$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/01cd1793-f8fc-3093-850b-0b0ebdbf290c.roa File: 01cd1793-f8fc-3093-850b-0b0ebdbf290c.roa (raw, json) Hash identifier: 1WdT6kNY2isRC675oUOmx/7sdqD9HzfTqKhCnE369WE= Subject key identifier: 81:B1:47:FC:40:0E:31:87:B1:0F:C8:EB:90:54:8D:A0:B9:5B:B7:F0 Certificate issuer: /CN=afac962a-1647-4571-99e5-a23db5fd79d7 Certificate serial: 010D0C9F4328584A7E7B59593674260BFE409E40 Authority key identifier: D7:C7:3D:59:94:8A:75:99:F5:58:48:2E:6D:B3:CD:7C:B9:1B:F2:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/01cd1793-f8fc-3093-850b-0b0ebdbf290c.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 4185 IP address blocks: 198.137.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:59:59:36:74:26:0b:fe:40:9e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afac962a-1647-4571-99e5-a23db5fd79d7 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=552a71ec-7e80-498e-ab5a-70b966c36c75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c9:43:ad:12:83:f7:d7:0e:af:8f:90:d9:62: a5:fe:18:b8:e1:40:1e:64:91:7f:e9:85:5f:0f:fa: 5b:cc:42:b1:b3:f5:55:f1:b2:27:71:bf:25:37:51: 97:f1:c5:59:c5:65:07:d9:19:90:22:dc:c6:d1:94: 1d:e4:66:68:a1:e5:00:8c:0e:3e:b4:3a:1c:48:5b: 50:cb:36:7c:c4:a3:d9:41:d9:df:6a:c2:79:99:fe: b7:46:0c:df:7f:e2:f2:fa:b6:27:ad:83:18:32:e0: ec:07:97:d7:82:ef:98:c4:f0:61:3d:c9:8f:d0:42: 06:1b:8d:bd:dc:a3:aa:3e:c2:eb:9f:78:74:92:06: 68:97:a2:5a:f3:7a:91:79:70:9c:a9:0d:b6:97:a1: af:c9:85:4c:e4:87:6d:a3:98:ae:f6:1c:67:5b:42: 30:7a:cf:4b:25:ac:03:c6:7b:b4:76:75:8e:8d:c5: 14:4c:bd:dc:7b:05:7a:bf:63:9c:45:99:ca:54:9d: 8a:68:79:80:23:56:e2:28:63:b6:a0:bb:4f:67:ae: 79:9d:3b:13:c7:4c:43:48:3b:45:2c:90:b0:e4:01: 65:6b:33:35:ac:6f:f0:1c:26:d2:6b:03:eb:86:84: 91:26:2d:d9:8d:e2:41:3b:65:8b:3e:52:15:ec:c7: 86:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:B1:47:FC:40:0E:31:87:B1:0F:C8:EB:90:54:8D:A0:B9:5B:B7:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/01cd1793-f8fc-3093-850b-0b0ebdbf290c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.crl X509v3 Authority Key Identifier: keyid:D7:C7:3D:59:94:8A:75:99:F5:58:48:2E:6D:B3:CD:7C:B9:1B:F2:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer sbgp-ipAddrBlock: critical IPv4: 198.137.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:82:dc:b4:35:0c:26:24:07:47:9b:c3:f8:25:f3:d9:65:46: 77:a7:25:e5:7a:57:00:f7:0b:a5:a6:9d:ad:d2:01:43:ff:3b: ac:dc:b4:ad:c5:ee:ff:a3:5c:25:d0:b7:23:ba:d3:03:96:4d: 1b:ec:34:ff:a8:0c:49:a2:ce:9e:97:a9:2c:4b:10:03:77:f3: b6:77:f5:dc:e0:1b:5e:c5:91:66:bd:b0:5d:03:8c:77:d2:5d: 2b:d4:16:5c:e3:55:91:85:07:38:a2:ee:fc:c1:2a:d7:c5:3d: dc:36:1e:67:cf:e1:cd:df:02:0d:72:57:b4:ed:50:53:d7:b9: 7d:78:e0:38:a8:0d:88:f5:79:f8:68:55:59:13:22:bc:52:1f: 6a:66:72:fd:06:df:73:8c:cf:1b:05:da:30:92:14:f8:3d:8d: d4:23:1d:66:1e:49:e3:89:9b:ba:bd:e2:5f:82:d0:08:c4:d2: 03:40:74:02:62:2e:12:63:5f:d5:1c:b4:e8:1c:b2:8b:03:a5: 04:c3:b3:b5:0b:3c:63:bb:e6:55:4d:2d:d5:dd:f9:3b:9a:5b: c4:7c:ae:07:c2:d4:03:a1:80:25:e5:4b:c3:b8:dc:85:27:b8: 86:48:bb:be:e6:de:43:59:e8:12:41:4c:b0:90:3b:fa:1e:a8: 22:bb:e9:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e1lZNnQmC/5AnkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZhYzk2MmEtMTY0Ny00NTcxLTk5ZTUtYTIzZGI1ZmQ3 OWQ3MB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk NTUyYTcxZWMtN2U4MC00OThlLWFiNWEtNzBiOTY2YzM2Yzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqclDrRKD99cOr4+Q2WKl/hi44UAeZJF/6YVf D/pbzEKxs/VV8bIncb8lN1GX8cVZxWUH2RmQItzG0ZQd5GZooeUAjA4+tDocSFtQ yzZ8xKPZQdnfasJ5mf63Rgzff+Ly+rYnrYMYMuDsB5fXgu+YxPBhPcmP0EIGG429 3KOqPsLrn3h0kgZol6Ja83qReXCcqQ22l6GvyYVM5Idto5iu9hxnW0Iwes9LJawD xnu0dnWOjcUUTL3cewV6v2OcRZnKVJ2KaHmAI1biKGO2oLtPZ655nTsTx0xDSDtF LJCw5AFlazM1rG/wHCbSawPrhoSRJi3ZjeJBO2WLPlIV7MeGLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIGxR/xADjGHsQ/I65BUjaC5W7fwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hZmFj OTYyYS0xNjQ3LTQ1NzEtOTllNS1hMjNkYjVmZDc5ZDcvMDFjZDE3OTMtZjhmYy0z MDkzLTg1MGItMGIwZWJkYmYyOTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWZhYzk2MmEtMTY0Ny00NTcxLTk5 ZTUtYTIzZGI1ZmQ3OWQ3L2FmYWM5NjJhLTE2NDctNDU3MS05OWU1LWEyM2RiNWZk NzlkNy5jcmwwHwYDVR0jBBgwFoAU18c9WZSKdZn1WEgubbPNfLkb8i8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hZmFjOTYyYS0xNjQ3LTQ1NzEtOTllNS1hMjNk YjVmZDc5ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxonwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKC3LQ1DCYkB0ebw/gl89llRnenJeV6VwD3C6Wmna3SAUP/O6zctK3F 7v+jXCXQtyO60wOWTRvsNP+oDEmizp6XqSxLEAN387Z39dzgG17FkWa9sF0DjHfS XSvUFlzjVZGFBzii7vzBKtfFPdw2HmfP4c3fAg1yV7TtUFPXuX144DioDYj1efho VVkTIrxSH2pmcv0G33OMzxsF2jCSFPg9jdQjHWYeSeOJm7q94l+C0AjE0gNAdAJi LhJjX9UctOgcsosDpQTDs7ULPGO75lVNLdXd+TuaW8R8rgfC1AOhgCXlS8O43IUn uIZIu77m3kNZ6BJBTLCQO/oeqCK76Vg= -----END CERTIFICATE-----Generated at Thu Aug 7 05:14:04 2025 by rpki-client