$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/cf38211e-a9ed-37ec-9041-432fd370bc59.roa File: cf38211e-a9ed-37ec-9041-432fd370bc59.roa (raw, json) Hash identifier: 8GMrKpACsta2DI5ZpAOBwfoEcXpGD7tvPxAt4Tc4kns= Subject key identifier: 2C:A8:B2:82:4A:5A:55:8E:AA:68:DD:57:39:5B:75:D6:79:78:CD:15 Certificate issuer: /CN=84bfb9e8-1bae-4540-9cae-b6811ecadff5 Certificate serial: 010D0C9F4328584A7E7B5928F4D84F94EA1B87C0 Authority key identifier: 33:87:39:DF:1C:AC:F8:79:BB:E8:E9:5D:84:6F:84:56:83:2C:A5:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/cf38211e-a9ed-37ec-9041-432fd370bc59.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 398653 IP address blocks: 198.62.160.0/24 maxlen: 24 2602:fbd3::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/84bfb9e8-1bae-4540-9cae-b6811ecadff5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/84bfb9e8-1bae-4540-9cae-b6811ecadff5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:59:28:f4:d8:4f:94:ea:1b:87:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84bfb9e8-1bae-4540-9cae-b6811ecadff5 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=4f76bf8f-9e4a-4404-8ef8-1bf247741262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a4:c4:fb:85:a0:69:ed:43:e2:74:85:68:9d: d0:a8:b2:6e:80:94:7c:ad:fe:54:d4:db:a9:7c:e9: 3e:d9:f3:6d:97:21:6e:e8:7f:e7:3d:13:be:cf:4e: 4a:3b:0e:02:87:6b:64:1f:a5:e1:c7:0a:c0:ce:25: 38:79:45:3b:6f:b2:98:4d:1f:0a:c9:88:47:17:a3: 64:e0:15:a5:f4:99:ce:92:c1:d8:52:80:ed:1d:2d: d9:41:13:2c:c3:84:5a:67:19:b9:59:86:71:74:6f: f6:c3:2a:32:ef:16:5f:88:6f:08:08:67:0a:64:9e: 0b:95:85:9f:2b:25:53:ba:df:0b:d7:87:e8:1e:fe: 0c:f9:f5:e2:6c:40:23:f5:76:1a:44:b7:61:f1:3d: 1f:aa:a8:db:0b:db:d5:de:4b:45:e2:1b:97:73:c1: 1e:dd:cd:3d:07:b6:2f:04:bf:8c:ff:b2:db:31:7e: db:e4:61:2b:dd:20:51:96:60:14:a4:e4:b5:82:c6: 2b:e9:b5:8b:c7:c5:c2:25:5c:6e:c7:a6:a6:4c:a1: 50:d9:bd:de:b3:85:4c:d8:86:17:d5:80:3a:5e:a2: 06:57:5d:88:65:30:f5:b6:3f:5d:28:9f:c3:c9:9f: 99:58:32:4d:2b:32:1d:8e:1a:ff:27:91:6c:1e:b4: fe:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:A8:B2:82:4A:5A:55:8E:AA:68:DD:57:39:5B:75:D6:79:78:CD:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/cf38211e-a9ed-37ec-9041-432fd370bc59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/84bfb9e8-1bae-4540-9cae-b6811ecadff5.crl X509v3 Authority Key Identifier: keyid:33:87:39:DF:1C:AC:F8:79:BB:E8:E9:5D:84:6F:84:56:83:2C:A5:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5.cer sbgp-ipAddrBlock: critical IPv4: 198.62.160.0/24 IPv6: 2602:fbd3::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:72:ce:a1:22:00:a0:9f:57:17:4d:c9:90:10:80:3e:e4:d7: 70:6d:65:47:15:19:d5:e4:6c:58:90:e6:53:de:bd:a6:76:73: fb:c2:7d:b2:f5:45:38:ff:c9:85:ab:58:e8:aa:1e:77:a3:2c: 68:6e:d6:b9:3d:11:55:9c:ba:6a:c1:a5:22:7f:08:7b:dd:fa: dd:2f:50:ca:a0:50:1f:87:f7:e4:9e:80:01:55:43:e7:ce:7f: cd:17:60:a0:c0:53:5d:aa:c0:5f:97:be:c2:c9:d9:3c:a9:3e: 54:72:f3:81:7a:ae:68:fc:43:14:80:24:35:5a:05:93:b2:ee: e2:91:fa:fd:48:eb:de:8f:82:c1:07:7b:89:19:dd:b3:4a:ac: f7:62:ec:ff:04:14:d6:2c:46:c6:7a:b6:b6:77:2d:87:ac:e4: 01:9b:c8:aa:9d:8f:fa:d2:7a:f9:bd:33:fe:18:13:ac:91:64: 0d:34:8a:4d:5a:00:4a:ac:ef:0a:38:36:1a:a0:26:d2:17:38: e3:f2:03:a8:58:b0:4a:be:46:88:5a:ec:be:c6:6b:ed:9d:cc: f4:c6:bb:4e:12:c4:d5:72:4e:f5:47:e3:7e:55:f3:68:07:2f: 69:28:3f:53:e8:ac:77:97:30:13:0f:1f:45:98:6f:25:7a:6b: 11:f7:98:aa -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEp+e1ko9NhPlOobh8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRiZmI5ZTgtMWJhZS00NTQwLTljYWUtYjY4MTFlY2Fk ZmY1MB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk NGY3NmJmOGYtOWU0YS00NDA0LThlZjgtMWJmMjQ3NzQxMjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqTE+4Wgae1D4nSFaJ3QqLJugJR8rf5U1Nup fOk+2fNtlyFu6H/nPRO+z05KOw4Ch2tkH6XhxwrAziU4eUU7b7KYTR8KyYhHF6Nk 4BWl9JnOksHYUoDtHS3ZQRMsw4RaZxm5WYZxdG/2wyoy7xZfiG8ICGcKZJ4LlYWf KyVTut8L14foHv4M+fXibEAj9XYaRLdh8T0fqqjbC9vV3ktF4huXc8Ee3c09B7Yv BL+M/7LbMX7b5GEr3SBRlmAUpOS1gsYr6bWLx8XCJVxux6amTKFQ2b3es4VM2IYX 1YA6XqIGV12IZTD1tj9dKJ/DyZ+ZWDJNKzIdjhr/J5FsHrT+HQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFCyosoJKWlWOqmjdVzlbddZ5eM0VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84NGJm YjllOC0xYmFlLTQ1NDAtOWNhZS1iNjgxMWVjYWRmZjUvY2YzODIxMWUtYTllZC0z N2VjLTkwNDEtNDMyZmQzNzBiYzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODRiZmI5ZTgtMWJhZS00NTQwLTlj YWUtYjY4MTFlY2FkZmY1Lzg0YmZiOWU4LTFiYWUtNDU0MC05Y2FlLWI2ODExZWNh ZGZmNS5jcmwwHwYDVR0jBBgwFoAUM4c53xys+Hm76OldhG+EVoMspWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84NGJmYjllOC0xYmFlLTQ1NDAtOWNhZS1iNjgx MWVjYWRmZjUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAxj6gMA4E AgACMAgDBgAmAvvTADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAjcs6hIgCgn1cXTcmQEIA+5NdwbWVHFRnV 5GxYkOZT3r2mdnP7wn2y9UU4/8mFq1joqh53oyxobta5PRFVnLpqwaUifwh73frd L1DKoFAfh/fknoABVUPnzn/NF2CgwFNdqsBfl77Cydk8qT5UcvOBeq5o/EMUgCQ1 WgWTsu7ikfr9SOvej4LBB3uJGd2zSqz3Yuz/BBTWLEbGera2dy2HrOQBm8iqnY/6 0nr5vTP+GBOskWQNNIpNWgBKrO8KODYaoCbSFzjj8gOoWLBKvkaIWuy+xmvtncz0 xrtOEsTVck71R+N+VfNoBy9pKD9T6Kx3lzATDx9FmG8lemsR95iq -----END CERTIFICATE-----Generated at Fri Aug 8 00:15:18 2025 by rpki-client