$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/eaebbede-6cc9-3629-8e8c-6b5e0efc42e1.roa File: eaebbede-6cc9-3629-8e8c-6b5e0efc42e1.roa (raw, json) Hash identifier: RR1qGyWi3arcMs5Xybw7C/P/HxqYsmrnN/La73eLjOY= Subject key identifier: C2:F2:82:E6:3B:61:51:69:50:9E:A7:09:6B:34:B0:BC:1F:03:0D:65 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84121FDBD6AD38EB31542600 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/eaebbede-6cc9-3629-8e8c-6b5e0efc42e1.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 198.45.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:1f:db:d6:ad:38:eb:31:54:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=f41af994-2ad1-4422-8893-ff656c8be1bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:06:56:97:13:12:dd:2a:7a:02:f4:9a:63:ac: 48:b4:b2:a2:c8:5a:84:cd:ce:ca:d4:a0:01:58:20: b4:03:9a:a4:85:70:3e:12:44:cb:2e:55:56:36:5b: 51:e9:82:53:33:c1:cd:60:5b:f1:d1:69:07:e8:1d: e4:b7:2d:0e:8e:67:2a:70:b6:b7:7d:24:06:f4:c5: 17:81:cd:29:58:cb:6b:da:de:b7:23:0a:d0:e9:13: 93:2a:4c:93:05:bd:0f:a0:46:25:a7:eb:1c:84:ca: b0:e4:81:22:55:71:6c:5b:9d:a3:93:e9:3b:10:15: e4:1a:e1:02:21:d7:48:82:34:71:a0:de:58:8f:e5: 95:1a:4d:e4:06:42:2b:ef:0a:74:ed:48:fd:fd:15: fc:e2:b4:3e:3a:2c:72:a0:fd:96:06:56:48:c9:b7: 26:f7:69:d2:45:42:43:89:38:2b:ab:c6:0d:5b:0c: d6:64:2c:24:a2:19:91:c4:8f:ec:68:e5:50:0d:b6: 64:21:16:7d:38:8e:6c:f9:da:fb:c6:91:65:9e:69: a4:4c:1f:37:ed:b9:4b:d9:6f:7f:eb:d8:bc:58:f0: 43:28:3f:5a:72:0b:c5:65:86:5a:a1:f6:48:5e:bd: cf:09:92:02:56:24:39:f8:31:e0:64:9a:43:e2:02: fa:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:F2:82:E6:3B:61:51:69:50:9E:A7:09:6B:34:B0:BC:1F:03:0D:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/eaebbede-6cc9-3629-8e8c-6b5e0efc42e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:1b:1b:ff:d0:1e:24:cb:3b:1b:77:6d:9b:e9:02:e0:ad:06: c4:79:4f:38:f3:47:50:23:53:b6:4c:fe:cf:12:85:6b:37:c3: c1:08:d2:87:31:f3:1e:df:ff:f9:74:cf:5a:76:10:a6:8d:7b: 20:77:51:f8:3d:e8:60:e6:06:14:ec:18:ff:40:e7:5c:a6:fb: f4:03:12:3e:38:c4:e7:f7:c8:32:36:fc:51:72:d6:cd:87:0f: 40:d3:68:44:dc:08:95:cf:67:c6:0a:80:bd:1e:46:52:04:86: d8:eb:b7:5a:d5:dd:65:d1:64:b6:77:ef:83:6a:97:e8:57:6f: 46:0e:a6:ac:48:a6:a6:1d:8b:e2:7e:df:2d:cb:3d:fb:89:32: e4:72:31:02:e2:b1:f1:94:d7:a7:ca:c3:87:42:14:1c:f8:d1: 33:a0:58:bc:e3:5a:39:5a:d0:d0:fa:82:c5:cb:ad:8c:90:a2: b3:72:bf:a9:34:94:26:a3:f0:af:d7:67:33:d4:f4:dc:e1:90: 67:ea:18:86:4c:aa:3b:53:b6:0a:0e:21:d7:5c:eb:62:45:0b: f1:7a:7b:98:c2:f9:c6:30:50:7d:fc:95:28:d8:35:3c:88:56: 08:f2:a8:83:a2:15:a1:c4:da:01:ed:7a:cf:c9:31:b9:af:96: 29:44:b6:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEh/b1q046zFUJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZjQxYWY5OTQtMmFkMS00NDIyLTg4OTMtZmY2NTZjOGJlMWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwZWlxMS3Sp6AvSaY6xItLKiyFqEzc7K1KAB WCC0A5qkhXA+EkTLLlVWNltR6YJTM8HNYFvx0WkH6B3kty0OjmcqcLa3fSQG9MUX gc0pWMtr2t63IwrQ6ROTKkyTBb0PoEYlp+schMqw5IEiVXFsW52jk+k7EBXkGuEC IddIgjRxoN5Yj+WVGk3kBkIr7wp07Uj9/RX84rQ+OixyoP2WBlZIybcm92nSRUJD iTgrq8YNWwzWZCwkohmRxI/saOVQDbZkIRZ9OI5s+dr7xpFlnmmkTB837blL2W9/ 69i8WPBDKD9acgvFZYZaofZIXr3PCZICViQ5+DHgZJpD4gL6gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMLyguY7YVFpUJ6nCWs0sLwfAw1lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZWFlYmJlZGUtNmNjOS0z NjI5LThlOGMtNmI1ZTBlZmM0MmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi3cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL0bG//QHiTLOxt3bZvpAuCtBsR5TzjzR1AjU7ZM/s8ShWs3w8EI0ocx 8x7f//l0z1p2EKaNeyB3Ufg96GDmBhTsGP9A51ym+/QDEj44xOf3yDI2/FFy1s2H D0DTaETcCJXPZ8YKgL0eRlIEhtjrt1rV3WXRZLZ374Nql+hXb0YOpqxIpqYdi+J+ 3y3LPfuJMuRyMQLisfGU16fKw4dCFBz40TOgWLzjWjla0ND6gsXLrYyQorNyv6k0 lCaj8K/XZzPU9NzhkGfqGIZMqjtTtgoOIddc62JFC/F6e5jC+cYwUH38lSjYNTyI VgjyqIOiFaHE2gHtes/JMbmvlilEtoc= -----END CERTIFICATE-----Generated at Sat Jul 26 11:36:25 2025 by rpki-client