$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7f1ca507-fd16-3283-8993-7986c7b39180.roa File: 7f1ca507-fd16-3283-8993-7986c7b39180.roa (raw, json) Hash identifier: v5J4NlUezrL+n7GL/EFRX4gjE84LVZgkgrtSev7bscQ= Subject key identifier: 53:0C:B1:6F:06:37:00:85:AC:6F:90:54:33:CA:22:9A:2C:BC:38:F2 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84116D7ADF3C28FCD7BE4980 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7f1ca507-fd16-3283-8993-7986c7b39180.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 198.45.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:6d:7a:df:3c:28:fc:d7:be:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=5638f708-2467-489d-809d-3022caa190d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e7:e2:dd:8f:6d:1f:c3:ab:30:49:4d:d9:d4: de:36:a7:8b:17:dd:16:6d:1f:f3:f2:48:52:bf:e7: 10:59:16:73:09:d5:34:3f:b1:8f:db:0e:0b:67:3e: 75:0b:8f:4c:4c:b5:50:b8:1e:98:83:77:40:57:5a: a1:03:87:1a:99:a7:2a:dd:93:f3:47:91:3d:54:37: 0a:82:35:90:70:f8:9f:c6:09:fc:a4:31:86:5e:61: b6:8d:e2:ea:b4:d4:7a:cf:9e:20:60:6a:2a:64:44: a1:7a:d2:37:54:27:07:1a:68:13:d3:c6:0d:3b:db: 5a:15:bc:1f:af:26:27:67:c2:7d:74:75:bc:56:c4: d1:d2:f1:ed:0a:55:9a:50:5d:38:a4:99:7c:6d:e4: 6a:4b:c7:74:32:24:4b:c3:be:43:31:5c:17:ba:6d: be:2b:28:9e:a5:60:39:68:da:44:08:42:3a:5e:d8: 7a:a6:19:61:51:5e:b7:65:85:b8:f7:0a:d6:a7:34: 21:70:ac:82:cc:d4:5f:a7:18:da:56:4a:e2:62:66: 6e:aa:3c:7f:6b:2b:82:89:67:d2:eb:0f:d6:b0:cb: 51:06:b6:cf:89:e0:82:e9:95:b7:9b:40:6d:c4:81: c4:b5:c9:0b:1c:7a:16:47:d4:10:ad:14:f7:49:1e: 51:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:0C:B1:6F:06:37:00:85:AC:6F:90:54:33:CA:22:9A:2C:BC:38:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7f1ca507-fd16-3283-8993-7986c7b39180.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d5:4b:92:c9:de:69:be:69:b5:c0:51:13:4d:a9:ad:76:24:7b: 44:f6:2d:87:60:bb:67:33:c4:6c:15:66:53:cf:e8:79:81:eb: 01:51:94:29:a3:f2:90:1f:c6:7b:a8:54:47:e8:c0:e0:a4:8f: af:6d:bf:aa:41:1d:b4:2e:db:0b:5a:54:39:20:cd:92:d5:a1: b2:c7:f4:26:ea:aa:bd:23:b5:a8:b4:dc:0a:1b:d0:dd:d2:f6: d5:3b:58:37:dd:7c:e3:c7:15:85:7a:33:00:a7:6b:af:7c:a2: aa:86:c8:8c:2d:27:bb:a6:ea:a8:b8:56:9f:b4:bf:0c:7e:bb: 10:33:dc:58:dd:9d:7e:09:f6:28:b6:11:35:7a:a6:4d:e4:a0: 0a:f1:d4:71:52:26:9c:62:95:9e:44:97:62:09:ef:8b:44:47: 67:9f:2a:62:af:d4:64:04:b7:8e:f3:b9:a5:a4:05:7c:0e:f6: 69:6b:d3:90:a9:7c:d7:69:27:28:53:de:76:18:c6:52:3e:24: 25:6d:2e:3c:cb:af:74:4e:99:4a:fa:74:fc:9a:a5:a9:c3:45: d0:cc:6c:b2:34:63:fa:32:2a:44:23:fa:ce:c7:3e:b8:b3:f1: 77:9a:ca:26:fc:09:8d:c6:fe:c9:2f:be:86:18:a7:19:49:a3: e9:8a:dd:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEW163zwo/Ne+SYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NTYzOGY3MDgtMjQ2Ny00ODlkLTgwOWQtMzAyMmNhYTE5MGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOfi3Y9tH8OrMElN2dTeNqeLF90WbR/z8khS v+cQWRZzCdU0P7GP2w4LZz51C49MTLVQuB6Yg3dAV1qhA4camacq3ZPzR5E9VDcK gjWQcPifxgn8pDGGXmG2jeLqtNR6z54gYGoqZEShetI3VCcHGmgT08YNO9taFbwf ryYnZ8J9dHW8VsTR0vHtClWaUF04pJl8beRqS8d0MiRLw75DMVwXum2+KyiepWA5 aNpECEI6Xth6phlhUV63ZYW49wrWpzQhcKyCzNRfpxjaVkriYmZuqjx/ayuCiWfS 6w/WsMtRBrbPieCC6ZW3m0BtxIHEtckLHHoWR9QQrRT3SR5RpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFMMsW8GNwCFrG+QVDPKIposvDjyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvN2YxY2E1MDctZmQxNi0z MjgzLTg5OTMtNzk4NmM3YjM5MTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi2QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANVLksneab5ptcBRE02prXYke0T2LYdgu2czxGwVZlPP6HmB6wFRlCmj 8pAfxnuoVEfowOCkj69tv6pBHbQu2wtaVDkgzZLVobLH9Cbqqr0jtai03Aob0N3S 9tU7WDfdfOPHFYV6MwCna698oqqGyIwtJ7um6qi4Vp+0vwx+uxAz3FjdnX4J9ii2 ETV6pk3koArx1HFSJpxilZ5El2IJ74tER2efKmKv1GQEt47zuaWkBXwO9mlr05Cp fNdpJyhT3nYYxlI+JCVtLjzLr3ROmUr6dPyapanDRdDMbLI0Y/oyKkQj+s7HPriz 8Xeayib8CY3G/skvvoYYpxlJo+mK3QA= -----END CERTIFICATE-----Generated at Sat Jul 26 00:12:45 2025 by rpki-client