$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/33b25462-3f2f-33b4-ab16-bb27bccd452c.roa File: 33b25462-3f2f-33b4-ab16-bb27bccd452c.roa (raw, json) Hash identifier: jH07+lCbWnoKtBKXI/OaqzZH15DPlJxkD3cLP8KR330= Subject key identifier: 5F:EA:25:4D:32:5A:24:E3:62:78:68:C8:B8:8E:F3:CB:69:9C:B9:D0 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584A8410DC2ACB616D7C72E79E40 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/33b25462-3f2f-33b4-ab16-bb27bccd452c.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 21949 IP address blocks: 198.22.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 02 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:dc:2a:cb:61:6d:7c:72:e7:9e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=91a476e4-84fe-4bd3-add1-a877a624484f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:33:d9:01:0c:f6:35:79:21:5a:b1:9a:71:bf: 3c:be:cf:5c:d4:01:a4:60:f8:50:fc:c6:74:41:e1: b1:99:d6:07:16:32:7d:07:10:ca:c3:3b:cb:88:2c: ee:22:3b:d8:5b:dc:57:6b:7e:fa:b3:e9:ef:9d:8a: b6:99:a1:5b:6d:3f:bd:f0:64:29:cc:14:4a:52:7b: f1:2c:65:3b:6d:4e:e4:9c:ff:62:b7:bc:fc:99:83: 09:c4:8e:0c:3e:90:47:87:db:a7:2e:c0:a4:7a:cb: 37:0d:7c:e7:f3:20:30:91:97:b4:7b:e3:a9:10:4b: 97:38:5e:a0:0d:3f:95:e8:53:85:5d:69:be:59:b3: 81:2a:79:40:a7:12:fc:e7:e3:01:17:5c:d5:10:26: 31:c9:ed:2a:a8:d8:ca:fa:62:c5:a8:be:01:13:42: 7d:49:d5:b2:1d:15:f6:d0:72:45:fc:de:8d:ae:ff: 81:ae:83:fc:71:e4:3e:b1:e4:4e:a3:36:c0:f5:8c: bc:90:b6:a3:b2:79:4a:ed:67:bd:31:c6:95:33:5c: 4f:b0:79:7a:97:6e:58:7e:54:2d:f4:8d:2b:4f:58: af:2d:5d:ce:52:a3:26:61:d8:61:f4:e1:f2:6c:06: 11:48:a7:44:23:54:1d:6b:77:fa:97:16:8c:6c:e3: 21:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:EA:25:4D:32:5A:24:E3:62:78:68:C8:B8:8E:F3:CB:69:9C:B9:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/33b25462-3f2f-33b4-ab16-bb27bccd452c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 198.22.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:15:a7:e1:07:fa:aa:1f:24:d5:02:eb:c9:3f:63:a5:c2:25: 7e:18:5e:d1:14:e2:1a:8c:54:f6:7b:7e:73:f2:d7:b5:1c:38: 1c:79:d0:37:aa:b1:b1:c9:87:96:ab:49:a2:73:bb:97:33:d3: 91:57:7c:95:f9:43:fd:44:b8:84:3b:b7:7a:ef:4d:2a:74:d7: 78:6d:17:e9:a5:4e:9f:05:d6:0d:12:6e:36:58:22:b4:3b:c0: f6:df:61:79:45:04:d0:6b:f3:2f:af:76:15:cb:c7:9a:a1:2b: 0c:ee:1c:93:6d:5f:d2:af:65:c5:3b:bc:41:3d:97:17:cc:bd: 85:7e:fa:66:26:10:b7:2b:9e:4b:ba:20:d2:8c:83:2c:dc:54: 3c:85:ae:79:f9:7a:ba:08:58:70:d1:22:2f:4d:81:95:82:c9: c8:77:37:43:af:26:2c:45:f5:5c:7d:c8:07:5d:ff:c4:42:27: d2:72:89:69:a8:74:00:93:cc:74:34:4a:a1:56:58:b6:af:fe: 0a:d4:60:9a:58:a2:1e:5c:5b:fb:2f:64:da:4b:ed:5c:02:8d: 4b:d5:a7:a5:50:e7:62:16:48:95:3c:8f:3f:40:f3:c3:46:1f: cd:cc:32:a3:16:8b:db:0e:37:f4:4b:d1:d1:ad:b3:0c:38:82: 51:12:cf:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEENwqy2FtfHLnnkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk OTFhNDc2ZTQtODRmZS00YmQzLWFkZDEtYTg3N2E2MjQ0ODRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDPZAQz2NXkhWrGacb88vs9c1AGkYPhQ/MZ0 QeGxmdYHFjJ9BxDKwzvLiCzuIjvYW9xXa376s+nvnYq2maFbbT+98GQpzBRKUnvx LGU7bU7knP9it7z8mYMJxI4MPpBHh9unLsCkess3DXzn8yAwkZe0e+OpEEuXOF6g DT+V6FOFXWm+WbOBKnlApxL85+MBF1zVECYxye0qqNjK+mLFqL4BE0J9SdWyHRX2 0HJF/N6Nrv+BroP8ceQ+seROozbA9Yy8kLajsnlK7We9McaVM1xPsHl6l25YflQt 9I0rT1ivLV3OUqMmYdhh9OHybAYRSKdEI1Qda3f6lxaMbOMhKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF/qJU0yWiTjYnhoyLiO88tpnLnQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvMzNiMjU0NjItM2YyZi0z M2I0LWFiMTYtYmIyN2JjY2Q0NTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhbhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEsVp+EH+qofJNUC68k/Y6XCJX4YXtEU4hqMVPZ7fnPy17UcOBx50Deq sbHJh5arSaJzu5cz05FXfJX5Q/1EuIQ7t3rvTSp013htF+mlTp8F1g0SbjZYIrQ7 wPbfYXlFBNBr8y+vdhXLx5qhKwzuHJNtX9KvZcU7vEE9lxfMvYV++mYmELcrnku6 INKMgyzcVDyFrnn5eroIWHDRIi9NgZWCych3N0OvJixF9Vx9yAdd/8RCJ9JyiWmo dACTzHQ0SqFWWLav/grUYJpYoh5cW/svZNpL7VwCjUvVp6VQ52IWSJU8jz9A88NG H83MMqMWi9sON/RL0dGtsww4glESz/E= -----END CERTIFICATE-----Generated at Thu Jul 31 14:58:57 2025 by rpki-client