$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/4ba60e82-0cee-3eb7-a6f2-cadfbf92ea5b.roa File: 4ba60e82-0cee-3eb7-a6f2-cadfbf92ea5b.roa (raw, json) Hash identifier: O1v5dvNDtJ6sknnrnr9i5mLuqsRgUH67PaM9g2fH74M= Subject key identifier: D2:02:E4:26:A9:40:65:AA:41:2D:4A:6E:B2:D4:52:65:BA:1C:34:2D Certificate issuer: /CN=cd2d7d85-61d0-4ba6-b4d2-afda9b820a78 Certificate serial: 010D0C9F4328584AA85BA73FAF1828D402A54840 Authority key identifier: D6:26:E1:8A:8F:B4:0F:B5:DB:1C:70:1F:86:FB:4A:BA:D5:E2:19:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/4ba60e82-0cee-3eb7-a6f2-cadfbf92ea5b.roa Signing time: Sun 27 Jul 2025 13:01:04 +0000 ROA not before: Sun 27 Jul 2025 13:01:04 +0000 ROA not after: Sat 25 Oct 2025 13:01:04 +0000 asID: 22966 IP address blocks: 198.51.243.0/24 maxlen: 24 198.51.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a8:5b:a7:3f:af:18:28:d4:02:a5:48:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd2d7d85-61d0-4ba6-b4d2-afda9b820a78 Validity Not Before: Jul 27 13:01:04 2025 GMT Not After : Oct 25 13:01:04 2025 GMT Subject: CN=09e8f60a-7d80-4ca4-9be8-e7bb5503edb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2e:79:21:60:35:26:e7:6e:ed:1b:66:cb:93: 10:c4:2c:25:a7:56:0b:fc:b7:0a:22:cd:44:d5:5e: bc:82:27:4c:27:ac:ea:e3:fe:56:a4:6c:ff:6b:14: 48:87:87:73:2b:cc:ce:65:2c:72:38:f4:17:fe:4e: 78:18:ee:83:ee:c3:4d:c4:24:e9:2c:6f:e1:23:57: 9f:96:95:c8:39:99:36:cb:de:b2:57:7b:03:d5:47: cb:0c:80:33:4b:71:3c:65:b8:85:1d:fa:45:7d:a3: cd:4a:67:75:f7:88:fc:4a:d4:74:0c:ad:54:9a:f5: 0f:30:1c:7d:10:cc:09:ba:22:f5:d7:23:65:cb:0d: 03:c4:b8:33:4e:ca:59:4a:cb:e3:27:f7:a6:3d:45: a2:d9:c0:89:cf:88:67:65:a1:f5:40:58:80:f4:40: 21:49:17:0c:f0:e0:a4:35:8b:72:ae:42:9e:f4:f0: 43:f3:e7:86:e0:ef:58:ca:81:2f:a0:8d:85:a8:35: e9:e9:7a:cc:40:fa:f0:76:2b:ac:c9:3e:4b:cd:74: b9:35:3d:a3:ee:87:2f:19:30:2a:3e:ee:0c:11:a8: 10:b2:f3:c8:55:a1:93:fa:a9:1f:71:ca:8c:8f:bc: c0:0a:2b:43:34:81:f0:e9:95:20:03:4d:db:e4:19: bd:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:02:E4:26:A9:40:65:AA:41:2D:4A:6E:B2:D4:52:65:BA:1C:34:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/4ba60e82-0cee-3eb7-a6f2-cadfbf92ea5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.crl X509v3 Authority Key Identifier: keyid:D6:26:E1:8A:8F:B4:0F:B5:DB:1C:70:1F:86:FB:4A:BA:D5:E2:19:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.cer sbgp-ipAddrBlock: critical IPv4: 198.51.243.0-198.51.244.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:0b:c4:b8:70:09:25:00:bc:98:b1:dc:9d:74:13:3b:e3:db: 43:79:3d:4a:86:54:3b:d0:76:aa:96:9e:3d:15:b9:35:77:76: af:d3:0d:68:34:54:33:4a:1b:da:b9:c1:e8:62:9e:cd:12:cd: 9d:8a:a6:45:86:e3:26:d7:8c:2f:07:4b:fa:7a:9c:e8:09:d1: de:36:e5:0c:41:ba:d2:e9:f8:74:5e:b0:5a:05:3b:a5:81:04: 03:3f:93:a6:d3:f0:82:78:aa:3c:c4:c2:87:ab:dd:e4:a0:71: aa:8e:fe:1f:76:ce:10:ef:9c:17:8d:cb:92:99:81:41:08:cd: 32:89:53:10:41:d7:26:a1:72:3a:ef:9c:49:fc:10:b1:62:ca: 4d:97:2f:a6:c6:38:51:b6:67:cb:08:bd:60:c3:df:6d:57:7c: 2e:b0:ee:71:da:1d:ff:8a:47:8f:85:91:16:a6:46:19:04:11: b9:f5:42:3f:e7:60:23:7d:7c:de:cc:96:0f:e0:15:12:15:d9: c4:bc:f2:3b:76:a7:c2:ff:34:06:41:98:bd:ec:9e:4d:fa:f6: 50:bb:ce:2f:0a:d3:72:cc:79:ef:0a:a0:86:35:d5:fe:93:4f: f6:fc:c3:2d:d4:fc:b9:11:df:e9:3c:ac:a2:25:ad:f8:cf:ca: e1:6d:e6:a7 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEqoW6c/rxgo1AKlSEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QyZDdkODUtNjFkMC00YmE2LWI0ZDItYWZkYTliODIw YTc4MB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk MDllOGY2MGEtN2Q4MC00Y2E0LTliZTgtZTdiYjU1MDNlZGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwi55IWA1Judu7Rtmy5MQxCwlp1YL/LcKIs1E 1V68gidMJ6zq4/5WpGz/axRIh4dzK8zOZSxyOPQX/k54GO6D7sNNxCTpLG/hI1ef lpXIOZk2y96yV3sD1UfLDIAzS3E8ZbiFHfpFfaPNSmd194j8StR0DK1UmvUPMBx9 EMwJuiL11yNlyw0DxLgzTspZSsvjJ/emPUWi2cCJz4hnZaH1QFiA9EAhSRcM8OCk NYtyrkKe9PBD8+eG4O9YyoEvoI2FqDXp6XrMQPrwdiusyT5LzXS5NT2j7ocvGTAq Pu4MEagQsvPIVaGT+qkfccqMj7zACitDNIHw6ZUgA03b5Bm9rQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFNIC5CapQGWqQS1KbrLUUmW6HDQtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jZDJk N2Q4NS02MWQwLTRiYTYtYjRkMi1hZmRhOWI4MjBhNzgvNGJhNjBlODItMGNlZS0z ZWI3LWE2ZjItY2FkZmJmOTJlYTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2QyZDdkODUtNjFkMC00YmE2LWI0 ZDItYWZkYTliODIwYTc4L2NkMmQ3ZDg1LTYxZDAtNGJhNi1iNGQyLWFmZGE5Yjgy MGE3OC5jcmwwHwYDVR0jBBgwFoAU1ibhio+0D7XbHHAfhvtKutXiGQowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jZDJkN2Q4NS02MWQwLTRiYTYtYjRkMi1hZmRh OWI4MjBhNzguY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADGM/MD BADGM/QwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAjwvEuHAJJQC8mLHcnXQTO+PbQ3k9SoZUO9B2qpaePRW5 NXd2r9MNaDRUM0ob2rnB6GKezRLNnYqmRYbjJteMLwdL+nqc6AnR3jblDEG60un4 dF6wWgU7pYEEAz+TptPwgniqPMTCh6vd5KBxqo7+H3bOEO+cF43LkpmBQQjNMolT EEHXJqFyOu+cSfwQsWLKTZcvpsY4UbZnywi9YMPfbVd8LrDucdod/4pHj4WRFqZG GQQRufVCP+dgI3183syWD+AVEhXZxLzyO3anwv80BkGYveyeTfr2ULvOLwrTcsx5 7wqghjXV/pNP9vzDLdT8uRHf6TysoiWt+M/K4W3mpw== -----END CERTIFICATE-----Generated at Sun Aug 3 00:43:19 2025 by rpki-client