$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d0e97ec8-c881-45aa-ac49-25ee21a93a5f/2f12a581-2028-3c4a-af0c-35b5904553d4.roa File: 2f12a581-2028-3c4a-af0c-35b5904553d4.roa (raw, json) Hash identifier: iRvygJMRlXMZztKLCyi2+YLid/GMEDN7vcFHXaDYLWE= Subject key identifier: 2A:8D:79:ED:2F:E5:A5:7B:18:CF:81:A2:9B:AE:6C:04:39:58:AB:71 Certificate issuer: /CN=d0e97ec8-c881-45aa-ac49-25ee21a93a5f Certificate serial: 010D0C9F4328584AEE26882A38E87DA2949380E0 Authority key identifier: 38:7B:12:B7:DF:0C:3F:9F:52:FE:6B:0D:E3:B5:DB:70:DE:BF:97:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d0e97ec8-c881-45aa-ac49-25ee21a93a5f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d0e97ec8-c881-45aa-ac49-25ee21a93a5f/2f12a581-2028-3c4a-af0c-35b5904553d4.roa Signing time: Thu 21 Aug 2025 13:00:41 +0000 ROA not before: Thu 21 Aug 2025 13:00:41 +0000 ROA not after: Wed 19 Nov 2025 14:00:41 +0000 asID: 393316 IP address blocks: 198.169.236.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d0e97ec8-c881-45aa-ac49-25ee21a93a5f/d0e97ec8-c881-45aa-ac49-25ee21a93a5f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d0e97ec8-c881-45aa-ac49-25ee21a93a5f/d0e97ec8-c881-45aa-ac49-25ee21a93a5f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d0e97ec8-c881-45aa-ac49-25ee21a93a5f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:26:88:2a:38:e8:7d:a2:94:93:80:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e97ec8-c881-45aa-ac49-25ee21a93a5f Validity Not Before: Aug 21 13:00:41 2025 GMT Not After : Nov 19 14:00:41 2025 GMT Subject: CN=a758ed29-4440-4225-a47b-cd8b34106759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:98:d1:d7:5a:78:ad:6a:b2:e3:4e:62:df:68: df:5c:fd:62:20:d9:f5:72:78:c3:33:17:91:9e:aa: aa:41:91:3c:f9:ea:70:43:c6:d8:35:ee:57:25:12: cc:ac:71:c8:bb:d3:35:40:e6:84:ea:2d:80:01:bd: 4d:d5:47:b3:da:a1:79:cf:db:a4:fd:50:1f:40:b0: ea:9b:c5:0c:26:40:a5:b3:c3:d4:75:b0:da:c2:28: fe:12:26:d9:f6:46:81:0a:13:44:2c:e5:bc:e9:22: 48:c2:e1:4f:8f:c1:2e:9d:38:a1:5f:da:6d:80:7c: c8:23:f6:49:2f:bf:cf:b9:99:59:67:49:6b:71:bd: 97:e0:ec:9a:45:c4:5d:8a:cc:b8:07:87:64:7a:b7: 0c:fd:cf:de:8a:5f:76:f7:5c:d7:8e:0b:e0:64:d3: cb:2a:c5:32:60:36:25:08:7c:6f:6b:ae:de:d5:d4: 50:1a:eb:ac:8e:3e:01:6c:ee:87:8c:19:7b:39:b3: 99:00:75:bf:45:e4:ef:16:01:cf:bd:7c:a7:d5:d0: f3:91:af:95:a8:ec:b2:be:ff:ac:8c:df:bc:05:59: d7:3c:92:e7:7a:6d:cc:78:5e:00:55:f0:e4:4d:80: f4:ec:d7:4d:44:ef:a4:62:e9:80:94:5d:08:71:d2: a5:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:8D:79:ED:2F:E5:A5:7B:18:CF:81:A2:9B:AE:6C:04:39:58:AB:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d0e97ec8-c881-45aa-ac49-25ee21a93a5f/2f12a581-2028-3c4a-af0c-35b5904553d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d0e97ec8-c881-45aa-ac49-25ee21a93a5f/d0e97ec8-c881-45aa-ac49-25ee21a93a5f.crl X509v3 Authority Key Identifier: keyid:38:7B:12:B7:DF:0C:3F:9F:52:FE:6B:0D:E3:B5:DB:70:DE:BF:97:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d0e97ec8-c881-45aa-ac49-25ee21a93a5f.cer sbgp-ipAddrBlock: critical IPv4: 198.169.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:28:b9:be:f6:43:a6:68:d9:12:96:2c:5d:c4:2b:a0:e1:38: cb:1d:df:8d:19:51:a7:ae:e6:59:be:d3:4b:8f:91:24:62:2d: 16:de:3d:0d:28:f9:a2:6a:30:a4:43:92:ea:da:50:98:44:12: 9e:01:15:16:44:2a:5e:28:fc:3b:26:5f:14:25:e1:65:30:ff: 08:cf:ad:84:2f:83:11:40:74:52:70:54:0b:59:96:0f:6c:91: 5f:40:d5:95:e5:46:d1:a5:98:63:2b:a3:68:d2:6b:e4:83:97: 23:47:84:11:3e:e8:25:86:61:e5:f6:1b:6c:63:fc:55:eb:ce: db:14:7c:45:e5:f0:e4:f2:16:03:01:87:8b:d4:de:19:27:47: e4:d2:f5:87:87:1f:d8:b4:48:52:4f:2a:e5:91:6c:3b:e3:af: 8d:19:7d:01:1f:db:e8:24:9f:28:4a:36:66:2c:7b:6e:54:11: 2c:aa:2a:6c:73:6d:4c:c5:2f:c0:0e:22:e3:e1:bc:cb:6e:ad: 18:27:5c:c2:41:ae:f8:64:d5:c9:e1:ff:0c:98:f6:50:0d:14: c2:84:26:2d:cd:d8:5b:8e:6e:bf:9b:68:94:4e:5d:d1:0f:1b: 38:9f:37:b7:a3:f1:32:17:a1:53:06:26:84:02:ca:e6:b3:70: f9:35:8f:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruJogqOOh9opSTgOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBlOTdlYzgtYzg4MS00NWFhLWFjNDktMjVlZTIxYTkz YTVmMB4XDTI1MDgyMTEzMDA0MVoXDTI1MTExOTE0MDA0MVowLzEtMCsGA1UEAxMk YTc1OGVkMjktNDQ0MC00MjI1LWE0N2ItY2Q4YjM0MTA2NzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5jR11p4rWqy405i32jfXP1iINn1cnjDMxeR nqqqQZE8+epwQ8bYNe5XJRLMrHHIu9M1QOaE6i2AAb1N1Uez2qF5z9uk/VAfQLDq m8UMJkCls8PUdbDawij+EibZ9kaBChNELOW86SJIwuFPj8EunTihX9ptgHzII/ZJ L7/PuZlZZ0lrcb2X4OyaRcRdisy4B4dkercM/c/eil9291zXjgvgZNPLKsUyYDYl CHxva67e1dRQGuusjj4BbO6HjBl7ObOZAHW/ReTvFgHPvXyn1dDzka+VqOyyvv+s jN+8BVnXPJLnem3MeF4AVfDkTYD07NdNRO+kYumAlF0IcdKlxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCqNee0v5aV7GM+BopuubAQ5WKtxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMGU5 N2VjOC1jODgxLTQ1YWEtYWM0OS0yNWVlMjFhOTNhNWYvMmYxMmE1ODEtMjAyOC0z YzRhLWFmMGMtMzViNTkwNDU1M2Q0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDBlOTdlYzgtYzg4MS00NWFhLWFj NDktMjVlZTIxYTkzYTVmL2QwZTk3ZWM4LWM4ODEtNDVhYS1hYzQ5LTI1ZWUyMWE5 M2E1Zi5jcmwwHwYDVR0jBBgwFoAUOHsSt98MP59S/msN47XbcN6/l0MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMGU5N2VjOC1jODgxLTQ1YWEtYWM0OS0yNWVl MjFhOTNhNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxqnsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUoub72Q6Zo2RKWLF3EK6DhOMsd340ZUaeu5lm+00uPkSRiLRbePQ0o +aJqMKRDkuraUJhEEp4BFRZEKl4o/DsmXxQl4WUw/wjPrYQvgxFAdFJwVAtZlg9s kV9A1ZXlRtGlmGMro2jSa+SDlyNHhBE+6CWGYeX2G2xj/FXrztsUfEXl8OTyFgMB h4vU3hknR+TS9YeHH9i0SFJPKuWRbDvjr40ZfQEf2+gknyhKNmYse25UESyqKmxz bUzFL8AOIuPhvMturRgnXMJBrvhk1cnh/wyY9lANFMKEJi3N2FuObr+baJROXdEP GzifN7ej8TIXoVMGJoQCyuazcPk1j5Y= -----END CERTIFICATE-----Generated at Sun Aug 24 03:20:25 2025 by rpki-client