$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/b04e6f71-3e6f-3df8-9e25-69a7d34037e1.roa File: b04e6f71-3e6f-3df8-9e25-69a7d34037e1.roa (raw, json) Hash identifier: gMbjwz0aOJLujOg9FBUdBdV9SCTgrFseKIzZF3KtEO0= Subject key identifier: 8D:38:2A:41:E2:0D:1E:86:B2:9B:05:69:F8:40:01:36:9D:75:5E:F5 Certificate issuer: /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Certificate serial: 010D0C9F4328584AE72BB8C0B8AD153452165D40 Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/b04e6f71-3e6f-3df8-9e25-69a7d34037e1.roa Signing time: Tue 19 Aug 2025 01:00:32 +0000 ROA not before: Tue 19 Aug 2025 01:00:32 +0000 ROA not after: Mon 17 Nov 2025 02:00:32 +0000 asID: 26548 IP address blocks: 198.45.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e7:2b:b8:c0:b8:ad:15:34:52:16:5d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Validity Not Before: Aug 19 01:00:32 2025 GMT Not After : Nov 17 02:00:32 2025 GMT Subject: CN=1a3e5cb1-6560-409e-b075-66cba31894e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a6:1b:28:2a:c5:b4:ca:2c:01:a5:29:d7:c7: e0:82:a3:37:84:27:0f:e5:8d:7f:56:1e:ac:e8:98: e4:89:c8:35:8b:91:30:88:75:29:2a:cd:50:80:e4: ae:37:e4:c3:87:8d:3b:00:4a:65:89:e4:fc:7b:41: 3e:6e:64:66:6b:4a:ba:b1:b0:bf:25:14:a8:07:ed: 75:fe:fc:64:f1:7d:57:71:5f:74:11:80:b9:c3:41: 92:52:56:32:e6:d7:7f:a4:47:c5:90:42:19:00:97: 35:51:8d:b5:3b:36:b6:90:cf:2d:ab:28:63:d3:90: a3:da:7b:fc:42:d3:b1:08:d0:79:9a:8a:a3:d8:2f: 42:e1:71:59:15:69:89:09:81:11:b2:31:f2:66:57: 1d:2e:3e:7f:96:6c:71:66:dd:70:2f:7e:fe:cc:51: b4:1e:0f:99:8e:6f:67:ed:fb:96:10:a7:84:e6:2f: 3f:1a:69:18:4e:28:31:20:18:e7:dc:9a:6c:04:a1: 32:98:2e:ca:51:55:7e:22:c8:9c:52:fc:e1:1f:22: bc:aa:79:bd:cf:28:81:df:2c:36:8c:60:85:81:ed: 5a:f2:c8:f5:80:91:8c:f8:99:f1:45:3d:70:3e:b8: 35:4d:88:aa:be:c8:2a:17:60:f7:19:f0:fd:56:4e: 18:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:38:2A:41:E2:0D:1E:86:B2:9B:05:69:F8:40:01:36:9D:75:5E:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/b04e6f71-3e6f-3df8-9e25-69a7d34037e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl X509v3 Authority Key Identifier: keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer sbgp-ipAddrBlock: critical IPv4: 198.45.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:53:8f:e0:52:b7:bc:e8:11:d2:c8:c7:2d:02:e8:7c:4e:81: ca:5a:bb:90:16:c8:52:39:e9:44:ff:ae:95:7f:a2:e6:82:8a: 75:15:fd:68:db:78:43:af:7c:12:68:7a:02:5d:f4:1c:a6:a7: 61:99:4d:e0:e5:77:4f:9f:02:6b:9f:9c:72:15:41:c1:27:7d: 43:2f:77:00:28:0d:05:24:99:8e:17:a3:da:d3:c7:77:cf:cb: 19:a2:8f:ac:9f:48:d9:2f:1b:4b:14:30:c9:9a:62:54:d3:0f: f7:a7:db:38:b1:ff:87:1f:a8:2e:9e:d7:f2:7f:d9:c2:95:e2: 08:84:0c:71:2f:e5:04:36:65:f9:00:5e:04:db:f8:b9:ed:91: 15:04:b9:d1:50:49:59:fb:1f:66:c3:95:84:c9:13:9f:75:8a: d1:1b:b2:65:44:71:f9:66:89:fa:f2:71:be:f5:5e:8b:f9:52: 67:23:b8:f4:d3:d1:15:2e:49:de:9c:7c:b9:82:82:c3:c3:7d: 07:09:72:a3:f5:c8:11:de:ba:67:85:1f:d0:07:18:c0:11:2a: cf:40:1d:3e:80:9a:dd:7e:eb:af:94:e2:d4:fe:d0:fa:53:b1: 80:7c:f2:72:e0:21:1a:aa:8e:20:de:16:bc:9f:3a:db:33:5b: 82:b4:52:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErnK7jAuK0VNFIWXUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMxOWEyNDYtZDlmYS00ODFhLWE0ZDctMDEwYWY4YzEz MmIzMB4XDTI1MDgxOTAxMDAzMloXDTI1MTExNzAyMDAzMlowLzEtMCsGA1UEAxMk MWEzZTVjYjEtNjU2MC00MDllLWIwNzUtNjZjYmEzMTg5NGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqYbKCrFtMosAaUp18fggqM3hCcP5Y1/Vh6s 6Jjkicg1i5EwiHUpKs1QgOSuN+TDh407AEplieT8e0E+bmRma0q6sbC/JRSoB+11 /vxk8X1XcV90EYC5w0GSUlYy5td/pEfFkEIZAJc1UY21Oza2kM8tqyhj05Cj2nv8 QtOxCNB5moqj2C9C4XFZFWmJCYERsjHyZlcdLj5/lmxxZt1wL37+zFG0Hg+Zjm9n 7fuWEKeE5i8/GmkYTigxIBjn3JpsBKEymC7KUVV+IsicUvzhHyK8qnm9zyiB3yw2 jGCFge1a8sj1gJGM+JnxRT1wPrg1TYiqvsgqF2D3GfD9Vk4YHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI04KkHiDR6GspsFafhAATaddV71MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YzE5 YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBhZjhjMTMyYjMvYjA0ZTZmNzEtM2U2Zi0z ZGY4LTllMjUtNjlhN2QzNDAzN2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWMxOWEyNDYtZDlmYS00ODFhLWE0 ZDctMDEwYWY4YzEzMmIzLzVjMTlhMjQ2LWQ5ZmEtNDgxYS1hNGQ3LTAxMGFmOGMx MzJiMy5jcmwwHwYDVR0jBBgwFoAUGBmr0BGL/MK+/l1zc0BDuuWTrnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YzE5YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBh ZjhjMTMyYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi1zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL9Tj+BSt7zoEdLIxy0C6HxOgcpau5AWyFI56UT/rpV/ouaCinUV/Wjb eEOvfBJoegJd9Bymp2GZTeDld0+fAmufnHIVQcEnfUMvdwAoDQUkmY4Xo9rTx3fP yxmij6yfSNkvG0sUMMmaYlTTD/en2zix/4cfqC6e1/J/2cKV4giEDHEv5QQ2ZfkA XgTb+LntkRUEudFQSVn7H2bDlYTJE591itEbsmVEcflmifrycb71Xov5UmcjuPTT 0RUuSd6cfLmCgsPDfQcJcqP1yBHeumeFH9AHGMARKs9AHT6Amt1+66+U4tT+0PpT sYB88nLgIRqqjiDeFryfOtszW4K0UgU= -----END CERTIFICATE-----Generated at Sun Aug 24 04:23:23 2025 by rpki-client