$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/7bcb89d8-1136-3ffa-9e26-585633a47d7c.roa File: 7bcb89d8-1136-3ffa-9e26-585633a47d7c.roa (raw, json) Hash identifier: z97GF5LXrbKqAnGeoxvFsWQKuyyAolM1j2tXbmf8QKo= Subject key identifier: 3D:09:37:72:B8:89:79:9F:DE:32:B0:0B:4F:58:04:01:AE:50:CF:D9 Certificate issuer: /CN=d2584a20-171d-406f-91e5-a70a19be13b8 Certificate serial: 010D0C9F4328584A5E60605E587733F9E90DA640 Authority key identifier: 56:7A:2E:3B:A3:B5:29:D6:1C:46:DF:5F:10:7D:3C:C0:8F:C3:13:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/7bcb89d8-1136-3ffa-9e26-585633a47d7c.roa Signing time: Tue 01 Jul 2025 01:00:50 +0000 ROA not before: Tue 01 Jul 2025 01:00:50 +0000 ROA not after: Mon 29 Sep 2025 01:00:50 +0000 asID: 36517 IP address blocks: 198.148.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/d2584a20-171d-406f-91e5-a70a19be13b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/d2584a20-171d-406f-91e5-a70a19be13b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:60:60:5e:58:77:33:f9:e9:0d:a6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2584a20-171d-406f-91e5-a70a19be13b8 Validity Not Before: Jul 1 01:00:50 2025 GMT Not After : Sep 29 01:00:50 2025 GMT Subject: CN=0f3c7034-496a-4f73-aba1-fbc6253b927b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:65:0d:64:8e:8d:0a:04:98:9a:ff:d9:5f:c1: d7:e4:e9:0c:81:c2:a4:7f:27:b4:6c:f9:b5:75:14: d4:5c:dd:ae:b3:49:54:06:0a:22:38:db:ba:25:ed: d2:b3:69:39:a6:02:7c:18:d2:2d:11:94:9b:ac:4e: 8b:fc:a6:a7:2d:02:e2:5c:e3:4e:25:81:8c:ba:60: f2:d3:a2:ad:dc:64:25:d1:4d:54:1b:af:79:fa:e2: 78:2c:dd:27:ac:78:36:7a:ed:d5:86:5f:35:6d:9f: dd:0e:57:37:37:24:7c:76:90:82:33:a5:c5:25:85: d5:75:3d:88:6f:73:f6:46:30:84:a8:d6:f7:77:df: 51:63:25:26:d1:3f:1f:37:c8:79:b7:3a:b5:e2:35: 9a:23:c4:52:16:db:b3:cc:db:a8:5a:0b:ed:f5:2d: 67:96:0e:bc:42:98:4e:03:ac:af:03:18:e1:81:11: d8:cb:4b:f6:25:5f:42:9c:99:2c:70:d7:e2:c5:c5: 57:61:f3:d2:b3:40:0f:3d:65:5c:cb:bd:66:e6:e9: d6:ad:eb:60:48:67:d9:b0:a9:7a:12:b9:31:8b:da: 58:79:41:53:d9:49:69:04:40:8b:02:8f:71:98:ac: f4:e0:5c:c6:cd:09:c6:96:4a:9c:e8:a4:44:12:e9: 41:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:09:37:72:B8:89:79:9F:DE:32:B0:0B:4F:58:04:01:AE:50:CF:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/7bcb89d8-1136-3ffa-9e26-585633a47d7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/d2584a20-171d-406f-91e5-a70a19be13b8.crl X509v3 Authority Key Identifier: keyid:56:7A:2E:3B:A3:B5:29:D6:1C:46:DF:5F:10:7D:3C:C0:8F:C3:13:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8.cer sbgp-ipAddrBlock: critical IPv4: 198.148.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:a4:08:3d:b2:c6:4f:07:ca:f1:08:dc:e2:89:4b:1d:3e:bd: 45:19:ca:ad:b4:43:46:2d:35:8f:99:e6:c8:bb:18:04:9e:7d: 73:56:46:18:de:a0:9d:c4:de:b7:35:7f:eb:d9:ce:c4:ee:b4: 89:ce:25:c8:22:3e:1c:f4:41:78:30:c8:5b:ad:7c:3d:10:9e: ac:93:44:08:f4:ec:fe:bb:07:b3:bf:be:26:b0:ea:b8:6f:31: 1b:07:5d:da:46:df:22:7c:94:82:a8:5c:7e:bc:80:29:b9:72: 8d:11:0a:83:de:a6:3d:02:fa:9b:be:12:59:4c:8c:1a:4b:53: 65:e0:35:c8:8b:6a:8f:31:a3:ff:9e:27:53:59:ec:6d:f1:c4: 7c:c3:91:c1:fe:de:73:49:b2:65:84:0b:38:6a:4c:a0:b6:24: d6:f4:ec:b7:d8:8f:fc:12:a1:a1:5e:37:c7:2b:c2:24:50:bb: 9c:c7:57:10:02:1a:5c:b0:4e:92:7a:9e:3e:0a:3e:a7:74:22: 89:b3:63:27:0f:ea:04:e7:15:7a:80:0d:57:8e:c3:d4:ec:1b: 40:0a:bb:4f:e6:6d:fb:0e:02:fe:f3:b2:b6:ab:94:85:c0:db: 60:35:87:fe:3f:db:e6:14:c3:6c:31:26:e0:3f:e7:d7:04:3d: 9e:94:cd:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpeYGBeWHcz+ekNpkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDI1ODRhMjAtMTcxZC00MDZmLTkxZTUtYTcwYTE5YmUx M2I4MB4XDTI1MDcwMTAxMDA1MFoXDTI1MDkyOTAxMDA1MFowLzEtMCsGA1UEAxMk MGYzYzcwMzQtNDk2YS00ZjczLWFiYTEtZmJjNjI1M2I5MjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWUNZI6NCgSYmv/ZX8HX5OkMgcKkfye0bPm1 dRTUXN2us0lUBgoiONu6Je3Ss2k5pgJ8GNItEZSbrE6L/KanLQLiXONOJYGMumDy 06Kt3GQl0U1UG695+uJ4LN0nrHg2eu3Vhl81bZ/dDlc3NyR8dpCCM6XFJYXVdT2I b3P2RjCEqNb3d99RYyUm0T8fN8h5tzq14jWaI8RSFtuzzNuoWgvt9S1nlg68QphO A6yvAxjhgRHYy0v2JV9CnJkscNfixcVXYfPSs0APPWVcy71m5unWretgSGfZsKl6 Erkxi9pYeUFT2UlpBECLAo9xmKz04FzGzQnGlkqc6KREEulBeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD0JN3K4iXmf3jKwC09YBAGuUM/ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kMjU4 NGEyMC0xNzFkLTQwNmYtOTFlNS1hNzBhMTliZTEzYjgvN2JjYjg5ZDgtMTEzNi0z ZmZhLTllMjYtNTg1NjMzYTQ3ZDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZDI1ODRhMjAtMTcxZC00MDZmLTkx ZTUtYTcwYTE5YmUxM2I4L2QyNTg0YTIwLTE3MWQtNDA2Zi05MWU1LWE3MGExOWJl MTNiOC5jcmwwHwYDVR0jBBgwFoAUVnouO6O1KdYcRt9fEH08wI/DEwswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9kMjU4NGEyMC0xNzFkLTQwNmYtOTFlNS1hNzBh MTliZTEzYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpSFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHakCD2yxk8HyvEI3OKJSx0+vUUZyq20Q0YtNY+Z5si7GASefXNWRhje oJ3E3rc1f+vZzsTutInOJcgiPhz0QXgwyFutfD0QnqyTRAj07P67B7O/viaw6rhv MRsHXdpG3yJ8lIKoXH68gCm5co0RCoPepj0C+pu+EllMjBpLU2XgNciLao8xo/+e J1NZ7G3xxHzDkcH+3nNJsmWECzhqTKC2JNb07LfYj/wSoaFeN8crwiRQu5zHVxAC GlywTpJ6nj4KPqd0IomzYycP6gTnFXqADVeOw9TsG0AKu0/mbfsOAv7zsrarlIXA 22A1h/4/2+YUw2wxJuA/59cEPZ6UzU0= -----END CERTIFICATE-----Generated at Mon Jul 7 23:28:27 2025 by rpki-client