$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/c7ec8882-d567-38d8-b18d-49b39b44c840.roa File: c7ec8882-d567-38d8-b18d-49b39b44c840.roa (raw, json) Hash identifier: m9Afm8wSkFBN0xnMSzbrIIoPAHh8JKM+86sq0CWzTxg= Subject key identifier: B5:F7:D0:30:15:DB:F6:81:72:39:13:E9:FA:CE:50:FE:4C:29:8E:10 Certificate issuer: /CN=cd198da4-dbcc-4bec-a1a0-31d61d5ccc71 Certificate serial: 010D0C9F4328584AB650F344F0B3C50168DB2300 Authority key identifier: 83:34:B9:70:BA:25:80:24:26:DF:15:AE:FB:C4:6C:D6:42:0B:68:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/c7ec8882-d567-38d8-b18d-49b39b44c840.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 7018 IP address blocks: 208.99.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:50:f3:44:f0:b3:c5:01:68:db:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd198da4-dbcc-4bec-a1a0-31d61d5ccc71 Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=ce98d370-ab50-4dae-94f1-f968a6730ac2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3c:17:fe:28:7b:7d:69:76:b7:66:6f:cf:95: 80:fa:b0:9d:81:4d:14:96:9e:fc:67:2c:4b:3b:1c: cc:fc:8b:8a:81:03:c9:59:32:61:f3:e7:b0:d5:07: 19:7b:de:33:15:3f:11:b3:ed:20:d8:7a:cd:b9:4d: 6e:90:e5:e3:b0:16:20:26:cf:c2:6b:db:2f:1a:4e: 71:71:06:a5:9d:61:fc:86:7e:ec:b6:b3:1a:23:14: 25:14:16:81:fd:26:30:ca:50:23:ae:2d:ce:da:49: 06:db:a5:83:61:c4:82:b7:9a:33:26:b0:04:ca:ba: f0:a4:74:bf:26:75:58:45:c7:2f:ad:58:84:02:93: b0:02:e0:b5:7e:84:8d:e9:47:09:9d:da:b5:f0:90: 3f:9f:d7:5a:f7:0f:f4:f0:38:d7:11:7d:bc:22:33: a0:09:64:57:23:8f:5b:7c:e9:cc:9d:a8:8e:bb:8e: 0b:a5:46:71:1a:5d:1f:f2:38:00:a5:89:93:97:10: 9a:ac:fb:fa:58:41:96:ca:b5:25:46:01:10:dd:67: 22:25:82:f4:40:01:75:89:1b:31:51:18:90:65:d5: 8e:5c:08:d1:d6:bc:0b:c5:0e:77:ca:92:aa:5a:34: 7f:a7:0b:4c:3d:e3:ee:3c:d9:d9:98:eb:51:7c:7a: 14:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:F7:D0:30:15:DB:F6:81:72:39:13:E9:FA:CE:50:FE:4C:29:8E:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/c7ec8882-d567-38d8-b18d-49b39b44c840.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.crl X509v3 Authority Key Identifier: keyid:83:34:B9:70:BA:25:80:24:26:DF:15:AE:FB:C4:6C:D6:42:0B:68:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer sbgp-ipAddrBlock: critical IPv4: 208.99.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:7f:d1:18:13:90:1c:2d:21:02:6f:07:5b:33:82:60:f6:1b: 27:6f:ea:23:b5:65:7c:32:89:11:48:e4:63:9d:d2:a4:34:74: 7d:b3:67:2c:e5:ec:dc:86:d7:b6:1f:21:3e:57:56:c1:14:ae: d4:29:6d:b9:3e:d7:31:72:04:66:a8:d1:ad:45:b3:bd:02:ce: 8a:ae:ab:2b:92:96:38:72:a6:e2:e9:ba:77:67:26:70:3b:54: 67:4a:6c:78:46:45:f2:d3:15:9a:74:5a:96:81:cf:97:75:5e: 32:68:7e:20:1f:7f:92:4c:f6:02:b9:2f:2c:4d:73:ca:71:ae: 0b:44:81:38:bf:2a:c3:db:03:a2:34:00:65:65:c4:02:99:ed: f5:17:60:f6:ef:6f:0f:e4:09:0b:3a:c2:d9:58:2b:58:f4:9a: 86:7b:7f:ee:e1:1d:33:09:3f:ee:37:55:b0:6a:b7:17:4b:68: 9d:ec:f5:5d:75:b0:29:7f:49:61:b6:7a:41:f3:e4:6f:03:07: 86:47:ae:91:80:46:b1:09:34:72:65:49:cd:b7:25:14:01:90: 39:9d:7a:26:07:ec:82:92:d5:75:53:f3:2c:44:a7:ff:57:5b: 95:a5:ef:69:c8:9b:0a:7d:a4:30:d3:f4:10:73:20:b8:c9:45: b8:d9:4b:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq2UPNE8LPFAWjbIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QxOThkYTQtZGJjYy00YmVjLWExYTAtMzFkNjFkNWNj YzcxMB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk Y2U5OGQzNzAtYWI1MC00ZGFlLTk0ZjEtZjk2OGE2NzMwYWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TwX/ih7fWl2t2Zvz5WA+rCdgU0Ulp78ZyxL OxzM/IuKgQPJWTJh8+ew1QcZe94zFT8Rs+0g2HrNuU1ukOXjsBYgJs/Ca9svGk5x cQalnWH8hn7strMaIxQlFBaB/SYwylAjri3O2kkG26WDYcSCt5ozJrAEyrrwpHS/ JnVYRccvrViEApOwAuC1foSN6UcJndq18JA/n9da9w/08DjXEX28IjOgCWRXI49b fOnMnaiOu44LpUZxGl0f8jgApYmTlxCarPv6WEGWyrUlRgEQ3WciJYL0QAF1iRsx URiQZdWOXAjR1rwLxQ53ypKqWjR/pwtMPePuPNnZmOtRfHoU1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLX30DAV2/aBcjkT6frOUP5MKY4QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZDE5 OGRhNC1kYmNjLTRiZWMtYTFhMC0zMWQ2MWQ1Y2NjNzEvYzdlYzg4ODItZDU2Ny0z OGQ4LWIxOGQtNDliMzliNDRjODQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2QxOThkYTQtZGJjYy00YmVjLWEx YTAtMzFkNjFkNWNjYzcxL2NkMTk4ZGE0LWRiY2MtNGJlYy1hMWEwLTMxZDYxZDVj Y2M3MS5jcmwwHwYDVR0jBBgwFoAUgzS5cLolgCQm3xWu+8Rs1kILaC4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZDE5OGRhNC1kYmNjLTRiZWMtYTFhMC0zMWQ2 MWQ1Y2NjNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0GMmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHF/0RgTkBwtIQJvB1szgmD2Gydv6iO1ZXwyiRFI5GOd0qQ0dH2zZyzl 7NyG17YfIT5XVsEUrtQpbbk+1zFyBGao0a1Fs70CzoquqyuSljhypuLpundnJnA7 VGdKbHhGRfLTFZp0WpaBz5d1XjJofiAff5JM9gK5LyxNc8pxrgtEgTi/KsPbA6I0 AGVlxAKZ7fUXYPbvbw/kCQs6wtlYK1j0moZ7f+7hHTMJP+43VbBqtxdLaJ3s9V11 sCl/SWG2ekHz5G8DB4ZHrpGARrEJNHJlSc23JRQBkDmdeiYH7IKS1XVT8yxEp/9X W5Wl72nImwp9pDDT9BBzILjJRbjZS6s= -----END CERTIFICATE-----Generated at Mon Aug 4 14:10:36 2025 by rpki-client