$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd352e4f-77cb-329b-ac71-fa2263a14092.roa File: dd352e4f-77cb-329b-ac71-fa2263a14092.roa (raw, json) Hash identifier: zp2HQHlxjpiBvRzwXv4IjqkU2Sd1WZIjH/1Zmp1R3kQ= Subject key identifier: FF:AA:3D:DF:00:B5:33:9B:34:DB:5C:A7:08:8A:92:80:2C:86:68:09 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFD33188E99CAD6AEE51D80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd352e4f-77cb-329b-ac71-fa2263a14092.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 33667 IP address blocks: 198.0.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fd:33:18:8e:99:ca:d6:ae:e5:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=7a1edc32-7f01-4dbc-9067-bcd61c55352d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:38:f7:ec:ef:24:b9:0c:ad:46:42:73:b7:31: f4:3a:54:5c:15:30:2e:1b:f9:9c:35:e0:f2:f2:83: 75:1b:e0:00:69:51:0e:aa:34:c4:cb:1d:bf:8a:7e: c8:90:49:67:5a:34:ab:01:b3:f6:7b:89:d9:b2:ea: 70:5b:e2:fa:28:1e:64:5d:9c:0c:b2:ea:7c:3b:da: 26:84:09:88:e6:b4:ca:8e:9b:c2:b4:04:97:74:78: cd:58:98:84:1c:d8:aa:b6:7d:59:15:6a:ff:3d:a7: 01:a0:3e:ff:6c:8e:b0:83:8b:18:15:bd:40:33:70: ce:56:f7:e5:99:b6:ab:b5:14:73:a6:c4:7e:91:c8: 9d:d5:8d:01:f8:47:49:74:b0:cf:45:36:93:3c:13: 77:4e:8b:aa:1b:70:a9:ab:69:9f:ff:5b:00:bf:a9: 7b:e8:89:a3:58:e6:aa:f7:99:e2:e6:97:76:26:78: bb:13:f2:62:32:d5:b5:82:3e:4c:13:42:20:2f:95: b3:c3:bd:82:f2:52:a2:f2:d1:eb:8e:33:d5:ba:fc: 3a:46:58:cf:e4:16:cc:df:4b:ef:36:5c:72:0e:41: 41:f0:03:78:72:02:a7:87:ca:36:5f:af:d6:f4:c3: a2:84:36:7b:44:bf:30:a5:c5:c8:ae:ff:98:ec:46: 7d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:AA:3D:DF:00:B5:33:9B:34:DB:5C:A7:08:8A:92:80:2C:86:68:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd352e4f-77cb-329b-ac71-fa2263a14092.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 198.0.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:5f:41:48:02:12:51:bf:0b:d3:da:e5:c2:1d:9c:ec:e5:8e: 84:c9:69:6f:9f:d0:f6:b6:ed:42:78:c4:99:a5:8a:36:e2:df: 9e:f5:9d:6b:cf:9a:bc:5e:e4:23:48:10:ec:7c:03:aa:8b:26: b9:9e:6e:9b:b8:0a:27:62:ee:7b:21:cc:dd:3e:b3:67:04:55: 83:54:17:26:e2:f9:b8:3b:22:6b:31:d0:5d:92:53:e3:a9:cb: fb:f5:0c:56:42:87:31:56:36:a3:34:fb:7f:28:da:7b:b6:a2: a1:a3:30:d8:dc:4f:d1:ab:69:30:e4:32:37:be:c2:25:98:fa: 13:14:a9:bc:30:29:36:d1:cb:0b:a3:11:b9:5c:c9:50:b1:1b: b6:9f:19:3c:80:17:ac:4a:9f:bd:f2:39:27:dc:3c:d9:08:e5: ae:f1:06:c7:91:f4:fc:2b:25:c5:6e:3b:d4:f3:5d:41:1d:41: 41:8b:84:cc:f8:a6:09:f1:96:b6:dc:d2:af:3d:61:51:cf:dc: ff:0d:e6:33:df:a4:a6:ca:9c:aa:a9:95:18:fe:9d:49:f4:df: 69:3b:9e:ab:03:0f:23:53:bc:b3:9b:9d:a4:a1:0f:3c:32:02: 54:a1:7f:ec:84:03:7d:35:fc:59:46:b6:c9:0d:c3:f1:b0:a6: cc:d4:e9:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/TMYjpnK1q7lHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk N2ExZWRjMzItN2YwMS00ZGJjLTkwNjctYmNkNjFjNTUzNTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijj37O8kuQytRkJztzH0OlRcFTAuG/mcNeDy 8oN1G+AAaVEOqjTEyx2/in7IkElnWjSrAbP2e4nZsupwW+L6KB5kXZwMsup8O9om hAmI5rTKjpvCtASXdHjNWJiEHNiqtn1ZFWr/PacBoD7/bI6wg4sYFb1AM3DOVvfl mbartRRzpsR+kcid1Y0B+EdJdLDPRTaTPBN3TouqG3Cpq2mf/1sAv6l76ImjWOaq 95ni5pd2Jni7E/JiMtW1gj5ME0IgL5Wzw72C8lKi8tHrjjPVuvw6RljP5BbM30vv NlxyDkFB8AN4cgKnh8o2X6/W9MOihDZ7RL8wpcXIrv+Y7EZ9CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+qPd8AtTObNNtcpwiKkoAshmgJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGQzNTJlNGYtNzdjYi0z MjliLWFjNzEtZmEyMjYzYTE0MDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExgDgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5fQUgCElG/C9Pa5cIdnOzljoTJaW+f0Pa27UJ4xJmlijbi3571nWvP mrxe5CNIEOx8A6qLJrmebpu4Cidi7nshzN0+s2cEVYNUFybi+bg7Imsx0F2SU+Op y/v1DFZChzFWNqM0+38o2nu2oqGjMNjcT9GraTDkMje+wiWY+hMUqbwwKTbRywuj EblcyVCxG7afGTyAF6xKn73yOSfcPNkI5a7xBseR9PwrJcVuO9TzXUEdQUGLhMz4 pgnxlrbc0q89YVHP3P8N5jPfpKbKnKqplRj+nUn032k7nqsDDyNTvLObnaShDzwy AlShf+yEA301/FlGtskNw/GwpszU6dc= -----END CERTIFICATE-----Generated at Sun Jul 20 17:43:26 2025 by rpki-client