$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/dfec57e8-4be0-3a83-b962-789595b0a605.roa File: dfec57e8-4be0-3a83-b962-789595b0a605.roa (raw, json) Hash identifier: OLrogkul2IbevCUi1KWVEHL+e6jTRTFz5WN41ylsUYs= Subject key identifier: 50:77:90:E3:40:41:EC:63:10:20:D6:B3:98:E4:29:62:46:13:3D:C9 Certificate issuer: /CN=6acf8afa-6cb1-4c9d-84c7-5ee8845003d1 Certificate serial: 010D0C9F4328584A90A0AE94A64FB3C771EF8E60 Authority key identifier: D8:2C:17:54:D8:10:8C:24:31:5E:DA:EA:32:BD:49:1C:54:5E:95:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/dfec57e8-4be0-3a83-b962-789595b0a605.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 22987 IP address blocks: 198.52.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:ae:94:a6:4f:b3:c7:71:ef:8e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6acf8afa-6cb1-4c9d-84c7-5ee8845003d1 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=e6c66c0d-1c39-469a-aee1-a7d274ad7c07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f9:b5:d2:8c:fb:a9:ae:98:d9:35:d5:5f:c6: 5b:85:5e:9e:bb:c7:cc:97:57:9b:13:b1:a0:a7:e9: bb:67:a8:a4:57:e1:c4:da:12:74:79:2b:95:8c:70: 07:cf:fe:bc:98:bf:90:19:c5:61:1f:54:48:dc:76: 5a:2c:2d:8d:12:2b:a9:b8:95:1b:f2:68:0e:43:c0: 15:0b:bd:40:8d:73:b0:1f:71:a2:de:47:25:2d:47: 8c:70:a7:34:30:ef:a9:59:0e:53:90:ba:ad:b7:84: 21:38:ee:fc:f9:e1:40:29:1d:22:d7:4a:fa:e7:b5: 4a:77:46:54:be:14:24:33:f4:c8:7e:69:b0:b6:44: 2f:fe:b6:78:31:a6:af:bf:78:d7:58:4d:43:23:ac: d8:ec:32:a4:94:91:98:a3:52:c9:25:ac:88:5d:93: 1a:4e:10:0f:f3:75:c8:df:0e:1e:b5:e1:9f:79:8a: e0:ee:a9:23:d9:0c:d4:62:36:bf:45:57:ae:14:22: 1a:a7:b2:c1:88:50:33:d1:c8:3c:af:65:2c:cc:b9: 11:a2:d6:fe:a1:0f:56:e3:a5:e5:d4:35:02:b1:51: 2e:bc:4d:2b:d7:a6:21:7b:d7:b0:f5:7a:a7:63:03: 5c:69:92:6d:08:dc:a7:90:49:48:57:91:e4:36:a0: 3d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:77:90:E3:40:41:EC:63:10:20:D6:B3:98:E4:29:62:46:13:3D:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/dfec57e8-4be0-3a83-b962-789595b0a605.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.crl X509v3 Authority Key Identifier: keyid:D8:2C:17:54:D8:10:8C:24:31:5E:DA:EA:32:BD:49:1C:54:5E:95:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.cer sbgp-ipAddrBlock: critical IPv4: 198.52.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:52:c6:e5:9c:5b:38:5b:3b:f3:7c:2c:b9:76:40:40:bb:ac: 3f:aa:eb:b8:5c:e2:5c:d0:6b:f2:14:58:fa:07:ae:f9:4d:5e: 76:c4:6f:f5:c2:a1:41:6f:b7:9e:4f:85:f9:9c:e4:ae:07:54: e2:aa:2a:0c:c7:3d:a6:af:db:50:62:df:db:13:34:c0:3c:64: cc:29:28:41:6b:f0:85:08:65:30:5d:70:b9:5a:dc:d4:ce:20: e2:ce:4c:16:56:35:92:32:03:08:92:80:b9:54:11:19:fb:45: c7:1b:0a:2a:8e:25:af:f8:b5:47:2c:ee:c3:e2:80:1c:b5:c5: 7d:f8:91:60:32:0b:fa:56:ef:17:39:ee:9a:60:c8:5d:c3:e9: c6:30:35:58:79:34:5a:ef:a4:18:53:5c:80:56:81:f0:be:5b: e7:e5:ea:c4:12:06:41:d7:bc:2f:32:1b:69:a1:62:72:7d:14: 1e:dc:8d:83:01:7a:15:1e:bb:8d:be:3a:68:0d:2f:7e:8d:97: 69:24:bd:05:f7:7a:64:08:e0:09:bb:27:b7:e5:20:4f:24:c1: 40:ad:14:1c:bd:79:0f:74:ec:f6:4e:7b:07:7f:e6:3e:0a:ed: 23:1b:13:7b:db:7f:d8:e3:be:95:3f:65:5e:ef:c2:8a:75:6a: e5:d5:af:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoK6Upk+zx3HvjmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmFjZjhhZmEtNmNiMS00YzlkLTg0YzctNWVlODg0NTAw M2QxMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk ZTZjNjZjMGQtMWMzOS00NjlhLWFlZTEtYTdkMjc0YWQ3YzA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPm10oz7qa6Y2TXVX8ZbhV6eu8fMl1ebE7Gg p+m7Z6ikV+HE2hJ0eSuVjHAHz/68mL+QGcVhH1RI3HZaLC2NEiupuJUb8mgOQ8AV C71AjXOwH3Gi3kclLUeMcKc0MO+pWQ5TkLqtt4QhOO78+eFAKR0i10r657VKd0ZU vhQkM/TIfmmwtkQv/rZ4Maavv3jXWE1DI6zY7DKklJGYo1LJJayIXZMaThAP83XI 3w4eteGfeYrg7qkj2QzUYja/RVeuFCIap7LBiFAz0cg8r2UszLkRotb+oQ9W46Xl 1DUCsVEuvE0r16Yhe9ew9XqnYwNcaZJtCNynkElIV5HkNqA9cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFB3kONAQexjECDWs5jkKWJGEz3JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YWNm OGFmYS02Y2IxLTRjOWQtODRjNy01ZWU4ODQ1MDAzZDEvZGZlYzU3ZTgtNGJlMC0z YTgzLWI5NjItNzg5NTk1YjBhNjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmFjZjhhZmEtNmNiMS00YzlkLTg0 YzctNWVlODg0NTAwM2QxLzZhY2Y4YWZhLTZjYjEtNGM5ZC04NGM3LTVlZTg4NDUw MDNkMS5jcmwwHwYDVR0jBBgwFoAU2CwXVNgQjCQxXtrqMr1JHFRelVYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YWNmOGFmYS02Y2IxLTRjOWQtODRjNy01ZWU4 ODQ1MDAzZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFxjTAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhSxuWcWzhbO/N8LLl2QEC7rD+q67hc4lzQa/IUWPoHrvlNXnbEb/XC oUFvt55Phfmc5K4HVOKqKgzHPaav21Bi39sTNMA8ZMwpKEFr8IUIZTBdcLla3NTO IOLOTBZWNZIyAwiSgLlUERn7RccbCiqOJa/4tUcs7sPigBy1xX34kWAyC/pW7xc5 7ppgyF3D6cYwNVh5NFrvpBhTXIBWgfC+W+fl6sQSBkHXvC8yG2mhYnJ9FB7cjYMB ehUeu42+OmgNL36Nl2kkvQX3emQI4Am7J7flIE8kwUCtFBy9eQ907PZOewd/5j4K 7SMbE3vbf9jjvpU/ZV7vwop1auXVr+0= -----END CERTIFICATE-----Generated at Mon Aug 4 19:08:12 2025 by rpki-client