$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/4049b2cc-3517-376c-bb5b-5b5249957e1e.roa File: 4049b2cc-3517-376c-bb5b-5b5249957e1e.roa (raw, json) Hash identifier: NA8+NiRKdpXIU4nuHjZ5lCMo60KETbIhQ2zN6t7rJxQ= Subject key identifier: A4:70:50:30:BD:47:36:C6:C5:48:20:40:E9:9B:72:FA:69:1B:7B:F8 Certificate issuer: /CN=2d00478e-6a9e-4570-970a-f0a5baefc323 Certificate serial: 010D0C9F4328584A4F05CF34D000CB5877128AF8 Authority key identifier: 43:02:31:2F:E6:67:48:11:3A:0F:60:A4:03:91:D9:D5:01:66:40:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/4049b2cc-3517-376c-bb5b-5b5249957e1e.roa Signing time: Wed 25 Jun 2025 13:01:04 +0000 ROA not before: Wed 25 Jun 2025 13:01:04 +0000 ROA not after: Tue 23 Sep 2025 13:01:04 +0000 asID: 7850 IP address blocks: 198.187.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4f:05:cf:34:d0:00:cb:58:77:12:8a:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d00478e-6a9e-4570-970a-f0a5baefc323 Validity Not Before: Jun 25 13:01:04 2025 GMT Not After : Sep 23 13:01:04 2025 GMT Subject: CN=707373d2-6c4a-498a-8bf5-b6f36571cfb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d3:e4:91:00:5b:b1:0f:b4:62:26:44:c3:ee: e1:16:b7:8d:19:6c:9d:55:8f:fd:2c:aa:7a:54:dc: 35:e1:7a:1c:d1:d9:d8:13:70:db:5e:2b:22:e3:1e: 11:5b:9d:ee:41:88:85:04:d4:f3:9c:5b:88:d2:dd: 63:81:92:16:5d:b3:ed:fd:43:c8:63:1e:42:90:24: 18:cd:30:75:58:8a:c9:d5:ce:ae:07:1a:df:1c:cf: 1e:fb:47:5e:f5:18:b5:bd:ee:87:68:23:27:7d:37: 53:7b:f4:b6:39:92:ae:89:a4:47:72:c1:9b:ad:b7: d7:90:79:7e:d5:3c:fe:53:df:b2:82:d9:a4:a9:a4: c7:c8:72:cb:26:5d:fa:f8:c3:7f:b1:f4:fc:cc:ea: fc:5c:f9:8d:98:91:8e:58:95:43:79:f1:d9:3c:9c: 8d:20:17:e4:0e:cd:19:75:4b:d6:41:60:01:83:f6: 29:f0:9f:65:0e:6f:2d:a7:b4:d6:58:51:f0:16:f5: 15:8f:4e:36:d6:57:d8:71:f0:ce:75:79:2b:b1:51: c0:f1:b7:75:31:f5:91:8a:f2:45:10:0f:bd:f1:c7: c7:93:73:6f:14:43:ba:e1:c2:7a:8d:cb:ce:b8:09: 68:6f:70:03:76:56:bd:a9:ca:3f:28:36:56:48:76: 1c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:70:50:30:BD:47:36:C6:C5:48:20:40:E9:9B:72:FA:69:1B:7B:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/4049b2cc-3517-376c-bb5b-5b5249957e1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.crl X509v3 Authority Key Identifier: keyid:43:02:31:2F:E6:67:48:11:3A:0F:60:A4:03:91:D9:D5:01:66:40:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323.cer sbgp-ipAddrBlock: critical IPv4: 198.187.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:d4:37:d5:80:5c:51:90:97:31:3e:66:11:4e:a4:bd:77:df: 71:f2:3d:eb:dd:a5:cd:a9:f9:f2:da:68:bc:c5:e9:ea:cc:f5: 26:17:19:eb:d8:28:7b:97:ab:a0:43:a9:de:92:7d:03:81:9a: 25:1f:9b:54:50:37:ff:89:63:05:b8:68:93:6f:1c:8c:d3:db: 86:ae:e0:a2:0f:a0:9f:17:e0:36:ce:33:ab:23:7d:fd:7c:5b: 13:4a:ae:59:29:47:17:31:3b:53:c2:43:72:58:75:b3:41:3a: 47:7f:16:39:c4:dd:52:46:6a:62:74:2f:31:3a:11:c5:2a:d6: 80:6e:f8:8a:a1:61:75:20:b3:20:88:2e:c7:12:e2:7b:af:21: 1c:17:57:50:3d:b3:bc:8f:9a:2d:87:45:6a:57:ce:c3:97:aa: 31:30:81:f7:ae:0b:b8:32:52:a8:d9:af:15:71:29:9a:24:98: 4e:4b:26:3e:4d:ec:77:29:b7:16:4c:bc:38:96:d8:f4:2a:53: 94:5b:d2:29:86:9b:b5:be:3d:41:a1:4c:f8:f2:e4:82:7a:71: 9a:eb:37:fb:00:c9:f7:0b:3c:bf:2e:45:fd:a4:50:a3:cf:0b: 0d:c5:b6:83:5f:6e:90:49:6b:3f:a1:07:15:f3:7d:26:46:6e: 92:0a:25:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpPBc800ADLWHcSivgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQwMDQ3OGUtNmE5ZS00NTcwLTk3MGEtZjBhNWJhZWZj MzIzMB4XDTI1MDYyNTEzMDEwNFoXDTI1MDkyMzEzMDEwNFowLzEtMCsGA1UEAxMk NzA3MzczZDItNmM0YS00OThhLThiZjUtYjZmMzY1NzFjZmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNPkkQBbsQ+0YiZEw+7hFreNGWydVY/9LKp6 VNw14Xoc0dnYE3DbXisi4x4RW53uQYiFBNTznFuI0t1jgZIWXbPt/UPIYx5CkCQY zTB1WIrJ1c6uBxrfHM8e+0de9Ri1ve6HaCMnfTdTe/S2OZKuiaRHcsGbrbfXkHl+ 1Tz+U9+ygtmkqaTHyHLLJl36+MN/sfT8zOr8XPmNmJGOWJVDefHZPJyNIBfkDs0Z dUvWQWABg/Yp8J9lDm8tp7TWWFHwFvUVj0421lfYcfDOdXkrsVHA8bd1MfWRivJF EA+98cfHk3NvFEO64cJ6jcvOuAlob3ADdla9qco/KDZWSHYc7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKRwUDC9RzbGxUggQOmbcvppG3v4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZDAw NDc4ZS02YTllLTQ1NzAtOTcwYS1mMGE1YmFlZmMzMjMvNDA0OWIyY2MtMzUxNy0z NzZjLWJiNWItNWI1MjQ5OTU3ZTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmQwMDQ3OGUtNmE5ZS00NTcwLTk3 MGEtZjBhNWJhZWZjMzIzLzJkMDA0NzhlLTZhOWUtNDU3MC05NzBhLWYwYTViYWVm YzMyMy5jcmwwHwYDVR0jBBgwFoAUQwIxL+ZnSBE6D2CkA5HZ1QFmQPgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZDAwNDc4ZS02YTllLTQ1NzAtOTcwYS1mMGE1 YmFlZmMzMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxrv9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHUN9WAXFGQlzE+ZhFOpL1333HyPevdpc2p+fLaaLzF6erM9SYXGevY KHuXq6BDqd6SfQOBmiUfm1RQN/+JYwW4aJNvHIzT24au4KIPoJ8X4DbOM6sjff18 WxNKrlkpRxcxO1PCQ3JYdbNBOkd/FjnE3VJGamJ0LzE6EcUq1oBu+IqhYXUgsyCI LscS4nuvIRwXV1A9s7yPmi2HRWpXzsOXqjEwgfeuC7gyUqjZrxVxKZokmE5LJj5N 7HcptxZMvDiW2PQqU5Rb0imGm7W+PUGhTPjy5IJ6cZrrN/sAyfcLPL8uRf2kUKPP Cw3FtoNfbpBJaz+hBxXzfSZGbpIKJaA= -----END CERTIFICATE-----Generated at Mon Jun 30 17:31:53 2025 by rpki-client