$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7cfe4957-5dcc-4e3d-8c92-31413817894b/8bb299e1-dc1c-3f3e-9ee6-1035ce9a1954.roa File: 8bb299e1-dc1c-3f3e-9ee6-1035ce9a1954.roa (raw, json) Hash identifier: xznkbhiPwRBg07ZmwDqNMwUNFUVe5MKgxRy0iwR+UPg= Subject key identifier: 1D:9F:14:E5:C6:A0:F1:21:41:EB:60:D6:1D:D4:4A:9F:32:25:79:62 Certificate issuer: /CN=7cfe4957-5dcc-4e3d-8c92-31413817894b Certificate serial: 010D0C9F4328584A58CB0B0293F31590C97EC740 Authority key identifier: D0:12:35:01:BC:61:EE:F8:28:4E:16:FF:DF:A0:28:75:E0:DB:63:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7cfe4957-5dcc-4e3d-8c92-31413817894b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7cfe4957-5dcc-4e3d-8c92-31413817894b/8bb299e1-dc1c-3f3e-9ee6-1035ce9a1954.roa Signing time: Sun 29 Jun 2025 01:00:50 +0000 ROA not before: Sun 29 Jun 2025 01:00:50 +0000 ROA not after: Sat 27 Sep 2025 01:00:50 +0000 asID: 31898 IP address blocks: 198.49.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7cfe4957-5dcc-4e3d-8c92-31413817894b/7cfe4957-5dcc-4e3d-8c92-31413817894b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7cfe4957-5dcc-4e3d-8c92-31413817894b/7cfe4957-5dcc-4e3d-8c92-31413817894b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7cfe4957-5dcc-4e3d-8c92-31413817894b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:58:cb:0b:02:93:f3:15:90:c9:7e:c7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7cfe4957-5dcc-4e3d-8c92-31413817894b Validity Not Before: Jun 29 01:00:50 2025 GMT Not After : Sep 27 01:00:50 2025 GMT Subject: CN=54661371-4021-42ef-98d1-7f465ea62d67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:7f:c5:d4:00:4e:58:ab:66:a4:58:23:a7:07: f4:3f:f5:7d:df:79:51:85:f5:60:12:85:25:bf:f4: 65:87:8f:72:7d:ae:dc:29:3f:49:91:48:61:90:27: 1c:fc:2f:5e:1a:3c:06:ec:dd:51:2b:77:e5:c3:6c: b2:39:0e:f3:e1:24:4d:df:32:f1:ad:6a:cc:66:63: d5:e6:3b:08:ec:2a:95:7c:55:65:78:91:ed:8e:05: c8:fb:24:4b:58:6b:8b:3c:b5:0e:76:b3:72:e5:a3: 10:4c:24:60:18:23:93:0c:e5:41:11:7a:d4:ec:85: 0c:92:04:f4:73:77:e6:04:3e:21:fc:8e:9e:02:bd: 4c:46:63:7a:f2:2d:aa:c7:7d:7f:96:e5:3c:0c:69: 8c:84:14:41:ad:3a:3c:05:a9:7d:42:13:43:23:df: 83:b9:fd:68:56:b6:57:fa:43:5b:30:83:41:68:96: ea:58:68:3e:89:df:cf:0b:82:b2:2c:f8:a0:2c:69: 2a:a8:f9:64:eb:44:d5:dc:48:43:76:ae:b8:b0:8c: 32:aa:8f:8a:aa:7f:30:97:10:f8:02:ba:a0:c2:52: a1:fe:24:43:2f:a3:7e:21:c3:0d:92:b9:25:98:17: 8f:05:c2:6a:3f:06:1c:6f:ee:05:90:99:16:b2:f5: 00:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:9F:14:E5:C6:A0:F1:21:41:EB:60:D6:1D:D4:4A:9F:32:25:79:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7cfe4957-5dcc-4e3d-8c92-31413817894b/8bb299e1-dc1c-3f3e-9ee6-1035ce9a1954.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7cfe4957-5dcc-4e3d-8c92-31413817894b/7cfe4957-5dcc-4e3d-8c92-31413817894b.crl X509v3 Authority Key Identifier: keyid:D0:12:35:01:BC:61:EE:F8:28:4E:16:FF:DF:A0:28:75:E0:DB:63:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7cfe4957-5dcc-4e3d-8c92-31413817894b.cer sbgp-ipAddrBlock: critical IPv4: 198.49.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:40:53:45:c6:15:d3:13:9a:06:87:2c:ed:07:73:e6:10:cb: 1a:f8:08:c3:ae:c4:9a:2c:7c:fc:2f:f5:b6:e0:8a:78:ac:c1: f0:08:b2:56:ba:5c:33:30:1c:f2:5b:bd:a1:d9:b1:d0:28:6a: b5:a0:ba:41:ee:a6:b3:98:51:a0:75:5f:b3:64:e7:1f:3b:8b: 25:89:0c:6a:14:fb:37:2f:f3:7b:a0:3b:39:64:d7:e5:61:db: a9:26:40:50:ee:48:e2:27:a3:f6:35:da:a8:44:de:a8:6f:49: 8b:8f:ff:96:e4:76:99:c1:f3:75:a8:68:44:1d:0e:e9:5f:83: d1:1c:51:ae:57:86:ee:d3:4b:02:3b:8e:d3:24:e4:03:15:f6: 5b:0b:7b:79:d8:1a:7d:f5:cb:30:7f:cc:3f:71:b2:8d:91:7e: 09:c3:d8:34:77:5e:eb:5d:dc:54:10:81:26:e1:21:d8:e7:bc: a1:93:c0:d7:97:e0:3d:05:13:fd:fc:9b:ee:a4:eb:31:4b:c2: ec:87:08:02:57:9e:cc:74:65:6a:55:4a:9f:a6:b9:c6:f1:e6: 07:86:53:ec:44:ac:cf:e9:ed:4f:ca:1a:07:59:e4:52:0c:76: a1:4b:ea:0a:95:c1:97:6b:2e:84:29:b4:71:76:c6:80:d9:ba: 35:bc:e5:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpYywsCk/MVkMl+x0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2NmZTQ5NTctNWRjYy00ZTNkLThjOTItMzE0MTM4MTc4 OTRiMB4XDTI1MDYyOTAxMDA1MFoXDTI1MDkyNzAxMDA1MFowLzEtMCsGA1UEAxMk NTQ2NjEzNzEtNDAyMS00MmVmLTk4ZDEtN2Y0NjVlYTYyZDY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3X/F1ABOWKtmpFgjpwf0P/V933lRhfVgEoUl v/Rlh49yfa7cKT9JkUhhkCcc/C9eGjwG7N1RK3flw2yyOQ7z4SRN3zLxrWrMZmPV 5jsI7CqVfFVleJHtjgXI+yRLWGuLPLUOdrNy5aMQTCRgGCOTDOVBEXrU7IUMkgT0 c3fmBD4h/I6eAr1MRmN68i2qx31/luU8DGmMhBRBrTo8Bal9QhNDI9+Duf1oVrZX +kNbMINBaJbqWGg+id/PC4KyLPigLGkqqPlk60TV3EhDdq64sIwyqo+Kqn8wlxD4 ArqgwlKh/iRDL6N+IcMNkrklmBePBcJqPwYcb+4FkJkWsvUAMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB2fFOXGoPEhQetg1h3USp8yJXliMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83Y2Zl NDk1Ny01ZGNjLTRlM2QtOGM5Mi0zMTQxMzgxNzg5NGIvOGJiMjk5ZTEtZGMxYy0z ZjNlLTllZTYtMTAzNWNlOWExOTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvN2NmZTQ5NTctNWRjYy00ZTNkLThj OTItMzE0MTM4MTc4OTRiLzdjZmU0OTU3LTVkY2MtNGUzZC04YzkyLTMxNDEzODE3 ODk0Yi5jcmwwHwYDVR0jBBgwFoAU0BI1Abxh7vgoThb/36AodeDbY84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS83Y2ZlNDk1Ny01ZGNjLTRlM2QtOGM5Mi0zMTQx MzgxNzg5NGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxjFkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRAU0XGFdMTmgaHLO0Hc+YQyxr4CMOuxJosfPwv9bbginiswfAIsla6 XDMwHPJbvaHZsdAoarWgukHuprOYUaB1X7Nk5x87iyWJDGoU+zcv83ugOzlk1+Vh 26kmQFDuSOIno/Y12qhE3qhvSYuP/5bkdpnB83WoaEQdDulfg9EcUa5Xhu7TSwI7 jtMk5AMV9lsLe3nYGn31yzB/zD9xso2RfgnD2DR3Xutd3FQQgSbhIdjnvKGTwNeX 4D0FE/38m+6k6zFLwuyHCAJXnsx0ZWpVSp+mucbx5geGU+xErM/p7U/KGgdZ5FIM dqFL6gqVwZdrLoQptHF2xoDZujW85QQ= -----END CERTIFICATE-----Generated at Wed Jul 2 05:26:04 2025 by rpki-client