$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/a8b89a81-efd7-3c03-9f7a-77ce8e997e84.roa File: a8b89a81-efd7-3c03-9f7a-77ce8e997e84.roa (raw, json) Hash identifier: 5qOKzA8o3xXVFDWlpbhC80PWlp/VoqG313mruNuLcM4= Subject key identifier: 1A:24:A0:55:C3:34:14:A2:1E:C4:E9:56:D9:1C:4D:FD:E3:67:4E:A1 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584A7BB0B7ED1BD1161C088AAF00 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/a8b89a81-efd7-3c03-9f7a-77ce8e997e84.roa Signing time: Fri 11 Jul 2025 13:01:05 +0000 ROA not before: Fri 11 Jul 2025 13:01:05 +0000 ROA not after: Thu 09 Oct 2025 13:01:05 +0000 asID: 137443 IP address blocks: 107.151.244.0/22 maxlen: 24 198.44.170.0/24 maxlen: 24 198.44.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7b:b0:b7:ed:1b:d1:16:1c:08:8a:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Jul 11 13:01:05 2025 GMT Not After : Oct 9 13:01:05 2025 GMT Subject: CN=08a69262-f1f8-4f52-871a-7ef7bd3f5f0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:55:ba:c4:01:88:38:de:78:38:6a:3a:93:a5: ed:0e:f0:c8:73:ca:ab:8f:c6:4a:a0:82:d4:49:0c: 40:bd:67:9d:60:34:10:00:71:d6:cd:f9:d3:ea:44: d8:69:ae:27:ec:29:86:bf:61:e2:77:aa:16:98:f5: d7:ba:1a:a4:3a:55:ea:58:e7:d3:90:49:2d:ab:31: 20:42:c5:a8:68:e1:63:5e:d0:e8:c3:f9:ec:c7:d3: 37:1a:5f:a4:0f:1c:7e:bc:18:13:9f:7c:c6:0a:13: 5c:0f:24:85:06:51:30:f4:0f:2a:5e:0a:d7:c9:45: 53:49:64:67:d2:88:aa:ec:61:34:ce:84:82:91:a2: 50:24:87:6d:28:51:b0:34:73:10:ac:78:54:02:aa: bc:f7:bb:ba:86:a1:8b:fe:49:f9:dc:a7:f5:b3:49: 6d:fe:da:75:ca:75:47:43:ec:46:b3:1c:6f:29:54: b3:38:81:45:ce:12:22:ca:4b:ac:54:d1:eb:5d:70: 73:a6:f9:f7:6f:51:d0:a0:99:9c:36:27:dd:81:b8: 8f:c7:d2:ea:0b:69:d8:56:72:74:99:fe:de:39:a8: 23:6b:ba:45:48:66:38:59:3a:b2:b4:b7:0f:95:eb: a5:34:23:48:c0:02:79:84:a2:ee:8e:38:69:ed:e3: 9f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:24:A0:55:C3:34:14:A2:1E:C4:E9:56:D9:1C:4D:FD:E3:67:4E:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/a8b89a81-efd7-3c03-9f7a-77ce8e997e84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 107.151.244.0/22 198.44.170.0/24 198.44.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:d7:d0:8b:bd:87:e0:ce:5e:f7:56:33:5d:0b:78:bf:75:2d: c3:6e:a1:54:d7:00:72:ea:6a:57:86:0c:7c:ba:8f:b1:68:c9: f0:ff:b4:7c:84:8e:38:11:91:ee:3e:82:16:fe:6a:ce:bc:09: 2f:84:7f:90:56:22:69:b6:7a:3a:78:ae:a6:ac:65:e3:48:4f: 61:73:e9:11:a3:12:ea:6e:87:5f:2e:bf:83:10:0e:c8:ea:e4: 2d:14:97:c2:ac:67:dc:5f:24:61:54:9b:a0:ca:d2:8a:17:90: de:3e:aa:6d:b8:3d:49:78:d3:5f:05:8a:08:da:0e:0b:5c:3e: 9d:53:e0:70:9f:f1:b8:44:31:a2:ea:5a:10:ac:94:c3:b9:52: 49:f4:ed:ca:bf:ff:1f:b8:70:25:19:65:9a:45:c2:22:a8:6f: ca:80:e5:88:14:76:04:f7:9e:3c:ee:df:7b:a6:33:94:67:e0: e4:90:de:81:a8:63:ef:49:cc:77:a3:b1:af:64:73:ac:a2:f9: 63:ee:c6:2b:3a:fb:fe:50:0b:6a:c5:43:ed:14:53:59:26:41: d1:9d:50:4d:00:2b:67:a8:02:6b:de:99:0c:71:51:00:7d:a8: 2b:f0:dc:10:61:fd:2a:b9:bd:f6:8e:46:a6:41:ee:1f:dd:f9: c0:61:9d:7d -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEp7sLftG9EWHAiKrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI1MDcxMTEzMDEwNVoXDTI1MTAwOTEzMDEwNVowLzEtMCsGA1UEAxMk MDhhNjkyNjItZjFmOC00ZjUyLTg3MWEtN2VmN2JkM2Y1ZjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFW6xAGION54OGo6k6XtDvDIc8qrj8ZKoILU SQxAvWedYDQQAHHWzfnT6kTYaa4n7CmGv2Hid6oWmPXXuhqkOlXqWOfTkEktqzEg QsWoaOFjXtDow/nsx9M3Gl+kDxx+vBgTn3zGChNcDySFBlEw9A8qXgrXyUVTSWRn 0oiq7GE0zoSCkaJQJIdtKFGwNHMQrHhUAqq897u6hqGL/kn53Kf1s0lt/tp1ynVH Q+xGsxxvKVSzOIFFzhIiykusVNHrXXBzpvn3b1HQoJmcNifdgbiPx9LqC2nYVnJ0 mf7eOagja7pFSGY4WTqytLcPleulNCNIwAJ5hKLujjhp7eOfTQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFBokoFXDNBSiHsTpVtkcTf3jZ06hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvYThiODlhODEtZWZkNy0z YzAzLTlmN2EtNzdjZThlOTk3ZTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCa5f0AwQA xiyqAwQCxiywMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAD3X0Iu9h+DOXvdWM10LeL91LcNuoVTXAHLqaleG DHy6j7FoyfD/tHyEjjgRke4+ghb+as68CS+Ef5BWImm2ejp4rqasZeNIT2Fz6RGj Eupuh18uv4MQDsjq5C0Ul8KsZ9xfJGFUm6DK0ooXkN4+qm24PUl4018FigjaDgtc Pp1T4HCf8bhEMaLqWhCslMO5Ukn07cq//x+4cCUZZZpFwiKob8qA5YgUdgT3njzu 33umM5Rn4OSQ3oGoY+9JzHejsa9kc6yi+WPuxis6+/5QC2rFQ+0UU1kmQdGdUE0A K2eoAmvemQxxUQB9qCvw3BBh/Sq5vfaORqZB7h/d+cBhnX0= -----END CERTIFICATE-----Generated at Sun Jul 20 14:40:34 2025 by rpki-client