$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dbc89758-ba53-46a7-b1cd-bb9fda66bcd5/3923a9b7-3f7a-30c6-8330-63f9775e5b01.roa File: 3923a9b7-3f7a-30c6-8330-63f9775e5b01.roa (raw, json) Hash identifier: HfNEmWqvA3C4S+aJmnQ8xFdG5kwxdaqbLDUbUC4tGos= Subject key identifier: DD:26:E4:CC:E5:86:8F:A2:81:30:AF:D5:07:F7:E9:49:91:F1:77:15 Certificate issuer: /CN=dbc89758-ba53-46a7-b1cd-bb9fda66bcd5 Certificate serial: 010D0C9F4328584AA0DE0C620469BEDFBA472A00 Authority key identifier: BF:9B:BB:BF:F3:CA:37:C6:FB:EB:4B:FF:36:68:4A:EB:1D:3C:F7:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dbc89758-ba53-46a7-b1cd-bb9fda66bcd5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dbc89758-ba53-46a7-b1cd-bb9fda66bcd5/3923a9b7-3f7a-30c6-8330-63f9775e5b01.roa Signing time: Thu 24 Jul 2025 20:37:30 +0000 ROA not before: Thu 24 Jul 2025 20:37:30 +0000 ROA not after: Wed 22 Oct 2025 20:37:30 +0000 asID: 14618 IP address blocks: 198.207.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dbc89758-ba53-46a7-b1cd-bb9fda66bcd5/dbc89758-ba53-46a7-b1cd-bb9fda66bcd5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dbc89758-ba53-46a7-b1cd-bb9fda66bcd5/dbc89758-ba53-46a7-b1cd-bb9fda66bcd5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dbc89758-ba53-46a7-b1cd-bb9fda66bcd5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a0:de:0c:62:04:69:be:df:ba:47:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbc89758-ba53-46a7-b1cd-bb9fda66bcd5 Validity Not Before: Jul 24 20:37:30 2025 GMT Not After : Oct 22 20:37:30 2025 GMT Subject: CN=ae3e726c-eda4-4248-8dfb-c02cd187a9b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:90:6f:d1:2c:af:37:7e:fb:f4:ca:ea:9f:3a: e9:02:9c:81:b8:67:46:ef:2b:92:d5:3e:0e:70:7d: 7c:2a:54:2e:9b:d3:2e:7a:6e:3e:8e:b3:dd:f8:07: 27:4b:9c:f3:6a:2a:5e:0a:2a:f9:eb:f2:df:5d:38: 2c:95:a1:f9:ae:ff:0b:33:66:da:60:a1:6a:d6:96: 61:50:81:e0:99:80:78:8d:f3:30:c5:86:96:18:e7: 89:0b:d9:d9:e1:da:fc:94:23:7d:cd:d3:a3:87:65: c8:24:c9:67:38:c4:bc:89:4a:dc:37:ac:e8:a3:92: ea:1c:87:44:62:d0:af:c1:73:2d:b1:36:99:ae:de: a7:b0:50:4d:af:73:93:1e:75:52:1f:34:ce:b8:b9: 8b:88:02:79:dc:f5:f7:9c:c7:02:4f:cb:19:10:6d: 24:aa:23:33:7e:91:c0:8a:7d:87:52:f6:f5:0a:e2: 13:b7:c0:c0:64:db:d7:ed:4c:63:1f:73:d8:f6:66: 08:0f:46:60:00:7a:da:50:df:94:39:76:00:6a:8a: 7d:a6:2e:23:89:9c:16:2b:1a:35:43:89:7d:df:6a: 07:6c:f9:4a:f5:36:2a:bc:0d:77:4a:35:2c:4e:4c: 0a:9a:fe:1a:59:4b:a8:94:34:11:d7:cf:ea:a3:92: 55:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:26:E4:CC:E5:86:8F:A2:81:30:AF:D5:07:F7:E9:49:91:F1:77:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dbc89758-ba53-46a7-b1cd-bb9fda66bcd5/3923a9b7-3f7a-30c6-8330-63f9775e5b01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dbc89758-ba53-46a7-b1cd-bb9fda66bcd5/dbc89758-ba53-46a7-b1cd-bb9fda66bcd5.crl X509v3 Authority Key Identifier: keyid:BF:9B:BB:BF:F3:CA:37:C6:FB:EB:4B:FF:36:68:4A:EB:1D:3C:F7:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dbc89758-ba53-46a7-b1cd-bb9fda66bcd5.cer sbgp-ipAddrBlock: critical IPv4: 198.207.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:1b:8a:43:78:9a:00:cd:7d:0e:86:b6:59:d4:25:9b:68:6f: a5:87:c4:ff:05:4e:f0:2c:25:ad:e1:e0:da:85:7a:e0:6b:14: 02:ae:f1:3a:84:94:03:dc:e2:2d:44:3b:d5:25:86:72:b8:37: 4d:f5:e9:39:a9:57:4a:d9:f8:e0:24:a6:59:a8:f5:77:ed:be: 8d:25:90:0a:06:11:cb:97:9c:b8:6c:27:78:f7:0a:8c:ac:83: 97:21:0f:28:77:d4:8a:a1:0a:a5:1b:69:02:10:2b:74:7a:4f: 03:53:66:f1:01:84:7e:7c:ab:70:c0:04:8d:7a:37:26:09:a8: f3:f8:7e:46:11:5c:95:4b:e1:1f:de:0a:81:4b:8b:45:76:19: 70:2b:00:c2:8a:7e:43:44:f3:3f:b3:0c:f3:d7:9a:e5:b9:b4: e6:3e:c7:0b:b9:fe:23:50:78:20:1b:5e:db:c4:ec:17:a2:48: 0d:7e:c7:ef:c0:7e:b0:07:10:67:21:30:25:ef:46:d7:fa:0c: b0:eb:c7:6f:9d:bc:33:2e:f9:f5:46:61:bd:8e:25:af:12:e5: 8d:f8:10:51:ca:a1:5f:d4:25:c0:24:67:a4:17:7b:a5:ab:1d: 24:73:52:7c:41:07:f2:a6:7b:99:11:59:5a:51:76:a1:22:e5: 7b:4f:fc:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqg3gxiBGm+37pHKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGJjODk3NTgtYmE1My00NmE3LWIxY2QtYmI5ZmRhNjZi Y2Q1MB4XDTI1MDcyNDIwMzczMFoXDTI1MTAyMjIwMzczMFowLzEtMCsGA1UEAxMk YWUzZTcyNmMtZWRhNC00MjQ4LThkZmItYzAyY2QxODdhOWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpBv0SyvN3779MrqnzrpApyBuGdG7yuS1T4O cH18KlQum9Muem4+jrPd+AcnS5zzaipeCir56/LfXTgslaH5rv8LM2baYKFq1pZh UIHgmYB4jfMwxYaWGOeJC9nZ4dr8lCN9zdOjh2XIJMlnOMS8iUrcN6zoo5LqHIdE YtCvwXMtsTaZrt6nsFBNr3OTHnVSHzTOuLmLiAJ53PX3nMcCT8sZEG0kqiMzfpHA in2HUvb1CuITt8DAZNvX7UxjH3PY9mYID0ZgAHraUN+UOXYAaop9pi4jiZwWKxo1 Q4l932oHbPlK9TYqvA13SjUsTkwKmv4aWUuolDQR18/qo5JVQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN0m5Mzlho+igTCv1Qf36UmR8XcVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kYmM4 OTc1OC1iYTUzLTQ2YTctYjFjZC1iYjlmZGE2NmJjZDUvMzkyM2E5YjctM2Y3YS0z MGM2LTgzMzAtNjNmOTc3NWU1YjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZGJjODk3NTgtYmE1My00NmE3LWIx Y2QtYmI5ZmRhNjZiY2Q1L2RiYzg5NzU4LWJhNTMtNDZhNy1iMWNkLWJiOWZkYTY2 YmNkNS5jcmwwHwYDVR0jBBgwFoAUv5u7v/PKN8b760v/NmhK6x089+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kYmM4OTc1OC1iYTUzLTQ2YTctYjFjZC1iYjlm ZGE2NmJjZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxs/3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAbikN4mgDNfQ6GtlnUJZtob6WHxP8FTvAsJa3h4NqFeuBrFAKu8TqE lAPc4i1EO9UlhnK4N0316TmpV0rZ+OAkplmo9Xftvo0lkAoGEcuXnLhsJ3j3Coys g5chDyh31IqhCqUbaQIQK3R6TwNTZvEBhH58q3DABI16NyYJqPP4fkYRXJVL4R/e CoFLi0V2GXArAMKKfkNE8z+zDPPXmuW5tOY+xwu5/iNQeCAbXtvE7BeiSA1+x+/A frAHEGchMCXvRtf6DLDrx2+dvDMu+fVGYb2OJa8S5Y34EFHKoV/UJcAkZ6QXe6Wr HSRzUnxBB/Kme5kRWVpRdqEi5XtP/HE= -----END CERTIFICATE-----Generated at Mon Aug 4 15:42:06 2025 by rpki-client