$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/db079d7c-e10d-3559-b3fd-25b4ec6973c8.roa File: db079d7c-e10d-3559-b3fd-25b4ec6973c8.roa (raw, json) Hash identifier: 8gnGNjGQQqx/DdewOWFAx8a1JziTfpKY9aO8dDc8e0E= Subject key identifier: CE:CA:29:37:0C:DD:DF:F6:0A:C7:A2:CA:DA:CC:2D:EC:3F:37:F1:8E Certificate issuer: /CN=f58d7f53-424c-46bf-bd09-c1a26b82131e Certificate serial: 010D0C9F4328584A74B5CF454175E6E3C1F24880 Authority key identifier: 4F:F8:6A:9E:17:B8:58:8A:3A:C6:E0:3B:C9:27:12:05:37:B2:22:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/db079d7c-e10d-3559-b3fd-25b4ec6973c8.roa Signing time: Wed 09 Jul 2025 01:00:49 +0000 ROA not before: Wed 09 Jul 2025 01:00:49 +0000 ROA not after: Tue 07 Oct 2025 01:00:49 +0000 asID: 23404 IP address blocks: 198.168.122.0/23 maxlen: 23 198.168.122.0/24 maxlen: 24 198.168.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/f58d7f53-424c-46bf-bd09-c1a26b82131e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/f58d7f53-424c-46bf-bd09-c1a26b82131e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:74:b5:cf:45:41:75:e6:e3:c1:f2:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f58d7f53-424c-46bf-bd09-c1a26b82131e Validity Not Before: Jul 9 01:00:49 2025 GMT Not After : Oct 7 01:00:49 2025 GMT Subject: CN=d9d20ad1-6c1c-433f-8cc7-30d1f8bda686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d9:9f:ab:28:5d:21:b4:2a:12:b5:8d:d2:6b: 40:09:9c:59:00:79:9e:80:52:dd:48:56:38:ca:f0: 13:25:c7:af:47:2e:89:fd:0a:55:21:33:4a:d2:5d: 36:a0:cf:03:7d:36:c8:9f:02:20:0a:33:2c:c8:19: a8:42:d4:5f:85:b7:8f:d7:41:8b:17:28:01:41:e8: 27:d8:f9:54:22:65:c4:ec:87:0b:52:3b:0b:b4:c2: 97:26:73:7e:a4:25:01:b9:21:d5:42:6c:d9:57:a0: f8:f9:e9:7f:fc:07:68:b4:bb:10:e5:04:c2:67:38: 9d:e6:f8:2f:f7:3f:43:e3:96:f7:46:cb:6f:ff:09: dc:36:ef:1c:90:bc:b7:44:8e:a9:95:6c:e9:b0:b3: 20:aa:ae:59:d3:9a:d3:35:6c:7f:e4:b9:47:47:33: 91:51:d3:e4:e5:70:91:af:ba:80:60:56:0b:4e:6a: 54:2e:e3:69:55:2f:93:e5:cd:4f:6c:ad:1e:4a:76: e5:1d:a5:95:ae:2b:98:bc:df:fe:76:5b:e8:e1:bb: 78:07:63:d1:10:c8:12:6d:18:07:aa:cb:9e:29:84: db:cd:c8:55:87:28:91:a2:c9:5f:64:7b:62:12:58: 22:b8:d9:ef:a2:84:50:9b:ba:33:58:e6:88:38:7d: 42:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:CA:29:37:0C:DD:DF:F6:0A:C7:A2:CA:DA:CC:2D:EC:3F:37:F1:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/db079d7c-e10d-3559-b3fd-25b4ec6973c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/f58d7f53-424c-46bf-bd09-c1a26b82131e.crl X509v3 Authority Key Identifier: keyid:4F:F8:6A:9E:17:B8:58:8A:3A:C6:E0:3B:C9:27:12:05:37:B2:22:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e.cer sbgp-ipAddrBlock: critical IPv4: 198.168.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:6f:31:a9:43:89:1b:b9:9d:b2:54:1e:a7:42:2e:dd:61:c7: b0:94:5a:b9:2b:e2:f1:49:54:36:cd:93:9e:83:5f:4e:04:82: aa:fc:9f:05:87:e2:7c:47:a3:64:48:d6:94:61:c6:e6:56:99: 0b:71:16:cd:ac:8b:38:63:73:51:63:be:37:64:64:e5:2a:fc: 27:2d:7c:56:30:57:0b:93:63:03:29:fa:5b:0b:0d:44:59:67: 8a:a5:ba:15:74:cd:b5:60:d8:1d:a7:7a:91:5c:6a:9e:52:4c: 18:5e:fc:44:df:9c:af:06:0c:19:85:07:37:5d:ff:d5:4d:b5: f2:c3:48:0b:c4:1e:3a:51:1d:02:62:51:4f:07:d5:fc:d4:80: c0:1d:9d:8c:f7:d3:05:cb:35:de:d9:6d:65:93:21:b0:03:bd: c4:55:57:30:a3:d4:6b:d6:a6:ca:f2:61:74:1e:be:e0:d3:73: 20:0b:d9:e2:ea:2a:88:6f:20:83:8e:39:fa:1e:d9:2f:6f:55: 47:38:0b:74:1b:bf:d5:54:3e:4b:78:54:39:5f:98:11:8b:c3: 02:3b:12:2c:52:8d:e3:55:a5:d6:c8:bb:d2:3e:8e:ed:e1:ef: ad:6f:3d:4c:43:eb:25:60:ea:4c:4d:9a:9b:bb:cb:55:62:1a: 29:f3:fc:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp0tc9FQXXm48HySIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjU4ZDdmNTMtNDI0Yy00NmJmLWJkMDktYzFhMjZiODIx MzFlMB4XDTI1MDcwOTAxMDA0OVoXDTI1MTAwNzAxMDA0OVowLzEtMCsGA1UEAxMk ZDlkMjBhZDEtNmMxYy00MzNmLThjYzctMzBkMWY4YmRhNjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9mfqyhdIbQqErWN0mtACZxZAHmegFLdSFY4 yvATJcevRy6J/QpVITNK0l02oM8DfTbInwIgCjMsyBmoQtRfhbeP10GLFygBQegn 2PlUImXE7IcLUjsLtMKXJnN+pCUBuSHVQmzZV6D4+el//AdotLsQ5QTCZzid5vgv 9z9D45b3Rstv/wncNu8ckLy3RI6plWzpsLMgqq5Z05rTNWx/5LlHRzORUdPk5XCR r7qAYFYLTmpULuNpVS+T5c1PbK0eSnblHaWVriuYvN/+dlvo4bt4B2PREMgSbRgH qsueKYTbzchVhyiRoslfZHtiElgiuNnvooRQm7ozWOaIOH1CcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM7KKTcM3d/2CseiytrMLew/N/GOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mNThk N2Y1My00MjRjLTQ2YmYtYmQwOS1jMWEyNmI4MjEzMWUvZGIwNzlkN2MtZTEwZC0z NTU5LWIzZmQtMjViNGVjNjk3M2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjU4ZDdmNTMtNDI0Yy00NmJmLWJk MDktYzFhMjZiODIxMzFlL2Y1OGQ3ZjUzLTQyNGMtNDZiZi1iZDA5LWMxYTI2Yjgy MTMxZS5jcmwwHwYDVR0jBBgwFoAUT/hqnhe4WIo6xuA7yScSBTeyIhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9mNThkN2Y1My00MjRjLTQ2YmYtYmQwOS1jMWEy NmI4MjEzMWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxqh6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRvMalDiRu5nbJUHqdCLt1hx7CUWrkr4vFJVDbNk56DX04Egqr8nwWH 4nxHo2RI1pRhxuZWmQtxFs2sizhjc1FjvjdkZOUq/CctfFYwVwuTYwMp+lsLDURZ Z4qluhV0zbVg2B2nepFcap5STBhe/ETfnK8GDBmFBzdd/9VNtfLDSAvEHjpRHQJi UU8H1fzUgMAdnYz30wXLNd7ZbWWTIbADvcRVVzCj1GvWpsryYXQevuDTcyAL2eLq KohvIIOOOfoe2S9vVUc4C3Qbv9VUPkt4VDlfmBGLwwI7EixSjeNVpdbIu9I+ju3h 761vPUxD6yVg6kxNmpu7y1ViGinz/Og= -----END CERTIFICATE-----Generated at Thu Aug 7 11:16:30 2025 by rpki-client