$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/d828c22f-e3b3-3bb1-b164-8dc30da5a80d.roa File: d828c22f-e3b3-3bb1-b164-8dc30da5a80d.roa (raw, json) Hash identifier: zV2olNQ3PSrGS7guQWoa50WOwhftbV8ecXRNvTthc0M= Subject key identifier: 3D:09:D8:35:66:28:5C:A8:E9:13:25:B0:E4:91:C5:0F:F2:B2:91:F2 Certificate issuer: /CN=f58d7f53-424c-46bf-bd09-c1a26b82131e Certificate serial: 010D0C9F4328584A6DBB3F0B773D1818C22EA780 Authority key identifier: 4F:F8:6A:9E:17:B8:58:8A:3A:C6:E0:3B:C9:27:12:05:37:B2:22:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/d828c22f-e3b3-3bb1-b164-8dc30da5a80d.roa Signing time: Sun 06 Jul 2025 13:01:03 +0000 ROA not before: Sun 06 Jul 2025 13:01:03 +0000 ROA not after: Sat 04 Oct 2025 13:01:03 +0000 asID: 18943 IP address blocks: 198.168.122.0/23 maxlen: 23 198.168.122.0/24 maxlen: 24 198.168.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/f58d7f53-424c-46bf-bd09-c1a26b82131e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/f58d7f53-424c-46bf-bd09-c1a26b82131e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6d:bb:3f:0b:77:3d:18:18:c2:2e:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f58d7f53-424c-46bf-bd09-c1a26b82131e Validity Not Before: Jul 6 13:01:03 2025 GMT Not After : Oct 4 13:01:03 2025 GMT Subject: CN=ccc40d95-f294-434d-b479-4b53721c5750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f5:21:a2:ea:f2:28:80:95:f7:18:97:dd:41: 55:5e:37:e3:7c:02:3b:bf:80:35:b5:5c:ae:16:69: 99:9a:b1:61:ba:64:0e:e8:16:0e:0b:d2:cf:82:47: e5:cc:dd:b1:ff:1d:53:0d:e1:a0:db:c0:45:d7:dc: 6d:1a:bc:f4:c8:66:73:36:dd:3e:aa:88:31:be:18: dd:df:53:c2:af:68:5a:54:3b:6e:e8:45:94:e3:e8: 20:3e:e3:b3:2f:fc:57:e1:c0:71:86:c4:ee:38:e2: 81:a6:46:e9:09:3a:6c:4d:71:77:72:69:51:29:a5: 11:a5:92:3d:13:62:f9:49:c0:ba:e6:a3:ec:34:37: 48:0a:c7:1e:52:e5:b1:db:4e:70:fd:3e:ba:7d:8c: 78:e8:4e:db:3c:c0:7f:b7:9c:5a:f4:f1:60:b7:6d: 71:6d:45:b6:8e:96:af:59:cb:78:00:13:7c:06:ac: 8f:c3:eb:c8:75:a0:d7:65:27:c1:24:6a:b6:6b:6a: 25:fe:f4:7c:91:8e:34:a6:44:ae:7b:b1:09:98:a1: 45:fb:c8:bd:fa:44:49:0e:86:8d:3a:13:a6:e9:5f: c6:6a:56:25:5c:5d:92:52:81:c2:2b:4c:a6:dc:a8: c1:e1:a7:94:7c:c4:1a:fb:50:e8:23:9c:03:00:cc: b7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:09:D8:35:66:28:5C:A8:E9:13:25:B0:E4:91:C5:0F:F2:B2:91:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/d828c22f-e3b3-3bb1-b164-8dc30da5a80d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/f58d7f53-424c-46bf-bd09-c1a26b82131e.crl X509v3 Authority Key Identifier: keyid:4F:F8:6A:9E:17:B8:58:8A:3A:C6:E0:3B:C9:27:12:05:37:B2:22:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e.cer sbgp-ipAddrBlock: critical IPv4: 198.168.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:0c:f6:34:65:46:ed:93:c2:4b:a7:cf:ae:33:c9:57:d8:c0: d7:d9:be:aa:ab:d1:96:0f:75:97:f5:dd:a5:5e:0d:07:22:cb: 03:8a:36:6a:ab:3d:fa:28:73:62:f0:40:5b:ea:f9:aa:74:44: fb:60:98:37:9d:54:c1:6f:1b:10:55:c4:63:aa:39:3d:52:ed: 90:ec:86:4d:85:fc:29:c1:6c:2f:e8:45:c6:bd:28:da:95:0a: 24:cf:ca:e6:be:91:5a:88:f3:1f:e2:f4:05:76:1d:e8:fb:f6: b6:b9:8e:1e:83:a4:86:56:71:a6:da:37:bb:ec:ed:ae:56:cc: 95:01:b1:6c:f5:37:ff:0e:1e:66:34:76:fd:9c:26:21:f3:6a: 7c:e5:4b:45:77:d1:13:1a:09:d0:79:3e:6b:a7:74:a5:62:77: aa:f4:9f:2a:11:d8:c3:5b:cc:e7:79:e9:05:06:8a:89:59:7a: 1b:9b:03:b8:8b:df:8f:a1:a0:42:5d:f7:1c:65:0a:d7:61:54: 45:ce:43:b1:e1:96:3c:7f:20:3b:78:69:0e:e3:b5:fb:17:9e: 38:3d:64:e1:a3:03:c0:39:02:c5:20:d5:f1:dd:59:1f:a6:43: 94:83:11:c2:34:2c:6e:55:c8:01:5f:41:ca:da:fd:af:5c:26: 50:e7:03:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEptuz8Ldz0YGMIup4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjU4ZDdmNTMtNDI0Yy00NmJmLWJkMDktYzFhMjZiODIx MzFlMB4XDTI1MDcwNjEzMDEwM1oXDTI1MTAwNDEzMDEwM1owLzEtMCsGA1UEAxMk Y2NjNDBkOTUtZjI5NC00MzRkLWI0NzktNGI1MzcyMWM1NzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/UhouryKICV9xiX3UFVXjfjfAI7v4A1tVyu FmmZmrFhumQO6BYOC9LPgkflzN2x/x1TDeGg28BF19xtGrz0yGZzNt0+qogxvhjd 31PCr2haVDtu6EWU4+ggPuOzL/xX4cBxhsTuOOKBpkbpCTpsTXF3cmlRKaURpZI9 E2L5ScC65qPsNDdICsceUuWx205w/T66fYx46E7bPMB/t5xa9PFgt21xbUW2jpav Wct4ABN8BqyPw+vIdaDXZSfBJGq2a2ol/vR8kY40pkSue7EJmKFF+8i9+kRJDoaN OhOm6V/GalYlXF2SUoHCK0ym3KjB4aeUfMQa+1DoI5wDAMy3WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD0J2DVmKFyo6RMlsOSRxQ/yspHyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mNThk N2Y1My00MjRjLTQ2YmYtYmQwOS1jMWEyNmI4MjEzMWUvZDgyOGMyMmYtZTNiMy0z YmIxLWIxNjQtOGRjMzBkYTVhODBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjU4ZDdmNTMtNDI0Yy00NmJmLWJk MDktYzFhMjZiODIxMzFlL2Y1OGQ3ZjUzLTQyNGMtNDZiZi1iZDA5LWMxYTI2Yjgy MTMxZS5jcmwwHwYDVR0jBBgwFoAUT/hqnhe4WIo6xuA7yScSBTeyIhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9mNThkN2Y1My00MjRjLTQ2YmYtYmQwOS1jMWEy NmI4MjEzMWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxqh6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIsM9jRlRu2Twkunz64zyVfYwNfZvqqr0ZYPdZf13aVeDQciywOKNmqr Pfooc2LwQFvq+ap0RPtgmDedVMFvGxBVxGOqOT1S7ZDshk2F/CnBbC/oRca9KNqV CiTPyua+kVqI8x/i9AV2Hej79ra5jh6DpIZWcabaN7vs7a5WzJUBsWz1N/8OHmY0 dv2cJiHzanzlS0V30RMaCdB5PmundKVid6r0nyoR2MNbzOd56QUGiolZehubA7iL 34+hoEJd9xxlCtdhVEXOQ7Hhljx/IDt4aQ7jtfsXnjg9ZOGjA8A5AsUg1fHdWR+m Q5SDEcI0LG5VyAFfQcra/a9cJlDnA74= -----END CERTIFICATE-----Generated at Thu Aug 7 11:10:07 2025 by rpki-client