$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa3d6f72-a298-34f2-9aa7-98d609570cbb.roa File: aa3d6f72-a298-34f2-9aa7-98d609570cbb.roa (raw, json) Hash identifier: gOYAs5Gif4Q8jb9LiD6ubWkh4/lhEiZ7ubFX4fYDbpM= Subject key identifier: 77:9B:98:29:35:B8:BC:F2:C5:5D:48:04:E8:3C:1D:BD:EE:A7:FE:A2 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84116EC6A10FC6D5A74C1200 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa3d6f72-a298-34f2-9aa7-98d609570cbb.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 198.45.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:6e:c6:a1:0f:c6:d5:a7:4c:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=bbe9dd28-694e-4254-aedd-095aa493c032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:89:de:20:c5:26:33:bd:d8:70:d6:e3:99:88: f1:56:d1:90:88:6b:fe:8a:68:27:95:f0:a9:90:5b: a3:4e:f5:b5:e9:d0:fe:1e:aa:40:f5:3b:3c:44:4b: e3:6c:0e:bd:bc:d9:cd:c3:c0:b9:b4:80:c6:00:4a: 8d:93:b6:b5:f7:73:8b:0f:7b:aa:14:fe:b5:46:95: e8:85:ba:94:38:a7:c2:f7:e0:7b:39:65:07:d1:4a: 84:7d:cf:f9:50:38:5d:72:b1:b0:55:55:6e:e6:75: 51:8e:de:bc:f7:4f:60:17:7f:83:f2:1a:fb:e1:a0: 37:89:7c:ac:73:69:5e:58:2e:af:09:29:56:8c:17: 22:0a:09:2b:9c:bb:b5:65:37:89:c8:7c:ee:2b:7c: cf:5f:83:98:0c:9b:a5:c1:3e:4a:ae:71:8d:09:45: cb:14:b7:36:29:a5:e6:82:a6:ed:4f:69:98:0d:67: 51:e6:14:c5:ed:ea:c7:e8:dd:ca:fb:16:9a:7c:e9: 95:bc:68:a0:46:6e:05:3b:f8:39:09:74:3d:4b:92: ad:b6:e8:69:71:39:b6:9d:59:e8:c3:9c:64:17:c6: f0:41:2e:21:14:33:d5:51:87:b9:41:cd:d4:9b:31: 49:0c:7b:5c:fe:5e:51:ea:90:8b:b1:23:f9:ee:91: b8:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:9B:98:29:35:B8:BC:F2:C5:5D:48:04:E8:3C:1D:BD:EE:A7:FE:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa3d6f72-a298-34f2-9aa7-98d609570cbb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:1b:8f:45:df:14:db:cf:76:b3:ac:95:59:2f:e8:a6:26:f4: e2:f5:09:07:25:5b:ed:64:ac:1e:8f:df:50:d2:92:82:90:ff: 95:ea:8b:8f:16:ab:d8:74:74:e8:c6:08:6d:f4:a3:d8:1f:b7: e2:45:0d:d3:2f:98:a9:75:94:bc:ea:5b:b7:cd:0e:89:49:92: 2b:40:bd:0c:39:68:f4:b3:af:90:56:ab:15:c2:2e:f9:31:1d: ed:2c:b8:de:e9:3a:ed:7f:ad:fe:23:49:5f:14:50:de:1f:76: 61:cf:56:69:4f:52:8c:db:05:ed:6b:b3:1b:72:0a:00:df:d5: a0:16:4c:1f:44:07:e4:f8:6b:ac:90:82:82:ff:68:e3:fe:c0: 4a:33:62:30:a8:4e:54:80:2f:29:53:a5:ee:7c:57:f2:2a:aa: ee:16:eb:d3:85:47:94:30:d0:24:5e:dc:cf:5f:56:4f:32:f2: 2e:5c:ab:8d:62:16:00:ec:0e:70:7d:08:7b:c1:bf:fe:29:42: 90:a8:99:63:6f:d1:10:be:6f:7b:01:6e:30:5d:76:9f:3f:6a: 05:46:eb:af:45:90:1e:0e:d9:e4:96:e0:1a:b8:53:e1:e2:7b: f7:55:2f:b1:6a:f8:f7:92:d0:3b:67:3c:7b:78:54:27:fb:77: 11:6f:cd:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEW7GoQ/G1adMEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YmJlOWRkMjgtNjk0ZS00MjU0LWFlZGQtMDk1YWE0OTNjMDMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4neIMUmM73YcNbjmYjxVtGQiGv+imgnlfCp kFujTvW16dD+HqpA9Ts8REvjbA69vNnNw8C5tIDGAEqNk7a193OLD3uqFP61RpXo hbqUOKfC9+B7OWUH0UqEfc/5UDhdcrGwVVVu5nVRjt68909gF3+D8hr74aA3iXys c2leWC6vCSlWjBciCgkrnLu1ZTeJyHzuK3zPX4OYDJulwT5KrnGNCUXLFLc2KaXm gqbtT2mYDWdR5hTF7erH6N3K+xaafOmVvGigRm4FO/g5CXQ9S5KttuhpcTm2nVno w5xkF8bwQS4hFDPVUYe5Qc3UmzFJDHtc/l5R6pCLsSP57pG4KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHebmCk1uLzyxV1IBOg8Hb3up/6iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWEzZDZmNzItYTI5OC0z NGYyLTlhYTctOThkNjA5NTcwY2JiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi3MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKsbj0XfFNvPdrOslVkv6KYm9OL1CQclW+1krB6P31DSkoKQ/5Xqi48W q9h0dOjGCG30o9gft+JFDdMvmKl1lLzqW7fNDolJkitAvQw5aPSzr5BWqxXCLvkx He0suN7pOu1/rf4jSV8UUN4fdmHPVmlPUozbBe1rsxtyCgDf1aAWTB9EB+T4a6yQ goL/aOP+wEozYjCoTlSALylTpe58V/Iqqu4W69OFR5Qw0CRe3M9fVk8y8i5cq41i FgDsDnB9CHvBv/4pQpComWNv0RC+b3sBbjBddp8/agVG669FkB4O2eSW4Bq4U+Hi e/dVL7Fq+PeS0DtnPHt4VCf7dxFvzbA= -----END CERTIFICATE-----Generated at Sat Jul 26 11:08:51 2025 by rpki-client