$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0a368a8e-3b7d-361f-8137-0a3d74c3474e.roa File: 0a368a8e-3b7d-361f-8137-0a3d74c3474e.roa (raw, json) Hash identifier: iwicYgmswuCueXYX0TlNHjHeIsBan13Sk23DskR9F14= Subject key identifier: 55:E6:58:10:77:20:7F:16:29:F2:D7:C7:DB:9A:60:B7:2E:1E:F0:21 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84121E21788C5DAF35886D80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0a368a8e-3b7d-361f-8137-0a3d74c3474e.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 198.45.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:1e:21:78:8c:5d:af:35:88:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=42731b5b-cc1c-411f-a6b4-97fc2cd84979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:23:b7:13:a8:12:b5:07:3f:86:18:3c:f0:55: 12:64:cc:85:03:aa:38:a3:ce:56:2b:e0:d5:d9:47: 87:2d:f2:b9:bb:c9:9a:1a:2a:e5:7c:2d:e9:fb:cc: 06:18:17:62:0f:62:f0:68:1c:32:bc:cc:aa:9e:ea: c4:20:30:70:e7:06:1e:93:1b:77:02:5e:a0:b8:a5: 5b:89:33:91:25:4f:2e:7c:35:53:c8:d9:ff:46:98: 41:3d:36:da:07:b3:d3:56:23:7b:62:f2:27:51:c6: c7:fe:5e:f0:38:00:f7:c0:de:68:0d:f2:41:27:0a: 80:ad:8c:9d:3f:6d:39:06:66:06:96:94:4e:d9:6a: 97:5c:a7:5b:77:20:7a:3d:e4:ff:57:b8:ec:19:b5: 68:e2:01:a6:ba:da:5e:84:12:9f:70:90:7e:94:4f: e3:2d:69:cb:bb:0e:08:90:d6:83:15:8c:f6:f1:cf: 19:04:3b:69:31:11:b2:e7:87:39:4a:8c:fc:d4:23: 9c:56:80:be:52:b3:b7:f8:48:ff:57:5d:aa:28:9e: 56:94:8a:7d:07:d1:87:a4:fd:ad:ce:f8:c1:d5:cd: e5:bc:f3:f0:fd:6e:c1:3a:1b:b2:04:20:37:55:1e: 4d:99:d1:46:8d:c7:ae:ec:13:8d:96:82:d4:26:51: 6d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:E6:58:10:77:20:7F:16:29:F2:D7:C7:DB:9A:60:B7:2E:1E:F0:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0a368a8e-3b7d-361f-8137-0a3d74c3474e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:09:38:19:e6:33:4c:28:af:d7:39:97:06:f1:d1:01:e6:bb: 25:3f:70:61:e2:4b:70:38:45:32:cd:eb:03:0d:01:a9:28:a1: 2a:d8:38:29:27:c8:06:22:88:f8:4c:05:91:14:8c:17:ca:44: 8e:be:bb:81:38:4b:e6:11:84:0e:39:83:6a:58:1b:ff:ac:54: cf:ec:49:0c:9d:df:e2:82:be:f0:3c:37:5e:16:f2:53:93:06: d7:be:78:45:15:c3:19:0a:7c:64:63:83:9b:48:94:bb:56:5f: e8:59:4e:f5:cf:93:01:0e:02:62:ab:2c:4e:c0:61:fa:fb:63: 63:c3:38:c3:6f:c5:17:84:99:70:36:f3:df:e1:ad:a4:f6:34: df:ea:cf:fe:4f:33:bc:d2:b6:9d:bc:4c:76:e4:8a:54:f5:31: 8a:7a:5c:da:33:89:97:56:5f:0e:de:36:60:51:cd:a9:5f:29: fc:c9:16:05:a7:2e:79:e5:84:69:d3:4b:6d:36:74:c6:09:22: 00:86:69:58:2a:71:50:a4:46:98:74:3c:6c:3a:aa:96:9d:96: c9:89:9b:44:34:16:b5:e8:89:43:26:52:8c:21:cf:e0:ee:19: 34:e5:62:65:96:78:b7:a7:a6:b8:ff:5d:c4:d7:e7:b9:f1:60: 7f:4e:a7:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEh4heIxdrzWIbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NDI3MzFiNWItY2MxYy00MTFmLWE2YjQtOTdmYzJjZDg0OTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCO3E6gStQc/hhg88FUSZMyFA6o4o85WK+DV 2UeHLfK5u8maGirlfC3p+8wGGBdiD2LwaBwyvMyqnurEIDBw5wYekxt3Al6guKVb iTORJU8ufDVTyNn/RphBPTbaB7PTViN7YvInUcbH/l7wOAD3wN5oDfJBJwqArYyd P205BmYGlpRO2WqXXKdbdyB6PeT/V7jsGbVo4gGmutpehBKfcJB+lE/jLWnLuw4I kNaDFYz28c8ZBDtpMRGy54c5Soz81COcVoC+UrO3+Ej/V12qKJ5WlIp9B9GHpP2t zvjB1c3lvPPw/W7BOhuyBCA3VR5NmdFGjceu7BONloLUJlFt1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFXmWBB3IH8WKfLXx9uaYLcuHvAhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMGEzNjhhOGUtM2I3ZC0z NjFmLTgxMzctMGEzZDc0YzM0NzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi2VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwJOBnmM0wor9c5lwbx0QHmuyU/cGHiS3A4RTLN6wMNAakooSrYOCkn yAYiiPhMBZEUjBfKRI6+u4E4S+YRhA45g2pYG/+sVM/sSQyd3+KCvvA8N14W8lOT Bte+eEUVwxkKfGRjg5tIlLtWX+hZTvXPkwEOAmKrLE7AYfr7Y2PDOMNvxReEmXA2 89/hraT2NN/qz/5PM7zStp28THbkilT1MYp6XNoziZdWXw7eNmBRzalfKfzJFgWn LnnlhGnTS202dMYJIgCGaVgqcVCkRph0PGw6qpadlsmJm0Q0FrXoiUMmUowhz+Du GTTlYmWWeLenprj/XcTX57nxYH9Op3k= -----END CERTIFICATE-----Generated at Sat Jul 26 11:34:10 2025 by rpki-client