$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/56b50f1e-7768-31f4-883e-4ac810d5160b.roa File: 56b50f1e-7768-31f4-883e-4ac810d5160b.roa (raw, json) Hash identifier: ZywduY05W1XSLKGQNbJj+zzp+yVs8yN3VEXUMncUOiw= Subject key identifier: 7E:DC:07:B8:E7:4B:23:34:02:94:67:5B:B5:70:F1:A3:5E:B2:9E:0A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84116D4EF61CB1D9155BE380 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/56b50f1e-7768-31f4-883e-4ac810d5160b.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 198.45.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:6d:4e:f6:1c:b1:d9:15:5b:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=cb3236df-b9e9-4a01-a728-82af367d7d98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:bb:d7:99:6f:ea:4f:f3:65:2c:4d:d7:39:d9: 1e:dd:55:4e:0d:6b:11:0d:0f:38:9e:56:6e:a5:75: 0a:a4:27:02:bf:a9:1f:71:6f:e2:38:e7:78:75:5e: 7f:cb:71:29:88:31:ef:d1:1d:ef:3b:6e:51:7f:80: 14:be:6b:31:c7:6c:af:fb:b9:26:07:20:19:f2:27: 02:a9:2f:a0:63:90:e9:aa:04:fd:b4:7a:83:3a:9e: ab:dd:3f:0f:39:2c:c1:ec:48:81:80:63:45:32:a9: 09:40:59:ec:84:88:46:73:56:8a:5b:d9:5e:c0:19: e1:33:5d:e2:07:1a:68:24:65:5e:50:64:55:1e:69: 9a:68:4c:58:91:ff:c4:bc:c2:4f:9c:4f:49:17:c0: bc:af:7d:ef:b6:d1:70:8a:8e:d7:c3:13:d0:53:da: fd:56:b9:5b:e4:bc:b7:2f:ed:65:e6:06:28:c7:b0: e8:67:7d:82:7f:f1:1a:12:03:cb:7a:ee:1a:c7:0b: 43:bf:cd:1e:1c:e8:75:43:92:25:20:a8:05:7b:e2: 53:53:95:da:61:79:bf:a1:3b:f6:84:93:aa:21:fc: 2b:66:c9:56:28:6b:98:1c:91:5d:9a:11:6b:bc:58: 77:57:b4:a8:2a:16:6e:54:12:95:18:25:ef:bd:99: 34:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:DC:07:B8:E7:4B:23:34:02:94:67:5B:B5:70:F1:A3:5E:B2:9E:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/56b50f1e-7768-31f4-883e-4ac810d5160b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:9b:f4:61:bd:c1:44:84:52:36:15:f5:4e:ff:43:b0:cf:af: fd:d9:99:aa:ca:8c:99:1b:39:9f:ca:de:9b:82:03:e9:10:38: da:cb:36:a6:ce:d4:8f:27:2c:99:2c:88:9e:eb:2f:70:aa:02: ce:48:ef:97:4c:ee:09:88:d9:ce:39:00:ad:0e:5a:bc:a5:ee: b2:48:e8:b4:1f:0b:2c:40:0c:a3:7a:32:7f:78:43:92:52:d4: 07:20:5b:87:15:0f:4b:bd:70:a4:01:76:12:3d:c3:a9:fc:41: 6b:0b:dc:28:bf:a5:a2:06:87:a3:39:16:cc:5f:7c:07:63:1b: b9:d8:4e:9f:9d:d3:43:96:b9:33:9d:8d:2f:fa:9f:99:ab:38: 50:47:e7:39:92:c2:af:6a:da:d5:6c:24:c2:1f:41:8e:21:c6: 93:48:aa:72:01:b6:42:e6:65:fc:61:f5:da:65:2f:9e:c9:11: 5a:b3:e6:0e:72:26:e2:47:a5:36:9e:90:ef:7f:a9:60:cc:ea: 50:e5:21:c8:39:7e:91:6d:48:5c:92:ce:a6:29:7c:7f:1c:d2: 81:cf:2d:c5:4e:17:ce:11:b3:b2:16:42:74:57:81:36:18:a9: b7:be:34:65:09:3b:26:8e:72:4b:8c:b6:fc:52:ce:4f:9f:34: d1:20:24:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEW1O9hyx2RVb44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk Y2IzMjM2ZGYtYjllOS00YTAxLWE3MjgtODJhZjM2N2Q3ZDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7vXmW/qT/NlLE3XOdke3VVODWsRDQ84nlZu pXUKpCcCv6kfcW/iOOd4dV5/y3EpiDHv0R3vO25Rf4AUvmsxx2yv+7kmByAZ8icC qS+gY5DpqgT9tHqDOp6r3T8POSzB7EiBgGNFMqkJQFnshIhGc1aKW9lewBnhM13i BxpoJGVeUGRVHmmaaExYkf/EvMJPnE9JF8C8r33vttFwio7XwxPQU9r9Vrlb5Ly3 L+1l5gYox7DoZ32Cf/EaEgPLeu4axwtDv80eHOh1Q5IlIKgFe+JTU5XaYXm/oTv2 hJOqIfwrZslWKGuYHJFdmhFrvFh3V7SoKhZuVBKVGCXvvZk02wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH7cB7jnSyM0ApRnW7Vw8aNesp4KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTZiNTBmMWUtNzc2OC0z MWY0LTg4M2UtNGFjODEwZDUxNjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi2JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICb9GG9wUSEUjYV9U7/Q7DPr/3ZmarKjJkbOZ/K3puCA+kQONrLNqbO 1I8nLJksiJ7rL3CqAs5I75dM7gmI2c45AK0OWryl7rJI6LQfCyxADKN6Mn94Q5JS 1AcgW4cVD0u9cKQBdhI9w6n8QWsL3Ci/paIGh6M5FsxffAdjG7nYTp+d00OWuTOd jS/6n5mrOFBH5zmSwq9q2tVsJMIfQY4hxpNIqnIBtkLmZfxh9dplL57JEVqz5g5y JuJHpTaekO9/qWDM6lDlIcg5fpFtSFySzqYpfH8c0oHPLcVOF84Rs7IWQnRXgTYY qbe+NGUJOyaOckuMtvxSzk+fNNEgJBE= -----END CERTIFICATE-----Generated at Sat Jul 26 11:38:22 2025 by rpki-client