$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b13d137-bc85-4935-b740-e59f0078def5/2b4dc5a9-d239-3f44-83bc-9066a51948b0.roa File: 2b4dc5a9-d239-3f44-83bc-9066a51948b0.roa (raw, json) Hash identifier: USNe+F8ktGFVrcMPYnBJuHLamM0gnkAX3KVJsAcWoPg= Subject key identifier: 45:C1:4E:AE:09:09:80:73:A1:7B:BE:3D:7B:98:20:25:F8:C8:D5:C1 Certificate issuer: /CN=9b13d137-bc85-4935-b740-e59f0078def5 Certificate serial: 010D0C9F4328584AA85BBBEDD61E3631B9520280 Authority key identifier: E0:D4:11:D6:BB:3A:5F:7A:B7:88:06:8A:62:47:02:33:E2:16:4E:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b13d137-bc85-4935-b740-e59f0078def5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b13d137-bc85-4935-b740-e59f0078def5/2b4dc5a9-d239-3f44-83bc-9066a51948b0.roa Signing time: Sun 27 Jul 2025 13:01:04 +0000 ROA not before: Sun 27 Jul 2025 13:01:04 +0000 ROA not after: Sat 25 Oct 2025 13:01:04 +0000 asID: 40443 IP address blocks: 198.133.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b13d137-bc85-4935-b740-e59f0078def5/9b13d137-bc85-4935-b740-e59f0078def5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b13d137-bc85-4935-b740-e59f0078def5/9b13d137-bc85-4935-b740-e59f0078def5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b13d137-bc85-4935-b740-e59f0078def5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a8:5b:bb:ed:d6:1e:36:31:b9:52:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b13d137-bc85-4935-b740-e59f0078def5 Validity Not Before: Jul 27 13:01:04 2025 GMT Not After : Oct 25 13:01:04 2025 GMT Subject: CN=8623ef38-6930-4eb0-911c-e829b92c7cf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:6e:e3:4b:3c:12:16:96:6f:aa:b8:6e:25:5e: 5b:37:ef:94:3b:29:9e:7c:20:06:af:f3:33:9d:26: ec:1c:ba:97:24:4d:0c:ee:f2:00:86:9a:d4:00:f0: 1d:4c:e3:f9:28:4c:8a:8b:b3:6e:77:26:fc:e7:54: 92:90:e2:10:b6:45:ea:86:56:ef:0f:dd:27:85:3f: 9e:82:ec:b6:a8:35:40:7a:89:56:ab:a8:2e:df:7e: 73:d7:86:4e:5a:3e:f4:56:b6:97:96:60:1e:12:7d: 61:45:e7:e8:96:2a:ba:18:79:69:90:0b:56:a4:f0: 4e:fa:96:4a:3e:31:49:5f:91:35:0c:3c:5e:e8:14: a2:a9:92:f4:a3:15:85:a9:8e:56:fb:d7:ea:7c:25: 7f:43:8d:e9:cb:28:10:5d:1e:c9:1a:96:7f:c9:18: 65:29:02:40:47:8c:99:d3:9d:e9:39:2c:2c:a6:3e: 89:a3:89:38:b7:5b:fd:5b:71:07:a2:88:4c:98:1c: ca:65:28:06:a9:e7:f4:3b:c2:ce:77:8d:9b:d5:95: ad:5f:4a:b5:64:51:7b:e9:fc:c2:d5:b0:b5:49:a9: ea:98:84:5b:49:cb:c5:a5:d7:c8:24:4b:26:6b:8d: 9f:a2:1f:27:ee:fa:b7:8d:55:72:23:fa:55:bd:1c: 57:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:C1:4E:AE:09:09:80:73:A1:7B:BE:3D:7B:98:20:25:F8:C8:D5:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b13d137-bc85-4935-b740-e59f0078def5/2b4dc5a9-d239-3f44-83bc-9066a51948b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b13d137-bc85-4935-b740-e59f0078def5/9b13d137-bc85-4935-b740-e59f0078def5.crl X509v3 Authority Key Identifier: keyid:E0:D4:11:D6:BB:3A:5F:7A:B7:88:06:8A:62:47:02:33:E2:16:4E:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b13d137-bc85-4935-b740-e59f0078def5.cer sbgp-ipAddrBlock: critical IPv4: 198.133.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:5e:f0:70:1f:d8:6e:14:e0:e2:d7:86:01:19:87:c5:b2:83: 99:e1:15:59:f9:b9:16:b7:52:01:5a:73:9c:07:01:d0:17:84: 2d:82:ee:78:24:af:c8:16:39:19:e4:27:37:21:50:03:49:62: 2c:7c:d0:9c:87:e3:8f:67:f5:54:18:34:40:9e:72:51:c1:81: 09:79:7a:5c:d1:4d:a5:74:58:2b:e6:79:e7:8e:3a:8c:56:2a: 62:f1:7e:9d:bd:04:46:80:a0:8c:b7:2f:29:42:d1:0d:f6:8a: fa:06:25:5f:05:73:b9:c8:a6:4b:ed:22:44:d6:0d:fb:8e:53: e1:71:d0:0b:fb:d4:72:ca:7c:07:d4:52:19:88:5a:4a:04:d6: cf:d3:d5:aa:2a:7c:c7:4a:8a:32:5f:06:03:c5:6a:14:10:97: e2:26:f4:33:46:0c:86:1d:16:66:ab:e6:7c:08:a6:2c:dd:e4: e5:c8:6a:aa:19:01:b0:be:2d:4e:76:39:12:be:54:03:10:e0: 66:da:2f:1f:70:2b:2e:b4:98:10:af:0b:4e:e6:c6:ff:10:df: 01:4f:89:bb:10:27:f3:04:e8:ae:0e:a5:74:21:c6:2b:ab:da: af:98:9d:1e:90:9e:3e:d9:81:33:ab:11:b2:89:a5:63:36:03: 19:96:e6:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqoW7vt1h42MblSAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWIxM2QxMzctYmM4NS00OTM1LWI3NDAtZTU5ZjAwNzhk ZWY1MB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk ODYyM2VmMzgtNjkzMC00ZWIwLTkxMWMtZTgyOWI5MmM3Y2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl27jSzwSFpZvqrhuJV5bN++UOymefCAGr/Mz nSbsHLqXJE0M7vIAhprUAPAdTOP5KEyKi7Nudyb851SSkOIQtkXqhlbvD90nhT+e guy2qDVAeolWq6gu335z14ZOWj70VraXlmAeEn1hRefoliq6GHlpkAtWpPBO+pZK PjFJX5E1DDxe6BSiqZL0oxWFqY5W+9fqfCV/Q43pyygQXR7JGpZ/yRhlKQJAR4yZ 053pOSwspj6Jo4k4t1v9W3EHoohMmBzKZSgGqef0O8LOd42b1ZWtX0q1ZFF76fzC 1bC1SanqmIRbScvFpdfIJEsma42foh8n7vq3jVVyI/pVvRxXjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEXBTq4JCYBzoXu+PXuYICX4yNXBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85YjEz ZDEzNy1iYzg1LTQ5MzUtYjc0MC1lNTlmMDA3OGRlZjUvMmI0ZGM1YTktZDIzOS0z ZjQ0LTgzYmMtOTA2NmE1MTk0OGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOWIxM2QxMzctYmM4NS00OTM1LWI3 NDAtZTU5ZjAwNzhkZWY1LzliMTNkMTM3LWJjODUtNDkzNS1iNzQwLWU1OWYwMDc4 ZGVmNS5jcmwwHwYDVR0jBBgwFoAU4NQR1rs6X3q3iAaKYkcCM+IWTlUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85YjEzZDEzNy1iYzg1LTQ5MzUtYjc0MC1lNTlm MDA3OGRlZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxoXWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9e8HAf2G4U4OLXhgEZh8Wyg5nhFVn5uRa3UgFac5wHAdAXhC2C7ngk r8gWORnkJzchUANJYix80JyH449n9VQYNECeclHBgQl5elzRTaV0WCvmeeeOOoxW KmLxfp29BEaAoIy3LylC0Q32ivoGJV8Fc7nIpkvtIkTWDfuOU+Fx0Av71HLKfAfU UhmIWkoE1s/T1aoqfMdKijJfBgPFahQQl+Im9DNGDIYdFmar5nwIpizd5OXIaqoZ AbC+LU52ORK+VAMQ4GbaLx9wKy60mBCvC07mxv8Q3wFPibsQJ/ME6K4OpXQhxiur 2q+YnR6Qnj7ZgTOrEbKJpWM2AxmW5go= -----END CERTIFICATE-----Generated at Tue Aug 12 22:46:34 2025 by rpki-client