$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fa947067-332a-302c-90e6-a9f60107ae87.roa File: fa947067-332a-302c-90e6-a9f60107ae87.roa (raw, json) Hash identifier: tzF1V6hiA+I1cNnUgSd/pVt6+TmkJ994zopi0mvjmUM= Subject key identifier: 4E:5C:6C:03:6C:1D:62:35:8A:BE:A4:98:C0:77:6C:6A:F5:05:02:9B Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84121E6D6110C6896D725100 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fa947067-332a-302c-90e6-a9f60107ae87.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 198.45.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:1e:6d:61:10:c6:89:6d:72:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=7d6736c3-66de-4d96-99d2-d69197bf9c13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ea:3b:66:f3:1f:48:40:8a:34:f4:88:dd:0c: e8:76:fd:28:bc:b2:81:0a:b7:a8:23:fa:12:cd:19: 7b:4e:b8:74:3b:66:e9:54:73:b9:68:24:a8:8a:6a: 18:38:5d:c6:17:b4:d2:6c:5f:b1:db:5e:1d:55:b7: 0e:b3:93:93:95:dd:9c:c2:c3:ed:90:73:3d:7d:0d: 33:80:c1:e3:8a:5e:c6:6d:bc:85:4e:7c:eb:a2:71: 2f:3e:9e:c6:98:03:80:94:67:a8:ec:f0:f2:df:f5: b9:ce:03:50:82:07:c9:9d:c2:30:9d:07:90:ee:59: 2e:a3:96:81:b8:dc:27:8c:32:93:10:90:36:ef:2a: 8f:c8:59:65:4e:16:91:ab:f6:44:86:97:dd:5d:9e: f0:59:37:d0:7e:79:3f:84:0b:9c:9c:a5:e2:c8:be: a1:36:b6:94:e4:7b:89:e7:27:6c:75:96:f0:ea:5c: 17:e6:cb:9c:05:3e:95:c6:99:3d:fc:4c:97:2b:b3: 8e:ba:b5:50:a8:ad:ba:1f:26:80:0c:da:ad:85:79: f3:f4:3c:ee:d2:7f:f8:1a:98:f9:c0:e9:c3:31:a3: 3d:d6:c7:50:8d:21:1b:1e:90:17:25:aa:79:f6:34: 34:b3:68:34:c8:81:f5:66:f8:9c:e4:2e:ab:de:b4: 79:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:5C:6C:03:6C:1D:62:35:8A:BE:A4:98:C0:77:6C:6A:F5:05:02:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fa947067-332a-302c-90e6-a9f60107ae87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:9f:15:a7:a4:e7:27:b1:ed:3e:65:76:94:4f:39:8a:81:80: fb:e6:8b:8a:6f:32:98:0e:61:f1:88:04:c0:57:eb:1b:6b:04: f6:fe:a4:be:ae:57:73:96:e6:05:e5:18:fb:03:89:c6:2a:eb: 4e:96:4d:c3:fc:3e:63:5e:4e:36:38:30:be:3f:56:aa:5d:4d: 49:b3:4a:bc:e4:fe:66:11:2b:ab:aa:e5:5d:46:34:8c:e7:12: 72:ef:07:2b:bd:ba:89:3f:37:73:6e:89:32:17:8d:46:69:19: f6:2d:dc:e0:54:f4:5e:9d:c4:a6:19:55:32:88:d3:17:2d:e1: a4:02:33:c8:5d:d6:c3:98:06:3e:48:a7:94:45:e6:b8:f6:71: 6e:8e:9a:66:a7:38:1d:3a:da:94:82:23:95:fb:c7:d0:df:d5: 90:44:e5:5f:42:9c:d3:d6:a1:9c:d6:49:a6:2c:5d:2a:8c:14: f6:66:7f:8c:eb:45:62:cb:ca:51:a5:8e:8c:1d:45:64:a2:66: a1:09:9a:ef:1a:3a:b7:4f:92:59:ca:e5:d0:04:e0:77:ef:fb: 3b:c0:e1:25:dd:f0:63:45:7d:47:34:27:54:c1:21:e6:4a:37: 7c:10:64:66:3f:3c:2d:7f:10:68:f5:30:64:c5:74:95:46:35: 93:04:e1:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEh5tYRDGiW1yUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk N2Q2NzM2YzMtNjZkZS00ZDk2LTk5ZDItZDY5MTk3YmY5YzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeo7ZvMfSECKNPSI3Qzodv0ovLKBCreoI/oS zRl7Trh0O2bpVHO5aCSoimoYOF3GF7TSbF+x214dVbcOs5OTld2cwsPtkHM9fQ0z gMHjil7GbbyFTnzronEvPp7GmAOAlGeo7PDy3/W5zgNQggfJncIwnQeQ7lkuo5aB uNwnjDKTEJA27yqPyFllThaRq/ZEhpfdXZ7wWTfQfnk/hAucnKXiyL6hNraU5HuJ 5ydsdZbw6lwX5sucBT6Vxpk9/EyXK7OOurVQqK26HyaADNqthXnz9Dzu0n/4Gpj5 wOnDMaM91sdQjSEbHpAXJap59jQ0s2g0yIH1Zvic5C6r3rR5ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE5cbANsHWI1ir6kmMB3bGr1BQKbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZmE5NDcwNjctMzMyYS0z MDJjLTkwZTYtYTlmNjAxMDdhZTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi2eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALifFaek5yex7T5ldpRPOYqBgPvmi4pvMpgOYfGIBMBX6xtrBPb+pL6u V3OW5gXlGPsDicYq606WTcP8PmNeTjY4ML4/VqpdTUmzSrzk/mYRK6uq5V1GNIzn EnLvByu9uok/N3NuiTIXjUZpGfYt3OBU9F6dxKYZVTKI0xct4aQCM8hd1sOYBj5I p5RF5rj2cW6OmmanOB062pSCI5X7x9Df1ZBE5V9CnNPWoZzWSaYsXSqMFPZmf4zr RWLLylGljowdRWSiZqEJmu8aOrdPklnK5dAE4Hfv+zvA4SXd8GNFfUc0J1TBIeZK N3wQZGY/PC1/EGj1MGTFdJVGNZME4eQ= -----END CERTIFICATE-----Generated at Sat Jul 26 00:13:29 2025 by rpki-client