$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8ff4e861-6a2b-3df6-a5c2-780a4680e8e1.roa File: 8ff4e861-6a2b-3df6-a5c2-780a4680e8e1.roa (raw, json) Hash identifier: YDbK6TBSt0loyVJXR3s67XgYwFE90RmTLrEt7RUoo8s= Subject key identifier: F5:99:E6:AA:A2:08:28:C1:9F:6D:6F:D0:B7:CC:EA:E9:0B:13:1D:70 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584AC01624645211C91AA7849580 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8ff4e861-6a2b-3df6-a5c2-780a4680e8e1.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 30036 IP address blocks: 198.40.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:24:64:52:11:c9:1a:a7:84:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=1158470f-081d-4982-8f86-faa87a04787d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:df:4f:e3:b3:e6:35:2f:bd:f9:96:01:5e:8b: 88:1d:2e:54:0d:e7:5c:8b:5b:e7:d0:f0:ef:65:74: 95:cc:b8:6e:c0:7d:48:c7:1a:b7:b4:f4:9c:f3:1b: 6f:58:ce:60:26:33:41:02:15:43:12:dc:c4:f6:a4: 5a:0a:3c:38:a6:f1:5b:cb:1b:a7:18:84:0a:3a:88: 5e:b8:b8:75:5b:3b:59:14:3b:4a:ee:7c:39:9d:51: c8:1b:b9:40:c5:a5:0d:05:f0:24:b9:93:d6:44:51: d8:10:08:96:53:fa:ba:de:1c:c4:17:9f:b2:7c:9d: ee:d9:c0:10:f7:ea:32:e5:37:7a:6f:52:b2:2f:63: 6d:2f:ab:01:54:e3:2d:be:48:e4:31:85:7e:23:35: aa:ef:f6:77:48:c8:41:e0:51:f5:f1:68:05:9f:89: 8f:a2:c4:22:60:d5:b9:d3:a4:d6:56:db:6d:d3:07: 8e:88:37:a4:71:10:67:24:b3:5e:01:48:2e:ca:a9: e8:db:0e:5d:6d:dc:97:cc:a8:8b:70:a4:24:30:34: 07:f6:d3:75:63:ea:42:8f:b6:65:6c:ae:9a:a2:db: ec:2d:11:59:07:e4:f5:3a:68:ae:30:9c:88:69:a6: 3f:01:e7:1a:82:ff:da:63:35:ae:24:69:2f:21:1f: a2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:99:E6:AA:A2:08:28:C1:9F:6D:6F:D0:B7:CC:EA:E9:0B:13:1D:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8ff4e861-6a2b-3df6-a5c2-780a4680e8e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 198.40.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:dc:82:c2:97:ed:aa:93:3f:8c:b6:1a:d6:f5:c2:6c:48:41: 2a:cc:a4:9b:ea:6d:a4:51:a9:0c:f8:a3:97:15:fe:02:8f:4f: 76:cf:17:c9:f9:e8:07:7d:9c:40:b1:72:3a:bf:21:fe:89:1a: 67:b6:fd:2d:1c:c7:e2:8e:e7:25:c5:f7:cc:bc:22:6e:9c:0a: d8:fd:6e:1d:db:f2:de:ee:ed:90:41:55:56:c1:67:61:27:b4: ba:17:5c:cd:c0:a7:87:50:49:8a:7e:d5:48:6d:2d:d0:e9:9e: 35:7c:67:d6:8b:bc:1b:f7:d8:1b:ed:4d:9e:11:ba:b3:5a:3b: d4:16:0d:eb:9e:88:c3:9b:6c:b1:41:d2:42:d3:c6:67:11:d8: 8a:83:05:8a:92:93:61:11:ac:02:1b:5b:d9:8a:7d:b8:d3:16: 10:51:d4:43:44:0f:dd:7a:54:46:5b:d5:12:19:32:be:87:28: 01:50:44:9c:7c:41:3b:09:5d:ff:aa:53:c9:c7:af:34:9a:86: 88:1d:40:e3:8d:04:d3:81:23:d9:2c:ed:b1:fb:dd:14:ce:4b: 57:e0:bf:fe:c3:22:20:78:83:a0:9e:f9:61:b4:84:4b:31:1e: 8d:2f:cc:07:bf:27:b3:f0:0f:e6:4e:e7:91:24:8e:b7:0c:1a: f2:3d:60:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFiRkUhHJGqeElYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk MTE1ODQ3MGYtMDgxZC00OTgyLThmODYtZmFhODdhMDQ3ODdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0t9P47PmNS+9+ZYBXouIHS5UDedci1vn0PDv ZXSVzLhuwH1Ixxq3tPSc8xtvWM5gJjNBAhVDEtzE9qRaCjw4pvFbyxunGIQKOohe uLh1WztZFDtK7nw5nVHIG7lAxaUNBfAkuZPWRFHYEAiWU/q63hzEF5+yfJ3u2cAQ 9+oy5Td6b1KyL2NtL6sBVOMtvkjkMYV+IzWq7/Z3SMhB4FH18WgFn4mPosQiYNW5 06TWVttt0weOiDekcRBnJLNeAUguyqno2w5dbdyXzKiLcKQkMDQH9tN1Y+pCj7Zl bK6aotvsLRFZB+T1OmiuMJyIaaY/Aecagv/aYzWuJGkvIR+iOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPWZ5qqiCCjBn21v0LfM6ukLEx1wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOGZmNGU4NjEtNmEyYi0z ZGY2LWE1YzItNzgwYTQ2ODBlOGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxijrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ3cgsKX7aqTP4y2Gtb1wmxIQSrMpJvqbaRRqQz4o5cV/gKPT3bPF8n5 6Ad9nECxcjq/If6JGme2/S0cx+KO5yXF98y8Im6cCtj9bh3b8t7u7ZBBVVbBZ2En tLoXXM3Ap4dQSYp+1UhtLdDpnjV8Z9aLvBv32BvtTZ4RurNaO9QWDeueiMObbLFB 0kLTxmcR2IqDBYqSk2ERrAIbW9mKfbjTFhBR1ENED916VEZb1RIZMr6HKAFQRJx8 QTsJXf+qU8nHrzSahogdQOONBNOBI9ks7bH73RTOS1fgv/7DIiB4g6Ce+WG0hEsx Ho0vzAe/J7PwD+ZO55EkjrcMGvI9YJM= -----END CERTIFICATE-----Generated at Thu Aug 7 01:56:23 2025 by rpki-client