$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/b34b4720-1cd8-3efd-b8ef-cbe859c2c468.roa File: b34b4720-1cd8-3efd-b8ef-cbe859c2c468.roa (raw, json) Hash identifier: fBkpdGkYesxXkS9lHQ35d6//1SuBb2iEWDkjHWFzxTg= Subject key identifier: 7F:B3:87:FE:4C:04:55:D0:24:18:AB:DC:DE:48:EC:29:EF:3A:C7:45 Certificate issuer: /CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc Certificate serial: 010D0C9F4328584B110C00ACD5D09DA14C9F4B00 Authority key identifier: D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/b34b4720-1cd8-3efd-b8ef-cbe859c2c468.roa Signing time: Wed 03 Sep 2025 01:00:33 +0000 ROA not before: Wed 03 Sep 2025 01:00:33 +0000 ROA not after: Tue 02 Dec 2025 02:00:33 +0000 asID: 19551 IP address blocks: 198.37.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:11:0c:00:ac:d5:d0:9d:a1:4c:9f:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc Validity Not Before: Sep 3 01:00:33 2025 GMT Not After : Dec 2 02:00:33 2025 GMT Subject: CN=19ab922a-2430-4848-a276-c94b9c74cbe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c0:55:f0:7d:37:a6:28:01:82:10:e0:9b:0d: 8a:4f:81:39:9a:12:9d:d3:4c:da:cd:74:52:ff:60: 03:d8:8b:1e:95:2a:a5:e2:e9:8f:1c:4b:5a:38:f4: b8:bc:1e:cb:14:58:12:5a:cb:ec:cc:ca:10:42:4c: 8a:be:e1:28:85:39:35:78:7d:42:b8:0e:4e:d1:6f: 00:99:92:f4:f7:d4:c4:3b:f5:46:c1:f8:2a:9f:11: 6f:d7:cf:ab:10:94:a8:5c:73:6d:75:68:27:53:90: 2f:0d:7b:35:c4:40:0a:a1:e8:df:5c:dc:d3:a1:53: aa:c5:8a:96:b3:af:bf:50:7d:90:78:3a:91:d7:1c: 61:e7:29:74:bf:e8:fa:fc:8b:9f:64:12:3e:a4:8c: f8:d5:e5:f0:ad:a7:1f:88:4d:5c:40:7f:24:24:4c: 1b:90:49:a8:1f:fb:20:92:84:31:08:56:82:ad:49: 6c:74:05:0e:1d:41:b0:0a:fb:c8:9f:a6:d5:75:ec: f7:65:65:70:7b:57:32:50:0f:82:87:cc:b3:e0:0b: b6:ab:cc:61:e5:cf:55:f1:08:90:ad:57:ec:c1:b6: 64:be:00:08:f9:c7:cc:fc:10:09:64:c8:a7:06:87: 0a:76:bc:51:5b:ac:65:2f:fe:a6:41:91:e5:77:3a: a5:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:B3:87:FE:4C:04:55:D0:24:18:AB:DC:DE:48:EC:29:EF:3A:C7:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/b34b4720-1cd8-3efd-b8ef-cbe859c2c468.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl X509v3 Authority Key Identifier: keyid:D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer sbgp-ipAddrBlock: critical IPv4: 198.37.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:2b:0c:33:80:e2:ba:0e:57:84:91:4b:72:fd:1a:d8:74:8d: cd:59:f6:d7:c5:75:c1:dc:6a:0c:ce:01:5f:35:a7:41:26:2a: 52:fa:c7:11:64:de:13:a7:1d:88:2c:35:3a:fe:da:3f:de:cc: 1e:f3:3f:4d:27:27:94:d8:60:00:8a:4c:5c:c9:99:1d:4e:bf: fa:d0:ba:81:c9:85:bf:37:a5:8c:64:c9:6b:e5:ef:bd:9a:e1: aa:a4:0b:b8:53:1e:f1:0f:87:9f:92:d6:f2:20:a4:14:a0:8f: 7f:6c:72:88:55:a6:4e:67:bc:8d:be:85:b9:5f:62:af:6a:1f: 39:43:df:07:a5:42:1f:5e:95:55:39:0c:fd:87:81:16:a0:02: 2c:88:01:ca:04:4d:60:1f:cb:0f:09:41:0c:7e:dd:50:8c:73: 5b:ea:64:eb:a8:05:69:82:94:ba:5e:34:a7:64:45:75:ca:6a: 61:c9:91:38:31:79:4c:a9:b7:65:be:9d:1f:63:7c:9a:ab:ff: c7:42:ed:96:26:5c:a4:ca:34:5f:27:dc:0c:bf:a5:88:0e:06: 21:36:39:7e:64:42:c3:de:d8:f2:7d:b6:00:cd:0f:c7:09:5e: ba:c1:e3:69:9d:26:6d:98:84:e0:93:3b:10:f9:98:57:05:8c: cf:50:1d:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsRDACs1dCdoUyfSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJkZmJjMjAtYjQ4ZC00YWQzLTlhZGEtYWFhMWE4ODU3 MGRjMB4XDTI1MDkwMzAxMDAzM1oXDTI1MTIwMjAyMDAzM1owLzEtMCsGA1UEAxMk MTlhYjkyMmEtMjQzMC00ODQ4LWEyNzYtYzk0YjljNzRjYmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcBV8H03pigBghDgmw2KT4E5mhKd00zazXRS /2AD2IselSql4umPHEtaOPS4vB7LFFgSWsvszMoQQkyKvuEohTk1eH1CuA5O0W8A mZL099TEO/VGwfgqnxFv18+rEJSoXHNtdWgnU5AvDXs1xEAKoejfXNzToVOqxYqW s6+/UH2QeDqR1xxh5yl0v+j6/IufZBI+pIz41eXwracfiE1cQH8kJEwbkEmoH/sg koQxCFaCrUlsdAUOHUGwCvvIn6bVdez3ZWVwe1cyUA+Ch8yz4Au2q8xh5c9V8QiQ rVfswbZkvgAI+cfM/BAJZMinBocKdrxRW6xlL/6mQZHldzql/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH+zh/5MBFXQJBir3N5I7CnvOsdFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yMmRm YmMyMC1iNDhkLTRhZDMtOWFkYS1hYWExYTg4NTcwZGMvYjM0YjQ3MjAtMWNkOC0z ZWZkLWI4ZWYtY2JlODU5YzJjNDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjJkZmJjMjAtYjQ4ZC00YWQzLTlh ZGEtYWFhMWE4ODU3MGRjLzIyZGZiYzIwLWI0OGQtNGFkMy05YWRhLWFhYTFhODg1 NzBkYy5jcmwwHwYDVR0jBBgwFoAU1CRpq+RlUcheIrjvsqe6UvFiZYAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yMmRmYmMyMC1iNDhkLTRhZDMtOWFkYS1hYWEx YTg4NTcwZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxiU5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4rDDOA4roOV4SRS3L9Gth0jc1Z9tfFdcHcagzOAV81p0EmKlL6xxFk 3hOnHYgsNTr+2j/ezB7zP00nJ5TYYACKTFzJmR1Ov/rQuoHJhb83pYxkyWvl772a 4aqkC7hTHvEPh5+S1vIgpBSgj39scohVpk5nvI2+hblfYq9qHzlD3welQh9elVU5 DP2HgRagAiyIAcoETWAfyw8JQQx+3VCMc1vqZOuoBWmClLpeNKdkRXXKamHJkTgx eUypt2W+nR9jfJqr/8dC7ZYmXKTKNF8n3Ay/pYgOBiE2OX5kQsPe2PJ9tgDND8cJ XrrB42mdJm2YhOCTOxD5mFcFjM9QHZQ= -----END CERTIFICATE-----Generated at Sat Sep 6 13:34:40 2025 by rpki-client