$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/bf27e851-a778-308c-b44c-dc1bb3990a3a.roa File: bf27e851-a778-308c-b44c-dc1bb3990a3a.roa (raw, json) Hash identifier: vUnVpdOJlHYKrolCZU23IDm/KDBIDG6aRE5Ff6c4H00= Subject key identifier: 9B:88:82:CE:02:9D:C9:AB:80:9B:1D:2F:44:C8:73:74:B3:B2:07:2A Certificate issuer: /CN=5d7f827b-f59c-40f4-83a5-cd0c4b16f42e Certificate serial: 010D0C9F4328584A8DD601CD4ED5364216F9FF80 Authority key identifier: D3:F5:EC:E0:5E:22:D9:CF:D6:34:82:88:FC:38:89:5F:E6:57:C2:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/bf27e851-a778-308c-b44c-dc1bb3990a3a.roa Signing time: Fri 18 Jul 2025 01:00:48 +0000 ROA not before: Fri 18 Jul 2025 01:00:48 +0000 ROA not after: Thu 16 Oct 2025 01:00:48 +0000 asID: 393806 IP address blocks: 198.184.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 03 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8d:d6:01:cd:4e:d5:36:42:16:f9:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d7f827b-f59c-40f4-83a5-cd0c4b16f42e Validity Not Before: Jul 18 01:00:48 2025 GMT Not After : Oct 16 01:00:48 2025 GMT Subject: CN=01443bd0-cbf5-4e13-9a2d-63b5ed192a20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5d:37:c5:f9:4c:20:fb:cd:ed:a7:f3:91:39: 88:84:78:e5:63:86:14:d7:09:df:9e:97:c5:30:74: a9:e9:96:35:14:c6:16:65:35:b1:1d:38:91:26:67: f9:8c:b3:ae:c0:dc:94:6f:4d:90:a1:07:26:7f:4a: b3:81:b2:26:f9:19:3e:e3:f1:43:15:f4:d5:3a:27: 40:b5:93:98:06:1d:0f:10:35:88:52:c0:eb:ae:17: a5:3c:0d:27:9d:c8:7b:92:c7:d2:e6:8c:fc:51:81: d7:0e:ee:7b:13:0a:0b:17:0d:09:2d:c9:16:3e:4e: 2e:44:6b:8e:79:e5:eb:d5:92:5c:14:61:22:e4:62: 99:e2:db:20:c8:63:9f:9a:4b:83:7b:3f:58:a8:b7: 39:18:48:ee:6f:3b:cd:ee:cb:b5:d7:0c:7e:33:6f: 76:ec:a1:f2:8c:d1:d8:65:b7:f8:2b:30:f2:8f:75: 1e:d0:f7:f2:c7:06:73:46:d4:41:10:b7:82:2a:06: 28:24:74:34:d1:4f:ad:fd:73:36:05:72:3f:b9:21: d9:27:3c:4f:56:49:e6:87:96:3e:87:90:dc:98:f7: 7b:eb:16:77:2c:98:8a:fe:f8:d2:4d:bc:d5:7d:19: 11:11:1d:33:b3:d4:bc:e5:1d:b2:81:d7:01:17:c3: 85:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:88:82:CE:02:9D:C9:AB:80:9B:1D:2F:44:C8:73:74:B3:B2:07:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/bf27e851-a778-308c-b44c-dc1bb3990a3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.crl X509v3 Authority Key Identifier: keyid:D3:F5:EC:E0:5E:22:D9:CF:D6:34:82:88:FC:38:89:5F:E6:57:C2:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.cer sbgp-ipAddrBlock: critical IPv4: 198.184.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:3d:9a:13:35:a7:de:08:ce:4a:d8:3b:06:84:84:db:7d:d6: eb:eb:73:b3:52:e7:06:17:14:19:30:68:34:77:c7:fb:fe:dd: 18:19:01:ad:87:97:73:3c:39:56:d9:36:be:c9:aa:d7:cd:c6: 4f:fc:1f:b6:79:f8:71:7c:a9:be:58:01:55:ec:71:ff:61:60: 7f:80:a4:5d:d3:ce:db:2c:db:2d:f3:57:34:7c:a5:cd:65:5b: db:3f:72:74:07:34:05:9e:02:3f:a1:6e:44:0d:b0:96:1b:45: ba:c3:eb:46:2e:8c:9e:8c:63:84:d2:b4:d0:31:75:18:47:97: 4e:d0:5c:6a:b6:d2:30:bd:95:ec:19:7c:19:56:8d:76:d8:f6: 0d:0b:83:aa:03:ea:74:fc:1d:b1:16:37:c3:c9:02:ab:ee:43: 9f:d6:41:46:86:59:4a:35:e4:3b:d1:66:c4:d4:9f:92:4b:24: 9c:24:9d:9a:02:10:84:83:d4:73:6e:04:f7:f3:d2:8f:0e:d6: 89:89:21:07:86:a9:7c:f0:f2:2c:ac:a9:9d:d7:27:f3:61:36: ac:d6:52:80:db:aa:81:6f:ab:7b:03:54:6d:00:25:f8:11:6e: f5:e8:77:5d:2c:71:d3:af:0c:50:6a:bb:c7:14:16:3d:94:4d: 18:67:82:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqN1gHNTtU2Qhb5/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ3ZjgyN2ItZjU5Yy00MGY0LTgzYTUtY2QwYzRiMTZm NDJlMB4XDTI1MDcxODAxMDA0OFoXDTI1MTAxNjAxMDA0OFowLzEtMCsGA1UEAxMk MDE0NDNiZDAtY2JmNS00ZTEzLTlhMmQtNjNiNWVkMTkyYTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq103xflMIPvN7afzkTmIhHjlY4YU1wnfnpfF MHSp6ZY1FMYWZTWxHTiRJmf5jLOuwNyUb02QoQcmf0qzgbIm+Rk+4/FDFfTVOidA tZOYBh0PEDWIUsDrrhelPA0nnch7ksfS5oz8UYHXDu57EwoLFw0JLckWPk4uRGuO eeXr1ZJcFGEi5GKZ4tsgyGOfmkuDez9YqLc5GEjubzvN7su11wx+M2927KHyjNHY Zbf4KzDyj3Ue0PfyxwZzRtRBELeCKgYoJHQ00U+t/XM2BXI/uSHZJzxPVknmh5Y+ h5DcmPd76xZ3LJiK/vjSTbzVfRkRER0zs9S85R2ygdcBF8OF/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJuIgs4CncmrgJsdL0TIc3SzsgcqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81ZDdm ODI3Yi1mNTljLTQwZjQtODNhNS1jZDBjNGIxNmY0MmUvYmYyN2U4NTEtYTc3OC0z MDhjLWI0NGMtZGMxYmIzOTkwYTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNWQ3ZjgyN2ItZjU5Yy00MGY0LTgz YTUtY2QwYzRiMTZmNDJlLzVkN2Y4MjdiLWY1OWMtNDBmNC04M2E1LWNkMGM0YjE2 ZjQyZS5jcmwwHwYDVR0jBBgwFoAU0/Xs4F4i2c/WNIKI/DiJX+ZXwhcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC81ZDdmODI3Yi1mNTljLTQwZjQtODNhNS1jZDBj NGIxNmY0MmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxriDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACs9mhM1p94IzkrYOwaEhNt91uvrc7NS5wYXFBkwaDR3x/v+3RgZAa2H l3M8OVbZNr7JqtfNxk/8H7Z5+HF8qb5YAVXscf9hYH+ApF3Tztss2y3zVzR8pc1l W9s/cnQHNAWeAj+hbkQNsJYbRbrD60YujJ6MY4TStNAxdRhHl07QXGq20jC9lewZ fBlWjXbY9g0Lg6oD6nT8HbEWN8PJAqvuQ5/WQUaGWUo15DvRZsTUn5JLJJwknZoC EISD1HNuBPfz0o8O1omJIQeGqXzw8iysqZ3XJ/NhNqzWUoDbqoFvq3sDVG0AJfgR bvXod10scdOvDFBqu8cUFj2UTRhngjs= -----END CERTIFICATE-----Generated at Sat Aug 2 05:22:50 2025 by rpki-client