$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/cb74f0af-7659-30b1-9411-47e725d27122.roa File: cb74f0af-7659-30b1-9411-47e725d27122.roa (raw, json) Hash identifier: NH8UKmBdZChNfnfqIUBM2yP58g6dP6fTQ+Cw0e8Ivo0= Subject key identifier: 1C:2D:C5:95:E8:75:AC:A8:8C:79:0A:06:56:E9:CC:6D:E2:85:30:1C Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F4328584ADECBBBCDBC4DC780ADA7A700 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/cb74f0af-7659-30b1-9411-47e725d27122.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 174 IP address blocks: 198.67.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:bb:cd:bc:4d:c7:80:ad:a7:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=5f2ac519-fa2f-4f36-82d3-a1b5613cd256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:01:70:db:99:07:04:b6:2c:fe:12:c1:84:5d: 2e:76:40:46:59:f7:6d:7c:a0:60:44:1a:df:d0:be: cb:19:c5:ad:b2:47:58:b9:2c:26:7b:ea:8a:89:a8: 0f:14:79:f7:52:6d:0d:c1:98:d0:69:56:6c:0b:be: 06:fb:65:2d:c8:e4:f6:53:07:0d:78:70:60:07:cc: 6c:90:58:62:d8:b0:84:bf:55:9f:f3:2c:c4:7b:06: 4e:6d:1a:fc:74:f7:24:db:4d:ae:a5:d7:95:6c:c3: 4d:ff:ff:9e:45:8c:0a:2c:d2:36:26:6e:d2:e4:bb: 5b:a9:a2:3b:f9:a5:88:b3:3e:90:bf:86:c7:20:e8: 84:ab:0f:7d:eb:cb:02:dc:06:58:fe:7a:5d:28:19: 2d:55:a2:fe:9e:80:4b:2d:34:a9:0b:69:c8:f2:b4: d0:87:c3:f8:3b:29:76:9c:69:7c:65:71:ba:be:2f: 47:34:4f:97:1c:25:e1:ad:36:6d:4a:58:52:0c:b6: 8b:75:b7:eb:c2:c5:34:f7:ae:c3:54:7c:0e:36:46: db:d6:d2:b9:2a:02:c0:15:e6:df:a0:b2:36:ac:73: 5a:6b:6a:16:26:51:ad:ca:24:56:e8:f5:13:32:93: e3:a3:78:cc:f8:78:6d:17:3d:e9:48:2d:9c:b2:8b: f4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:2D:C5:95:E8:75:AC:A8:8C:79:0A:06:56:E9:CC:6D:E2:85:30:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/cb74f0af-7659-30b1-9411-47e725d27122.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 198.67.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:6c:3f:0c:78:34:6f:a5:0a:66:38:63:a7:e1:6d:e5:38:60: ee:78:41:70:d0:94:37:be:22:f2:6b:43:c2:29:83:d1:1f:f3: 8f:69:4f:2e:66:37:53:5a:f9:bc:26:94:55:da:24:52:39:b9: 29:9d:29:b8:e1:f1:5d:43:8f:57:49:cc:25:61:2a:df:f3:06: 63:d7:20:f9:fd:0c:6b:22:8f:8c:79:3e:b9:d0:6e:90:a2:ff: f6:ba:c9:dc:56:81:02:3c:9f:ac:e1:71:b6:03:ad:96:20:83: 72:51:fe:5f:86:f7:e3:18:23:de:16:a8:2a:5c:2a:0f:41:ba: 2e:8e:23:66:0f:ba:bd:37:8c:c8:61:be:32:38:65:44:5a:cb: 69:00:90:04:7d:04:07:51:0b:6f:c0:e2:b8:ba:a1:8a:15:c8: 65:5f:e8:c1:b6:0a:48:27:ce:77:d0:80:e3:35:a0:20:37:63: 06:7f:0e:0e:17:29:57:a8:dc:42:c7:88:96:f9:ed:e5:ac:f6: e3:80:bc:49:60:ed:38:d9:89:e2:80:99:13:66:ee:fd:e5:55: 65:15:8c:43:18:c7:47:57:d5:e0:04:e5:95:60:83:90:c0:ad: 94:da:9e:1a:14:82:06:51:0c:1c:57:6c:d9:0b:24:bd:44:99: f2:01:2a:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey7vNvE3HgK2npwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk NWYyYWM1MTktZmEyZi00ZjM2LTgyZDMtYTFiNTYxM2NkMjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQFw25kHBLYs/hLBhF0udkBGWfdtfKBgRBrf 0L7LGcWtskdYuSwme+qKiagPFHn3Um0NwZjQaVZsC74G+2UtyOT2UwcNeHBgB8xs kFhi2LCEv1Wf8yzEewZObRr8dPck202updeVbMNN//+eRYwKLNI2Jm7S5LtbqaI7 +aWIsz6Qv4bHIOiEqw9968sC3AZY/npdKBktVaL+noBLLTSpC2nI8rTQh8P4Oyl2 nGl8ZXG6vi9HNE+XHCXhrTZtSlhSDLaLdbfrwsU0967DVHwONkbb1tK5KgLAFebf oLI2rHNaa2oWJlGtyiRW6PUTMpPjo3jM+HhtFz3pSC2csov0vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBwtxZXodayojHkKBlbpzG3ihTAcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvY2I3NGYwYWYtNzY1OS0z MGIxLTk0MTEtNDdlNzI1ZDI3MTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxkMJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJsPwx4NG+lCmY4Y6fhbeU4YO54QXDQlDe+IvJrQ8Ipg9Ef849pTy5m N1Na+bwmlFXaJFI5uSmdKbjh8V1Dj1dJzCVhKt/zBmPXIPn9DGsij4x5PrnQbpCi //a6ydxWgQI8n6zhcbYDrZYgg3JR/l+G9+MYI94WqCpcKg9Bui6OI2YPur03jMhh vjI4ZURay2kAkAR9BAdRC2/A4ri6oYoVyGVf6MG2CkgnznfQgOM1oCA3YwZ/Dg4X KVeo3ELHiJb57eWs9uOAvElg7TjZieKAmRNm7v3lVWUVjEMYx0dX1eAE5ZVgg5DA rZTanhoUggZRDBxXbNkLJL1EmfIBKoM= -----END CERTIFICATE-----Generated at Sat Aug 23 08:11:52 2025 by rpki-client