$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/20cf665a-0b99-3e2a-8878-56fb7e8d403a.roa File: 20cf665a-0b99-3e2a-8878-56fb7e8d403a.roa (raw, json) Hash identifier: BfQWG1YUbnAKNGQkjwU+wgoqVLJ9AanjaVptrDyhXWg= Subject key identifier: AB:94:BC:9F:46:C6:EF:D1:07:EB:79:86:57:47:EB:8E:9A:68:CB:E1 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F4328584AB650EF726B5BE6B6FB1615A0 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/20cf665a-0b99-3e2a-8878-56fb7e8d403a.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 32181 IP address blocks: 98.159.224.0/24 maxlen: 24 173.239.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:50:ef:72:6b:5b:e6:b6:fb:16:15:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=75a1cbbe-383d-450a-ba91-5ccf442c67d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5a:a7:50:52:d7:fe:9b:84:a2:f0:32:ec:06: 65:eb:ae:ea:22:52:05:d2:4e:ec:3d:b5:94:c3:9e: a6:5b:6b:ed:41:25:5f:ee:26:0c:d2:e6:2b:33:ae: 48:92:bd:7d:4a:d1:60:43:bc:20:90:7a:ff:2d:43: dc:14:ef:bd:41:bd:51:e3:62:da:12:58:f6:28:13: 04:9b:5f:79:a4:fd:8f:8d:a7:a2:33:81:86:46:27: 46:56:ab:f1:98:1a:f1:c3:5c:4c:fb:6a:ff:ad:cc: 2e:5b:01:52:98:c1:d1:20:d8:11:c5:e5:3a:92:f1: 2b:81:84:cb:8d:6c:45:fe:82:96:f9:9e:9d:bc:05: a1:ec:dc:0a:21:70:41:c2:6a:ed:f3:42:fc:47:1c: c8:4f:39:d6:27:d9:26:88:ef:36:e1:45:14:3d:a4: 85:ee:71:76:4c:22:8f:04:83:fe:7a:b9:7f:00:8b: af:1b:e7:3d:0e:7b:7f:d8:5a:23:95:92:94:ba:5b: db:4d:65:f8:12:88:b8:ff:09:fc:20:33:72:9d:e0: 0c:93:c1:82:b6:7d:15:d5:4c:97:13:57:41:3e:6a: 86:86:b9:74:aa:a5:02:f0:dc:26:c3:13:62:51:29: f3:90:e6:b8:e2:bb:e3:fb:c5:7d:a3:f1:e6:dd:70: 82:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:94:BC:9F:46:C6:EF:D1:07:EB:79:86:57:47:EB:8E:9A:68:CB:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/20cf665a-0b99-3e2a-8878-56fb7e8d403a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 98.159.224.0/24 173.239.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:2e:2e:11:01:1a:ce:ea:8f:ab:47:1b:b0:1b:82:54:61:ea: 76:5f:e8:a2:47:4b:31:b4:b0:ed:f2:c9:b7:b3:ed:b7:56:0a: ff:1f:3e:b9:29:b5:aa:49:f0:a8:fe:db:39:39:32:95:73:63: 95:64:db:48:92:41:fe:12:7b:21:a2:6f:61:ee:d0:6a:b9:4d: d2:b4:92:19:66:4d:c2:87:f6:73:bf:06:2b:8b:2e:8a:c8:02: 5b:90:be:ff:b6:f9:5a:14:01:ef:d0:63:17:fb:3b:24:bb:d4: 81:1e:97:b7:a8:c0:d7:0e:98:dd:46:8c:60:0f:a6:8a:8e:61: 7a:cc:00:d3:2f:39:3c:c2:87:42:92:51:fe:20:10:25:e2:27: ee:db:b2:3f:f4:1f:59:15:11:f5:3f:9c:f0:6a:28:05:23:45: 27:6d:43:4d:08:96:93:f4:f7:6d:46:e6:73:4e:47:8c:61:8d: c4:eb:6d:f8:03:04:5c:f5:52:41:00:e5:1b:0d:66:42:1a:b6: d7:71:91:3a:17:cc:52:4c:c2:1d:9c:4e:67:87:e2:d3:fb:76: fc:71:ca:bd:67:00:04:96:d1:f5:b1:a7:cb:2d:93:30:1e:e3: 05:4d:5c:79:03:fb:5e:10:d9:d8:e6:b3:d7:13:a0:78:53:bf: 41:f8:ad:31 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEq2UO9ya1vmtvsWFaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk NzVhMWNiYmUtMzgzZC00NTBhLWJhOTEtNWNjZjQ0MmM2N2Q4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lqnUFLX/puEovAy7AZl667qIlIF0k7sPbWU w56mW2vtQSVf7iYM0uYrM65Ikr19StFgQ7wgkHr/LUPcFO+9Qb1R42LaElj2KBME m195pP2PjaeiM4GGRidGVqvxmBrxw1xM+2r/rcwuWwFSmMHRINgRxeU6kvErgYTL jWxF/oKW+Z6dvAWh7NwKIXBBwmrt80L8RxzITznWJ9kmiO824UUUPaSF7nF2TCKP BIP+erl/AIuvG+c9Dnt/2FojlZKUulvbTWX4Eoi4/wn8IDNyneAMk8GCtn0V1UyX E1dBPmqGhrl0qqUC8NwmwxNiUSnzkOa44rvj+8V9o/Hm3XCCkwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKuUvJ9Gxu/RB+t5hldH646aaMvhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvMjBjZjY2NWEtMGI5OS0z ZTJhLTg4NzgtNTZmYjdlOGQ0MDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAYp/gAwQA re/MMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABguLhEBGs7qj6tHG7AbglRh6nZf6KJHSzG0sO3yybez7bdW Cv8fPrkptapJ8Kj+2zk5MpVzY5Vk20iSQf4SeyGib2Hu0Gq5TdK0khlmTcKH9nO/ BiuLLorIAluQvv+2+VoUAe/QYxf7OyS71IEel7eowNcOmN1GjGAPpoqOYXrMANMv OTzCh0KSUf4gECXiJ+7bsj/0H1kVEfU/nPBqKAUjRSdtQ00IlpP0921G5nNOR4xh jcTrbfgDBFz1UkEA5RsNZkIattdxkToXzFJMwh2cTmeH4tP7dvxxyr1nAASW0fWx p8stkzAe4wVNXHkD+14Q2djms9cToHhTv0H4rTE= -----END CERTIFICATE-----Generated at Wed Aug 6 13:17:23 2025 by rpki-client