$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c8949a05-b098-32fe-99a1-fafcf7a51e72.roa File: c8949a05-b098-32fe-99a1-fafcf7a51e72.roa (raw, json) Hash identifier: o5+l0VWTmhj2cMqEXcJSAEhUMzNhrNdI2eAd7vKLWTw= Subject key identifier: FD:C0:40:60:7D:52:7F:0A:76:FF:95:6E:1C:FE:B4:AF:34:78:DC:11 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84121DA778391688F659BA68 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c8949a05-b098-32fe-99a1-fafcf7a51e72.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 198.45.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:1d:a7:78:39:16:88:f6:59:ba:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=d36a2e16-fe52-49cf-b5a4-b89a410ab836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8c:fa:5d:bb:51:ba:18:27:a7:15:0e:ae:d7: 31:8f:3c:9a:5f:67:d9:41:5a:68:74:af:eb:62:29: b9:3c:b4:5d:7c:b2:4a:35:13:ba:53:7b:20:21:f8: 39:d4:93:58:cb:fd:41:d8:fe:a8:dd:4e:fe:b9:cc: 2f:aa:02:0c:9f:ef:95:8e:1c:ee:74:79:3a:29:fa: 14:e5:fa:5d:ec:7e:0a:0b:6b:78:99:3e:80:9a:aa: 5d:0a:52:30:c8:e2:c4:be:cb:48:81:ec:64:8f:37: d4:dd:d9:cb:5e:f5:4d:5e:76:98:7a:05:f7:fc:b1: b3:8f:94:02:e5:ed:40:53:00:76:0e:35:89:04:d8: df:d7:b8:c3:d8:eb:d4:ca:2b:e9:03:ec:cd:14:6f: 2c:81:40:8d:da:cf:10:c5:28:93:8d:a2:50:96:39: a7:ac:68:fe:7b:f9:b3:e9:b1:86:13:5b:78:2b:c6: d7:1b:b6:d2:96:bf:5d:20:74:60:03:1d:32:5b:79: 04:c9:2f:99:e9:06:94:76:ec:6c:e1:ef:67:e3:87: ab:1f:e5:c6:76:e3:3e:f1:7d:22:5e:61:25:ab:b7: c5:1b:b0:b6:e1:c9:89:0a:93:cd:67:99:bd:6f:c0: 12:81:d6:59:47:cd:33:fd:88:f0:a2:7e:06:47:cd: d1:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:C0:40:60:7D:52:7F:0A:76:FF:95:6E:1C:FE:B4:AF:34:78:DC:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c8949a05-b098-32fe-99a1-fafcf7a51e72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:60:52:54:3c:7c:67:0c:e1:f5:f5:4d:b6:bf:ac:fa:13:7d: a3:fd:9e:4c:45:c7:f8:35:a9:d3:7f:01:fe:6f:df:9d:23:4c: fd:d5:66:e0:60:76:95:8e:3b:f1:ea:d9:47:99:60:d9:fc:9c: 13:6c:f8:58:3d:a3:bc:ad:44:bd:b3:7f:10:bb:9f:bb:ec:d3: a0:95:cb:44:bf:03:15:94:c0:70:72:83:1c:ed:67:78:8a:6f: ec:24:ea:89:fa:04:74:71:b0:26:d1:fe:f5:30:9e:19:f0:c6: 75:92:0e:c4:cc:93:74:68:c0:34:13:c2:cf:8f:30:67:1b:e3: 8a:c1:ce:bf:f7:34:ae:e4:a0:a8:84:74:86:6f:fd:d0:e9:57: ac:38:e3:48:de:fa:57:81:e1:c4:51:be:91:dd:57:e1:17:80: ff:80:62:3d:b1:5c:67:f2:2c:98:0d:ae:f2:72:0f:dd:ff:d5: bb:27:6b:02:8f:85:7a:6f:76:19:26:cc:f7:62:25:13:10:d4: 1f:ce:f0:6a:d3:e8:64:5a:7b:0c:58:38:4c:e1:ab:3a:8c:ee: d1:84:ac:c3:46:ab:c5:03:09:41:b5:e3:50:55:dd:49:a8:84: 71:da:94:ae:6b:a1:54:d2:9c:0f:9e:fb:60:f9:49:2b:2d:01: 92:18:07:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEh2neDkWiPZZumgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZDM2YTJlMTYtZmU1Mi00OWNmLWI1YTQtYjg5YTQxMGFiODM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIz6XbtRuhgnpxUOrtcxjzyaX2fZQVpodK/r Yim5PLRdfLJKNRO6U3sgIfg51JNYy/1B2P6o3U7+ucwvqgIMn++VjhzudHk6KfoU 5fpd7H4KC2t4mT6AmqpdClIwyOLEvstIgexkjzfU3dnLXvVNXnaYegX3/LGzj5QC 5e1AUwB2DjWJBNjf17jD2OvUyivpA+zNFG8sgUCN2s8QxSiTjaJQljmnrGj+e/mz 6bGGE1t4K8bXG7bSlr9dIHRgAx0yW3kEyS+Z6QaUduxs4e9n44erH+XGduM+8X0i XmElq7fFG7C24cmJCpPNZ5m9b8ASgdZZR80z/Yjwon4GR83RQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP3AQGB9Un8Kdv+Vbhz+tK80eNwRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzg5NDlhMDUtYjA5OC0z MmZlLTk5YTEtZmFmY2Y3YTUxZTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBgUlQ8fGcM4fX1Tba/rPoTfaP9nkxFx/g1qdN/Af5v350jTP3VZuBg dpWOO/Hq2UeZYNn8nBNs+Fg9o7ytRL2zfxC7n7vs06CVy0S/AxWUwHBygxztZ3iK b+wk6on6BHRxsCbR/vUwnhnwxnWSDsTMk3RowDQTws+PMGcb44rBzr/3NK7koKiE dIZv/dDpV6w440je+leB4cRRvpHdV+EXgP+AYj2xXGfyLJgNrvJyD93/1bsnawKP hXpvdhkmzPdiJRMQ1B/O8GrT6GRaewxYOEzhqzqM7tGErMNGq8UDCUG141BV3Umo hHHalK5roVTSnA+e+2D5SSstAZIYByo= -----END CERTIFICATE-----Generated at Sat Jul 26 00:03:13 2025 by rpki-client