$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727/820bec39-d367-30a6-b5d9-625ccbf5cd27.roa File: 820bec39-d367-30a6-b5d9-625ccbf5cd27.roa (raw, json) Hash identifier: urQr1sOoJGt9jEUqkIUl82wqlfNcGluZTXQYwVzGRXE= Subject key identifier: 35:28:7F:6E:EC:B6:6E:1B:11:CD:96:FE:88:28:B5:28:22:AF:0D:14 Certificate issuer: /CN=de8e60af-8577-4bb7-8e3e-28e4ec88b727 Certificate serial: 010D0C9F4328584A90A0B3678FBFE71A5D9F7640 Authority key identifier: C3:4B:BA:01:0A:97:59:E4:84:E5:DD:9B:FD:D1:05:37:27:A1:3F:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727/820bec39-d367-30a6-b5d9-625ccbf5cd27.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 6531 IP address blocks: 198.186.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727/de8e60af-8577-4bb7-8e3e-28e4ec88b727.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727/de8e60af-8577-4bb7-8e3e-28e4ec88b727.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:b3:67:8f:bf:e7:1a:5d:9f:76:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de8e60af-8577-4bb7-8e3e-28e4ec88b727 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=1beb90bf-0dec-4f6b-aea9-0146a636932e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:22:e8:48:72:11:b4:75:10:64:63:48:ee:93: 1d:47:0f:b1:5b:1d:56:d0:72:c9:d1:09:68:07:c9: 6e:6d:97:f2:8c:19:41:33:a5:0d:9d:45:ca:4b:df: de:80:d3:cc:dd:b1:78:26:7d:9d:2a:51:80:97:ac: d2:59:06:0b:d6:88:bf:33:63:1c:41:a6:b8:c1:27: 4f:7b:a2:d4:7b:6d:f8:b3:06:ab:71:a7:f7:2c:0e: cc:34:52:fc:3c:1a:5b:74:be:16:bd:eb:41:c9:9e: 4d:5b:42:81:3a:a6:4c:b4:30:18:03:b1:98:36:a6: 3c:e9:57:b1:f3:0a:4e:cd:8d:d3:f9:35:4f:a8:73: 2b:5a:9a:11:4a:7f:e7:e9:6a:78:d4:3a:6c:69:fa: e3:b3:29:41:e1:5e:e0:e9:1e:3d:b2:29:f3:46:69: f5:58:86:97:9d:de:ad:23:13:c1:91:ce:29:e9:a7: 08:de:7b:f3:ef:a8:34:f3:36:77:a1:27:3e:31:50: 51:5d:87:da:f0:48:d1:5c:c0:d8:f2:3d:f6:b8:5c: 97:d5:d3:ce:5e:ff:0d:b5:18:96:60:ea:d2:7e:62: fa:e7:fd:c5:b2:45:35:8c:f8:27:6a:65:fa:9c:0e: 24:63:61:a4:1a:66:c4:90:72:00:12:3d:51:dd:e5: 9a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:28:7F:6E:EC:B6:6E:1B:11:CD:96:FE:88:28:B5:28:22:AF:0D:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727/820bec39-d367-30a6-b5d9-625ccbf5cd27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727/de8e60af-8577-4bb7-8e3e-28e4ec88b727.crl X509v3 Authority Key Identifier: keyid:C3:4B:BA:01:0A:97:59:E4:84:E5:DD:9B:FD:D1:05:37:27:A1:3F:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727.cer sbgp-ipAddrBlock: critical IPv4: 198.186.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:2a:7b:1e:9e:17:f1:46:78:7e:6b:e0:60:ca:7d:d9:e8:0e: c6:4e:99:68:66:2e:b6:68:77:1c:d5:e9:a9:df:06:10:3c:dc: 0b:b2:a4:ca:bb:36:15:8b:a4:20:a2:77:e1:5d:e3:31:87:f9: 17:37:77:ea:03:0f:45:63:dd:f1:c2:ba:45:43:ef:51:bc:33: 56:97:8d:95:52:fd:02:c6:5d:89:cc:78:fd:b7:09:88:df:7f: d7:73:e6:ed:63:6a:b3:67:ae:55:1f:d2:e4:34:6e:31:f5:93: cc:93:83:81:72:49:3f:7d:44:cc:30:76:59:c8:61:de:d3:2c: 6f:e6:de:04:39:d1:94:8f:4c:3e:16:f9:52:7a:1c:74:ca:56: d4:bd:c0:2a:2c:00:1c:cb:12:e2:60:be:c3:02:cd:0d:ea:1c: f0:23:04:6e:df:bb:b5:66:8a:93:14:bd:3f:7d:7b:18:2a:75: 75:d9:68:e4:c6:2f:4e:15:17:4a:80:64:c6:46:12:1f:55:4f: 2a:5f:3a:10:f6:c5:ff:ba:ec:dd:c1:78:ac:17:06:52:67:04: 42:25:5a:2d:52:e8:d6:29:aa:01:55:9b:54:97:ea:b8:70:13: ea:59:58:f0:fb:ec:fb:6f:0f:82:07:61:43:7a:f7:36:ae:af: 2d:66:52:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoLNnj7/nGl2fdkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU4ZTYwYWYtODU3Ny00YmI3LThlM2UtMjhlNGVjODhi NzI3MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk MWJlYjkwYmYtMGRlYy00ZjZiLWFlYTktMDE0NmE2MzY5MzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiLoSHIRtHUQZGNI7pMdRw+xWx1W0HLJ0Qlo B8lubZfyjBlBM6UNnUXKS9/egNPM3bF4Jn2dKlGAl6zSWQYL1oi/M2McQaa4wSdP e6LUe234swarcaf3LA7MNFL8PBpbdL4WvetByZ5NW0KBOqZMtDAYA7GYNqY86Vex 8wpOzY3T+TVPqHMrWpoRSn/n6Wp41DpsafrjsylB4V7g6R49sinzRmn1WIaXnd6t IxPBkc4p6acI3nvz76g08zZ3oSc+MVBRXYfa8EjRXMDY8j32uFyX1dPOXv8NtRiW YOrSfmL65/3FskU1jPgnamX6nA4kY2GkGmbEkHIAEj1R3eWaKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDUof27stm4bEc2W/ogotSgirw0UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZThl NjBhZi04NTc3LTRiYjctOGUzZS0yOGU0ZWM4OGI3MjcvODIwYmVjMzktZDM2Ny0z MGE2LWI1ZDktNjI1Y2NiZjVjZDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGU4ZTYwYWYtODU3Ny00YmI3LThl M2UtMjhlNGVjODhiNzI3L2RlOGU2MGFmLTg1NzctNGJiNy04ZTNlLTI4ZTRlYzg4 YjcyNy5jcmwwHwYDVR0jBBgwFoAUw0u6AQqXWeSE5d2b/dEFNyehP7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kZThlNjBhZi04NTc3LTRiYjctOGUzZS0yOGU0 ZWM4OGI3MjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxrqQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFkqex6eF/FGeH5r4GDKfdnoDsZOmWhmLrZodxzV6anfBhA83AuypMq7 NhWLpCCid+Fd4zGH+Rc3d+oDD0Vj3fHCukVD71G8M1aXjZVS/QLGXYnMeP23CYjf f9dz5u1jarNnrlUf0uQ0bjH1k8yTg4FyST99RMwwdlnIYd7TLG/m3gQ50ZSPTD4W +VJ6HHTKVtS9wCosABzLEuJgvsMCzQ3qHPAjBG7fu7VmipMUvT99exgqdXXZaOTG L04VF0qAZMZGEh9VTypfOhD2xf+67N3BeKwXBlJnBEIlWi1S6NYpqgFVm1SX6rhw E+pZWPD77PtvD4IHYUN69zaury1mUjE= -----END CERTIFICATE-----Generated at Wed Aug 20 20:14:50 2025 by rpki-client