$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4/7fdcd6b8-d33d-3b7f-b64b-2e1a55321536.roa File: 7fdcd6b8-d33d-3b7f-b64b-2e1a55321536.roa (raw, json) Hash identifier: phXTkIeqjOEYJwTM4NMtPriYBAiXKzFxvGPUw9vGB9w= Subject key identifier: 4E:E9:2E:DD:FF:65:80:3C:1E:78:27:E5:96:DC:1C:84:D0:E3:74:42 Certificate issuer: /CN=712951d4-501e-451c-a20a-59b6aff3e2d4 Certificate serial: 010D0C9F4328584A9900C4D7EBEEC9AF6E5CC880 Authority key identifier: 52:7A:38:8E:28:41:32:8C:92:B2:70:AE:33:9C:BD:2C:75:A3:4E:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4/7fdcd6b8-d33d-3b7f-b64b-2e1a55321536.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 38177 IP address blocks: 198.140.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4/712951d4-501e-451c-a20a-59b6aff3e2d4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4/712951d4-501e-451c-a20a-59b6aff3e2d4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:c4:d7:eb:ee:c9:af:6e:5c:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=712951d4-501e-451c-a20a-59b6aff3e2d4 Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=aad4aa85-6e35-4916-82ad-91fbdb764a9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:cb:34:ac:76:e3:f9:0f:42:25:59:73:8a:3f: 66:d9:20:ba:fd:97:e6:51:14:cd:55:75:a5:51:f6: fd:2e:1f:90:59:b6:8e:f4:5a:0f:88:80:9d:28:96: b9:8c:6a:87:f2:cb:2f:a3:60:30:3e:37:2d:5c:54: 1d:6c:d7:47:67:ce:94:04:c3:03:ac:4e:3c:eb:92: 3a:e5:2f:e0:ac:0a:48:d7:aa:15:29:81:aa:71:b9: ed:99:38:46:6b:78:38:4d:63:ae:1e:55:13:fc:f8: 21:50:64:96:62:6a:62:5f:d3:b3:c9:7f:47:bd:d8: 23:60:b5:4a:3f:8a:8d:73:7e:72:33:2d:97:73:17: 43:1c:b6:52:24:4f:8a:53:10:90:06:7d:dd:8e:1b: 13:f6:06:1c:77:bf:6e:18:13:bd:2b:83:7c:3b:6e: 2f:03:59:70:59:14:82:d0:83:dc:59:fc:d8:86:78: 39:fd:60:ea:c3:d5:0a:03:67:5a:37:6f:7a:49:9b: 92:db:08:bf:29:93:58:3a:12:ba:75:c4:58:04:50: ae:84:27:7c:16:23:e8:0a:33:0d:0a:c5:aa:4f:81: a9:81:33:ed:2a:9d:fd:7a:e7:e4:6b:f3:d0:b3:60: ad:7b:ae:7e:d2:a6:59:1b:c7:76:90:64:8e:95:6d: 08:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:E9:2E:DD:FF:65:80:3C:1E:78:27:E5:96:DC:1C:84:D0:E3:74:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4/7fdcd6b8-d33d-3b7f-b64b-2e1a55321536.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4/712951d4-501e-451c-a20a-59b6aff3e2d4.crl X509v3 Authority Key Identifier: keyid:52:7A:38:8E:28:41:32:8C:92:B2:70:AE:33:9C:BD:2C:75:A3:4E:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4.cer sbgp-ipAddrBlock: critical IPv4: 198.140.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:f6:e0:32:64:93:5d:48:ec:ee:0c:1a:d2:51:95:b4:4d:1c: a8:ee:d0:a8:bf:17:72:24:f1:e0:d8:32:67:2b:3c:f4:1e:35: 44:19:e3:f3:d2:63:4e:5a:d3:9d:c6:1d:c4:c4:12:e4:9e:fa: 02:22:01:7c:a5:74:f2:7c:05:ab:15:5a:d9:a6:c2:69:76:05: c5:7a:fd:14:83:73:ac:65:f9:1d:68:cf:0e:c6:38:59:d1:58: 98:80:d6:8e:72:81:a7:06:ad:39:5f:fb:ee:3c:57:59:e9:72: e3:2c:b9:8d:34:e3:95:52:2f:f2:71:53:b1:93:2e:4e:e2:16: 32:db:63:bb:b5:eb:34:aa:58:4f:ee:16:4a:91:7d:98:4a:2c: 57:f7:5f:93:e0:25:b1:77:14:bb:3a:cf:44:b7:e4:e3:fa:3b: 88:38:eb:8c:a8:ed:0a:4d:3a:7d:7d:a0:ba:34:04:d3:a9:70: 2a:45:66:79:11:c8:af:c1:1d:1f:c7:eb:9e:03:40:f4:d5:64: 2a:98:ac:34:c0:ab:ff:c3:f9:c7:b6:81:a6:cf:9c:d4:8c:36: 81:4d:ab:65:11:4d:84:44:e1:49:3d:8a:dc:e0:0b:6b:44:2a: 05:6d:91:c3:66:23:b8:47:d9:05:1a:7d:a9:f7:22:35:05:4a: d0:04:b9:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZAMTX6+7Jr25cyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzEyOTUxZDQtNTAxZS00NTFjLWEyMGEtNTliNmFmZjNl MmQ0MB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk YWFkNGFhODUtNmUzNS00OTE2LTgyYWQtOTFmYmRiNzY0YTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcs0rHbj+Q9CJVlzij9m2SC6/ZfmURTNVXWl Ufb9Lh+QWbaO9FoPiICdKJa5jGqH8ssvo2AwPjctXFQdbNdHZ86UBMMDrE4865I6 5S/grApI16oVKYGqcbntmThGa3g4TWOuHlUT/PghUGSWYmpiX9OzyX9HvdgjYLVK P4qNc35yMy2XcxdDHLZSJE+KUxCQBn3djhsT9gYcd79uGBO9K4N8O24vA1lwWRSC 0IPcWfzYhng5/WDqw9UKA2daN296SZuS2wi/KZNYOhK6dcRYBFCuhCd8FiPoCjMN CsWqT4GpgTPtKp39eufka/PQs2Cte65+0qZZG8d2kGSOlW0IrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE7pLt3/ZYA8Hngn5ZbcHITQ43RCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83MTI5 NTFkNC01MDFlLTQ1MWMtYTIwYS01OWI2YWZmM2UyZDQvN2ZkY2Q2YjgtZDMzZC0z YjdmLWI2NGItMmUxYTU1MzIxNTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzEyOTUxZDQtNTAxZS00NTFjLWEy MGEtNTliNmFmZjNlMmQ0LzcxMjk1MWQ0LTUwMWUtNDUxYy1hMjBhLTU5YjZhZmYz ZTJkNC5jcmwwHwYDVR0jBBgwFoAUUno4jihBMoySsnCuM5y9LHWjTnMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83MTI5NTFkNC01MDFlLTQ1MWMtYTIwYS01OWI2 YWZmM2UyZDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxowEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHz24DJkk11I7O4MGtJRlbRNHKju0Ki/F3Ik8eDYMmcrPPQeNUQZ4/PS Y05a053GHcTEEuSe+gIiAXyldPJ8BasVWtmmwml2BcV6/RSDc6xl+R1ozw7GOFnR WJiA1o5ygacGrTlf++48V1npcuMsuY0045VSL/JxU7GTLk7iFjLbY7u16zSqWE/u FkqRfZhKLFf3X5PgJbF3FLs6z0S35OP6O4g464yo7QpNOn19oLo0BNOpcCpFZnkR yK/BHR/H654DQPTVZCqYrDTAq//D+ce2gabPnNSMNoFNq2URTYRE4Uk9itzgC2tE KgVtkcNmI7hH2QUafan3IjUFStAEuU8= -----END CERTIFICATE-----Generated at Mon Aug 4 14:07:53 2025 by rpki-client