$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/e5e560e3-7114-3301-9261-7725a1241fa8.roa File: e5e560e3-7114-3301-9261-7725a1241fa8.roa (raw, json) Hash identifier: KeMdgb2FPmU+KqqNSWLhXiLjePFEwJnS42cvdNgeaZA= Subject key identifier: AC:05:02:A6:73:54:D2:E0:8D:FE:BB:A9:97:CC:A3:B9:B6:F6:D9:CF Certificate issuer: /CN=afac962a-1647-4571-99e5-a23db5fd79d7 Certificate serial: 010D0C9F4328584A7E7B5972213845A8DA18C660 Authority key identifier: D7:C7:3D:59:94:8A:75:99:F5:58:48:2E:6D:B3:CD:7C:B9:1B:F2:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/e5e560e3-7114-3301-9261-7725a1241fa8.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 4186 IP address blocks: 198.137.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:59:72:21:38:45:a8:da:18:c6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afac962a-1647-4571-99e5-a23db5fd79d7 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=62d41f37-4db0-4ca0-ab7c-1203d1e28d2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b9:f1:21:f8:46:03:15:b1:59:8b:02:e9:91: fe:8a:96:07:55:6b:a8:ab:f4:93:b4:f3:84:ab:67: 15:58:78:ba:60:e1:e0:94:d9:e6:0c:eb:01:02:bf: ba:54:9b:d2:e2:bb:ee:f1:91:53:8a:bc:0c:e4:bb: 82:35:dc:3c:e2:7a:72:35:d6:c0:69:ce:83:dc:b9: 50:e6:d9:bc:c8:bb:49:41:6d:11:73:73:ed:6b:bf: ca:8d:0c:f6:91:69:d1:bd:ac:79:5f:c8:7a:00:52: ea:1f:0b:9b:d5:6c:8f:92:48:e0:be:2a:2b:ee:a0: 87:7d:79:ad:4c:ea:1a:9a:27:55:25:3f:3c:50:91: c8:cb:6d:b1:1a:c8:57:d3:40:79:bb:29:cd:34:ef: df:25:93:26:e8:bc:ba:ab:24:ef:10:6c:a7:59:b2: bb:70:28:0f:fb:26:fe:5c:19:6b:06:36:3f:5b:e9: 68:75:ab:0b:60:6f:84:b3:99:af:73:71:83:c2:82: ca:91:af:b0:17:a7:58:25:b2:54:c2:72:36:6e:c7: b0:c9:0a:b4:48:5b:ed:1e:4b:41:c4:4a:60:e9:11: e9:66:e3:1e:97:d3:12:2c:53:b4:1e:c6:e4:ab:5b: 6d:2b:88:ea:9d:0a:b9:12:fc:39:22:bd:10:8c:10: 3b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:05:02:A6:73:54:D2:E0:8D:FE:BB:A9:97:CC:A3:B9:B6:F6:D9:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/e5e560e3-7114-3301-9261-7725a1241fa8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.crl X509v3 Authority Key Identifier: keyid:D7:C7:3D:59:94:8A:75:99:F5:58:48:2E:6D:B3:CD:7C:B9:1B:F2:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer sbgp-ipAddrBlock: critical IPv4: 198.137.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:3c:6f:55:16:dd:04:8a:e2:49:43:c0:45:be:7f:ca:1a:74: ec:74:cb:30:6b:0e:77:63:34:9e:2f:ee:53:cd:cb:67:b9:75: 24:88:aa:bd:07:49:70:29:31:be:c2:55:de:b4:ac:db:1a:62: 68:f8:4e:c4:a4:b1:79:7d:ab:84:2a:22:c2:18:13:6d:85:45: a0:18:88:7a:b3:32:3c:8b:bd:82:12:11:76:d4:0b:a7:1d:74: a9:b2:d5:98:64:d2:68:5d:03:2e:77:d1:f5:17:5a:b9:02:d0: 37:76:ce:c4:d0:f3:83:20:77:bb:76:3e:88:06:ab:8c:bd:8e: 19:74:cb:e3:ec:4f:c3:55:01:bf:aa:ab:79:67:5b:ed:fb:bf: c8:7c:cc:30:d4:81:d7:67:27:56:11:6a:ec:33:a2:c6:c5:b1: d5:ab:c9:e4:c7:ee:83:2c:38:0e:d1:44:1d:99:0c:aa:4a:3e: d9:78:2d:0d:ac:34:ff:ab:38:ae:52:8f:3d:c2:70:b8:6b:37: 03:17:52:b4:40:22:89:f2:a7:eb:8d:f5:4f:ad:e0:52:25:12: 26:08:ff:bc:63:0c:54:c4:13:a6:90:ff:ff:a4:e2:35:a4:ee: 36:22:42:01:0d:ec:27:a3:b3:fc:a5:3e:36:07:6e:90:a2:c0: e1:fa:f4:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e1lyIThFqNoYxmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZhYzk2MmEtMTY0Ny00NTcxLTk5ZTUtYTIzZGI1ZmQ3 OWQ3MB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk NjJkNDFmMzctNGRiMC00Y2EwLWFiN2MtMTIwM2QxZTI4ZDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbnxIfhGAxWxWYsC6ZH+ipYHVWuoq/STtPOE q2cVWHi6YOHglNnmDOsBAr+6VJvS4rvu8ZFTirwM5LuCNdw84npyNdbAac6D3LlQ 5tm8yLtJQW0Rc3Pta7/KjQz2kWnRvax5X8h6AFLqHwub1WyPkkjgvior7qCHfXmt TOoamidVJT88UJHIy22xGshX00B5uynNNO/fJZMm6Ly6qyTvEGynWbK7cCgP+yb+ XBlrBjY/W+lodasLYG+Es5mvc3GDwoLKka+wF6dYJbJUwnI2bsewyQq0SFvtHktB xEpg6RHpZuMel9MSLFO0Hsbkq1ttK4jqnQq5Evw5Ir0QjBA70wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKwFAqZzVNLgjf67qZfMo7m29tnPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hZmFj OTYyYS0xNjQ3LTQ1NzEtOTllNS1hMjNkYjVmZDc5ZDcvZTVlNTYwZTMtNzExNC0z MzAxLTkyNjEtNzcyNWExMjQxZmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWZhYzk2MmEtMTY0Ny00NTcxLTk5 ZTUtYTIzZGI1ZmQ3OWQ3L2FmYWM5NjJhLTE2NDctNDU3MS05OWU1LWEyM2RiNWZk NzlkNy5jcmwwHwYDVR0jBBgwFoAU18c9WZSKdZn1WEgubbPNfLkb8i8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hZmFjOTYyYS0xNjQ3LTQ1NzEtOTllNS1hMjNk YjVmZDc5ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxonwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADY8b1UW3QSK4klDwEW+f8oadOx0yzBrDndjNJ4v7lPNy2e5dSSIqr0H SXApMb7CVd60rNsaYmj4TsSksXl9q4QqIsIYE22FRaAYiHqzMjyLvYISEXbUC6cd dKmy1Zhk0mhdAy530fUXWrkC0Dd2zsTQ84Mgd7t2PogGq4y9jhl0y+PsT8NVAb+q q3lnW+37v8h8zDDUgddnJ1YRauwzosbFsdWryeTH7oMsOA7RRB2ZDKpKPtl4LQ2s NP+rOK5Sjz3CcLhrNwMXUrRAIonyp+uN9U+t4FIlEiYI/7xjDFTEE6aQ//+k4jWk 7jYiQgEN7Cejs/ylPjYHbpCiwOH69K4= -----END CERTIFICATE-----Generated at Sat Aug 9 02:59:02 2025 by rpki-client