$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea97c20e-f3e2-485d-ac20-29a4ff8a409c/bcea0c8b-0abb-3fc7-8aaa-854a4b8197e6.roa File: bcea0c8b-0abb-3fc7-8aaa-854a4b8197e6.roa (raw, json) Hash identifier: W+RwrL4DEvvAXvjrEtu9KJIgkY5Nz/4KUbiC/976FiE= Subject key identifier: EA:73:05:AD:3E:8D:34:55:D8:92:87:5D:E7:FC:12:35:EB:F5:32:8A Certificate issuer: /CN=ea97c20e-f3e2-485d-ac20-29a4ff8a409c Certificate serial: 010D0C9F4328584AD7D12A9DE279879E09E2BE80 Authority key identifier: 3A:C1:10:67:DB:BB:DA:B2:0E:F5:E9:1A:69:D2:15:3D:72:E7:7F:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea97c20e-f3e2-485d-ac20-29a4ff8a409c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea97c20e-f3e2-485d-ac20-29a4ff8a409c/bcea0c8b-0abb-3fc7-8aaa-854a4b8197e6.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 53566 IP address blocks: 198.96.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea97c20e-f3e2-485d-ac20-29a4ff8a409c/ea97c20e-f3e2-485d-ac20-29a4ff8a409c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea97c20e-f3e2-485d-ac20-29a4ff8a409c/ea97c20e-f3e2-485d-ac20-29a4ff8a409c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea97c20e-f3e2-485d-ac20-29a4ff8a409c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:2a:9d:e2:79:87:9e:09:e2:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea97c20e-f3e2-485d-ac20-29a4ff8a409c Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=0c42c0ef-bfa2-4600-b9b1-d4df94686f2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:cb:4d:1f:09:5a:34:9b:bb:54:94:78:6b:06: 82:3f:c4:aa:77:1d:f2:69:86:f6:92:11:bb:26:94: 05:3c:aa:5c:f4:cc:e5:83:4b:42:0e:51:2b:d9:0f: 81:2d:88:69:c5:c0:98:e7:f3:88:ab:ff:4b:3b:12: 6a:a2:0f:61:f8:50:21:f1:b7:9a:56:02:ca:df:47: eb:da:e6:36:40:8b:3e:74:11:00:6d:f9:45:df:4d: 0c:72:e9:db:57:2a:4e:fc:cf:b4:bd:be:a9:03:43: 10:6b:05:79:ba:21:41:9f:1c:c9:34:f8:15:cb:18: 6d:99:2f:60:76:cc:1b:b7:10:8f:6e:04:3d:a0:51: 1f:58:ea:a0:d1:e7:68:a3:e8:e0:55:cc:f9:73:6d: 88:47:bb:7d:f1:08:7b:37:f3:96:77:31:2d:60:ed: d6:96:0c:cf:8d:5c:c9:17:04:98:45:10:7e:85:79: 01:b4:33:1e:66:bd:28:31:e7:27:ae:d9:87:fe:09: 9c:d5:1b:99:a2:a7:ca:45:5d:7c:c3:62:ce:c1:5f: fd:b6:c1:1c:f6:a5:0b:9b:00:37:8f:ea:de:ab:d6: 1b:92:b1:f0:98:eb:06:39:84:44:15:d3:46:83:f1: 0d:5c:f1:a2:b3:ba:51:e7:c4:ef:c8:e2:db:03:21: 43:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:73:05:AD:3E:8D:34:55:D8:92:87:5D:E7:FC:12:35:EB:F5:32:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea97c20e-f3e2-485d-ac20-29a4ff8a409c/bcea0c8b-0abb-3fc7-8aaa-854a4b8197e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea97c20e-f3e2-485d-ac20-29a4ff8a409c/ea97c20e-f3e2-485d-ac20-29a4ff8a409c.crl X509v3 Authority Key Identifier: keyid:3A:C1:10:67:DB:BB:DA:B2:0E:F5:E9:1A:69:D2:15:3D:72:E7:7F:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea97c20e-f3e2-485d-ac20-29a4ff8a409c.cer sbgp-ipAddrBlock: critical IPv4: 198.96.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:6d:11:a3:6c:64:a7:16:ce:6e:1b:72:4b:1b:c8:19:d6:cf: 24:12:47:8a:94:11:10:1c:28:8a:0c:43:e8:86:43:ff:30:46: 6c:b1:b1:1f:bc:ea:d8:2a:f2:d0:63:1c:0c:7e:a9:66:8d:b7: d9:40:af:83:1f:eb:44:a8:7f:76:ce:59:9a:e5:c8:1f:a3:41: 32:ea:cb:69:cd:ee:d9:e7:b9:10:37:a5:ef:4a:bf:00:53:8c: ed:29:b0:02:b0:8e:db:98:74:d9:5a:19:da:93:ec:1c:4e:aa: 75:0d:a0:fc:94:b2:35:0e:47:ae:2b:53:2a:66:71:c9:67:0b: e1:73:21:28:93:ca:06:18:0d:19:f3:ef:86:22:ed:85:93:84: de:98:ad:7b:82:1b:45:60:02:a2:f5:c4:d3:63:80:60:6a:7a: a5:60:cf:00:72:7b:c8:28:64:c6:b2:86:96:56:60:95:dc:c3: 6e:16:df:fd:aa:b7:e8:08:6d:a2:84:aa:35:58:d7:1f:d8:cb: 2f:6f:2e:8b:71:55:e0:1c:72:c3:d6:bb:39:04:cc:1b:71:04: ed:3c:f3:e8:59:a9:74:22:ee:a0:5d:f8:aa:82:b2:45:d0:2e: fd:8f:f2:dd:86:49:a8:dd:4e:77:ee:1c:f3:3e:14:01:ed:59: df:c3:95:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0Sqd4nmHngnivoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWE5N2MyMGUtZjNlMi00ODVkLWFjMjAtMjlhNGZmOGE0 MDljMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk MGM0MmMwZWYtYmZhMi00NjAwLWI5YjEtZDRkZjk0Njg2ZjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08tNHwlaNJu7VJR4awaCP8Sqdx3yaYb2khG7 JpQFPKpc9Mzlg0tCDlEr2Q+BLYhpxcCY5/OIq/9LOxJqog9h+FAh8beaVgLK30fr 2uY2QIs+dBEAbflF300McunbVypO/M+0vb6pA0MQawV5uiFBnxzJNPgVyxhtmS9g dswbtxCPbgQ9oFEfWOqg0edoo+jgVcz5c22IR7t98Qh7N/OWdzEtYO3WlgzPjVzJ FwSYRRB+hXkBtDMeZr0oMecnrtmH/gmc1RuZoqfKRV18w2LOwV/9tsEc9qULmwA3 j+req9YbkrHwmOsGOYREFdNGg/ENXPGis7pR58TvyOLbAyFDRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOpzBa0+jTRV2JKHXef8EjXr9TKKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lYTk3 YzIwZS1mM2UyLTQ4NWQtYWMyMC0yOWE0ZmY4YTQwOWMvYmNlYTBjOGItMGFiYi0z ZmM3LThhYWEtODU0YTRiODE5N2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZWE5N2MyMGUtZjNlMi00ODVkLWFj MjAtMjlhNGZmOGE0MDljL2VhOTdjMjBlLWYzZTItNDg1ZC1hYzIwLTI5YTRmZjhh NDA5Yy5jcmwwHwYDVR0jBBgwFoAUOsEQZ9u72rIO9ekaadIVPXLnf8MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lYTk3YzIwZS1mM2UyLTQ4NWQtYWMyMC0yOWE0 ZmY4YTQwOWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxmBUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABltEaNsZKcWzm4bcksbyBnWzyQSR4qUERAcKIoMQ+iGQ/8wRmyxsR+8 6tgq8tBjHAx+qWaNt9lAr4Mf60Sof3bOWZrlyB+jQTLqy2nN7tnnuRA3pe9KvwBT jO0psAKwjtuYdNlaGdqT7BxOqnUNoPyUsjUOR64rUypmcclnC+FzISiTygYYDRnz 74Yi7YWThN6YrXuCG0VgAqL1xNNjgGBqeqVgzwBye8goZMayhpZWYJXcw24W3/2q t+gIbaKEqjVY1x/Yyy9vLotxVeAccsPWuzkEzBtxBO088+hZqXQi7qBd+KqCskXQ Lv2P8t2GSajdTnfuHPM+FAHtWd/DlUw= -----END CERTIFICATE-----Generated at Sun Aug 24 01:06:34 2025 by rpki-client