$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/eb4f3dda-fc1e-3e2b-8eae-576ef396c7a2.roa File: eb4f3dda-fc1e-3e2b-8eae-576ef396c7a2.roa (raw, json) Hash identifier: kUW0aD4rRGKqU2DuDmdw3q5CyHPgQTdSUIjQf4Cxjm4= Subject key identifier: 34:CC:17:E3:1B:2B:57:BA:7E:52:69:AA:B4:C7:64:52:C3:8F:CE:27 Certificate issuer: /CN=1f4a5fa9-723d-410e-a75f-ffc7662c530a Certificate serial: 010D0C9F4328584AA42B857207D96EC6CED71290 Authority key identifier: 81:34:75:FE:DC:F5:F0:A4:06:EA:39:8E:4F:60:97:68:60:C5:3D:4F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/eb4f3dda-fc1e-3e2b-8eae-576ef396c7a2.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 14618 IP address blocks: 198.99.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/1f4a5fa9-723d-410e-a75f-ffc7662c530a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/1f4a5fa9-723d-410e-a75f-ffc7662c530a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:85:72:07:d9:6e:c6:ce:d7:12:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f4a5fa9-723d-410e-a75f-ffc7662c530a Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=3ea88405-4fa0-463a-b221-116add078ad2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:37:50:5a:94:ee:ab:75:f6:b5:4c:50:6e:f8: 90:62:d0:0c:5e:c1:c8:4e:b7:91:29:18:d0:e9:27: b9:b1:81:7f:ba:9f:80:49:49:ff:e8:3a:0c:88:23: cc:03:c7:e5:0f:96:43:ef:4f:cd:3b:91:8d:ca:dd: 2b:36:31:f5:32:dd:38:42:37:4e:d8:1b:b4:b4:9c: 2c:4e:b2:07:81:51:92:b2:e9:38:b5:ef:61:1d:a3: f7:7f:34:b7:37:02:e1:3f:ae:b0:b6:c4:96:56:16: 66:1b:48:f0:3b:2e:eb:ca:15:98:6b:80:af:b7:65: c7:52:53:f7:bc:0f:7f:c6:25:59:d6:05:8f:cb:13: 8e:af:f8:e4:cc:2d:04:47:8a:bb:fb:37:0e:01:79: d0:90:ba:45:94:ea:f0:92:52:c0:3c:d9:7c:5c:54: 26:71:7e:11:9e:c2:76:46:e8:2e:13:a8:d1:80:3c: d5:44:fe:be:42:79:cb:09:e7:bb:1d:3f:4e:1c:67: 1e:48:eb:96:1e:11:9f:38:2c:33:62:87:79:60:8d: 0b:ca:1a:18:82:14:e5:ad:1c:46:32:5a:1b:70:e5: 38:d9:63:a4:82:96:9b:14:c3:da:95:38:5c:22:12: 4b:00:78:b4:de:65:38:3e:be:40:c3:e5:de:05:7e: bc:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:CC:17:E3:1B:2B:57:BA:7E:52:69:AA:B4:C7:64:52:C3:8F:CE:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/eb4f3dda-fc1e-3e2b-8eae-576ef396c7a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/1f4a5fa9-723d-410e-a75f-ffc7662c530a.crl X509v3 Authority Key Identifier: keyid:81:34:75:FE:DC:F5:F0:A4:06:EA:39:8E:4F:60:97:68:60:C5:3D:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a.cer sbgp-ipAddrBlock: critical IPv4: 198.99.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:ba:57:73:d8:ce:13:2c:8c:b5:48:64:d2:f5:23:09:9a:73: cc:93:7a:77:9a:6c:39:4b:cd:6c:53:85:1b:f9:9a:2b:ed:78: a7:0a:d1:9b:6c:20:94:78:a3:31:11:d3:6c:05:a6:00:11:d9: fb:70:1f:55:4a:5d:62:11:3a:e7:a2:85:fe:29:b4:69:b2:d8: 7c:5f:82:ea:77:3b:8e:b9:78:8a:17:77:ae:d3:e5:1e:09:db: d4:c0:62:a1:7d:38:2d:b0:a3:1c:11:dc:ec:63:b6:33:17:3b: d9:af:5d:79:cc:26:dc:22:d1:9c:b9:8e:5a:32:d6:ff:15:09: 1a:a9:ef:83:83:85:53:91:fb:42:ae:03:a7:06:b3:0c:64:07: 03:83:a9:a4:89:17:84:2e:03:6e:5a:1e:8b:25:6c:b5:73:ec: ff:93:45:0f:91:67:0a:19:c9:34:49:fa:cf:be:2a:4c:64:30: a9:74:3e:da:c3:b6:2c:eb:42:88:28:a4:82:22:9f:31:f6:b7: 80:23:fd:4c:9b:14:41:2a:88:93:fd:21:65:60:63:26:46:5c: 4c:f2:41:ac:e9:9a:b8:f1:77:ce:e6:02:8f:e2:5c:2b:fa:11: 5e:be:1e:f3:ee:6d:d9:c6:35:95:7d:bc:b8:c3:a3:0a:49:b8: fb:f8:67:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqkK4VyB9luxs7XEpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY0YTVmYTktNzIzZC00MTBlLWE3NWYtZmZjNzY2MmM1 MzBhMB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk M2VhODg0MDUtNGZhMC00NjNhLWIyMjEtMTE2YWRkMDc4YWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjdQWpTuq3X2tUxQbviQYtAMXsHITreRKRjQ 6Se5sYF/up+ASUn/6DoMiCPMA8flD5ZD70/NO5GNyt0rNjH1Mt04QjdO2Bu0tJws TrIHgVGSsuk4te9hHaP3fzS3NwLhP66wtsSWVhZmG0jwOy7ryhWYa4Cvt2XHUlP3 vA9/xiVZ1gWPyxOOr/jkzC0ER4q7+zcOAXnQkLpFlOrwklLAPNl8XFQmcX4RnsJ2 RuguE6jRgDzVRP6+QnnLCee7HT9OHGceSOuWHhGfOCwzYod5YI0LyhoYghTlrRxG MlobcOU42WOkgpabFMPalThcIhJLAHi03mU4Pr5Aw+XeBX68zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDTMF+MbK1e6flJpqrTHZFLDj84nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZjRh NWZhOS03MjNkLTQxMGUtYTc1Zi1mZmM3NjYyYzUzMGEvZWI0ZjNkZGEtZmMxZS0z ZTJiLThlYWUtNTc2ZWYzOTZjN2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWY0YTVmYTktNzIzZC00MTBlLWE3 NWYtZmZjNzY2MmM1MzBhLzFmNGE1ZmE5LTcyM2QtNDEwZS1hNzVmLWZmYzc2NjJj NTMwYS5jcmwwHwYDVR0jBBgwFoAUgTR1/tz18KQG6jmOT2CXaGDFPU8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZjRhNWZhOS03MjNkLTQxMGUtYTc1Zi1mZmM3 NjYyYzUzMGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmOKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKS6V3PYzhMsjLVIZNL1Iwmac8yTeneabDlLzWxThRv5mivteKcK0Zts IJR4ozER02wFpgAR2ftwH1VKXWIROueihf4ptGmy2Hxfgup3O465eIoXd67T5R4J 29TAYqF9OC2woxwR3OxjtjMXO9mvXXnMJtwi0Zy5jloy1v8VCRqp74ODhVOR+0Ku A6cGswxkBwODqaSJF4QuA25aHoslbLVz7P+TRQ+RZwoZyTRJ+s++KkxkMKl0PtrD tizrQogopIIinzH2t4Aj/UybFEEqiJP9IWVgYyZGXEzyQazpmrjxd87mAo/iXCv6 EV6+HvPubdnGNZV9vLjDowpJuPv4Z2g= -----END CERTIFICATE-----Generated at Mon Aug 4 19:04:24 2025 by rpki-client