$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/b388c415-7d7e-3eed-8eef-44a4d358c737.roa File: b388c415-7d7e-3eed-8eef-44a4d358c737.roa (raw, json) Hash identifier: 5v7n4hRVifqIO9QN1oBmZ/hDeRWLsVvw9k7szpfWoJo= Subject key identifier: 45:BC:BC:C9:58:3C:CD:1D:03:C4:D1:C3:5A:A5:60:85:AB:CA:BE:38 Certificate issuer: /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Certificate serial: 010D0C9F4328584ACB40F0A9F75E5CDB7BE42400 Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/b388c415-7d7e-3eed-8eef-44a4d358c737.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 394177 IP address blocks: 158.62.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:40:f0:a9:f7:5e:5c:db:7b:e4:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=b9d6ed88-f5c7-4e9f-93da-3fd0091a4d2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:3e:02:5c:ce:01:53:19:da:c9:4a:70:85:7e: 3e:e3:8b:df:b7:f0:2c:08:1e:45:a6:b7:1f:16:5d: ff:b7:25:f5:7a:2b:c2:29:b2:3a:ee:b0:78:1a:ee: 0a:19:94:85:60:70:fb:c7:6a:af:9f:c2:80:40:d4: 8f:99:be:33:1a:7e:90:06:ad:6d:43:65:05:68:9c: 68:f2:4d:43:b7:3f:80:5a:ce:88:ef:ac:0c:65:62: d0:94:76:6d:26:0b:bc:f1:8f:f5:92:2d:96:08:44: a5:9d:5f:bf:37:ae:c6:cc:30:90:db:90:30:c9:17: a9:1f:79:85:2c:45:4c:8c:e4:e7:3c:32:2b:47:e5: d2:6d:ff:a0:0f:76:e5:f4:06:48:bf:be:29:ae:a2: b4:8f:a5:06:df:ac:08:5f:32:da:61:60:8b:ae:95: bd:d4:3e:1c:cc:78:f7:88:22:f7:81:1b:7b:23:c3: 38:75:26:eb:99:d1:43:36:22:1c:41:a1:44:96:b4: f3:97:19:20:98:da:27:f2:85:75:76:cc:dd:9c:bc: c3:fd:7b:4c:67:59:6c:d6:b6:b2:9a:36:14:67:d9: c0:fd:f8:cb:6f:b0:53:34:f4:4c:41:97:07:35:74: 49:eb:54:8b:e2:2e:3f:ce:19:df:36:96:9b:2c:b5: 18:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:BC:BC:C9:58:3C:CD:1D:03:C4:D1:C3:5A:A5:60:85:AB:CA:BE:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/b388c415-7d7e-3eed-8eef-44a4d358c737.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl X509v3 Authority Key Identifier: keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer sbgp-ipAddrBlock: critical IPv4: 158.62.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:58:a3:33:d9:a6:ce:18:4b:0f:b4:0b:a1:e7:37:d5:75:33: 49:c8:e0:75:e5:c4:6f:c8:d1:be:f0:27:1b:87:c5:cc:3c:fb: 9e:6f:63:0e:0e:9e:79:3f:09:16:73:de:9a:5c:56:57:5f:32: 83:27:b0:18:d8:88:e7:d4:45:80:89:a5:6a:59:b8:81:94:45: d4:b7:00:05:bf:79:22:8e:24:c1:9b:ec:5d:f3:1e:ce:2a:bd: 06:61:3b:b4:bf:5a:8f:d1:69:fc:4f:b7:09:71:9a:ea:7e:4e: 5f:75:d0:b9:54:6b:99:9f:84:73:c8:3c:8a:8f:a1:3a:90:d7: 3d:ea:82:fe:cd:01:25:75:b5:76:9b:11:91:84:26:7a:a0:cd: 82:f8:d0:0d:ce:87:f7:ce:bd:96:62:5d:a3:e7:af:1d:32:eb: ca:3d:0e:15:3e:59:dc:7d:1b:30:e6:05:24:af:f3:69:72:e2: 14:b0:95:0c:39:53:26:e0:b6:33:9b:f8:04:a9:c6:6a:90:0a: 53:bf:aa:79:a5:f7:67:1c:66:96:a3:e1:76:68:33:9e:77:7d: 62:ca:53:c6:a6:80:f7:ac:df:05:b6:4f:e2:fc:0e:eb:a5:19: 80:d9:2b:19:5e:b8:10:0b:6a:54:af:53:cc:79:2a:fc:53:10: a8:32:a6:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQPCp915c23vkJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBlOTcyZTctYWUxZS00NDhjLThlNmMtOGY4MWY3M2I3 N2ExMB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk YjlkNmVkODgtZjVjNy00ZTlmLTkzZGEtM2ZkMDA5MWE0ZDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmT4CXM4BUxnayUpwhX4+44vft/AsCB5Fprcf Fl3/tyX1eivCKbI67rB4Gu4KGZSFYHD7x2qvn8KAQNSPmb4zGn6QBq1tQ2UFaJxo 8k1Dtz+AWs6I76wMZWLQlHZtJgu88Y/1ki2WCESlnV+/N67GzDCQ25AwyRepH3mF LEVMjOTnPDIrR+XSbf+gD3bl9AZIv74prqK0j6UG36wIXzLaYWCLrpW91D4czHj3 iCL3gRt7I8M4dSbrmdFDNiIcQaFElrTzlxkgmNon8oV1dszdnLzD/XtMZ1ls1ray mjYUZ9nA/fjLb7BTNPRMQZcHNXRJ61SL4i4/zhnfNpabLLUYGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEW8vMlYPM0dA8TRw1qlYIWryr44MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5 NzJlNy1hZTFlLTQ0OGMtOGU2Yy04ZjgxZjczYjc3YTEvYjM4OGM0MTUtN2Q3ZS0z ZWVkLThlZWYtNDRhNGQzNThjNzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBlOTcyZTctYWUxZS00NDhjLThl NmMtOGY4MWY3M2I3N2ExLzIwZTk3MmU3LWFlMWUtNDQ4Yy04ZTZjLThmODFmNzNi NzdhMS5jcmwwHwYDVR0jBBgwFoAU9m6h5/hh+dd0ACy7mBw7ijSGX0cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5NzJlNy1hZTFlLTQ0OGMtOGU2Yy04Zjgx ZjczYjc3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnj7GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNYozPZps4YSw+0C6HnN9V1M0nI4HXlxG/I0b7wJxuHxcw8+55vYw4O nnk/CRZz3ppcVldfMoMnsBjYiOfURYCJpWpZuIGURdS3AAW/eSKOJMGb7F3zHs4q vQZhO7S/Wo/RafxPtwlxmup+Tl910LlUa5mfhHPIPIqPoTqQ1z3qgv7NASV1tXab EZGEJnqgzYL40A3Oh/fOvZZiXaPnrx0y68o9DhU+Wdx9GzDmBSSv82ly4hSwlQw5 UybgtjOb+ASpxmqQClO/qnml92ccZpaj4XZoM553fWLKU8amgPes3wW2T+L8Duul GYDZKxleuBALalSvU8x5KvxTEKgypjA= -----END CERTIFICATE-----Generated at Sat Aug 23 17:03:22 2025 by rpki-client