$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9ebd993f-ee7d-34cc-aa8e-5aa11f2f2241.roa File: 9ebd993f-ee7d-34cc-aa8e-5aa11f2f2241.roa (raw, json) Hash identifier: PfVJOc0egLjFmLDuzXwNfGfJVDuH9sSbAcOIBoYvDTs= Subject key identifier: 90:49:75:67:57:AB:E2:32:E2:B5:4D:12:28:16:DB:59:91:B7:AE:40 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584AB6510373A456249B6AC43470 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9ebd993f-ee7d-34cc-aa8e-5aa11f2f2241.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 174 IP address blocks: 198.144.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:51:03:73:a4:56:24:9b:6a:c4:34:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=e9dc5ccd-f078-4146-ba00-fb95ea82b965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:26:db:18:a2:00:2d:f4:41:0c:e7:91:51:e2: 67:a4:92:1d:b6:13:cc:e3:e9:4f:cd:17:49:f6:d2: 57:63:75:41:02:44:c9:1e:df:8e:c5:e2:22:f4:9b: bb:16:56:ac:db:07:d0:3c:35:c6:91:0d:15:bd:47: e4:a0:4f:e9:72:75:31:70:83:47:5a:3a:75:d2:b0: 63:2b:3f:67:97:a9:6b:9d:b1:7a:d7:fe:39:77:ee: 6b:d9:58:08:ea:1c:a9:d6:ed:43:9e:59:60:be:81: 34:0a:45:1c:21:4b:a7:e8:d0:51:e7:28:b2:a3:0a: 0f:d5:fb:37:2e:c5:14:bb:71:71:50:25:81:91:92: b6:b2:00:ea:59:04:10:a4:d1:c0:24:3e:69:fc:72: d2:55:d4:2e:d4:ef:26:68:ca:b0:86:a6:81:37:30: 7b:ac:4c:d0:a1:cd:c3:51:da:71:d5:f1:d6:da:86: 5f:85:b6:6e:ad:31:f8:59:b9:8e:69:00:3f:32:6a: b0:6f:1f:cc:d3:10:e4:7b:d3:f1:af:13:f9:e5:61: b6:3c:2b:10:08:c2:68:90:14:97:2d:91:01:c4:ad: 76:c9:b2:f9:c6:32:64:3b:a6:64:8d:2e:c9:e9:2e: 3b:ec:9a:9f:99:48:78:3c:c5:d5:c6:a2:ac:b8:cc: eb:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:49:75:67:57:AB:E2:32:E2:B5:4D:12:28:16:DB:59:91:B7:AE:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9ebd993f-ee7d-34cc-aa8e-5aa11f2f2241.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 198.144.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:eb:be:74:8e:c6:3e:9e:88:66:56:57:9c:81:c1:8b:78:b2: 6c:a2:27:73:8a:cd:f0:a7:b1:f6:a9:9e:b8:60:5d:a0:46:95: 6a:9c:78:41:50:67:b1:19:32:99:a5:8f:20:21:01:37:c2:19: 6d:33:94:7a:9d:92:8e:12:e3:4d:3e:e8:f8:64:73:22:79:2f: 48:93:1e:79:f1:d5:13:d9:ad:d6:bb:7d:98:d2:85:9a:76:5a: ab:be:2c:fb:5e:97:db:df:92:86:42:7c:a4:eb:b9:74:59:76: 58:76:06:f8:7a:03:dd:cb:9c:5f:64:16:a0:4f:d6:6c:f0:a5: 37:fc:0b:b5:e5:f3:6b:ad:db:c6:27:de:d6:00:0d:31:46:97: a3:1f:7f:39:83:cb:36:bb:5f:e8:8a:59:2f:e5:4e:b2:d5:6f: 53:ee:57:62:a6:37:3d:28:42:c7:8d:f6:e0:5d:e7:e9:d5:a1: 78:e4:c9:0e:e1:19:71:e0:cc:f2:e6:55:35:62:a3:a9:c1:e5: 7d:d5:2d:72:54:4a:45:55:9f:39:93:da:28:92:d7:b2:ee:32: 43:9a:cb:f5:b7:3b:e2:75:1c:87:44:20:9d:26:37:38:6c:81: 62:0a:e7:2d:d6:ff:eb:a4:a9:22:25:ac:c5:d8:cb:a7:dd:74: 9b:e3:a7:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq2UQNzpFYkm2rENHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk ZTlkYzVjY2QtZjA3OC00MTQ2LWJhMDAtZmI5NWVhODJiOTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApybbGKIALfRBDOeRUeJnpJIdthPM4+lPzRdJ 9tJXY3VBAkTJHt+OxeIi9Ju7Flas2wfQPDXGkQ0VvUfkoE/pcnUxcINHWjp10rBj Kz9nl6lrnbF61/45d+5r2VgI6hyp1u1DnllgvoE0CkUcIUun6NBR5yiyowoP1fs3 LsUUu3FxUCWBkZK2sgDqWQQQpNHAJD5p/HLSVdQu1O8maMqwhqaBNzB7rEzQoc3D Udpx1fHW2oZfhbZurTH4WbmOaQA/Mmqwbx/M0xDke9PxrxP55WG2PCsQCMJokBSX LZEBxK12ybL5xjJkO6ZkjS7J6S477JqfmUh4PMXVxqKsuMzrOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJBJdWdXq+Iy4rVNEigW21mRt65AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOWViZDk5M2YtZWU3ZC0z NGNjLWFhOGUtNWFhMTFmMmYyMjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDrvnSOxj6eiGZWV5yBwYt4smyiJ3OKzfCnsfapnrhgXaBGlWqceEFQ Z7EZMpmljyAhATfCGW0zlHqdko4S400+6PhkcyJ5L0iTHnnx1RPZrda7fZjShZp2 Wqu+LPtel9vfkoZCfKTruXRZdlh2Bvh6A93LnF9kFqBP1mzwpTf8C7Xl82ut28Yn 3tYADTFGl6MffzmDyza7X+iKWS/lTrLVb1PuV2KmNz0oQseN9uBd5+nVoXjkyQ7h GXHgzPLmVTVio6nB5X3VLXJUSkVVnzmT2iiS17LuMkOay/W3O+J1HIdEIJ0mNzhs gWIK5y3W/+ukqSIlrMXYy6fddJvjp98= -----END CERTIFICATE-----Generated at Sat Aug 9 01:19:18 2025 by rpki-client