$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7707931-9764-48eb-9dbd-a40ef4165c1b/803f7ede-7615-343b-89d8-ee66fd03b3a9.roa File: 803f7ede-7615-343b-89d8-ee66fd03b3a9.roa (raw, json) Hash identifier: 7EyYV6EdLsQ3HF8ZXWEYvKuUJmWFy/X3liwp7tC9YOY= Subject key identifier: 0F:81:C5:F2:1E:35:7B:87:53:8F:CE:B0:8E:BD:0B:C5:7E:5D:37:89 Certificate issuer: /CN=b7707931-9764-48eb-9dbd-a40ef4165c1b Certificate serial: 010D0C9F4328584AA160DE9BD22EED2446C55000 Authority key identifier: 97:E0:F5:D0:4D:C5:6A:07:85:A6:E5:60:61:9C:BC:43:DC:A9:39:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7707931-9764-48eb-9dbd-a40ef4165c1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7707931-9764-48eb-9dbd-a40ef4165c1b/803f7ede-7615-343b-89d8-ee66fd03b3a9.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 23389 IP address blocks: 198.212.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7707931-9764-48eb-9dbd-a40ef4165c1b/b7707931-9764-48eb-9dbd-a40ef4165c1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7707931-9764-48eb-9dbd-a40ef4165c1b/b7707931-9764-48eb-9dbd-a40ef4165c1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7707931-9764-48eb-9dbd-a40ef4165c1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:60:de:9b:d2:2e:ed:24:46:c5:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7707931-9764-48eb-9dbd-a40ef4165c1b Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=640daed8-84f1-412b-9e84-b4d6571be23e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:95:29:33:af:79:4c:11:6e:92:b9:e5:46:a6: 00:5d:4c:00:50:ab:34:cf:93:cd:93:42:d7:1c:0e: a1:da:db:e7:69:c2:74:39:cb:74:ea:b5:7b:b6:d2: d7:84:bb:07:17:c5:60:b7:fa:64:9d:17:3e:6a:47: 4a:1e:7d:48:ad:e0:fb:ee:2c:3f:f7:12:df:23:67: d5:e8:ba:a1:94:5e:59:d3:f9:1a:ec:b7:75:fe:2c: 8f:b4:81:b9:91:8a:03:14:dd:2d:d0:62:ac:f0:6f: 98:a2:a8:68:ca:16:78:37:61:31:89:20:93:45:9f: 4e:82:a2:f7:6d:55:79:bc:53:99:53:c4:cb:a5:3e: 7b:c0:8d:6b:3e:9c:e4:38:cd:2f:ac:41:e0:3f:e8: ac:d6:b7:51:1f:64:eb:72:c1:28:84:54:b7:6a:99: ac:9a:aa:de:de:af:8f:ca:ab:56:e8:45:de:55:cc: 85:96:8a:21:d2:98:61:ef:bb:38:79:48:cd:e9:b3: f2:66:fc:3a:0c:53:e5:0a:85:26:3d:96:d0:f5:00: a8:f3:cb:a4:d8:a3:d3:bc:ad:bf:b3:d2:43:f1:77: df:c6:ca:1b:f2:52:df:68:68:3f:39:45:36:3d:c5: 85:c9:b5:0e:1b:63:fb:26:b7:71:80:ef:a5:82:a9: 00:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:81:C5:F2:1E:35:7B:87:53:8F:CE:B0:8E:BD:0B:C5:7E:5D:37:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7707931-9764-48eb-9dbd-a40ef4165c1b/803f7ede-7615-343b-89d8-ee66fd03b3a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7707931-9764-48eb-9dbd-a40ef4165c1b/b7707931-9764-48eb-9dbd-a40ef4165c1b.crl X509v3 Authority Key Identifier: keyid:97:E0:F5:D0:4D:C5:6A:07:85:A6:E5:60:61:9C:BC:43:DC:A9:39:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7707931-9764-48eb-9dbd-a40ef4165c1b.cer sbgp-ipAddrBlock: critical IPv4: 198.212.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:df:bd:44:37:77:b2:91:01:ac:b8:49:bd:7b:a2:80:c0:2e: 51:8f:f3:25:f7:e1:b9:de:36:30:63:e6:99:a6:9d:3d:3e:0e: 6e:12:73:78:9a:93:b0:0c:40:45:fb:9c:03:c8:6c:ee:fb:22: 5e:ea:ec:29:f1:6d:75:bd:e9:da:d5:43:21:4f:5a:b5:a6:8a: 05:47:0f:61:04:ad:bf:3c:a8:d7:36:8f:8a:19:81:8b:59:e9: 83:42:ec:a5:4f:e9:70:87:71:03:b1:3c:55:08:d3:83:3c:e3: 64:46:0c:8d:16:4a:76:09:b2:1e:79:b9:d8:37:08:fa:ce:e8: b9:2b:60:bb:a2:53:7b:c1:41:3a:b6:08:13:17:5c:00:ab:97: 75:ff:b8:0e:20:93:a2:a3:99:1e:c3:bf:7b:18:ff:e1:a7:e0: 32:a3:e2:9a:b2:ce:76:f1:15:47:69:85:5c:09:57:38:10:17: 3d:2d:c3:95:df:49:cb:63:f9:7f:6c:0a:3f:4d:ea:fd:0e:6c: cf:ad:0b:ac:ad:c6:39:36:81:d7:ea:75:96:ed:47:a9:54:35: 60:82:57:c2:62:29:02:80:49:46:60:c8:a0:8f:c0:03:f8:a0: 3e:a0:f8:a9:6a:47:96:e2:28:f7:33:1a:90:8c:56:df:1a:ad: e2:32:57:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYN6b0i7tJEbFUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc3MDc5MzEtOTc2NC00OGViLTlkYmQtYTQwZWY0MTY1 YzFiMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk NjQwZGFlZDgtODRmMS00MTJiLTllODQtYjRkNjU3MWJlMjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5UpM695TBFukrnlRqYAXUwAUKs0z5PNk0LX HA6h2tvnacJ0Oct06rV7ttLXhLsHF8Vgt/pknRc+akdKHn1IreD77iw/9xLfI2fV 6LqhlF5Z0/ka7Ld1/iyPtIG5kYoDFN0t0GKs8G+YoqhoyhZ4N2ExiSCTRZ9OgqL3 bVV5vFOZU8TLpT57wI1rPpzkOM0vrEHgP+is1rdRH2TrcsEohFS3apmsmqre3q+P yqtW6EXeVcyFlooh0phh77s4eUjN6bPyZvw6DFPlCoUmPZbQ9QCo88uk2KPTvK2/ s9JD8Xffxsob8lLfaGg/OUU2PcWFybUOG2P7JrdxgO+lgqkAZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA+BxfIeNXuHU4/OsI69C8V+XTeJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNzcw NzkzMS05NzY0LTQ4ZWItOWRiZC1hNDBlZjQxNjVjMWIvODAzZjdlZGUtNzYxNS0z NDNiLTg5ZDgtZWU2NmZkMDNiM2E5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjc3MDc5MzEtOTc2NC00OGViLTlk YmQtYTQwZWY0MTY1YzFiL2I3NzA3OTMxLTk3NjQtNDhlYi05ZGJkLWE0MGVmNDE2 NWMxYi5jcmwwHwYDVR0jBBgwFoAUl+D10E3FageFpuVgYZy8Q9ypORUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNzcwNzkzMS05NzY0LTQ4ZWItOWRiZC1hNDBl ZjQxNjVjMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxtSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXfvUQ3d7KRAay4Sb17ooDALlGP8yX34bneNjBj5pmmnT0+Dm4Sc3ia k7AMQEX7nAPIbO77Il7q7CnxbXW96drVQyFPWrWmigVHD2EErb88qNc2j4oZgYtZ 6YNC7KVP6XCHcQOxPFUI04M842RGDI0WSnYJsh55udg3CPrO6LkrYLuiU3vBQTq2 CBMXXACrl3X/uA4gk6KjmR7Dv3sY/+Gn4DKj4pqyznbxFUdphVwJVzgQFz0tw5Xf Sctj+X9sCj9N6v0ObM+tC6ytxjk2gdfqdZbtR6lUNWCCV8JiKQKASUZgyKCPwAP4 oD6g+KlqR5biKPczGpCMVt8areIyV8M= -----END CERTIFICATE-----Generated at Wed Aug 6 00:47:20 2025 by rpki-client