$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/7b990af5-7866-397a-9d61-3f08feb8f6c3.roa File: 7b990af5-7866-397a-9d61-3f08feb8f6c3.roa (raw, json) Hash identifier: JI+JYQznVgtN6CPFr2OfOEB7DBZb0dOGr0qwaSXaIJc= Subject key identifier: C6:F4:D8:7C:62:DB:08:84:9C:9E:11:F6:EC:53:6A:7E:CD:F6:01:4D Certificate issuer: /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842 Certificate serial: 010D0C9F4328584A9BCB6F74B6F5C9D0672C9140 Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/7b990af5-7866-397a-9d61-3f08feb8f6c3.roa Signing time: Wed 23 Jul 2025 01:00:52 +0000 ROA not before: Wed 23 Jul 2025 01:00:52 +0000 ROA not after: Tue 21 Oct 2025 01:00:52 +0000 asID: 2559 IP address blocks: 198.241.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9b:cb:6f:74:b6:f5:c9:d0:67:2c:91:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842 Validity Not Before: Jul 23 01:00:52 2025 GMT Not After : Oct 21 01:00:52 2025 GMT Subject: CN=31765078-206c-45f9-a85a-4822e2e43ed6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3f:88:02:dc:3a:d5:15:66:c5:9b:30:a3:63: 95:c4:31:c9:16:44:af:bd:91:32:e0:c8:ba:0b:b7: f0:65:e1:01:b9:8b:36:53:6a:b4:8b:b1:70:11:43: 59:8d:21:9c:8b:cc:69:0f:3e:0f:db:70:ea:af:00: a3:db:a6:c2:b4:90:ae:77:62:25:a2:3b:8c:6f:41: a9:c8:f2:8e:d0:2b:4c:ba:fa:5d:6b:89:f5:1d:bd: 18:85:02:3e:e6:c0:00:d5:a2:c4:38:b6:ff:f0:e7: d3:f6:f9:cc:06:01:32:bb:77:39:9d:f0:bd:52:24: 2a:67:6f:73:bc:63:2f:fa:b2:95:8d:fe:ce:ba:a4: cc:c0:a0:2e:32:8d:fd:11:d9:b2:be:b0:01:8f:80: 0c:b9:f0:d4:d8:64:e4:fd:9b:d1:93:9a:eb:eb:13: c1:d7:57:12:a6:90:d6:8b:ab:2c:aa:7f:9e:2a:cf: 87:83:19:c4:d1:71:61:16:4e:05:d7:22:af:0b:84: 71:28:05:21:c1:f2:eb:0a:bf:ea:2e:8c:66:9a:7e: c4:13:4a:b4:2a:d1:db:3a:44:6e:48:99:ce:10:96: a8:a5:56:a1:66:a3:80:82:35:31:af:25:84:7b:61: fe:25:08:b9:29:8a:22:d3:39:4b:c1:78:13:c7:be: 9f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:F4:D8:7C:62:DB:08:84:9C:9E:11:F6:EC:53:6A:7E:CD:F6:01:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/7b990af5-7866-397a-9d61-3f08feb8f6c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl X509v3 Authority Key Identifier: keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer sbgp-ipAddrBlock: critical IPv4: 198.241.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:88:6e:31:5d:fc:76:81:8c:f2:fd:7c:8d:ca:28:49:42:e9: c8:ac:bc:c9:8f:a8:d8:ef:9f:de:62:18:97:69:8c:be:ad:4a: 3a:92:79:47:0b:50:83:fb:01:34:40:9a:91:ad:f4:20:88:3a: 72:3f:82:af:14:d5:87:9e:bd:83:55:e4:0d:b6:cc:74:73:ba: de:14:d6:00:3f:d9:b0:b0:2d:33:f5:8d:50:2f:96:f8:15:1b: 99:32:7c:6d:ff:41:40:1a:30:71:6f:45:07:ec:1b:12:9c:d4: ed:62:02:cf:0d:a2:94:e5:d5:8c:74:d7:f2:6f:75:a0:51:b8: 22:d8:df:35:bb:96:7f:49:c3:3a:e1:c3:35:db:c4:4d:57:89: 43:01:a8:82:7c:23:6c:83:51:3e:30:84:ff:d0:c7:7a:0f:89: ee:6a:1d:01:29:4f:2b:5d:a8:20:73:6c:9c:fa:84:25:8d:88: 3f:eb:6c:8b:47:cd:33:99:8d:ad:f7:33:ba:70:ed:bb:42:0a: 34:f3:1b:ac:e1:df:cf:bb:b7:ec:0b:c5:fa:00:3e:9c:1e:bc: 46:9f:01:b0:2f:fc:b5:94:93:74:42:78:23:40:08:0c:70:0a: fb:a5:41:d0:cd:b1:5b:f9:32:99:44:b6:5f:f2:ef:58:0e:bd: 54:df:9c:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqby290tvXJ0GcskUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUwNjQ5N2UtZTljYy00NWNiLTg1ZDYtY2YyZTU4ZTUx ODQyMB4XDTI1MDcyMzAxMDA1MloXDTI1MTAyMTAxMDA1MlowLzEtMCsGA1UEAxMk MzE3NjUwNzgtMjA2Yy00NWY5LWE4NWEtNDgyMmUyZTQzZWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtz+IAtw61RVmxZswo2OVxDHJFkSvvZEy4Mi6 C7fwZeEBuYs2U2q0i7FwEUNZjSGci8xpDz4P23DqrwCj26bCtJCud2IlojuMb0Gp yPKO0CtMuvpda4n1Hb0YhQI+5sAA1aLEOLb/8OfT9vnMBgEyu3c5nfC9UiQqZ29z vGMv+rKVjf7OuqTMwKAuMo39EdmyvrABj4AMufDU2GTk/ZvRk5rr6xPB11cSppDW i6ssqn+eKs+HgxnE0XFhFk4F1yKvC4RxKAUhwfLrCr/qLoxmmn7EE0q0KtHbOkRu SJnOEJaopVahZqOAgjUxryWEe2H+JQi5KYoi0zlLwXgTx76fkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMb02Hxi2wiEnJ4R9uxTan7N9gFNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2 NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJlNThlNTE4NDIvN2I5OTBhZjUtNzg2Ni0z OTdhLTlkNjEtM2YwOGZlYjhmNmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGUwNjQ5N2UtZTljYy00NWNiLTg1 ZDYtY2YyZTU4ZTUxODQyLzRlMDY0OTdlLWU5Y2MtNDVjYi04NWQ2LWNmMmU1OGU1 MTg0Mi5jcmwwHwYDVR0jBBgwFoAUV2+fxmb20SnMf8gO5fhHtMv00YEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJl NThlNTE4NDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxvHZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIeIbjFd/HaBjPL9fI3KKElC6cisvMmPqNjvn95iGJdpjL6tSjqSeUcL UIP7ATRAmpGt9CCIOnI/gq8U1YeevYNV5A22zHRzut4U1gA/2bCwLTP1jVAvlvgV G5kyfG3/QUAaMHFvRQfsGxKc1O1iAs8NopTl1Yx01/JvdaBRuCLY3zW7ln9Jwzrh wzXbxE1XiUMBqIJ8I2yDUT4whP/Qx3oPie5qHQEpTytdqCBzbJz6hCWNiD/rbItH zTOZja33M7pw7btCCjTzG6zh38+7t+wLxfoAPpwevEafAbAv/LWUk3RCeCNACAxw CvulQdDNsVv5MplEtl/y71gOvVTfnJo= -----END CERTIFICATE-----Generated at Wed Aug 6 10:58:34 2025 by rpki-client