$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/8bd88a3a-7580-3c3e-8cd3-8ec3d05ba56e.roa File: 8bd88a3a-7580-3c3e-8cd3-8ec3d05ba56e.roa (raw, json) Hash identifier: vX9OuTPrD89LgFoBGspxQzTD3tdCDAZWOvQbNn3WSd4= Subject key identifier: BF:E8:8F:93:61:1C:BD:E6:24:30:33:5F:6E:0F:87:56:B9:13:93:76 Certificate issuer: /CN=5e580e37-3db1-41d1-ae09-7e84348caffd Certificate serial: 010D0C9F4328584ADA9BC37A3F8859F2E596CC00 Authority key identifier: FD:BE:C7:47:D3:CD:1B:2D:E7:F7:64:60:9F:03:41:94:6A:4B:98:4F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/8bd88a3a-7580-3c3e-8cd3-8ec3d05ba56e.roa Signing time: Thu 14 Aug 2025 13:00:41 +0000 ROA not before: Thu 14 Aug 2025 13:00:41 +0000 ROA not after: Wed 12 Nov 2025 14:00:41 +0000 asID: 17207 IP address blocks: 198.59.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/5e580e37-3db1-41d1-ae09-7e84348caffd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/5e580e37-3db1-41d1-ae09-7e84348caffd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:da:9b:c3:7a:3f:88:59:f2:e5:96:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e580e37-3db1-41d1-ae09-7e84348caffd Validity Not Before: Aug 14 13:00:41 2025 GMT Not After : Nov 12 14:00:41 2025 GMT Subject: CN=b4032fc7-47a8-4ef2-b782-12d2c3a91491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8d:a4:96:8a:20:7c:aa:90:61:bb:12:c6:a3: ea:4d:8f:fc:c0:dc:af:fe:64:36:32:9f:43:35:1f: b7:aa:0c:88:70:a1:23:f2:bb:30:97:30:d8:10:a8: 23:4f:3d:23:17:b2:26:3f:1a:7a:41:0c:1b:d6:d6: d8:71:ce:51:3b:67:70:7e:3d:51:2c:34:38:05:b1: f0:0e:32:d1:36:66:f6:4a:a5:c8:d0:3c:06:35:33: 8b:9c:68:b3:75:c2:90:22:e9:8e:f0:46:6a:da:be: 0f:60:f4:39:d6:d2:4a:c7:e9:54:81:be:76:76:d3: 18:50:a9:38:2a:d5:55:1d:ac:d9:1e:56:c2:98:e1: 0f:0e:75:82:65:97:2d:a9:8b:ff:3e:cf:3e:09:f6: 0a:66:a3:e7:42:31:2e:ad:ad:f7:32:00:2a:13:50: 1b:0a:d9:d3:58:45:11:98:c1:8d:b2:57:c5:59:10: 96:69:fd:60:5d:e8:d8:b9:e5:db:6c:d5:f2:13:b3: 0a:ef:f8:bc:31:09:f8:0c:3d:08:64:af:e0:e1:f5: 0e:3f:eb:30:8d:55:1f:02:bb:34:8b:31:51:0a:06: 09:bd:03:5f:d2:2e:5e:c0:12:ab:29:1a:cd:a2:2f: 11:ea:15:be:0b:4c:4b:06:33:b1:10:61:c3:7f:df: cc:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:E8:8F:93:61:1C:BD:E6:24:30:33:5F:6E:0F:87:56:B9:13:93:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/8bd88a3a-7580-3c3e-8cd3-8ec3d05ba56e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/5e580e37-3db1-41d1-ae09-7e84348caffd.crl X509v3 Authority Key Identifier: keyid:FD:BE:C7:47:D3:CD:1B:2D:E7:F7:64:60:9F:03:41:94:6A:4B:98:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd.cer sbgp-ipAddrBlock: critical IPv4: 198.59.6.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:8f:36:68:c5:d3:d5:7e:b0:68:9b:ab:c2:67:55:0e:ec:76: c8:4f:52:c1:e3:80:07:d9:c0:09:8f:8d:45:e1:d4:75:9d:67: 92:bc:65:17:e9:98:d2:be:2f:22:13:e8:55:f6:bf:40:52:f7: db:ab:57:df:bb:76:f5:38:a1:53:65:e8:f8:a7:43:0d:7e:7b: a7:49:2b:f5:87:23:2d:3d:0e:46:01:00:07:aa:37:4e:75:4e: ed:fa:a7:e2:cd:47:88:54:82:c4:35:5c:90:e3:43:eb:49:e1: af:d2:bb:70:19:e3:70:54:d0:21:7b:a2:76:c0:95:a4:16:45: 00:27:7c:42:79:39:5d:b7:08:dc:70:89:45:ea:8f:44:0f:b1: f3:f8:38:d7:49:46:5b:50:25:08:d8:e8:d2:57:b9:05:dd:c7: cf:34:49:08:cc:ea:ca:95:c8:05:7e:a0:17:ae:e1:0c:4b:7a: b7:67:c4:a9:65:65:2f:20:22:81:db:10:97:5e:fb:c4:6d:b8: 43:04:d8:84:72:8d:bc:df:20:1d:e3:b5:5b:c8:81:29:b4:f9: c6:0b:82:3e:cd:37:a2:9f:c8:68:65:60:fa:45:fc:d4:fd:ef: 53:7e:9f:13:48:78:aa:77:28:60:f0:0c:1f:2c:a3:a2:b5:df: 54:f6:44:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEram8N6P4hZ8uWWzAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU1ODBlMzctM2RiMS00MWQxLWFlMDktN2U4NDM0OGNh ZmZkMB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk YjQwMzJmYzctNDdhOC00ZWYyLWI3ODItMTJkMmMzYTkxNDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA042kloogfKqQYbsSxqPqTY/8wNyv/mQ2Mp9D NR+3qgyIcKEj8rswlzDYEKgjTz0jF7ImPxp6QQwb1tbYcc5RO2dwfj1RLDQ4BbHw DjLRNmb2SqXI0DwGNTOLnGizdcKQIumO8EZq2r4PYPQ51tJKx+lUgb52dtMYUKk4 KtVVHazZHlbCmOEPDnWCZZctqYv/Ps8+CfYKZqPnQjEura33MgAqE1AbCtnTWEUR mMGNslfFWRCWaf1gXejYueXbbNXyE7MK7/i8MQn4DD0IZK/g4fUOP+swjVUfArs0 izFRCgYJvQNf0i5ewBKrKRrNoi8R6hW+C0xLBjOxEGHDf9/M7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/oj5NhHL3mJDAzX24Ph1a5E5N2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81ZTU4 MGUzNy0zZGIxLTQxZDEtYWUwOS03ZTg0MzQ4Y2FmZmQvOGJkODhhM2EtNzU4MC0z YzNlLThjZDMtOGVjM2QwNWJhNTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWU1ODBlMzctM2RiMS00MWQxLWFl MDktN2U4NDM0OGNhZmZkLzVlNTgwZTM3LTNkYjEtNDFkMS1hZTA5LTdlODQzNDhj YWZmZC5jcmwwHwYDVR0jBBgwFoAU/b7HR9PNGy3n92RgnwNBlGpLmE8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81ZTU4MGUzNy0zZGIxLTQxZDEtYWUwOS03ZTg0 MzQ4Y2FmZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxjsGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqPNmjF09V+sGibq8JnVQ7sdshPUsHjgAfZwAmPjUXh1HWdZ5K8ZRfp mNK+LyIT6FX2v0BS99urV9+7dvU4oVNl6PinQw1+e6dJK/WHIy09DkYBAAeqN051 Tu36p+LNR4hUgsQ1XJDjQ+tJ4a/Su3AZ43BU0CF7onbAlaQWRQAnfEJ5OV23CNxw iUXqj0QPsfP4ONdJRltQJQjY6NJXuQXdx880SQjM6sqVyAV+oBeu4QxLerdnxKll ZS8gIoHbEJde+8RtuEME2IRyjbzfIB3jtVvIgSm0+cYLgj7NN6KfyGhlYPpF/NT9 71N+nxNIeKp3KGDwDB8so6K131T2RIo= -----END CERTIFICATE-----Generated at Sun Aug 24 01:22:35 2025 by rpki-client