$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9efdb82b-61a4-322b-b38f-ba61797c7a9d.roa File: 9efdb82b-61a4-322b-b38f-ba61797c7a9d.roa (raw, json) Hash identifier: 3InsH6wxY20xdadTsYpksehON3Zt2YBRgxTa9E00NtE= Subject key identifier: 33:54:46:40:37:6C:3C:AE:66:14:56:2A:77:FC:8C:2B:91:E0:68:77 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84121DD7324E017080425140 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9efdb82b-61a4-322b-b38f-ba61797c7a9d.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 198.45.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:1d:d7:32:4e:01:70:80:42:51:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=3bd1af09-dc2a-4f4a-bfda-32ecd07261c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a2:6e:50:dd:c4:da:33:49:b7:27:50:3c:88: 0d:a8:02:4f:20:e0:76:2a:26:08:4a:e9:a4:6e:23: 3e:8b:71:3c:d2:7b:90:ac:37:8f:47:6b:cc:55:73: f8:c4:64:1b:80:2b:df:18:cd:ad:91:c5:1e:51:9d: 1e:ce:74:03:a1:3f:f1:20:d2:bc:9e:c0:33:ce:61: 2b:66:3a:4e:4b:00:2d:74:27:80:72:97:5a:8d:74: 12:73:2b:75:eb:b2:f7:2f:36:74:33:19:42:d5:4a: 01:43:1c:ba:a0:ba:46:5a:83:cf:8b:2e:b4:77:b2: 45:37:3e:66:4f:43:99:51:39:39:41:67:2e:5e:37: 79:f9:ce:0f:61:a0:76:f7:bd:ff:ba:4c:b6:0a:6b: 1c:d4:81:1c:fc:96:44:bc:75:66:a0:05:13:67:4e: 3a:6b:c7:39:52:31:f3:9e:54:e1:81:8d:4f:c8:b2: 85:ac:9b:71:bd:41:36:5f:c0:21:79:8c:1c:18:12: 5d:de:46:0b:a2:44:40:ca:47:1c:2d:c0:45:ab:9a: dc:b6:15:cd:d9:cc:16:d4:15:4a:17:9e:c1:c1:0f: 88:6c:b5:86:f2:56:b7:1e:d7:dd:1e:ee:c9:fb:bf: 01:ba:b5:ac:60:7e:6c:12:74:7a:16:d5:c0:21:13: d7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:54:46:40:37:6C:3C:AE:66:14:56:2A:77:FC:8C:2B:91:E0:68:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9efdb82b-61a4-322b-b38f-ba61797c7a9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:75:c5:4e:0c:4d:a2:8a:18:01:cf:c5:91:73:26:c6:38:68: fa:3d:2f:b3:27:cd:e5:1f:c1:3d:d5:19:26:a1:ba:62:57:13: 33:4c:04:01:2b:69:2d:2e:79:86:11:01:2b:fe:d4:2d:98:bc: 0c:db:15:0f:6c:7d:8d:d4:18:c8:e8:09:ba:29:c2:ae:f5:ee: ba:c5:f0:dc:c9:28:f6:73:4e:ad:fb:1a:30:fa:4e:5f:cd:d2: c5:22:76:5a:6b:4d:d1:af:be:c3:2f:98:08:ec:99:2a:a9:53: 84:b9:32:86:d0:53:46:ac:f5:d0:e9:d5:d7:77:be:ca:69:70: 85:43:c6:d2:ac:7a:03:2c:3d:4b:68:27:7f:5a:06:9c:2d:de: 09:e7:0f:9d:9d:5b:ba:8e:52:6a:d4:70:c9:29:61:8f:f0:82: e6:86:37:3f:ba:d5:6f:2b:39:3b:fd:fe:ad:d6:c9:bb:a9:46: 85:8b:ee:7e:9f:04:4c:0b:5e:e7:19:a3:a1:e3:d5:59:fb:3a: 3e:a6:1d:8d:f8:d1:4e:d7:59:c3:64:1a:82:12:3d:98:dd:e7: 8f:fe:5b:5f:a3:41:4d:66:0b:9c:44:27:1c:3b:8a:10:05:a0: 8e:f9:a4:d8:d7:89:53:a4:58:77:9d:09:2f:51:65:31:97:90: bf:42:45:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEh3XMk4BcIBCUUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk M2JkMWFmMDktZGMyYS00ZjRhLWJmZGEtMzJlY2QwNzI2MWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKJuUN3E2jNJtydQPIgNqAJPIOB2KiYISumk biM+i3E80nuQrDePR2vMVXP4xGQbgCvfGM2tkcUeUZ0eznQDoT/xINK8nsAzzmEr ZjpOSwAtdCeAcpdajXQScyt167L3LzZ0MxlC1UoBQxy6oLpGWoPPiy60d7JFNz5m T0OZUTk5QWcuXjd5+c4PYaB2973/uky2Cmsc1IEc/JZEvHVmoAUTZ046a8c5UjHz nlThgY1PyLKFrJtxvUE2X8AheYwcGBJd3kYLokRAykccLcBFq5rcthXN2cwW1BVK F57BwQ+IbLWG8la3HtfdHu7J+78BurWsYH5sEnR6FtXAIRPX5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNURkA3bDyuZhRWKnf8jCuR4Gh3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOWVmZGI4MmItNjFhNC0z MjJiLWIzOGYtYmE2MTc5N2M3YTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi2KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMJ1xU4MTaKKGAHPxZFzJsY4aPo9L7MnzeUfwT3VGSahumJXEzNMBAEr aS0ueYYRASv+1C2YvAzbFQ9sfY3UGMjoCbopwq717rrF8NzJKPZzTq37GjD6Tl/N 0sUidlprTdGvvsMvmAjsmSqpU4S5MobQU0as9dDp1dd3vsppcIVDxtKsegMsPUto J39aBpwt3gnnD52dW7qOUmrUcMkpYY/wguaGNz+61W8rOTv9/q3WybupRoWL7n6f BEwLXucZo6Hj1Vn7Oj6mHY340U7XWcNkGoISPZjd54/+W1+jQU1mC5xEJxw7ihAF oI75pNjXiVOkWHedCS9RZTGXkL9CRT0= -----END CERTIFICATE-----Generated at Sat Jul 26 00:05:31 2025 by rpki-client