$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/f0aee5d1-d44c-3566-b71f-05ca82efac32.roa File: f0aee5d1-d44c-3566-b71f-05ca82efac32.roa (raw, json) Hash identifier: GuL+Qv5bObhzFidY7pwIAxpB/UCd/di6XvH1B8Fluik= Subject key identifier: 9F:70:48:7E:A0:9F:C1:99:D8:FF:1C:E6:21:E3:07:7B:C7:71:A1:A5 Certificate issuer: /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc Certificate serial: 010D0C9F4328584A10354D89C38FA0730E5CCF10 Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/f0aee5d1-d44c-3566-b71f-05ca82efac32.roa Signing time: Tue 03 Jun 2025 01:00:50 +0000 ROA not before: Tue 03 Jun 2025 01:00:50 +0000 ROA not after: Mon 01 Sep 2025 01:00:50 +0000 asID: 30607 IP address blocks: 198.41.12.0/23 maxlen: 23 198.41.12.0/24 maxlen: 24 198.41.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:35:4d:89:c3:8f:a0:73:0e:5c:cf:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc Validity Not Before: Jun 3 01:00:50 2025 GMT Not After : Sep 1 01:00:50 2025 GMT Subject: CN=cf385a1e-8947-40fd-996c-8e8935ca8394 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:45:5c:8c:83:d4:4c:ca:0e:45:9a:81:64:16: ff:c0:0a:1f:d3:55:b5:28:3d:e3:90:80:32:6d:b7: 8a:ec:a0:6b:79:4e:e4:3f:50:71:59:35:25:f6:98: 92:e8:27:5d:b5:93:3d:3a:ac:70:85:e7:0a:f0:09: 3f:0e:38:60:9e:89:bd:9e:18:d2:87:67:b3:1f:ba: 6b:f2:20:ef:dc:a8:e1:12:1b:5a:16:58:2e:a6:bf: 0c:f0:48:f2:be:5f:62:7a:aa:b4:27:83:16:a4:54: 6d:a1:8a:cc:36:9d:6c:6f:f3:d3:14:fa:9f:70:bb: 1b:ea:d7:a9:6f:ff:2e:fc:72:60:3a:99:5c:78:10: 77:3d:1e:ac:d3:3b:39:2d:22:aa:23:b3:43:6b:f5: c5:39:a6:56:f0:d1:a0:24:c1:cf:d2:1a:f5:d8:d2: 77:43:53:41:06:a0:d6:6c:4b:e7:a0:d6:b5:71:c6: c6:a2:85:c4:7c:a2:24:4f:8e:f8:d7:e3:f9:69:86: 2c:ad:e9:51:c1:6c:24:75:19:65:46:fd:75:94:6f: 92:3a:c1:32:0b:03:d5:0f:cf:a9:98:15:6c:bb:75: 67:a5:dc:53:2a:a2:b3:a5:ec:6e:3b:42:8e:33:ae: 34:91:e1:a1:8c:1b:3e:b8:cb:21:1c:d9:10:f2:04: d7:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:70:48:7E:A0:9F:C1:99:D8:FF:1C:E6:21:E3:07:7B:C7:71:A1:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/f0aee5d1-d44c-3566-b71f-05ca82efac32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl X509v3 Authority Key Identifier: keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer sbgp-ipAddrBlock: critical IPv4: 198.41.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:fa:49:20:d2:e0:ea:f0:5b:cd:05:71:c8:60:8e:1c:a0:16: 9c:c4:48:30:95:c3:f1:9e:a9:8a:57:d0:91:27:87:9c:98:8e: bb:8b:fa:50:7b:55:3e:a0:6b:bd:e7:3e:e7:a5:61:64:74:86: e5:f0:de:9e:50:fe:79:ea:9d:50:23:bc:03:44:e5:de:ef:48: 24:23:b7:c6:06:ac:d8:24:10:24:39:5a:b3:4a:fd:45:81:2d: bc:d0:d4:79:00:d2:f2:38:a6:df:08:09:fd:86:0d:f1:a6:06: 89:94:dd:e7:49:ed:78:fb:85:29:99:93:e6:e1:0d:e9:e5:b1: 82:4a:2a:35:50:80:cf:26:19:a2:3b:cb:74:5d:94:24:5a:63: b5:67:67:e4:74:d5:a6:28:69:e4:de:79:05:2c:da:85:c2:21: 2d:5d:ec:d9:09:25:fe:7b:d1:8d:ba:db:fe:cc:f8:2c:71:af: 07:7f:37:a9:01:fe:0d:43:15:b1:53:66:a1:70:ce:43:b9:85: cb:92:c0:64:32:a5:1c:40:17:49:34:c2:db:44:69:2a:22:ae: b2:95:30:ff:3a:26:d3:45:81:0e:e5:33:08:38:35:d7:51:8c: 75:03:0a:08:a9:da:28:f3:0d:9e:a7:aa:67:3e:1c:87:56:fe: 1f:20:ec:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoQNU2Jw4+gcw5czxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODkxY2MwMWEtMzdiZC00MWNhLThmMmEtMjNjMDYyYmJk ZWZjMB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk Y2YzODVhMWUtODk0Ny00MGZkLTk5NmMtOGU4OTM1Y2E4Mzk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkVcjIPUTMoORZqBZBb/wAof01W1KD3jkIAy bbeK7KBreU7kP1BxWTUl9piS6CddtZM9OqxwhecK8Ak/Djhgnom9nhjSh2ezH7pr 8iDv3KjhEhtaFlgupr8M8Ejyvl9ieqq0J4MWpFRtoYrMNp1sb/PTFPqfcLsb6tep b/8u/HJgOplceBB3PR6s0zs5LSKqI7NDa/XFOaZW8NGgJMHP0hr12NJ3Q1NBBqDW bEvnoNa1ccbGooXEfKIkT4741+P5aYYsrelRwWwkdRllRv11lG+SOsEyCwPVD8+p mBVsu3VnpdxTKqKzpexuO0KOM640keGhjBs+uMshHNkQ8gTXzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ9wSH6gn8GZ2P8c5iHjB3vHcaGlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84OTFj YzAxYS0zN2JkLTQxY2EtOGYyYS0yM2MwNjJiYmRlZmMvZjBhZWU1ZDEtZDQ0Yy0z NTY2LWI3MWYtMDVjYTgyZWZhYzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODkxY2MwMWEtMzdiZC00MWNhLThm MmEtMjNjMDYyYmJkZWZjLzg5MWNjMDFhLTM3YmQtNDFjYS04ZjJhLTIzYzA2MmJi ZGVmYy5jcmwwHwYDVR0jBBgwFoAUnjHotKY0A7BPCiCfMGrdCmC4kkswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84OTFjYzAxYS0zN2JkLTQxY2EtOGYyYS0yM2Mw NjJiYmRlZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxikMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMT6SSDS4OrwW80FcchgjhygFpzESDCVw/GeqYpX0JEnh5yYjruL+lB7 VT6ga73nPuelYWR0huXw3p5Q/nnqnVAjvANE5d7vSCQjt8YGrNgkECQ5WrNK/UWB LbzQ1HkA0vI4pt8ICf2GDfGmBomU3edJ7Xj7hSmZk+bhDenlsYJKKjVQgM8mGaI7 y3RdlCRaY7VnZ+R01aYoaeTeeQUs2oXCIS1d7NkJJf570Y262/7M+Cxxrwd/N6kB /g1DFbFTZqFwzkO5hcuSwGQypRxAF0k0wttEaSoirrKVMP86JtNFgQ7lMwg4NddR jHUDCgip2ijzDZ6nqmc+HIdW/h8g7LA= -----END CERTIFICATE-----Generated at Sat Jun 7 22:58:43 2025 by rpki-client