$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/4049b2cc-3517-376c-bb5b-5b5249957e1e.roa File: 4049b2cc-3517-376c-bb5b-5b5249957e1e.roa (raw, json) Hash identifier: 7+ONbCoJqmGUSQ6G0xvaZKufEnVXb115NVvU42aL11Q= Subject key identifier: EE:98:8A:15:34:0F:6C:0B:9F:CA:75:C9:41:B4:25:CC:16:7D:F7:54 Certificate issuer: /CN=2d00478e-6a9e-4570-970a-f0a5baefc323 Certificate serial: 010D0C9F4328584B2FC1976611873D8C88BED020 Authority key identifier: 43:02:31:2F:E6:67:48:11:3A:0F:60:A4:03:91:D9:D5:01:66:40:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/4049b2cc-3517-376c-bb5b-5b5249957e1e.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 7850 IP address blocks: 198.187.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:97:66:11:87:3d:8c:88:be:d0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d00478e-6a9e-4570-970a-f0a5baefc323 Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=18b93363-acba-4ae1-a381-45c9fee8a58e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:35:6f:d5:d4:f5:93:d8:12:97:b7:8f:71:35: 16:27:fe:8c:ec:c6:a3:06:b8:bc:f7:b9:57:b1:dd: 65:71:12:af:84:c2:57:7a:6a:84:6a:fc:10:3b:af: e8:2e:db:24:d2:99:71:80:15:62:d8:ea:5f:20:11: 2a:4a:8f:25:59:96:d6:1e:1e:1b:57:ae:5e:02:fc: 2d:9a:27:fb:7d:4b:ff:30:56:f8:aa:c3:27:a0:59: 33:ae:f7:dc:14:e4:b7:3e:a2:95:a1:ac:e6:23:3a: 75:89:de:9b:4e:73:1a:06:12:03:1e:7a:c2:32:4e: 4f:74:ce:7d:dd:b6:2d:cb:2b:be:c9:c5:00:cd:fe: b2:47:bd:2d:e5:31:bd:45:91:62:15:0c:12:15:c7: 6a:45:93:22:36:6b:48:05:8a:45:c4:33:c7:79:bc: c6:91:91:77:01:71:78:f1:ec:7e:90:62:f6:46:89: a3:0f:c1:85:e5:0b:13:f0:47:f4:05:09:b9:da:78: e7:89:b2:8c:3c:95:1b:d0:51:64:d2:fc:c9:ae:dd: 5b:24:10:c0:f0:5f:b0:75:6e:46:af:23:7a:d5:a7: c6:4d:c4:7c:c5:6d:1b:63:fd:d8:58:98:79:48:ed: 5a:7a:30:92:dd:d9:a6:14:25:57:31:7b:56:69:df: 4c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:98:8A:15:34:0F:6C:0B:9F:CA:75:C9:41:B4:25:CC:16:7D:F7:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/4049b2cc-3517-376c-bb5b-5b5249957e1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.crl X509v3 Authority Key Identifier: keyid:43:02:31:2F:E6:67:48:11:3A:0F:60:A4:03:91:D9:D5:01:66:40:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323.cer sbgp-ipAddrBlock: critical IPv4: 198.187.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:4b:44:e8:c0:9c:47:54:a3:54:1c:8d:ce:8a:bc:f0:31:e6: 72:a2:dd:b1:fd:4d:35:7e:30:e6:18:0e:75:66:ca:85:77:99: 30:0a:a4:e4:6e:12:43:3a:24:1b:7d:39:45:cf:37:c3:ee:c5: 7d:d9:67:0e:54:4a:38:b3:b9:93:ca:8e:f6:f6:7f:b5:e7:75: 76:cb:c5:02:99:2b:a9:7e:42:e0:41:40:08:50:17:88:34:91: 5f:cc:a0:4c:fd:a0:6b:83:ed:30:ad:e5:11:48:2a:47:07:ea: ab:86:72:31:25:40:93:ce:0b:96:da:20:84:7a:b7:34:18:55: aa:e9:85:07:03:d5:9f:bf:85:d8:6a:dd:ea:8d:ff:20:fb:0f: b2:86:cd:4b:71:ff:31:9e:2c:61:53:e3:a1:d0:16:c7:ca:0d: d7:eb:db:fa:b2:2b:85:c5:cb:26:48:36:a8:f8:7a:b9:52:7a: 92:2a:53:33:bb:2c:2f:77:10:c3:b4:99:8c:8d:c3:92:81:01: 39:5f:1b:88:2d:c1:d7:df:71:6d:61:c4:60:bb:f3:65:5c:4b: f9:0c:53:bc:2d:68:43:54:50:9a:26:8a:88:ff:ec:f7:a5:fa: 29:bc:e7:d3:14:55:0a:54:ec:68:28:48:23:8a:15:0c:cb:91: df:bb:5a:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsvwZdmEYc9jIi+0CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQwMDQ3OGUtNmE5ZS00NTcwLTk3MGEtZjBhNWJhZWZj MzIzMB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk MThiOTMzNjMtYWNiYS00YWUxLWEzODEtNDVjOWZlZThhNThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDVv1dT1k9gSl7ePcTUWJ/6M7MajBri897lX sd1lcRKvhMJXemqEavwQO6/oLtsk0plxgBVi2OpfIBEqSo8lWZbWHh4bV65eAvwt mif7fUv/MFb4qsMnoFkzrvfcFOS3PqKVoazmIzp1id6bTnMaBhIDHnrCMk5PdM59 3bYtyyu+ycUAzf6yR70t5TG9RZFiFQwSFcdqRZMiNmtIBYpFxDPHebzGkZF3AXF4 8ex+kGL2RomjD8GF5QsT8Ef0BQm52njnibKMPJUb0FFk0vzJrt1bJBDA8F+wdW5G ryN61afGTcR8xW0bY/3YWJh5SO1aejCS3dmmFCVXMXtWad9MAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO6YihU0D2wLn8p1yUG0JcwWffdUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZDAw NDc4ZS02YTllLTQ1NzAtOTcwYS1mMGE1YmFlZmMzMjMvNDA0OWIyY2MtMzUxNy0z NzZjLWJiNWItNWI1MjQ5OTU3ZTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmQwMDQ3OGUtNmE5ZS00NTcwLTk3 MGEtZjBhNWJhZWZjMzIzLzJkMDA0NzhlLTZhOWUtNDU3MC05NzBhLWYwYTViYWVm YzMyMy5jcmwwHwYDVR0jBBgwFoAUQwIxL+ZnSBE6D2CkA5HZ1QFmQPgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZDAwNDc4ZS02YTllLTQ1NzAtOTcwYS1mMGE1 YmFlZmMzMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxrv9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdLROjAnEdUo1Qcjc6KvPAx5nKi3bH9TTV+MOYYDnVmyoV3mTAKpORu EkM6JBt9OUXPN8PuxX3ZZw5USjizuZPKjvb2f7XndXbLxQKZK6l+QuBBQAhQF4g0 kV/MoEz9oGuD7TCt5RFIKkcH6quGcjElQJPOC5baIIR6tzQYVarphQcD1Z+/hdhq 3eqN/yD7D7KGzUtx/zGeLGFT46HQFsfKDdfr2/qyK4XFyyZINqj4erlSepIqUzO7 LC93EMO0mYyNw5KBATlfG4gtwdffcW1hxGC782VcS/kMU7wtaENUUJomioj/7Pel +im859MUVQpU7GgoSCOKFQzLkd+7Wgw= -----END CERTIFICATE-----Generated at Tue Sep 16 11:24:52 2025 by rpki-client