$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae4d79aa-f9dd-4dd2-9886-6676724e961f/1a7be265-c5e9-32a9-9677-b65701a82f31.roa File: 1a7be265-c5e9-32a9-9677-b65701a82f31.roa (raw, json) Hash identifier: MrQXet+FmyQVy6kFhio6h2WE5hbqPb2Q9tOncXTDZm0= Subject key identifier: AA:46:71:79:B7:D0:61:17:5B:22:3E:8A:90:AA:F7:26:AB:20:C0:41 Certificate issuer: /CN=ae4d79aa-f9dd-4dd2-9886-6676724e961f Certificate serial: 010D0C9F4328584ABED32BAF4C6C30061B8F5B00 Authority key identifier: 7B:2B:78:9B:F9:99:84:00:07:FD:2E:22:98:A0:A3:00:AD:6E:E9:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae4d79aa-f9dd-4dd2-9886-6676724e961f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae4d79aa-f9dd-4dd2-9886-6676724e961f/1a7be265-c5e9-32a9-9677-b65701a82f31.roa Signing time: Mon 04 Aug 2025 14:09:50 +0000 ROA not before: Mon 04 Aug 2025 14:09:50 +0000 ROA not after: Sun 02 Nov 2025 15:09:50 +0000 asID: 55156 IP address blocks: 198.147.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae4d79aa-f9dd-4dd2-9886-6676724e961f/ae4d79aa-f9dd-4dd2-9886-6676724e961f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae4d79aa-f9dd-4dd2-9886-6676724e961f/ae4d79aa-f9dd-4dd2-9886-6676724e961f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae4d79aa-f9dd-4dd2-9886-6676724e961f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:be:d3:2b:af:4c:6c:30:06:1b:8f:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae4d79aa-f9dd-4dd2-9886-6676724e961f Validity Not Before: Aug 4 14:09:50 2025 GMT Not After : Nov 2 15:09:50 2025 GMT Subject: CN=5df029aa-a3d0-4979-b621-e3cc2d6f22d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:03:ea:63:2d:b8:85:03:7b:c8:4d:c5:da:8b: 3b:79:3e:38:ac:97:2f:95:2d:d2:16:d1:7b:21:8c: c7:e8:2c:41:a4:73:26:b2:19:78:ee:a5:ef:fe:f1: a8:e7:51:bb:1c:1f:44:11:2c:ee:4c:11:d5:bb:fd: 19:56:e9:21:dd:f5:b3:a1:3d:14:33:12:ab:53:96: 52:f6:fd:d9:66:1e:88:17:f8:24:e6:a8:c5:39:c5: d1:72:4c:45:83:3c:74:5c:31:6b:1c:bd:01:bd:24: df:a6:ef:fc:d0:b9:d5:0f:fe:58:27:26:b2:8e:20: 54:86:41:d6:ad:c3:9e:ce:4d:95:11:b6:87:20:84: 19:82:b7:a0:8e:ad:4f:01:da:a6:66:6e:ed:70:ff: 02:26:66:3b:b0:a9:e6:8b:42:15:fa:9d:90:7b:39: 54:ec:68:4e:d4:d6:61:d0:e7:75:9a:22:e7:ce:d9: 75:fb:c5:c8:a3:fa:db:42:46:02:3d:b5:2b:b9:f9: 33:39:9f:b2:73:15:dd:34:28:1c:05:b1:d8:15:33: 52:43:aa:5f:13:01:01:8a:4d:4a:ee:f2:3b:36:d0: c9:82:51:a3:15:85:f4:86:d7:48:30:bd:d7:82:78: b0:f6:9c:ac:40:6e:8b:0e:ea:7b:5f:7c:a3:5d:75: fa:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:46:71:79:B7:D0:61:17:5B:22:3E:8A:90:AA:F7:26:AB:20:C0:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae4d79aa-f9dd-4dd2-9886-6676724e961f/1a7be265-c5e9-32a9-9677-b65701a82f31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae4d79aa-f9dd-4dd2-9886-6676724e961f/ae4d79aa-f9dd-4dd2-9886-6676724e961f.crl X509v3 Authority Key Identifier: keyid:7B:2B:78:9B:F9:99:84:00:07:FD:2E:22:98:A0:A3:00:AD:6E:E9:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae4d79aa-f9dd-4dd2-9886-6676724e961f.cer sbgp-ipAddrBlock: critical IPv4: 198.147.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:08:86:96:38:99:6e:78:1b:74:dd:75:57:8b:40:7d:14:5a: b7:66:70:ff:db:a7:59:15:58:23:1c:3c:e8:1c:30:5b:31:e8: f0:b4:86:37:4e:c9:44:3e:9b:82:17:97:2f:4c:30:a9:77:bd: f8:3e:ba:b7:de:35:3a:13:ac:78:e6:2f:cf:7f:23:95:90:bc: 0a:0c:8c:fb:8d:43:e2:ff:8f:4c:50:73:a4:df:02:8f:1e:54: df:54:b2:b7:04:6d:11:64:d2:0e:05:a5:5a:47:b8:86:f7:58: dd:71:d2:70:0d:8f:9e:88:7a:0a:98:67:5d:88:2e:cd:78:ea: a5:12:9a:d0:f8:b8:5f:08:14:a7:b2:b9:27:6b:61:d4:b3:db: d9:cb:e3:82:91:26:a9:d8:ec:d5:63:8d:ad:00:10:b6:68:81: fb:3c:61:e3:9e:ae:83:27:db:e5:7a:05:83:f0:e3:90:14:38: 5c:21:df:71:94:b2:59:0f:dd:8d:a5:be:3e:a5:b8:12:7d:e6: 2d:1b:42:04:51:dc:ce:86:0e:7b:f8:93:84:98:48:0a:83:f0: 60:41:73:eb:86:b1:85:c9:36:60:8b:34:3b:0a:3b:86:3c:36: e2:38:82:12:4a:9a:d7:ae:df:89:51:a4:66:64:c4:6a:99:28: ca:d1:6c:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq+0yuvTGwwBhuPWwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU0ZDc5YWEtZjlkZC00ZGQyLTk4ODYtNjY3NjcyNGU5 NjFmMB4XDTI1MDgwNDE0MDk1MFoXDTI1MTEwMjE1MDk1MFowLzEtMCsGA1UEAxMk NWRmMDI5YWEtYTNkMC00OTc5LWI2MjEtZTNjYzJkNmYyMmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4APqYy24hQN7yE3F2os7eT44rJcvlS3SFtF7 IYzH6CxBpHMmshl47qXv/vGo51G7HB9EESzuTBHVu/0ZVukh3fWzoT0UMxKrU5ZS 9v3ZZh6IF/gk5qjFOcXRckxFgzx0XDFrHL0BvSTfpu/80LnVD/5YJyayjiBUhkHW rcOezk2VEbaHIIQZgregjq1PAdqmZm7tcP8CJmY7sKnmi0IV+p2QezlU7GhO1NZh 0Od1miLnztl1+8XIo/rbQkYCPbUrufkzOZ+ycxXdNCgcBbHYFTNSQ6pfEwEBik1K 7vI7NtDJglGjFYX0htdIML3Xgniw9pysQG6LDup7X3yjXXX6mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKpGcXm30GEXWyI+ipCq9yarIMBBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hZTRk NzlhYS1mOWRkLTRkZDItOTg4Ni02Njc2NzI0ZTk2MWYvMWE3YmUyNjUtYzVlOS0z MmE5LTk2NzctYjY1NzAxYTgyZjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYWU0ZDc5YWEtZjlkZC00ZGQyLTk4 ODYtNjY3NjcyNGU5NjFmL2FlNGQ3OWFhLWY5ZGQtNGRkMi05ODg2LTY2NzY3MjRl OTYxZi5jcmwwHwYDVR0jBBgwFoAUeyt4m/mZhAAH/S4imKCjAK1u6cswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hZTRkNzlhYS1mOWRkLTRkZDItOTg4Ni02Njc2 NzI0ZTk2MWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpP/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABIIhpY4mW54G3TddVeLQH0UWrdmcP/bp1kVWCMcPOgcMFsx6PC0hjdO yUQ+m4IXly9MMKl3vfg+urfeNToTrHjmL89/I5WQvAoMjPuNQ+L/j0xQc6TfAo8e VN9UsrcEbRFk0g4FpVpHuIb3WN1x0nANj56IegqYZ12ILs146qUSmtD4uF8IFKey uSdrYdSz29nL44KRJqnY7NVjja0AELZogfs8YeOeroMn2+V6BYPw45AUOFwh33GU slkP3Y2lvj6luBJ95i0bQgRR3M6GDnv4k4SYSAqD8GBBc+uGsYXJNmCLNDsKO4Y8 NuI4ghJKmteu34lRpGZkxGqZKMrRbFw= -----END CERTIFICATE-----Generated at Wed Aug 20 02:43:59 2025 by rpki-client