$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/17f52d24-1c36-35b1-8bd3-a937e0536c07.roa File: 17f52d24-1c36-35b1-8bd3-a937e0536c07.roa (raw, json) Hash identifier: k4YoMwu1pml82ruvSNS6FJt9ZOgv0jdl8jBhxRe7okc= Subject key identifier: A4:D2:1A:F4:9D:88:B0:71:33:F1:15:2E:63:63:ED:A0:07:23:CA:DF Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84116DB5F2FA786A5620FA80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/17f52d24-1c36-35b1-8bd3-a937e0536c07.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 198.45.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:6d:b5:f2:fa:78:6a:56:20:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=3d652911-6a7a-4491-a610-19f7af2a50e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:98:bb:81:39:3c:29:2a:28:d6:48:d4:8f:0e: e6:47:82:c2:99:4d:66:f6:91:32:18:5e:77:1d:f3: 65:e6:ae:13:46:c5:b4:30:90:b4:d9:62:61:bf:b0: dd:46:a5:e9:4d:3c:8d:da:ef:0b:5a:10:66:8e:13: 65:54:19:53:ef:52:0f:54:8b:83:d7:5c:08:c5:47: cf:59:71:ec:85:5c:8f:db:63:77:36:9d:97:56:e6: 9d:65:5e:20:fe:d2:55:bf:f3:4f:42:c3:e4:2a:f0: 94:02:17:87:55:85:23:21:15:5b:cf:1f:3c:de:d5: 8e:db:95:00:80:ec:d8:90:14:da:5a:ec:c6:2f:59: f5:7d:24:05:39:a6:fb:98:b8:6f:b1:f2:78:48:25: 68:e8:16:7d:5f:a5:0c:be:48:51:62:d8:db:62:2f: 6b:3b:89:ed:8d:78:8f:1b:bb:cc:c9:45:b5:8f:51: 4f:12:e3:8d:2c:f8:3f:3c:30:0f:40:35:5f:ca:2f: 1f:01:20:f7:6f:a2:59:b0:6f:c8:d4:77:06:68:03: 9f:23:61:b4:ed:27:16:c0:20:7e:c3:f6:3b:5c:b7: a3:99:a5:fc:14:a3:b8:ab:7b:37:7c:18:02:df:61: 7d:c6:2d:68:ec:41:61:65:ef:0b:81:b2:4a:eb:6b: 86:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:D2:1A:F4:9D:88:B0:71:33:F1:15:2E:63:63:ED:A0:07:23:CA:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/17f52d24-1c36-35b1-8bd3-a937e0536c07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:3b:d1:38:6d:68:be:f1:de:39:29:91:aa:a4:7a:35:d4:ce: 37:0c:f8:6d:1e:e3:51:bc:1d:b0:39:23:5c:0b:8c:36:64:7f: 6a:a9:e7:72:88:0c:3e:0a:85:2c:72:e8:14:42:4a:65:ba:c2: ba:40:b0:e0:f7:d0:45:8e:8c:79:7b:f4:6b:f7:ba:c5:fd:08: b6:c4:24:aa:8c:ac:92:ac:93:c1:7e:77:e0:f0:14:88:f3:76: 4c:67:e9:63:4a:97:7f:8e:5f:d3:a0:29:d2:98:ed:0a:a6:c2: bb:c3:3b:c7:be:b4:2b:c5:8d:b4:20:21:f3:c6:f5:8a:9b:c3: c0:44:92:f3:81:47:ed:c7:e6:39:1c:74:0a:f3:b6:87:cd:6f: 3d:d7:30:7c:28:59:42:bd:7e:c6:83:ec:c7:21:28:be:90:f5: 2f:64:5c:67:e5:7e:ad:77:7b:78:02:eb:08:f4:8b:58:ac:3b: 90:7b:fe:20:b8:09:f0:1e:8b:d9:93:7c:e6:2e:56:8b:22:56: f5:87:11:b9:c6:16:0b:a2:a1:57:1a:23:c4:0e:47:c8:75:a1: 4b:18:f9:bd:e8:7f:b3:40:9b:76:5e:ac:61:88:3c:aa:6a:ed: 28:8c:50:6e:a7:63:4d:90:68:90:5f:7c:8a:24:02:f1:19:9f: 93:92:18:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEW218vp4alYg+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk M2Q2NTI5MTEtNmE3YS00NDkxLWE2MTAtMTlmN2FmMmE1MGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Ji7gTk8KSoo1kjUjw7mR4LCmU1m9pEyGF53 HfNl5q4TRsW0MJC02WJhv7DdRqXpTTyN2u8LWhBmjhNlVBlT71IPVIuD11wIxUfP WXHshVyP22N3Np2XVuadZV4g/tJVv/NPQsPkKvCUAheHVYUjIRVbzx883tWO25UA gOzYkBTaWuzGL1n1fSQFOab7mLhvsfJ4SCVo6BZ9X6UMvkhRYtjbYi9rO4ntjXiP G7vMyUW1j1FPEuONLPg/PDAPQDVfyi8fASD3b6JZsG/I1HcGaAOfI2G07ScWwCB+ w/Y7XLejmaX8FKO4q3s3fBgC32F9xi1o7EFhZe8LgbJK62uG+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKTSGvSdiLBxM/EVLmNj7aAHI8rfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTdmNTJkMjQtMWMzNi0z NWIxLThiZDMtYTkzN2UwNTM2YzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi2gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFo70ThtaL7x3jkpkaqkejXUzjcM+G0e41G8HbA5I1wLjDZkf2qp53KI DD4KhSxy6BRCSmW6wrpAsOD30EWOjHl79Gv3usX9CLbEJKqMrJKsk8F+d+DwFIjz dkxn6WNKl3+OX9OgKdKY7QqmwrvDO8e+tCvFjbQgIfPG9Yqbw8BEkvOBR+3H5jkc dArztofNbz3XMHwoWUK9fsaD7MchKL6Q9S9kXGflfq13e3gC6wj0i1isO5B7/iC4 CfAei9mTfOYuVosiVvWHEbnGFguioVcaI8QOR8h1oUsY+b3of7NAm3ZerGGIPKpq 7SiMUG6nY02QaJBffIokAvEZn5OSGLI= -----END CERTIFICATE-----Generated at Sat Jul 26 11:12:36 2025 by rpki-client