$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ae3f9ccc-8d17-4cf1-954c-8f682120fb41/0f0417d9-41f9-3a42-8f49-5ce16bed8b3a.roa File: 0f0417d9-41f9-3a42-8f49-5ce16bed8b3a.roa (raw, json) Hash identifier: 0IeUsWwGaIIeJBNDiSi9RVZctkX8vTSjmRGk5cgjfPo= Subject key identifier: B6:7E:44:03:6E:9C:49:BF:E5:0B:BF:94:05:00:C1:B6:47:E9:59:07 Certificate issuer: /CN=ae3f9ccc-8d17-4cf1-954c-8f682120fb41 Certificate serial: 010D0C9F4328584AA85BB8155DDCA547C895AE30 Authority key identifier: 93:75:D5:EC:0B:BD:A5:23:C9:99:3C:FD:9E:13:C7:43:FD:02:5A:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ae3f9ccc-8d17-4cf1-954c-8f682120fb41.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ae3f9ccc-8d17-4cf1-954c-8f682120fb41/0f0417d9-41f9-3a42-8f49-5ce16bed8b3a.roa Signing time: Sun 27 Jul 2025 13:01:04 +0000 ROA not before: Sun 27 Jul 2025 13:01:04 +0000 ROA not after: Sat 25 Oct 2025 13:01:04 +0000 asID: 15296 IP address blocks: 198.202.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ae3f9ccc-8d17-4cf1-954c-8f682120fb41/ae3f9ccc-8d17-4cf1-954c-8f682120fb41.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ae3f9ccc-8d17-4cf1-954c-8f682120fb41/ae3f9ccc-8d17-4cf1-954c-8f682120fb41.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ae3f9ccc-8d17-4cf1-954c-8f682120fb41.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a8:5b:b8:15:5d:dc:a5:47:c8:95:ae:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae3f9ccc-8d17-4cf1-954c-8f682120fb41 Validity Not Before: Jul 27 13:01:04 2025 GMT Not After : Oct 25 13:01:04 2025 GMT Subject: CN=761d7a0e-e64a-412d-a8ec-68b326d396b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:57:eb:cb:ed:3b:28:f0:36:0f:d8:4c:0a:79: cc:ec:7f:db:35:c8:b9:e9:8d:c4:f8:a6:58:b0:8d: a0:e1:2e:4e:5a:d2:d4:a2:c8:1b:64:18:49:71:9d: 51:ae:20:34:f2:6f:85:97:0d:e3:57:76:d1:88:aa: 50:0f:c4:5b:8f:34:eb:a9:e3:56:36:5d:99:c9:31: 26:21:11:e6:89:b5:29:43:8c:fd:cb:cf:a1:f4:a0: ee:b8:52:ab:79:0a:f0:ce:d5:3f:95:a7:fa:31:b8: 72:85:ea:30:ca:b9:ae:48:00:3c:52:91:74:88:e5: 12:3e:cd:66:4f:e9:b7:b0:c6:79:6e:cf:84:f8:28: de:76:6c:0c:de:d9:ca:a5:b6:79:04:71:db:d6:7e: b2:49:3f:c5:d7:9e:a0:8b:58:ac:21:57:ec:52:a1: bc:d6:8a:7f:bb:8c:76:b4:39:c0:a0:a0:eb:2c:f9: 4d:26:42:29:9f:63:e2:e8:4f:d9:19:61:3b:c2:10: 2c:c2:63:7c:a8:b7:a2:f5:36:b6:06:c4:3c:0e:e6: e0:79:fe:c6:57:15:47:60:0e:ef:b8:ea:be:fe:07: 4e:7d:a4:45:b2:23:71:20:07:51:6b:91:6a:77:b6: 27:e4:93:01:ec:57:83:a6:8d:08:26:e9:3b:47:fa: 46:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:7E:44:03:6E:9C:49:BF:E5:0B:BF:94:05:00:C1:B6:47:E9:59:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ae3f9ccc-8d17-4cf1-954c-8f682120fb41/0f0417d9-41f9-3a42-8f49-5ce16bed8b3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ae3f9ccc-8d17-4cf1-954c-8f682120fb41/ae3f9ccc-8d17-4cf1-954c-8f682120fb41.crl X509v3 Authority Key Identifier: keyid:93:75:D5:EC:0B:BD:A5:23:C9:99:3C:FD:9E:13:C7:43:FD:02:5A:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ae3f9ccc-8d17-4cf1-954c-8f682120fb41.cer sbgp-ipAddrBlock: critical IPv4: 198.202.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:9b:74:35:cc:ff:f4:e7:8f:67:b7:ff:92:b3:8a:e9:2b:9d: 65:48:3b:25:60:7d:16:72:60:34:45:33:c6:48:1e:79:04:58: 7a:c7:ed:21:36:62:e6:d2:04:d4:af:ed:34:45:46:1e:2e:e8: e1:47:c2:21:0c:8c:63:f5:76:39:c2:de:0c:14:fd:a3:1f:69: c3:46:2c:6b:36:00:dc:6e:34:b1:b5:bf:7b:42:16:56:e6:ec: d1:46:c8:3d:67:f8:ee:0d:d7:b0:28:24:ce:be:55:6f:46:e5: 1a:1e:a9:04:82:fc:21:23:af:df:35:b7:aa:aa:58:cc:22:42: 22:27:f6:9e:a1:01:f1:d9:6c:75:ae:2c:c4:f4:4f:68:a1:b9: 11:ce:1d:db:df:3b:06:d4:49:44:c2:17:6d:30:ae:fb:8f:65: 84:53:4a:a8:4d:0c:7e:85:48:8d:8c:6d:44:3a:53:ae:bf:d9: bd:69:d2:cc:18:36:f5:68:da:61:48:27:24:b3:7c:4b:07:b3: f6:3b:d3:70:64:8c:3b:9f:f4:ee:4f:da:77:7a:a5:66:ab:6f: 5a:6f:eb:ca:a5:0c:55:2f:8f:e6:8e:09:de:38:8b:d3:30:01: 43:99:86:91:c4:ed:0d:02:c5:a7:46:5c:98:e2:ec:b6:52:4a: 15:68:08:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqoW7gVXdylR8iVrjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWUzZjljY2MtOGQxNy00Y2YxLTk1NGMtOGY2ODIxMjBm YjQxMB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk NzYxZDdhMGUtZTY0YS00MTJkLWE4ZWMtNjhiMzI2ZDM5NmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1fry+07KPA2D9hMCnnM7H/bNci56Y3E+KZY sI2g4S5OWtLUosgbZBhJcZ1RriA08m+Flw3jV3bRiKpQD8RbjzTrqeNWNl2ZyTEm IRHmibUpQ4z9y8+h9KDuuFKreQrwztU/laf6MbhyheowyrmuSAA8UpF0iOUSPs1m T+m3sMZ5bs+E+CjedmwM3tnKpbZ5BHHb1n6yST/F156gi1isIVfsUqG81op/u4x2 tDnAoKDrLPlNJkIpn2Pi6E/ZGWE7whAswmN8qLei9Ta2BsQ8Dubgef7GVxVHYA7v uOq+/gdOfaRFsiNxIAdRa5Fqd7Yn5JMB7FeDpo0IJuk7R/pG2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLZ+RANunEm/5Qu/lAUAwbZH6VkHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hZTNm OWNjYy04ZDE3LTRjZjEtOTU0Yy04ZjY4MjEyMGZiNDEvMGYwNDE3ZDktNDFmOS0z YTQyLThmNDktNWNlMTZiZWQ4YjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYWUzZjljY2MtOGQxNy00Y2YxLTk1 NGMtOGY2ODIxMjBmYjQxL2FlM2Y5Y2NjLThkMTctNGNmMS05NTRjLThmNjgyMTIw ZmI0MS5jcmwwHwYDVR0jBBgwFoAUk3XV7Au9pSPJmTz9nhPHQ/0CWiswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hZTNmOWNjYy04ZDE3LTRjZjEtOTU0Yy04ZjY4 MjEyMGZiNDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxsqCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEabdDXM//Tnj2e3/5KziukrnWVIOyVgfRZyYDRFM8ZIHnkEWHrH7SE2 YubSBNSv7TRFRh4u6OFHwiEMjGP1djnC3gwU/aMfacNGLGs2ANxuNLG1v3tCFlbm 7NFGyD1n+O4N17AoJM6+VW9G5RoeqQSC/CEjr981t6qqWMwiQiIn9p6hAfHZbHWu LMT0T2ihuRHOHdvfOwbUSUTCF20wrvuPZYRTSqhNDH6FSI2MbUQ6U66/2b1p0swY NvVo2mFIJySzfEsHs/Y703BkjDuf9O5P2nd6pWarb1pv68qlDFUvj+aOCd44i9Mw AUOZhpHE7Q0CxadGXJji7LZSShVoCDQ= -----END CERTIFICATE-----Generated at Mon Aug 4 14:53:04 2025 by rpki-client