$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f4febb62-7f4c-36b0-a1d2-2033ae5ff22f.roa File: f4febb62-7f4c-36b0-a1d2-2033ae5ff22f.roa (raw, json) Hash identifier: kH1JCoeMwcShVa5JiFPZhVdoQRGwD4bMC6M53HSIwPA= Subject key identifier: 9A:55:D3:52:FA:3A:84:A1:51:97:A4:99:9A:01:15:09:A2:95:A7:0D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84121DC3296D3234AAA7FB00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f4febb62-7f4c-36b0-a1d2-2033ae5ff22f.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 198.45.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:1d:c3:29:6d:32:34:aa:a7:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=a52c0bb1-06a6-4bd8-9294-bfab9d475f21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:57:98:6f:bc:f1:97:ae:22:23:d5:02:a6:3b: 13:a8:82:c9:09:c2:74:21:b1:84:6e:e3:46:df:43: b4:37:46:26:fe:ec:9f:95:22:e1:cb:01:94:41:30: 32:cf:34:45:98:66:cc:c6:ab:66:43:b2:6d:bf:72: 97:9f:16:9c:f5:ad:77:56:43:5d:4c:e6:3c:fb:ec: a2:b7:5a:97:00:20:66:39:da:0f:f5:5e:95:67:cd: b9:06:da:36:73:d5:f3:4d:d0:44:02:9a:88:80:df: e6:65:ea:1e:00:38:6a:db:71:a1:9b:61:39:10:ca: 06:46:a5:23:dc:c7:84:34:f4:24:41:72:2a:89:7d: 50:f1:b4:3a:d5:f9:10:7d:97:fe:ec:7b:f9:aa:05: 3f:5d:af:77:5f:eb:44:de:49:03:3b:90:8f:ee:e1: 32:fc:32:07:02:2e:82:22:39:7e:2e:06:88:98:cd: 23:1f:b3:37:c7:12:52:2e:ee:52:1b:fa:bf:61:7e: 64:b0:08:0f:2c:ab:31:28:32:99:02:75:66:28:14: b2:5b:92:5b:9e:9a:12:c0:16:5e:aa:8e:e3:4a:ef: 83:c8:81:b2:15:b0:49:09:a1:75:27:f1:0b:23:b2: e5:ec:e0:af:ef:e2:34:54:aa:26:e9:b3:0f:a7:da: fd:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:55:D3:52:FA:3A:84:A1:51:97:A4:99:9A:01:15:09:A2:95:A7:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f4febb62-7f4c-36b0-a1d2-2033ae5ff22f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:4b:25:60:37:8e:6a:03:68:c2:1b:a5:fa:26:d7:7e:a1:0b: 2f:e9:35:b3:17:ec:4a:b2:52:d5:e8:04:c2:c4:8f:fd:e3:80: 35:12:d8:95:51:a2:d9:bc:b3:68:a2:c5:ae:6b:32:dc:79:21: 62:33:45:1d:66:39:21:11:13:f2:3a:d9:3b:43:53:07:89:dd: 84:71:b8:c4:1d:e3:dd:03:e6:47:c9:91:f5:66:9a:47:bc:24: 02:5e:2a:63:a9:00:ff:d5:46:74:24:51:fd:d1:ac:02:56:27: 68:d6:2e:41:27:0a:e5:45:63:c3:8c:22:86:e7:30:00:27:04: 98:09:1f:66:ab:60:c9:ce:27:7e:52:0e:5f:e3:fe:03:68:3a: a8:cb:e1:5f:79:4d:ec:61:aa:00:6d:ee:79:67:ff:89:6a:54: ab:c0:5b:ab:a0:d6:88:ba:f9:70:bf:ae:b1:0c:cf:92:87:f4: c6:88:e1:6b:f5:1a:3e:ed:df:ec:ee:6d:36:b5:79:c4:37:e4: d0:93:f4:1f:24:be:4a:ae:10:f0:20:3e:c2:9a:31:8d:37:c7: 4b:f6:dd:7e:a1:83:01:09:29:5e:bc:94:81:4c:ac:03:4c:79: b4:fc:d9:a6:0a:1b:8b:19:27:c6:2a:00:a6:39:24:15:5f:d7: fb:ae:12:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEh3DKW0yNKqn+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YTUyYzBiYjEtMDZhNi00YmQ4LTkyOTQtYmZhYjlkNDc1ZjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1eYb7zxl64iI9UCpjsTqILJCcJ0IbGEbuNG 30O0N0Ym/uyflSLhywGUQTAyzzRFmGbMxqtmQ7Jtv3KXnxac9a13VkNdTOY8++yi t1qXACBmOdoP9V6VZ825Bto2c9XzTdBEApqIgN/mZeoeADhq23Ghm2E5EMoGRqUj 3MeENPQkQXIqiX1Q8bQ61fkQfZf+7Hv5qgU/Xa93X+tE3kkDO5CP7uEy/DIHAi6C Ijl+LgaImM0jH7M3xxJSLu5SG/q/YX5ksAgPLKsxKDKZAnVmKBSyW5JbnpoSwBZe qo7jSu+DyIGyFbBJCaF1J/ELI7Ll7OCv7+I0VKom6bMPp9r9xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJpV01L6OoShUZekmZoBFQmilacNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjRmZWJiNjItN2Y0Yy0z NmIwLWExZDItMjAzM2FlNWZmMjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi2EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENLJWA3jmoDaMIbpfom136hCy/pNbMX7EqyUtXoBMLEj/3jgDUS2JVR otm8s2iixa5rMtx5IWIzRR1mOSERE/I62TtDUweJ3YRxuMQd490D5kfJkfVmmke8 JAJeKmOpAP/VRnQkUf3RrAJWJ2jWLkEnCuVFY8OMIobnMAAnBJgJH2arYMnOJ35S Dl/j/gNoOqjL4V95TexhqgBt7nln/4lqVKvAW6ug1oi6+XC/rrEMz5KH9MaI4Wv1 Gj7t3+zubTa1ecQ35NCT9B8kvkquEPAgPsKaMY03x0v23X6hgwEJKV68lIFMrANM ebT82aYKG4sZJ8YqAKY5JBVf1/uuEj0= -----END CERTIFICATE-----Generated at Sat Jul 26 00:06:01 2025 by rpki-client