$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/eb2e0c9c-0fe2-3699-a68b-6113a6d0b8c7.roa File: eb2e0c9c-0fe2-3699-a68b-6113a6d0b8c7.roa (raw, json) Hash identifier: d2TEsoFfTgUhNFoMk9BfnxaeGUCPU09SddG7V+z8ORM= Subject key identifier: 53:80:1B:86:22:CD:EA:2C:50:21:72:FA:03:34:2D:AD:01:2D:9D:11 Certificate issuer: /CN=1ae9796a-5f3d-4f47-b117-42360a213e37 Certificate serial: 010D0C9F4328584A62908EFC36C6B5C0B448F2C8 Authority key identifier: 4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/eb2e0c9c-0fe2-3699-a68b-6113a6d0b8c7.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 13627 IP address blocks: 198.186.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:8e:fc:36:c6:b5:c0:b4:48:f2:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ae9796a-5f3d-4f47-b117-42360a213e37 Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=eb3349d9-5c56-4ce1-b403-ee73e2338bb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1c:e2:dc:e9:02:90:56:97:7d:92:4c:cc:5e: 91:0e:51:f7:a3:7f:55:97:2d:76:9d:39:71:b1:71: e2:ad:5b:b3:42:0b:be:2f:c9:9c:0d:3d:70:5a:c8: 93:b1:ff:00:16:46:69:bb:48:dd:2b:86:86:17:97: c7:c7:41:54:b1:f4:6d:b3:11:5b:1c:0b:9f:d8:d7: 8a:e5:2d:d6:d9:fd:50:3f:5a:9b:a4:c5:13:8a:30: e6:95:bd:de:76:43:89:d2:43:cb:5d:73:06:75:c3: 92:76:8a:cc:78:eb:55:aa:dc:b6:dc:e5:1b:7b:98: e5:80:37:43:00:b5:c1:f1:9b:a7:08:72:6d:e6:43: 98:83:4a:e1:f6:34:1f:ef:14:8e:c1:75:a0:70:a6: cb:27:75:e5:6a:2e:7a:31:dc:fb:84:e0:10:a8:fe: 24:2d:64:34:a4:40:1c:bf:02:d4:74:ed:2a:56:8a: 6f:f0:0e:0b:76:55:e4:4b:eb:43:75:47:1f:0d:3f: 79:ce:4e:c9:93:23:7f:b1:bd:c1:79:01:55:45:31: 67:6e:4b:a7:25:ea:99:82:be:86:ad:1c:32:48:dc: c2:e4:fb:68:67:22:4b:d4:39:3a:4b:d9:f7:c0:8d: 3e:2f:f2:56:c9:f8:72:61:56:78:c8:18:18:d3:bb: 24:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:80:1B:86:22:CD:EA:2C:50:21:72:FA:03:34:2D:AD:01:2D:9D:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/eb2e0c9c-0fe2-3699-a68b-6113a6d0b8c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl X509v3 Authority Key Identifier: keyid:4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer sbgp-ipAddrBlock: critical IPv4: 198.186.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:4f:71:b2:90:53:a5:85:fc:88:90:7e:01:4b:a4:6e:63:66: 01:e9:dc:9b:f3:df:0f:f8:97:61:e4:dc:76:3c:69:b5:c1:39: 6e:dc:8b:78:a5:a8:6b:47:3d:10:28:06:56:7d:d9:a9:e1:d0: 2a:03:0d:03:2b:2d:fe:ad:b1:07:a8:9f:b7:96:30:31:35:5d: 95:23:b6:4f:ee:6c:e4:58:2a:5b:c6:b0:ad:00:71:f8:5b:9b: fc:c3:a7:3d:46:17:87:bd:76:5c:66:1c:ec:6e:e3:c9:b2:e0: fb:60:40:91:96:6d:ea:1f:12:dd:ca:46:40:1d:61:22:f5:9f: 33:dd:79:73:06:4f:4f:b8:b0:c6:dc:13:d0:d5:a7:7f:81:7d: 74:ae:30:82:84:53:10:bb:66:87:4d:58:a6:6c:8a:43:82:4d: 03:17:29:29:bd:1f:46:96:86:e1:74:55:e8:f5:53:90:f7:df: fc:f6:ed:bd:f1:6f:8b:0a:17:bf:39:dc:d5:93:ad:b1:77:20: 17:26:17:0e:24:11:3a:58:03:07:c8:a6:94:dd:c2:91:fd:2f: 51:da:7b:f6:d4:68:99:0f:21:b1:1e:ce:08:34:84:72:4e:9c: 8a:3e:b8:f1:7f:54:81:df:32:f0:04:f6:9f:fe:3d:d8:9c:48: c1:87:b7:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikI78Nsa1wLRI8sgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFlOTc5NmEtNWYzZC00ZjQ3LWIxMTctNDIzNjBhMjEz ZTM3MB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk ZWIzMzQ5ZDktNWM1Ni00Y2UxLWI0MDMtZWU3M2UyMzM4YmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxzi3OkCkFaXfZJMzF6RDlH3o39Vly12nTlx sXHirVuzQgu+L8mcDT1wWsiTsf8AFkZpu0jdK4aGF5fHx0FUsfRtsxFbHAuf2NeK 5S3W2f1QP1qbpMUTijDmlb3edkOJ0kPLXXMGdcOSdorMeOtVqty23OUbe5jlgDdD ALXB8ZunCHJt5kOYg0rh9jQf7xSOwXWgcKbLJ3Xlai56Mdz7hOAQqP4kLWQ0pEAc vwLUdO0qVopv8A4LdlXkS+tDdUcfDT95zk7JkyN/sb3BeQFVRTFnbkunJeqZgr6G rRwySNzC5PtoZyJL1Dk6S9n3wI0+L/JWyfhyYVZ4yBgY07skXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFOAG4YizeosUCFy+gM0La0BLZ0RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xYWU5 Nzk2YS01ZjNkLTRmNDctYjExNy00MjM2MGEyMTNlMzcvZWIyZTBjOWMtMGZlMi0z Njk5LWE2OGItNjExM2E2ZDBiOGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWFlOTc5NmEtNWYzZC00ZjQ3LWIx MTctNDIzNjBhMjEzZTM3LzFhZTk3OTZhLTVmM2QtNGY0Ny1iMTE3LTQyMzYwYTIx M2UzNy5jcmwwHwYDVR0jBBgwFoAUTss6/l8FHqwG3VnOR6besyl/QdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xYWU5Nzk2YS01ZjNkLTRmNDctYjExNy00MjM2 MGEyMTNlMzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxrqDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERPcbKQU6WF/IiQfgFLpG5jZgHp3Jvz3w/4l2Hk3HY8abXBOW7ci3il qGtHPRAoBlZ92anh0CoDDQMrLf6tsQeon7eWMDE1XZUjtk/ubORYKlvGsK0Acfhb m/zDpz1GF4e9dlxmHOxu48my4PtgQJGWbeofEt3KRkAdYSL1nzPdeXMGT0+4sMbc E9DVp3+BfXSuMIKEUxC7ZodNWKZsikOCTQMXKSm9H0aWhuF0Vej1U5D33/z27b3x b4sKF7853NWTrbF3IBcmFw4kETpYAwfIppTdwpH9L1Hae/bUaJkPIbEezgg0hHJO nIo+uPF/VIHfMvAE9p/+PdicSMGHt1A= -----END CERTIFICATE-----Generated at Mon Jul 21 18:06:20 2025 by rpki-client