$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/bc6990b7-5135-34a6-8b7f-da63625a8f64.roa File: bc6990b7-5135-34a6-8b7f-da63625a8f64.roa (raw, json) Hash identifier: Mz+ljn0IYyvb825PPL81x0T3CQUdt5gq5EhDR0+nVv8= Subject key identifier: E7:47:58:E4:B8:D1:F1:FC:92:C3:F7:BC:A5:C4:50:83:40:9F:DF:B0 Certificate issuer: /CN=b84ab52d-915e-4d8a-b37b-496ea49c6798 Certificate serial: 010D0C9F4328584AA160D14406CA5E2946911100 Authority key identifier: DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/bc6990b7-5135-34a6-8b7f-da63625a8f64.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 1403 IP address blocks: 198.58.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:60:d1:44:06:ca:5e:29:46:91:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b84ab52d-915e-4d8a-b37b-496ea49c6798 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=2b30a448-7ada-4268-94e0-19a03093bede Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1c:51:8f:d0:e6:46:4a:7f:e2:90:8a:21:59: f4:6f:37:d1:2b:06:bc:95:39:bd:8a:18:05:68:9c: d7:6e:d8:ff:c6:5d:52:16:1c:e7:97:ab:9d:1a:f2: 7a:8f:f0:ce:c1:a9:fc:f3:1e:27:9e:c2:fb:1c:21: 27:46:cf:82:b6:8b:d9:1a:ad:ce:ee:78:4e:aa:b5: be:b7:0e:18:ab:37:7d:09:b9:98:7b:85:d7:22:81: a5:b5:9b:40:db:35:e1:8a:fe:59:9c:65:78:42:d6: 3d:3b:34:08:41:dd:9a:60:fd:70:3a:04:e7:7f:7b: 25:07:d2:c5:66:62:a0:47:0d:c1:6c:d0:aa:77:3f: f7:9b:f7:a2:5b:9b:f6:09:71:b5:70:29:4f:36:80: b5:87:53:e5:f6:0a:99:ae:0b:fa:1a:25:8d:b3:45: fc:42:8a:ac:f2:2e:7f:81:91:fb:ff:e6:1b:a2:c0: cd:9e:3d:86:4d:e6:32:9f:02:52:6f:cc:e0:38:36: ea:08:87:0e:15:b2:78:4a:08:f6:a1:5a:94:5a:cd: d0:41:da:75:34:47:7a:09:d4:96:f7:ce:d1:e7:81: 44:96:36:23:23:df:40:9a:d9:55:1d:c0:21:ad:b4: 68:d5:da:55:66:f6:88:04:0e:5b:d8:5f:a5:1c:59: 40:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:47:58:E4:B8:D1:F1:FC:92:C3:F7:BC:A5:C4:50:83:40:9F:DF:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/bc6990b7-5135-34a6-8b7f-da63625a8f64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl X509v3 Authority Key Identifier: keyid:DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer sbgp-ipAddrBlock: critical IPv4: 198.58.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:bd:e7:0d:66:71:df:22:b4:c2:9a:7c:22:89:9a:de:a3:df: 5a:1d:89:7b:c7:a1:5b:74:7f:91:37:84:79:d0:35:b5:3c:81: 46:2f:3e:b7:5c:54:52:3b:83:63:7a:71:40:4e:c2:dc:aa:ff: b1:55:d1:d2:53:2b:bc:c0:95:53:47:fe:af:13:92:9c:67:29: d6:57:50:a5:b9:74:fe:1d:83:ed:72:f0:26:4f:2a:5c:0b:2b: 19:31:0a:ed:15:b2:a0:77:43:09:8f:aa:8b:9c:f0:59:94:27: 31:07:9b:d5:8c:3e:3f:8a:31:49:85:18:25:75:96:19:e1:82: f5:c1:f3:06:09:2c:27:89:a3:94:2b:f6:fd:4f:91:3f:12:ce: cc:c8:72:d9:24:4f:3e:bf:22:f7:53:e5:6c:23:b6:27:b7:48: 46:25:76:0f:91:37:0e:e6:09:11:43:e4:22:ad:42:eb:92:ed: 20:17:a6:f3:bf:09:b1:7c:17:81:a3:12:02:4a:b1:26:b3:27: d1:96:87:e8:1d:9d:6c:e7:1b:3e:4d:f3:c7:91:18:fb:a8:29: fc:25:39:14:c2:3c:1b:ee:b0:cf:c3:21:a2:d9:14:89:b2:27: f5:7e:f5:fd:42:71:e5:d5:e7:46:d8:6c:99:ef:e9:ca:4d:ff: fa:68:c8:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYNFEBspeKUaREQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg0YWI1MmQtOTE1ZS00ZDhhLWIzN2ItNDk2ZWE0OWM2 Nzk4MB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk MmIzMGE0NDgtN2FkYS00MjY4LTk0ZTAtMTlhMDMwOTNiZWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphxRj9DmRkp/4pCKIVn0bzfRKwa8lTm9ihgF aJzXbtj/xl1SFhznl6udGvJ6j/DOwan88x4nnsL7HCEnRs+CtovZGq3O7nhOqrW+ tw4Yqzd9CbmYe4XXIoGltZtA2zXhiv5ZnGV4QtY9OzQIQd2aYP1wOgTnf3slB9LF ZmKgRw3BbNCqdz/3m/eiW5v2CXG1cClPNoC1h1Pl9gqZrgv6GiWNs0X8Qoqs8i5/ gZH7/+YbosDNnj2GTeYynwJSb8zgODbqCIcOFbJ4Sgj2oVqUWs3QQdp1NEd6CdSW 987R54FEljYjI99AmtlVHcAhrbRo1dpVZvaIBA5b2F+lHFlAiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOdHWOS40fH8ksP3vKXEUINAn9+wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iODRh YjUyZC05MTVlLTRkOGEtYjM3Yi00OTZlYTQ5YzY3OTgvYmM2OTkwYjctNTEzNS0z NGE2LThiN2YtZGE2MzYyNWE4ZjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjg0YWI1MmQtOTE1ZS00ZDhhLWIz N2ItNDk2ZWE0OWM2Nzk4L2I4NGFiNTJkLTkxNWUtNGQ4YS1iMzdiLTQ5NmVhNDlj Njc5OC5jcmwwHwYDVR0jBBgwFoAU3bUy71MQu1ndgStV6Nv35hADJHwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iODRhYjUyZC05MTVlLTRkOGEtYjM3Yi00OTZl YTQ5YzY3OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHxjqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB695w1mcd8itMKafCKJmt6j31odiXvHoVt0f5E3hHnQNbU8gUYvPrdc VFI7g2N6cUBOwtyq/7FV0dJTK7zAlVNH/q8TkpxnKdZXUKW5dP4dg+1y8CZPKlwL KxkxCu0VsqB3QwmPqouc8FmUJzEHm9WMPj+KMUmFGCV1lhnhgvXB8wYJLCeJo5Qr 9v1PkT8SzszIctkkTz6/IvdT5Wwjtie3SEYldg+RNw7mCRFD5CKtQuuS7SAXpvO/ CbF8F4GjEgJKsSazJ9GWh+gdnWznGz5N88eRGPuoKfwlORTCPBvusM/DIaLZFImy J/V+9f1CceXV50bYbJnv6cpN//poyEo= -----END CERTIFICATE-----Generated at Wed Aug 6 00:34:23 2025 by rpki-client