$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/7d914a29-07b2-3546-9c70-6be805db3231.roa File: 7d914a29-07b2-3546-9c70-6be805db3231.roa (raw, json) Hash identifier: GDc2o3tQcosluXS/BFVkBs8OQu4/g69/Jp1JOewIsLc= Subject key identifier: F3:22:5A:BF:4C:15:12:43:D7:15:63:93:9D:48:91:03:90:09:0E:E8 Certificate issuer: /CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d Certificate serial: 010D0C9F4328584AA42B8644EE7875FCB6939FC0 Authority key identifier: 7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/7d914a29-07b2-3546-9c70-6be805db3231.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 23428 IP address blocks: 198.160.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:86:44:ee:78:75:fc:b6:93:9f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=d42c52d0-cc86-4903-a8dd-0320207b4578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d0:45:d0:da:4f:11:2d:3c:48:1f:f2:1f:b7: 56:ed:d7:f7:89:11:7b:27:7e:f4:44:ec:a0:6f:3d: 03:80:58:27:62:6a:69:ef:fd:5e:45:31:be:66:30: d8:d6:71:66:0a:be:d0:b0:18:d6:9c:50:6a:58:a6: e2:30:18:88:e3:a9:15:00:a1:83:8a:f8:50:e2:8f: e2:a1:35:dd:3a:1b:8d:ac:f7:9d:ab:78:a9:48:d5: bc:91:b3:f6:4d:47:0b:d7:2b:3b:96:b3:c8:73:d8: e5:a0:71:21:34:49:05:2c:4e:a5:7b:c5:42:92:22: b7:4b:60:c6:aa:28:84:22:3b:92:75:b6:c8:c2:c2: 0b:90:18:4a:93:7c:2f:ec:34:8d:06:d9:99:94:c5: c4:08:f4:34:01:59:c6:01:88:89:f7:ce:ca:e1:91: 89:a6:b6:3c:29:10:b9:64:f7:61:89:4a:e5:bb:b0: 9f:ce:fb:5e:50:12:5b:b6:5f:22:65:ed:f3:3c:08: 8c:71:7a:ba:0e:4f:2c:62:0b:81:ae:57:af:ac:7a: 28:d5:33:7c:95:f0:89:96:74:23:1a:6d:72:46:94: cd:3f:d1:f0:93:98:31:cc:40:c9:a9:47:5d:16:bb: 56:36:de:eb:82:75:6d:26:e0:53:d5:4b:28:4d:8d: 52:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:22:5A:BF:4C:15:12:43:D7:15:63:93:9D:48:91:03:90:09:0E:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/7d914a29-07b2-3546-9c70-6be805db3231.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl X509v3 Authority Key Identifier: keyid:7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer sbgp-ipAddrBlock: critical IPv4: 198.160.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:ff:45:c2:d3:2e:6f:3a:7e:63:3b:c0:e4:0d:30:2c:39:9c: 82:3c:69:de:d2:12:07:ae:93:e3:f4:e1:03:1c:c2:db:49:4c: 4f:ec:b7:62:59:ff:94:ac:a4:9d:f7:63:0a:c5:21:91:a5:8a: 05:89:26:21:b6:8a:7a:b6:28:bc:bc:64:86:d3:da:35:2e:22: b8:81:27:f5:b3:20:98:b4:41:be:77:f6:c3:e6:25:c8:6d:04: 2d:20:33:32:8d:f7:8b:7f:00:d6:f3:c5:11:0d:e2:67:f9:e8: 15:61:11:45:36:4f:b7:7d:f0:9b:dd:41:1d:5f:9b:e1:f7:74: 6e:08:22:ca:26:16:aa:fc:2c:d0:9e:ac:10:1f:32:0b:8b:3f: d6:30:d2:5e:f4:91:d2:23:16:1a:7b:3b:01:20:06:11:77:99: 22:41:ee:1e:1e:4e:bf:9b:19:d0:a6:e0:71:c5:7e:f7:53:05: b7:ef:3f:1c:52:ec:c2:16:90:0f:ac:50:8f:e4:cf:83:a4:29: f7:ae:25:cd:8e:a6:4f:b0:6c:d5:0b:be:cb:dc:78:fe:88:77: 9d:76:6c:b2:f7:21:9f:d3:19:c4:4a:7d:91:33:6e:b1:16:fb: 6a:cf:92:5a:fc:b5:d5:43:b6:51:89:f8:f3:5f:05:f6:1e:b3: 31:32:4e:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqkK4ZE7nh1/LaTn8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjJmMDU4NWUtYTI4ZS00ZWFkLTliMWMtZGVmZDI5MWNl NTRkMB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk ZDQyYzUyZDAtY2M4Ni00OTAzLWE4ZGQtMDMyMDIwN2I0NTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtBF0NpPES08SB/yH7dW7df3iRF7J370ROyg bz0DgFgnYmpp7/1eRTG+ZjDY1nFmCr7QsBjWnFBqWKbiMBiI46kVAKGDivhQ4o/i oTXdOhuNrPedq3ipSNW8kbP2TUcL1ys7lrPIc9jloHEhNEkFLE6le8VCkiK3S2DG qiiEIjuSdbbIwsILkBhKk3wv7DSNBtmZlMXECPQ0AVnGAYiJ987K4ZGJprY8KRC5 ZPdhiUrlu7CfzvteUBJbtl8iZe3zPAiMcXq6Dk8sYguBrlevrHoo1TN8lfCJlnQj Gm1yRpTNP9Hwk5gxzEDJqUddFrtWNt7rgnVtJuBT1UsoTY1SEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPMiWr9MFRJD1xVjk51IkQOQCQ7oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYw NTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZkMjkxY2U1NGQvN2Q5MTRhMjktMDdiMi0z NTQ2LTljNzAtNmJlODA1ZGIzMjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjJmMDU4NWUtYTI4ZS00ZWFkLTli MWMtZGVmZDI5MWNlNTRkL2YyZjA1ODVlLWEyOGUtNGVhZC05YjFjLWRlZmQyOTFj ZTU0ZC5jcmwwHwYDVR0jBBgwFoAUe8Z4d4iTGVPnEQI5lG2LPRN6wo8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYwNTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZk MjkxY2U1NGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqDZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAID/RcLTLm86fmM7wOQNMCw5nII8ad7SEgeuk+P04QMcwttJTE/st2JZ /5SspJ33YwrFIZGligWJJiG2inq2KLy8ZIbT2jUuIriBJ/WzIJi0Qb539sPmJcht BC0gMzKN94t/ANbzxREN4mf56BVhEUU2T7d98JvdQR1fm+H3dG4IIsomFqr8LNCe rBAfMguLP9Yw0l70kdIjFhp7OwEgBhF3mSJB7h4eTr+bGdCm4HHFfvdTBbfvPxxS 7MIWkA+sUI/kz4OkKfeuJc2Opk+wbNULvsvceP6Id512bLL3IZ/TGcRKfZEzbrEW +2rPklr8tdVDtlGJ+PNfBfYeszEyTrI= -----END CERTIFICATE-----Generated at Sat Jul 26 23:43:33 2025 by rpki-client