$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/c0ac7cb8-e117-3e4d-9ccf-fd2894dc266c.roa File: c0ac7cb8-e117-3e4d-9ccf-fd2894dc266c.roa (raw, json) Hash identifier: 4Iz6W46SbDEcUTDPG5w9Nzimno5Yrazb5GJ6EknGmJw= Subject key identifier: DD:70:96:0F:AD:FA:DD:34:B2:73:05:D5:21:BD:7B:8C:F0:84:BF:67 Certificate issuer: /CN=4e87c0b3-383a-438c-aa45-1e5df0d0e061 Certificate serial: 010D0C9F4328584AE461211CA0C70D2F33489A80 Authority key identifier: 21:B4:6D:BF:CB:19:2A:8D:29:54:F0:6B:20:82:83:C2:12:1B:7F:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/c0ac7cb8-e117-3e4d-9ccf-fd2894dc266c.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 16509 IP address blocks: 198.175.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:21:1c:a0:c7:0d:2f:33:48:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e87c0b3-383a-438c-aa45-1e5df0d0e061 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=d47c99ce-6571-4e7b-ae20-54afa57dcde4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:15:c0:68:14:92:fa:ce:f9:17:1e:51:7e:72: 21:a4:a0:6f:51:79:f3:b7:51:29:18:88:66:b8:24: f2:5c:dd:45:32:4b:f9:3a:89:38:0e:6a:a3:37:98: 37:20:95:1e:2b:d3:bd:d7:ab:4f:db:eb:20:1b:94: 82:e8:51:82:a0:ca:b1:1c:2a:e0:5f:11:27:48:3b: 82:4d:2a:af:26:40:b0:a8:71:2b:c0:f3:e5:55:56: 46:80:4d:fc:79:ea:2e:a4:32:96:95:65:7e:75:85: 8d:02:80:29:10:01:bd:de:d7:25:ec:3b:0d:f9:df: 31:f9:10:84:88:c8:e6:30:ee:32:8e:99:0a:aa:67: 3d:f3:4f:04:2f:d7:c9:7f:75:a0:9c:0c:5b:e2:20: 51:20:5f:16:13:10:bc:71:d6:01:59:5f:4e:29:5a: c2:d9:67:00:04:43:65:c5:64:70:0f:1f:2a:1d:87: fa:f1:0b:be:95:44:7d:4a:d6:ba:96:64:50:1d:d4: 92:8b:b1:68:62:c7:09:e7:16:19:c8:33:1d:1c:86: 2f:00:0f:f1:c3:a5:ee:08:6c:26:51:09:35:73:3c: 31:77:67:09:8c:ec:17:e6:1f:67:42:e1:14:ad:8b: c4:ca:64:78:ee:c3:ad:d1:3a:9b:db:7a:24:b9:b9: 1e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:70:96:0F:AD:FA:DD:34:B2:73:05:D5:21:BD:7B:8C:F0:84:BF:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/c0ac7cb8-e117-3e4d-9ccf-fd2894dc266c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.crl X509v3 Authority Key Identifier: keyid:21:B4:6D:BF:CB:19:2A:8D:29:54:F0:6B:20:82:83:C2:12:1B:7F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer sbgp-ipAddrBlock: critical IPv4: 198.175.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:97:50:51:e1:74:66:df:2c:ef:a1:83:08:f2:b0:d5:78:13: 5e:c9:60:9d:6b:4b:e8:11:a7:14:43:b9:cc:1b:e8:be:44:a8: 47:8d:5b:1f:d0:a8:c3:f4:67:44:53:2f:d1:2b:d0:d9:72:90: e3:40:1e:9b:25:06:68:cc:7e:3b:ab:c1:50:ab:40:fb:ec:6b: d6:55:de:38:ce:0a:4a:c2:d5:c8:ce:6c:8c:b2:97:18:a2:a3: 01:6c:3f:ae:69:54:da:81:6e:d7:2d:db:85:c1:89:40:e7:2c: 2d:d5:73:64:d2:5d:2c:0f:2f:6e:a9:16:b4:b5:ca:f3:a4:2f: 49:36:f3:bd:93:68:78:2f:36:51:7f:8a:0e:e2:2d:f0:d8:cb: 3c:bd:b4:65:a0:b9:e4:03:62:0d:66:04:d3:6c:fd:82:3d:48: 3a:29:fd:1d:d3:28:d4:19:45:fb:fd:2f:18:77:d8:55:5a:a1: 5e:9e:2f:1f:d0:9b:49:bf:c1:ce:22:6c:09:80:25:3e:70:da: 5d:a0:7c:d7:54:cf:4f:cd:5f:16:f7:48:7f:41:1e:19:4a:4e: 56:67:fe:15:7c:ce:f4:b6:46:f4:05:73:74:c4:cc:6a:a0:44: 11:a4:6e:37:35:f7:a1:40:78:bf:4b:e2:7d:59:19:f0:0b:4d: 57:d9:f3:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYSEcoMcNLzNImoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU4N2MwYjMtMzgzYS00MzhjLWFhNDUtMWU1ZGYwZDBl MDYxMB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk ZDQ3Yzk5Y2UtNjU3MS00ZTdiLWFlMjAtNTRhZmE1N2RjZGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxXAaBSS+s75Fx5RfnIhpKBvUXnzt1EpGIhm uCTyXN1FMkv5Ook4DmqjN5g3IJUeK9O916tP2+sgG5SC6FGCoMqxHCrgXxEnSDuC TSqvJkCwqHErwPPlVVZGgE38eeoupDKWlWV+dYWNAoApEAG93tcl7DsN+d8x+RCE iMjmMO4yjpkKqmc9808EL9fJf3WgnAxb4iBRIF8WExC8cdYBWV9OKVrC2WcABENl xWRwDx8qHYf68Qu+lUR9Sta6lmRQHdSSi7FoYscJ5xYZyDMdHIYvAA/xw6XuCGwm UQk1czwxd2cJjOwX5h9nQuEUrYvEymR47sOt0Tqb23okubkeMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN1wlg+t+t00snMF1SG9e4zwhL9nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80ZTg3 YzBiMy0zODNhLTQzOGMtYWE0NS0xZTVkZjBkMGUwNjEvYzBhYzdjYjgtZTExNy0z ZTRkLTljY2YtZmQyODk0ZGMyNjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGU4N2MwYjMtMzgzYS00MzhjLWFh NDUtMWU1ZGYwZDBlMDYxLzRlODdjMGIzLTM4M2EtNDM4Yy1hYTQ1LTFlNWRmMGQw ZTA2MS5jcmwwHwYDVR0jBBgwFoAUIbRtv8sZKo0pVPBrIIKDwhIbf9kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80ZTg3YzBiMy0zODNhLTQzOGMtYWE0NS0xZTVk ZjBkMGUwNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxq86MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOXUFHhdGbfLO+hgwjysNV4E17JYJ1rS+gRpxRDucwb6L5EqEeNWx/Q qMP0Z0RTL9Er0NlykONAHpslBmjMfjurwVCrQPvsa9ZV3jjOCkrC1cjObIyylxii owFsP65pVNqBbtct24XBiUDnLC3Vc2TSXSwPL26pFrS1yvOkL0k2872TaHgvNlF/ ig7iLfDYyzy9tGWgueQDYg1mBNNs/YI9SDop/R3TKNQZRfv9Lxh32FVaoV6eLx/Q m0m/wc4ibAmAJT5w2l2gfNdUz0/NXxb3SH9BHhlKTlZn/hV8zvS2RvQFc3TEzGqg RBGkbjc196FAeL9L4n1ZGfALTVfZ8+Y= -----END CERTIFICATE-----Generated at Wed Aug 20 10:41:20 2025 by rpki-client