$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d874f7f7-d118-3d67-ac93-8842acd7ca86.roa File: d874f7f7-d118-3d67-ac93-8842acd7ca86.roa (raw, json) Hash identifier: xy8t3Cuy0DY7ob44j2hXL8jkSvsc2dZo7c564S8La00= Subject key identifier: 62:72:F6:FC:70:4D:E0:3E:4C:20:9D:E7:06:67:FC:64:97:55:F8:C8 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84121FA485394700ACBA8800 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d874f7f7-d118-3d67-ac93-8842acd7ca86.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 198.45.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:1f:a4:85:39:47:00:ac:ba:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=ce49709c-7250-41cf-a47c-35d0108c49f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:6c:c6:9e:ba:73:7d:50:47:c9:14:17:08:7c: 71:a7:c7:ce:ee:ac:01:2c:a4:db:86:8d:dd:4b:07: 80:00:a5:a2:54:a5:76:92:41:e8:84:09:ef:a2:5c: 8f:d4:92:a1:a2:f4:61:94:ad:f2:78:77:b5:31:d5: 15:a4:50:66:22:b2:5e:46:41:58:1d:e8:03:c3:34: 86:d5:f8:99:22:ae:31:32:94:77:ca:73:61:ee:fa: 6f:04:d8:6c:27:67:d2:e1:98:95:52:44:bc:6c:74: fc:a1:02:5e:01:55:13:56:20:e2:69:94:66:15:c0: 94:60:92:ae:8f:84:af:5b:d9:fb:b7:fa:95:6d:02: dd:35:30:6f:83:b4:b2:31:b6:d9:76:98:b8:bf:de: cb:51:87:92:29:3f:39:e7:85:02:53:3f:ce:41:5b: 6e:63:1e:40:19:17:c2:a1:f5:48:af:73:a8:61:f4: 91:42:f0:da:86:a8:2c:e8:67:49:24:72:d6:a0:6a: 30:56:d1:b9:af:5d:d3:26:2f:ff:e3:4d:30:c4:5f: c0:46:41:bf:c0:86:de:af:81:fa:ae:9d:6b:c6:a8: c6:69:f0:22:ba:3d:21:ab:ee:05:48:99:e0:a4:de: 9c:10:cf:88:82:c0:69:66:d0:d9:8c:31:b7:b7:bc: 0c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:72:F6:FC:70:4D:E0:3E:4C:20:9D:E7:06:67:FC:64:97:55:F8:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d874f7f7-d118-3d67-ac93-8842acd7ca86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:04:75:60:b3:e3:6a:80:59:91:a0:33:6f:0c:96:6d:61:f8: f6:9d:6f:ed:c5:9e:7d:79:03:e2:ad:74:65:b8:40:0c:23:cd: b7:25:62:26:94:4f:4e:8d:c6:26:f8:31:52:8d:68:aa:46:2a: 4e:08:66:c6:a1:da:52:e3:6f:36:85:4e:15:fa:a9:29:50:d2: 72:4a:c7:61:fc:e0:b7:f7:b4:87:b7:29:21:d9:cb:27:42:43: 25:ab:c5:f8:83:73:73:d6:5d:09:35:08:a2:ca:53:92:1a:5c: 42:f6:47:31:ad:21:a7:c3:cc:32:ed:64:79:f2:9c:8c:1b:f8: 1f:9b:e8:c5:52:82:67:b6:4c:a9:c0:8c:3a:8f:9f:73:42:7b: 89:24:39:12:77:db:de:66:c1:bf:aa:51:12:29:dd:d0:39:40: 88:56:b3:a9:5c:92:29:e9:b2:fa:d7:80:6c:ad:e9:b4:b1:51: ea:68:dc:4d:df:5d:e4:35:7b:fe:ff:95:b0:fb:9b:c5:24:3a: b5:ff:3f:fd:08:07:c4:68:18:c7:1d:d4:6d:4e:c2:c6:52:c7: 31:ac:3f:ad:4a:9b:35:82:54:0f:f7:bc:4c:79:10:60:19:40: 72:76:31:3f:20:8d:2e:c2:07:26:d8:53:c1:ba:c3:1d:b8:b9: 41:ac:d6:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEh+khTlHAKy6iAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk Y2U0OTcwOWMtNzI1MC00MWNmLWE0N2MtMzVkMDEwOGM0OWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGzGnrpzfVBHyRQXCHxxp8fO7qwBLKTbho3d SweAAKWiVKV2kkHohAnvolyP1JKhovRhlK3yeHe1MdUVpFBmIrJeRkFYHegDwzSG 1fiZIq4xMpR3ynNh7vpvBNhsJ2fS4ZiVUkS8bHT8oQJeAVUTViDiaZRmFcCUYJKu j4SvW9n7t/qVbQLdNTBvg7SyMbbZdpi4v97LUYeSKT8554UCUz/OQVtuYx5AGRfC ofVIr3OoYfSRQvDahqgs6GdJJHLWoGowVtG5r13TJi//400wxF/ARkG/wIber4H6 rp1rxqjGafAiuj0hq+4FSJngpN6cEM+IgsBpZtDZjDG3t7wMhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGJy9vxwTeA+TCCd5wZn/GSXVfjIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDg3NGY3ZjctZDExOC0z ZDY3LWFjOTMtODg0MmFjZDdjYTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi3PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJEEdWCz42qAWZGgM28Mlm1h+Padb+3Fnn15A+KtdGW4QAwjzbclYiaU T06Nxib4MVKNaKpGKk4IZsah2lLjbzaFThX6qSlQ0nJKx2H84Lf3tIe3KSHZyydC QyWrxfiDc3PWXQk1CKLKU5IaXEL2RzGtIafDzDLtZHnynIwb+B+b6MVSgme2TKnA jDqPn3NCe4kkORJ3295mwb+qURIp3dA5QIhWs6lckinpsvrXgGyt6bSxUepo3E3f XeQ1e/7/lbD7m8UkOrX/P/0IB8RoGMcd1G1OwsZSxzGsP61KmzWCVA/3vEx5EGAZ QHJ2MT8gjS7CBybYU8G6wx24uUGs1vw= -----END CERTIFICATE-----Generated at Sat Jul 26 11:16:15 2025 by rpki-client