a9:1b:4b:81: 87:d7:4a:9b:9a:c2:c5:8c:47:23:2e:9f:69:a1:32: 4e:61:6c:e7:20:06:d6:17:ab:2f:72:80:4d:c9:5b: 8c:44:2a:b1:79:b1:3e:98:04:92:46:b1:44:e6:0f: 59:79:b2:f1:a4:28:05:2b:4f:75:9c:60:55:17:29: ce:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:2E:8C:AB:A9:E2:1E:B2:35:7C:F5:6D:0B:4B:52:6D:33:31:21:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/abe5e627-cd52-35a6-9fbe-72257d82a48e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl X509v3 Authority Key Identifier: keyid:40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer sbgp-ipAddrBlock: critical IPv4: 198.128.0.0/14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:f7:5a:f3:c6:9a:f4:64:64:35:54:14:32:2c:ea:ff:14:0a: 0e:5b:bb:34:19:58:ff:ad:88:2d:1c:d2:3e:c5:02:20:b8:66: aa:8d:73:b5:62:38:64:1f:c0:25:00:4d:10:c3:83:3a:d8:6b: a4:a6:1e:68:74:ce:a9:92:f9:9e:44:47:04:61:8e:cc:d2:aa: ef:9d:9f:cd:6d:c5:99:32:17:97:64:17:ae:62:55:83:a3:ae: c4:91:c8:12:29:11:f2:17:c1:e2:5d:6a:71:e1:54:47:2e:98: c4:9a:6f:60:86:4b:f2:f0:ac:74:eb:a2:1b:df:92:38:04:20: 19:45:51:71:3b:83:35:c6:dd:ba:1e:fa:da:2d:95:66:0b:21: df:16:58:66:5a:cf:fc:65:22:a4:8a:5c:2b:98:17:33:26:db: 28:31:9c:1a:a1:ae:17:f8:59:6a:b8:ea:2c:48:92:7e:b7:b2: b0:b8:67:5b:ed:a4:df:99:57:e2:46:c5:03:49:90:d8:62:38: 66:18:ab:34:f9:2a:b3:f0:84:6c:46:3d:9e:5b:c5:ad:45:68: c8:ae:1e:03:fc:67:46:33:6b:94:b8:6a:53:9f:0f:76:8f:87: 7a:c4:b3:75:da:05:ac:e4:a8:ff:dc:3b:fb:e7:c2:b6:4e:4d: be:4b:a4:98 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEptu0X5xB3l/p1QuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWIxNmVmOGEtZjhhYS00YTE0LThlMzAtYjAyNjMzMTAz ZmM1MB4XDTI1MDcwNjEzMDEwM1oXDTI1MTAwNDEzMDEwM1owLzEtMCsGA1UEAxMk NGM1Yzg1ZTItYjBhOS00ODVkLWI3MWMtMmY0NTEzOTgxOWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvPbGcwtYj5WHJykRK47p+Q+WykWO/ZCnwgw b7JMOWkJyvwKP9NxDIB9/Zfh2Xw469VHEbKaNWoggf8+O7pF4uE++G9t8nvxvZqA nFJYH1zQG1xyoE2gInHCZORInf8G/SKI43KQtgBbOLQXPcsS8pBuJZUuEFRjFDLm QzyIBOrQbqv+9pdoNWdGl5teNCUYpUB7XfmsAR496Mev6teRCScE1F109qbtQJi4 0ruVVGhhUqvP15fjJE2vnm8iy6kbS4GH10qbmsLFjEcjLp9poTJOYWznIAbWF6sv coBNyVuMRCqxebE+mASSRrFE5g9ZebLxpCgFK091nGBVFynOwwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFMUujKup4h6yNXz1bQtLUm0zMSF/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjE2 ZWY4YS1mOGFhLTRhMTQtOGUzMC1iMDI2MzMxMDNmYzUvYWJlNWU2MjctY2Q1Mi0z NWE2LTlmYmUtNzIyNTdkODJhNDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWIxNmVmOGEtZjhhYS00YTE0LThl MzAtYjAyNjMzMTAzZmM1L2ViMTZlZjhhLWY4YWEtNGExNC04ZTMwLWIwMjYzMzEw M2ZjNS5jcmwwHwYDVR0jBBgwFoAUQM4usHTYc1PWS8fzfTpsSmRGxSQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjE2ZWY4YS1mOGFhLTRhMTQtOGUzMC1iMDI2 MzMxMDNmYzUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCxoAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAJ/da88aa9GRkNVQUMizq/xQKDlu7NBlY/62ILRzSPsUCILhmqo1ztWI4 ZB/AJQBNEMODOthrpKYeaHTOqZL5nkRHBGGOzNKq752fzW3FmTIXl2QXrmJVg6Ou xJHIEikR8hfB4l1qceFURy6YxJpvYIZL8vCsdOuiG9+SOAQgGUVRcTuDNcbduh76 2i2VZgsh3xZYZlrP/GUipIpcK5gXMybbKDGcGqGuF/hZarjqLEiSfreysLhnW+2k 35lX4kbFA0mQ2GI4ZhirNPkqs/CEbEY9nlvFrUVoyK4eA/xnRjNrlLhqU58Pdo+H esSzddoFrOSo/9w7++fCtk5NvkukmA== -----END CERTIFICATE-----Generated at Wed Jul 9 23:27:20 2025 by rpki-client