$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec/afe66f95-be4a-36f9-b41a-d8a2fd5db157.roa File: afe66f95-be4a-36f9-b41a-d8a2fd5db157.roa (raw, json) Hash identifier: rY8amE37UOcu/vWnGNQ8mKKlFyZOyYuqAOQMLp83Gzc= Subject key identifier: 7D:EF:F1:CB:46:F1:2D:EB:BC:5B:78:6E:F5:2E:92:5A:22:B3:DF:92 Certificate issuer: /CN=0c4bcfc8-e6e7-4500-b985-5cb859f88fec Certificate serial: 010D0C9F4328584AC2E0F61D2DADB87485477A00 Authority key identifier: 43:80:2B:58:E9:27:0F:D7:36:12:60:FF:0C:06:3D:38:94:E4:09:97 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec/afe66f95-be4a-36f9-b41a-d8a2fd5db157.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 30110 IP address blocks: 198.59.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec/0c4bcfc8-e6e7-4500-b985-5cb859f88fec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec/0c4bcfc8-e6e7-4500-b985-5cb859f88fec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:f6:1d:2d:ad:b8:74:85:47:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c4bcfc8-e6e7-4500-b985-5cb859f88fec Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=77a3ba93-e999-4929-8f2c-a3e62586292d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:37:ef:a4:f1:c5:dc:cb:e2:6b:b8:ef:db:86: 42:32:96:6f:17:6e:29:87:30:99:bf:ad:8f:f7:e6: 59:7c:ca:af:d9:69:2c:49:14:33:6f:68:db:70:55: a1:20:7a:36:82:30:25:3c:9f:3e:36:3e:fd:40:5b: f8:d3:8d:9f:52:8f:fc:1c:c2:53:a8:55:44:d1:36: cb:8a:c9:12:d9:ec:46:85:14:8e:d6:79:0b:c8:67: 70:6b:8c:08:a0:67:3c:20:9d:b5:a1:0a:0d:87:94: c9:e6:92:04:93:1c:42:e5:d3:f4:9b:ad:bf:03:de: 92:53:de:21:8e:4d:cc:f0:c0:73:fc:49:00:8d:04: 03:9c:91:ff:ff:27:98:b4:1c:09:c3:51:1e:1f:9b: 0c:37:7f:57:20:46:64:01:b2:36:6d:26:0b:02:c7: 9f:c9:70:e4:3f:01:fa:a1:7c:71:80:be:1a:d1:57: da:f9:72:b9:71:d2:ce:27:59:0f:9e:67:13:91:5a: 40:2a:e5:93:69:88:d6:16:c5:fb:6c:55:d1:85:2c: 84:fa:11:70:02:3d:ec:d1:88:10:c9:e6:2e:3a:48: d2:fa:3d:6b:02:bf:07:41:36:3d:f6:3d:35:7b:d6: dd:90:f2:49:a9:51:3e:8b:ce:08:bd:4a:66:7c:30: 35:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:EF:F1:CB:46:F1:2D:EB:BC:5B:78:6E:F5:2E:92:5A:22:B3:DF:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec/afe66f95-be4a-36f9-b41a-d8a2fd5db157.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec/0c4bcfc8-e6e7-4500-b985-5cb859f88fec.crl X509v3 Authority Key Identifier: keyid:43:80:2B:58:E9:27:0F:D7:36:12:60:FF:0C:06:3D:38:94:E4:09:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec.cer sbgp-ipAddrBlock: critical IPv4: 198.59.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:2f:89:89:8e:5b:38:d0:e1:be:ac:46:88:40:cc:5c:a5:fc: 15:00:33:fe:c8:5d:cf:e5:34:78:94:93:ac:50:ed:f7:58:08: a6:36:00:c0:ab:ff:54:aa:6b:ff:c3:03:09:7c:7a:40:c5:b7: ec:21:4a:9d:e0:0d:9e:20:b1:36:e4:2b:f5:13:66:45:c7:d4: 88:bb:87:89:94:38:09:f1:07:4a:37:69:c7:b5:d7:5b:ce:79: 3e:d1:b9:11:76:d2:f4:35:85:c4:a7:a4:28:0a:12:ea:b1:1c: 65:d7:53:15:36:10:e2:29:d6:8d:f1:2f:35:40:f8:a5:8f:7d: b5:df:31:71:3b:71:31:58:c3:10:04:9c:47:bb:d5:46:73:18: 9f:a7:29:27:81:22:bc:e0:41:89:45:f6:2a:b6:cc:be:10:cf: 2c:1f:d8:51:a3:8e:01:ee:47:db:d9:5a:c6:dc:ed:13:61:c7: 86:c8:87:ae:7c:8c:48:3c:a3:1f:47:3b:22:23:32:78:8d:5b: 47:2c:52:82:a7:ff:b2:30:5c:b4:74:9e:70:a5:08:5b:a7:48: 9b:48:c6:51:ae:2e:29:a6:28:8a:43:e4:ac:cd:cd:da:60:03: 99:b0:9e:ed:b5:fe:72:a6:8b:30:ff:b8:f3:bd:29:9e:93:57: bd:1c:cc:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4PYdLa24dIVHegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGM0YmNmYzgtZTZlNy00NTAwLWI5ODUtNWNiODU5Zjg4 ZmVjMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk NzdhM2JhOTMtZTk5OS00OTI5LThmMmMtYTNlNjI1ODYyOTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7TfvpPHF3Mvia7jv24ZCMpZvF24phzCZv62P 9+ZZfMqv2WksSRQzb2jbcFWhIHo2gjAlPJ8+Nj79QFv4042fUo/8HMJTqFVE0TbL iskS2exGhRSO1nkLyGdwa4wIoGc8IJ21oQoNh5TJ5pIEkxxC5dP0m62/A96SU94h jk3M8MBz/EkAjQQDnJH//yeYtBwJw1EeH5sMN39XIEZkAbI2bSYLAsefyXDkPwH6 oXxxgL4a0Vfa+XK5cdLOJ1kPnmcTkVpAKuWTaYjWFsX7bFXRhSyE+hFwAj3s0YgQ yeYuOkjS+j1rAr8HQTY99j01e9bdkPJJqVE+i84IvUpmfDA10wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH3v8ctG8S3rvFt4bvUuklois9+SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzRi Y2ZjOC1lNmU3LTQ1MDAtYjk4NS01Y2I4NTlmODhmZWMvYWZlNjZmOTUtYmU0YS0z NmY5LWI0MWEtZDhhMmZkNWRiMTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGM0YmNmYzgtZTZlNy00NTAwLWI5 ODUtNWNiODU5Zjg4ZmVjLzBjNGJjZmM4LWU2ZTctNDUwMC1iOTg1LTVjYjg1OWY4 OGZlYy5jcmwwHwYDVR0jBBgwFoAUQ4ArWOknD9c2EmD/DAY9OJTkCZcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzRiY2ZjOC1lNmU3LTQ1MDAtYjk4NS01Y2I4 NTlmODhmZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxjuMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsviYmOWzjQ4b6sRohAzFyl/BUAM/7IXc/lNHiUk6xQ7fdYCKY2AMCr /1Sqa//DAwl8ekDFt+whSp3gDZ4gsTbkK/UTZkXH1Ii7h4mUOAnxB0o3ace111vO eT7RuRF20vQ1hcSnpCgKEuqxHGXXUxU2EOIp1o3xLzVA+KWPfbXfMXE7cTFYwxAE nEe71UZzGJ+nKSeBIrzgQYlF9iq2zL4Qzywf2FGjjgHuR9vZWsbc7RNhx4bIh658 jEg8ox9HOyIjMniNW0csUoKn/7IwXLR0nnClCFunSJtIxlGuLimmKIpD5KzNzdpg A5mwnu21/nKmizD/uPO9KZ6TV70czGs= -----END CERTIFICATE-----Generated at Thu Aug 7 12:54:24 2025 by rpki-client