$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/439ee44d-2f63-3c0e-80de-7ad7f7cb69f7.roa File: 439ee44d-2f63-3c0e-80de-7ad7f7cb69f7.roa (raw, json) Hash identifier: gBkM2iSJLiQ/9VDUei95/JZqmzcdfF4JXHA9I7Q6ifU= Subject key identifier: 65:1C:08:8D:1E:ED:7C:5C:5F:5D:2A:0C:83:60:C7:C8:2D:BB:4E:09 Certificate issuer: /CN=70a424d3-35bd-43df-8245-3fb08ea7af5a Certificate serial: 010D0C9F4328584AC9DBA186FE4C279E9E37D800 Authority key identifier: F2:5A:07:ED:D8:B7:BD:AD:2C:76:F0:5E:9C:50:2A:EA:83:E4:B1:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/439ee44d-2f63-3c0e-80de-7ad7f7cb69f7.roa Signing time: Fri 08 Aug 2025 13:00:40 +0000 ROA not before: Fri 08 Aug 2025 13:00:40 +0000 ROA not after: Thu 06 Nov 2025 14:00:40 +0000 asID: 40583 IP address blocks: 198.236.184.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c9:db:a1:86:fe:4c:27:9e:9e:37:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70a424d3-35bd-43df-8245-3fb08ea7af5a Validity Not Before: Aug 8 13:00:40 2025 GMT Not After : Nov 6 14:00:40 2025 GMT Subject: CN=14efc9d6-282b-49d4-820d-534760e8a2d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:1b:7a:f4:0a:fb:f4:ee:fc:15:a0:4b:4a:e0: 53:9b:0e:92:5b:66:be:20:a9:03:dd:af:fd:3a:26: d3:de:e5:aa:0b:46:82:53:86:36:e5:13:a6:a8:8f: ce:d6:94:d2:86:b6:88:a9:09:30:4a:21:07:b3:d3: 18:54:1a:e4:a6:b5:c9:6f:75:eb:2e:ef:d3:24:72: 60:33:e5:41:94:0b:55:1f:33:ac:34:49:ff:c1:d9: b5:be:e1:56:ac:d4:87:ce:01:e6:3e:4f:c5:30:48: 4d:bc:53:fa:db:f0:36:d3:7c:68:2f:69:f0:f4:50: 08:61:8f:31:28:da:36:ed:87:aa:c9:a2:21:5a:67: 19:62:53:9d:29:a0:92:d1:19:f4:38:6b:c0:7b:f4: f8:b5:32:4a:fe:3e:3a:e1:dc:77:e5:07:c8:2f:f0: 5b:04:60:39:45:51:8b:6f:c1:77:88:36:6a:ff:10: 2c:d7:2e:a8:94:1b:67:dc:4d:69:0d:e0:e0:a1:ca: f6:62:5f:f1:bc:58:55:0a:68:43:dd:4f:ac:9b:af: be:48:6a:86:7d:02:64:91:81:cc:f6:89:93:c2:90: a1:78:8a:3b:2c:9a:d5:63:d6:d2:95:65:cb:27:b6: ba:72:52:08:80:0b:7d:c2:02:20:df:03:99:8d:21: 92:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:1C:08:8D:1E:ED:7C:5C:5F:5D:2A:0C:83:60:C7:C8:2D:BB:4E:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/439ee44d-2f63-3c0e-80de-7ad7f7cb69f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.crl X509v3 Authority Key Identifier: keyid:F2:5A:07:ED:D8:B7:BD:AD:2C:76:F0:5E:9C:50:2A:EA:83:E4:B1:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a.cer sbgp-ipAddrBlock: critical IPv4: 198.236.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:99:fa:b3:6c:5b:8c:a5:f0:40:ef:bb:e9:65:f5:94:84:16: 54:c8:f8:86:a6:e6:a2:f1:00:de:13:e0:79:e1:1d:dc:03:f2: 36:f9:d6:73:f4:4a:4c:7a:ec:b1:8e:fe:b3:b7:2d:55:1a:0b: fb:bf:bb:57:54:b3:47:73:ba:0b:37:49:b7:00:fe:ed:40:3d: ba:24:4f:75:36:5e:dc:ee:de:76:42:c3:3f:50:14:a9:2c:d3: 33:34:31:49:ad:a1:40:9a:b7:4b:6f:85:b0:fd:b0:80:2a:6c: 24:9d:27:b7:62:32:2f:95:5d:2b:46:dc:3a:de:cf:f6:31:da: 74:26:c6:95:76:27:35:13:71:53:b0:4d:f1:3a:9b:5a:d7:f4: 6f:8e:72:12:22:9a:4f:b6:3a:64:e1:4f:eb:46:1b:73:d4:2b: ec:4f:16:70:35:7f:e8:b4:39:24:fa:27:77:07:e9:61:6a:1b: 46:e5:2e:75:77:b7:bc:f2:1a:07:a0:a9:c3:37:d3:8e:73:15: 7a:06:03:b1:4e:ab:71:61:d4:07:9a:b3:3f:12:7b:fa:00:15: 70:ec:64:d2:a1:cb:04:d1:e8:e8:a9:74:37:e8:ef:90:41:4c: d0:55:26:a3:91:3d:3f:79:ba:2b:ad:33:ad:c4:73:d8:f4:bf: 7c:ff:81:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErJ26GG/kwnnp432AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzBhNDI0ZDMtMzViZC00M2RmLTgyNDUtM2ZiMDhlYTdh ZjVhMB4XDTI1MDgwODEzMDA0MFoXDTI1MTEwNjE0MDA0MFowLzEtMCsGA1UEAxMk MTRlZmM5ZDYtMjgyYi00OWQ0LTgyMGQtNTM0NzYwZThhMmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkht69Ar79O78FaBLSuBTmw6SW2a+IKkD3a/9 OibT3uWqC0aCU4Y25ROmqI/O1pTShraIqQkwSiEHs9MYVBrkprXJb3XrLu/TJHJg M+VBlAtVHzOsNEn/wdm1vuFWrNSHzgHmPk/FMEhNvFP62/A203xoL2nw9FAIYY8x KNo27YeqyaIhWmcZYlOdKaCS0Rn0OGvAe/T4tTJK/j464dx35QfIL/BbBGA5RVGL b8F3iDZq/xAs1y6olBtn3E1pDeDgocr2Yl/xvFhVCmhD3U+sm6++SGqGfQJkkYHM 9omTwpCheIo7LJrVY9bSlWXLJ7a6clIIgAt9wgIg3wOZjSGSYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGUcCI0e7XxcX10qDINgx8gtu04JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83MGE0 MjRkMy0zNWJkLTQzZGYtODI0NS0zZmIwOGVhN2FmNWEvNDM5ZWU0NGQtMmY2My0z YzBlLTgwZGUtN2FkN2Y3Y2I2OWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzBhNDI0ZDMtMzViZC00M2RmLTgy NDUtM2ZiMDhlYTdhZjVhLzcwYTQyNGQzLTM1YmQtNDNkZi04MjQ1LTNmYjA4ZWE3 YWY1YS5jcmwwHwYDVR0jBBgwFoAU8loH7di3va0sdvBenFAq6oPksZYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83MGE0MjRkMy0zNWJkLTQzZGYtODI0NS0zZmIw OGVhN2FmNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxuy4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJKZ+rNsW4yl8EDvu+ll9ZSEFlTI+Iam5qLxAN4T4HnhHdwD8jb51nP0 Skx67LGO/rO3LVUaC/u/u1dUs0dzugs3SbcA/u1APbokT3U2Xtzu3nZCwz9QFKks 0zM0MUmtoUCat0tvhbD9sIAqbCSdJ7diMi+VXStG3Drez/Yx2nQmxpV2JzUTcVOw TfE6m1rX9G+OchIimk+2OmThT+tGG3PUK+xPFnA1f+i0OST6J3cH6WFqG0blLnV3 t7zyGgegqcM3045zFXoGA7FOq3Fh1Aeasz8Se/oAFXDsZNKhywTR6OipdDfo75BB TNBVJqORPT95uiutM63Ec9j0v3z/gSE= -----END CERTIFICATE-----Generated at Sun Aug 24 09:34:30 2025 by rpki-client