$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/04c6241e-3a7e-3f9b-a51d-e9c20438ca03.roa File: 04c6241e-3a7e-3f9b-a51d-e9c20438ca03.roa (raw, json) Hash identifier: MZfhoXUqCSeHaCdIEvWdC8roBxanHyNyxW2C4VKZNfQ= Subject key identifier: E7:A0:C0:A4:58:0A:8A:2E:E7:1E:B4:25:81:68:1B:1C:7A:2C:A4:26 Certificate issuer: /CN=f78a234f-9553-446a-965d-0bfffa402f1b Certificate serial: 010D0C9F4328584AD3A115B8DE3BD397AFBF9E80 Authority key identifier: C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/04c6241e-3a7e-3f9b-a51d-e9c20438ca03.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 22925 IP address blocks: 198.207.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a1:15:b8:de:3b:d3:97:af:bf:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f78a234f-9553-446a-965d-0bfffa402f1b Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=cb59085c-fb3a-4495-92c7-868af993ffef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f8:11:e5:c5:31:d1:1d:43:02:82:92:99:02: 80:d1:da:d3:50:0e:03:eb:f2:ea:c1:d8:3f:53:ad: 48:b9:a0:d7:c1:f1:1c:ac:27:b5:73:eb:86:c6:a7: 71:62:82:45:d0:c4:be:61:5a:e7:dc:d6:fa:54:74: e3:f5:eb:c3:86:f4:b3:14:ac:0b:d2:e4:c3:4f:8d: 04:67:97:dd:c8:b6:71:0f:09:60:0d:53:d7:02:32: 10:7f:ed:c5:15:09:8c:df:95:fa:1e:f6:b9:d2:94: 5c:21:3e:34:9e:ff:37:6d:a8:f1:71:04:d9:8f:e5: cd:2c:d3:00:47:7c:1b:03:e0:bf:5b:a3:2f:08:51: 97:da:af:f2:af:d8:35:76:0c:58:37:1e:1d:9b:45: 02:31:9c:3c:99:c5:55:2f:fb:16:22:68:b1:63:3d: 1e:70:ee:98:6c:18:9d:59:60:6c:b2:52:d0:3b:52: 34:fd:67:bd:2d:b4:85:3d:a0:51:1a:51:a2:5d:87: 31:e5:3e:49:3a:24:2f:20:39:59:f8:73:98:40:f0: 37:38:09:d8:4f:90:dc:74:20:e5:08:25:bd:30:63: 09:f0:27:28:e2:9b:c7:14:24:e1:33:06:79:09:89: 29:1f:ad:7c:ca:b7:71:09:5e:a2:29:2b:c2:b5:f2: eb:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:A0:C0:A4:58:0A:8A:2E:E7:1E:B4:25:81:68:1B:1C:7A:2C:A4:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/04c6241e-3a7e-3f9b-a51d-e9c20438ca03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl X509v3 Authority Key Identifier: keyid:C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer sbgp-ipAddrBlock: critical IPv4: 198.207.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:5e:bb:0f:fa:ec:5d:11:8f:35:ec:3d:0e:7c:ee:77:8a:06: ee:77:b1:01:cd:91:44:df:38:84:fe:92:cc:1c:ac:5a:7f:cf: a0:98:e0:17:eb:8d:4e:17:c1:27:3f:55:8f:31:80:4a:10:68: b1:50:bf:00:55:25:f5:f8:04:ea:a8:3f:06:e6:a1:77:1c:54: c0:9b:83:a7:bb:4e:1b:77:44:5c:7c:e1:a2:0e:30:c3:25:62: 92:8e:93:f6:00:66:ba:2b:b4:c8:7c:86:44:a3:ef:8e:03:d0: 04:e9:02:15:d9:79:91:46:77:ff:ef:57:80:57:1d:93:41:da: d4:7e:b6:94:b7:84:c4:eb:7c:7a:42:7b:d0:fb:60:5c:5b:bb: d5:28:a3:d0:c2:05:4d:8c:31:03:25:c7:51:1a:bd:50:9c:55: 06:a2:63:b6:61:15:b3:76:9e:a4:1b:72:38:fe:e2:0d:09:54: 0f:c8:06:b0:ba:9b:d8:69:8b:ea:65:39:db:a9:2e:dd:e6:7c: 8f:5a:56:2e:f4:1b:28:5e:b1:7e:17:e5:48:8c:62:53:c9:d3: 7a:45:28:11:e1:c9:93:36:30:be:bd:20:40:c7:e3:f4:2c:2f: 77:d2:eb:22:f6:a8:95:43:90:49:c8:07:fb:ef:80:4b:4d:e6: 74:c1:71:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToRW43jvTl6+/noAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjc4YTIzNGYtOTU1My00NDZhLTk2NWQtMGJmZmZhNDAy ZjFiMB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk Y2I1OTA4NWMtZmIzYS00NDk1LTkyYzctODY4YWY5OTNmZmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfgR5cUx0R1DAoKSmQKA0drTUA4D6/Lqwdg/ U61IuaDXwfEcrCe1c+uGxqdxYoJF0MS+YVrn3Nb6VHTj9evDhvSzFKwL0uTDT40E Z5fdyLZxDwlgDVPXAjIQf+3FFQmM35X6Hva50pRcIT40nv83bajxcQTZj+XNLNMA R3wbA+C/W6MvCFGX2q/yr9g1dgxYNx4dm0UCMZw8mcVVL/sWImixYz0ecO6YbBid WWBsslLQO1I0/We9LbSFPaBRGlGiXYcx5T5JOiQvIDlZ+HOYQPA3OAnYT5DcdCDl CCW9MGMJ8Cco4pvHFCThMwZ5CYkpH618yrdxCV6iKSvCtfLr7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOegwKRYCoou5x60JYFoGxx6LKQmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNzhh MjM0Zi05NTUzLTQ0NmEtOTY1ZC0wYmZmZmE0MDJmMWIvMDRjNjI0MWUtM2E3ZS0z ZjliLWE1MWQtZTljMjA0MzhjYTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjc4YTIzNGYtOTU1My00NDZhLTk2 NWQtMGJmZmZhNDAyZjFiL2Y3OGEyMzRmLTk1NTMtNDQ2YS05NjVkLTBiZmZmYTQw MmYxYi5jcmwwHwYDVR0jBBgwFoAUySL1rL077bzOZt54JOhaPckKjtYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNzhhMjM0Zi05NTUzLTQ0NmEtOTY1ZC0wYmZm ZmE0MDJmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxs8YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5euw/67F0RjzXsPQ587neKBu53sQHNkUTfOIT+kswcrFp/z6CY4Bfr jU4XwSc/VY8xgEoQaLFQvwBVJfX4BOqoPwbmoXccVMCbg6e7Tht3RFx84aIOMMMl YpKOk/YAZrortMh8hkSj744D0ATpAhXZeZFGd//vV4BXHZNB2tR+tpS3hMTrfHpC e9D7YFxbu9Uoo9DCBU2MMQMlx1EavVCcVQaiY7ZhFbN2nqQbcjj+4g0JVA/IBrC6 m9hpi+plOdupLt3mfI9aVi70GyhesX4X5UiMYlPJ03pFKBHhyZM2ML69IEDH4/Qs L3fS6yL2qJVDkEnIB/vvgEtN5nTBcRM= -----END CERTIFICATE-----Generated at Wed Aug 20 23:05:42 2025 by rpki-client