$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/08b775a9-f16d-34fe-903b-47de515a919a.roa File: 08b775a9-f16d-34fe-903b-47de515a919a.roa (raw, json) Hash identifier: UffhPio9KlrIaqKC+DuO7AcT56TkAnCkxU38pGIM0QI= Subject key identifier: FA:CC:77:6C:E8:A2:AA:B9:90:98:5E:61:0C:75:BD:0C:BF:94:92:24 Certificate issuer: /CN=d57d789e-7c0e-4086-93e5-04d300453dae Certificate serial: 010D0C9F4328584AB91BB3DB19CF4E361D1768C0 Authority key identifier: 2D:7A:3D:DF:E4:E3:E7:29:8A:98:51:FF:DF:5F:09:7B:AC:21:51:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/08b775a9-f16d-34fe-903b-47de515a919a.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 14618 IP address blocks: 198.22.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/d57d789e-7c0e-4086-93e5-04d300453dae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/d57d789e-7c0e-4086-93e5-04d300453dae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:b3:db:19:cf:4e:36:1d:17:68:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d57d789e-7c0e-4086-93e5-04d300453dae Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=4f210491-2b1a-4fc8-84d9-1503a2084d6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f7:57:00:ee:32:36:9d:b8:93:70:e2:f5:11: 07:aa:10:41:82:e4:43:57:85:c2:3d:35:55:90:ac: 79:d9:0c:3a:9e:81:2d:0a:9a:a6:ec:e0:07:95:f5: 7c:bf:46:45:02:b6:fa:a7:81:04:f4:82:e4:da:45: 0d:9a:94:d1:f5:f6:bc:59:53:1a:17:20:b8:c5:c0: b3:3f:cc:2f:a8:93:9a:58:5b:fb:5a:c8:83:ff:2a: c7:37:93:86:7a:40:68:b0:88:4a:b9:95:87:0d:95: a0:ce:0b:db:e6:04:b8:13:d4:27:e6:82:64:2f:eb: ba:a7:98:43:75:e4:a6:0c:52:6a:5d:5d:ff:fd:26: 54:82:b6:5d:e7:5f:45:ec:13:4d:33:38:49:c9:f3: 95:7a:3e:0b:e8:b4:8e:3a:f7:f7:92:05:da:20:14: 5e:ba:3a:96:09:2a:02:03:67:38:1b:40:28:56:57: 72:15:d9:d8:20:df:3b:0b:7e:eb:b2:3a:31:e6:4c: 08:54:e1:3c:c5:a9:a4:fc:7e:d4:03:db:53:70:4f: 4e:70:42:2c:f3:99:5a:ab:65:09:61:93:87:3b:03: e0:d0:53:e8:bc:ff:1e:d9:f4:1e:56:9d:0c:79:77: c1:e5:3c:97:b1:f5:d8:35:ff:ec:da:d2:73:80:e4: 7a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:CC:77:6C:E8:A2:AA:B9:90:98:5E:61:0C:75:BD:0C:BF:94:92:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/08b775a9-f16d-34fe-903b-47de515a919a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/d57d789e-7c0e-4086-93e5-04d300453dae.crl X509v3 Authority Key Identifier: keyid:2D:7A:3D:DF:E4:E3:E7:29:8A:98:51:FF:DF:5F:09:7B:AC:21:51:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae.cer sbgp-ipAddrBlock: critical IPv4: 198.22.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:bc:0c:a7:9d:05:77:c1:19:ac:36:6a:79:b8:7f:d0:a9:e9: 24:a2:ec:18:ed:8f:2f:6d:60:9f:26:5f:40:44:51:e9:26:15: a5:97:2b:26:6a:47:4b:8d:b7:a7:a3:14:64:34:f7:c7:a5:4c: 6b:e8:77:8a:61:b5:8d:a7:5d:e1:26:de:10:8e:28:c1:2a:af: b9:3f:07:bf:89:7f:1c:dd:36:a3:00:65:2a:f6:b4:aa:85:62: ea:32:46:a4:8d:08:cf:83:8a:fb:bc:ee:95:0b:c9:78:cf:cc: ac:27:91:29:1b:bb:88:f1:9d:94:d2:bd:79:bf:67:5c:51:97: 7f:40:6b:5d:62:3c:33:a6:51:6c:7f:ba:b5:f8:fe:02:10:70: 24:a3:85:8e:90:c0:60:3f:10:14:89:2f:5c:41:ed:a0:24:04: 23:32:39:ec:c2:1a:d5:bc:96:e1:c3:19:59:f0:03:c3:00:29: 60:2e:cf:33:fd:a4:15:85:e8:ca:20:a8:f0:d9:14:38:44:e5: 98:97:29:2d:75:90:18:7d:f0:73:a5:3c:76:c1:a6:9a:89:e7: 66:82:a0:2b:77:f1:96:14:5f:bd:e8:e0:38:97:26:73:08:e4: 81:9b:4a:93:56:20:cb:40:12:72:fe:93:b4:b9:b6:ad:49:9c: a8:d4:ce:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5G7PbGc9ONh0XaMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDU3ZDc4OWUtN2MwZS00MDg2LTkzZTUtMDRkMzAwNDUz ZGFlMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk NGYyMTA0OTEtMmIxYS00ZmM4LTg0ZDktMTUwM2EyMDg0ZDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivdXAO4yNp24k3Di9REHqhBBguRDV4XCPTVV kKx52Qw6noEtCpqm7OAHlfV8v0ZFArb6p4EE9ILk2kUNmpTR9fa8WVMaFyC4xcCz P8wvqJOaWFv7WsiD/yrHN5OGekBosIhKuZWHDZWgzgvb5gS4E9Qn5oJkL+u6p5hD deSmDFJqXV3//SZUgrZd519F7BNNMzhJyfOVej4L6LSOOvf3kgXaIBReujqWCSoC A2c4G0AoVldyFdnYIN87C37rsjox5kwIVOE8xamk/H7UA9tTcE9OcEIs85laq2UJ YZOHOwPg0FPovP8e2fQeVp0MeXfB5TyXsfXYNf/s2tJzgOR6SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPrMd2zooqq5kJheYQx1vQy/lJIkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kNTdk Nzg5ZS03YzBlLTQwODYtOTNlNS0wNGQzMDA0NTNkYWUvMDhiNzc1YTktZjE2ZC0z NGZlLTkwM2ItNDdkZTUxNWE5MTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZDU3ZDc4OWUtN2MwZS00MDg2LTkz ZTUtMDRkMzAwNDUzZGFlL2Q1N2Q3ODllLTdjMGUtNDA4Ni05M2U1LTA0ZDMwMDQ1 M2RhZS5jcmwwHwYDVR0jBBgwFoAULXo93+Tj5ymKmFH/318Je6whUcQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9kNTdkNzg5ZS03YzBlLTQwODYtOTNlNS0wNGQz MDA0NTNkYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhbuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+8DKedBXfBGaw2anm4f9Cp6SSi7Bjtjy9tYJ8mX0BEUekmFaWXKyZq R0uNt6ejFGQ098elTGvod4phtY2nXeEm3hCOKMEqr7k/B7+JfxzdNqMAZSr2tKqF YuoyRqSNCM+Divu87pULyXjPzKwnkSkbu4jxnZTSvXm/Z1xRl39Aa11iPDOmUWx/ urX4/gIQcCSjhY6QwGA/EBSJL1xB7aAkBCMyOezCGtW8luHDGVnwA8MAKWAuzzP9 pBWF6MogqPDZFDhE5ZiXKS11kBh98HOlPHbBppqJ52aCoCt38ZYUX73o4DiXJnMI 5IGbSpNWIMtAEnL+k7S5tq1JnKjUzgQ= -----END CERTIFICATE-----Generated at Mon Aug 4 19:13:45 2025 by rpki-client