$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab/f980f0c8-76ae-31c6-aafd-f441e9465a97.roa File: f980f0c8-76ae-31c6-aafd-f441e9465a97.roa (raw, json) Hash identifier: dS4SBFabfmm6taIoHv8hTimJCh+eb3N+i2B9Yedpk3E= Subject key identifier: FC:5D:F0:F3:61:61:AB:33:01:BF:6D:F5:27:76:FD:B7:16:F6:9F:44 Certificate issuer: /CN=9a3bcf43-7033-48e8-975e-f90913b5cbab Certificate serial: 010D0C9F4328584A7A03684BC698F32F729A6F80 Authority key identifier: C6:88:1F:92:36:4D:E7:96:D4:A9:40:83:C5:62:56:77:EE:9E:6F:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab/f980f0c8-76ae-31c6-aafd-f441e9465a97.roa Signing time: Thu 10 Jul 2025 22:36:15 +0000 ROA not before: Thu 10 Jul 2025 22:36:15 +0000 ROA not after: Wed 08 Oct 2025 22:36:15 +0000 asID: 39943 IP address blocks: 198.206.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab/9a3bcf43-7033-48e8-975e-f90913b5cbab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab/9a3bcf43-7033-48e8-975e-f90913b5cbab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:03:68:4b:c6:98:f3:2f:72:9a:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a3bcf43-7033-48e8-975e-f90913b5cbab Validity Not Before: Jul 10 22:36:15 2025 GMT Not After : Oct 8 22:36:15 2025 GMT Subject: CN=db9cfdbe-5861-4e6c-bbad-a6cb1fb5bede Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:8a:48:48:b4:7f:d1:b4:92:ac:02:1b:f6:ac: 42:26:b4:85:f9:bf:fe:20:05:e3:e4:11:30:93:ce: bc:83:3c:5c:ef:ec:5c:f8:25:b1:6c:05:65:ce:b7: 82:5d:86:30:33:63:28:31:de:dd:de:c8:0a:0e:4d: 1c:50:0f:03:89:04:47:fa:e5:29:e5:04:f0:d1:f7: 0e:ee:5e:1e:9d:e8:3f:b6:37:8c:f6:84:31:96:66: aa:62:fc:e9:98:4b:b2:29:c2:f6:9b:25:6e:cc:e8: 27:80:ca:9f:e2:a4:37:04:19:7a:6c:52:7f:6e:f0: 9f:90:80:b1:12:57:9c:cc:c4:e8:1a:d1:9e:06:d1: 10:78:68:84:6e:47:32:f5:da:dc:9c:f4:cb:d7:75: fa:50:84:18:79:f3:66:83:e7:b4:47:07:fa:d9:9e: ce:34:76:37:09:c0:30:83:df:77:2c:22:63:b5:54: 43:41:7b:2e:12:c0:e6:1b:72:c4:80:6d:67:94:f8: 2f:b9:5d:62:37:73:c6:60:53:f9:5e:40:c0:b4:3c: a0:11:a8:98:4c:20:53:d3:1c:d0:57:f0:ee:97:ae: 6c:08:26:99:2e:72:e0:26:d8:f3:86:46:00:4c:a8: c7:1f:07:e1:c5:5f:ef:95:be:68:66:5e:70:0d:e3: d7:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:5D:F0:F3:61:61:AB:33:01:BF:6D:F5:27:76:FD:B7:16:F6:9F:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab/f980f0c8-76ae-31c6-aafd-f441e9465a97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab/9a3bcf43-7033-48e8-975e-f90913b5cbab.crl X509v3 Authority Key Identifier: keyid:C6:88:1F:92:36:4D:E7:96:D4:A9:40:83:C5:62:56:77:EE:9E:6F:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab.cer sbgp-ipAddrBlock: critical IPv4: 198.206.180.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:03:38:64:48:62:aa:55:2a:fc:5b:39:33:44:50:58:50:c5: bf:65:a6:42:8d:a3:5b:8a:e7:f4:2d:4c:df:07:f0:17:20:b7: e3:cb:4b:c6:18:b5:46:87:1a:8a:63:8a:b3:4e:82:6d:b0:f8: a2:2d:ee:46:58:7d:83:ad:dc:75:b6:05:c7:d1:c5:43:16:9f: f2:b3:2b:b4:2e:ee:49:42:90:c4:50:96:3d:e2:9f:15:86:a5: 47:f6:19:2c:80:26:4b:0d:ef:2b:a5:61:39:38:bc:83:c7:e0: c0:26:66:3b:8c:1d:df:16:2e:0f:b7:08:53:5e:38:d7:fd:a0: 06:59:0d:ec:65:c5:dd:35:77:22:09:07:fe:0a:28:79:03:8c: 72:99:15:4c:ce:2c:11:90:03:d5:b8:1a:2b:3f:71:90:8a:f1: 19:fc:9f:a1:d2:ee:39:e1:c6:86:09:1e:4f:45:20:c8:99:04: 5e:af:33:33:d5:90:0a:3e:5a:cc:63:02:a0:0b:56:42:56:76: 64:3e:f1:18:ee:a0:26:06:75:9e:c6:51:1a:ad:eb:f3:ae:a5: 33:53:30:f6:e3:2e:ce:ae:c1:70:1f:8a:b4:d5:b6:d1:19:91: d0:63:e5:b0:cd:d6:d8:d7:77:6b:a8:94:16:d0:2f:82:8c:53: 32:2a:03:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6A2hLxpjzL3Kab4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWEzYmNmNDMtNzAzMy00OGU4LTk3NWUtZjkwOTEzYjVj YmFiMB4XDTI1MDcxMDIyMzYxNVoXDTI1MTAwODIyMzYxNVowLzEtMCsGA1UEAxMk ZGI5Y2ZkYmUtNTg2MS00ZTZjLWJiYWQtYTZjYjFmYjViZWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4pISLR/0bSSrAIb9qxCJrSF+b/+IAXj5BEw k868gzxc7+xc+CWxbAVlzreCXYYwM2MoMd7d3sgKDk0cUA8DiQRH+uUp5QTw0fcO 7l4eneg/tjeM9oQxlmaqYvzpmEuyKcL2myVuzOgngMqf4qQ3BBl6bFJ/bvCfkICx EleczMToGtGeBtEQeGiEbkcy9drcnPTL13X6UIQYefNmg+e0Rwf62Z7ONHY3CcAw g993LCJjtVRDQXsuEsDmG3LEgG1nlPgvuV1iN3PGYFP5XkDAtDygEaiYTCBT0xzQ V/Dul65sCCaZLnLgJtjzhkYATKjHHwfhxV/vlb5oZl5wDePXkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPxd8PNhYaszAb9t9Sd2/bcW9p9EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85YTNi Y2Y0My03MDMzLTQ4ZTgtOTc1ZS1mOTA5MTNiNWNiYWIvZjk4MGYwYzgtNzZhZS0z MWM2LWFhZmQtZjQ0MWU5NDY1YTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOWEzYmNmNDMtNzAzMy00OGU4LTk3 NWUtZjkwOTEzYjVjYmFiLzlhM2JjZjQzLTcwMzMtNDhlOC05NzVlLWY5MDkxM2I1 Y2JhYi5jcmwwHwYDVR0jBBgwFoAUxogfkjZN55bUqUCDxWJWd+6ebyYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85YTNiY2Y0My03MDMzLTQ4ZTgtOTc1ZS1mOTA5 MTNiNWNiYWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxs60MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgDOGRIYqpVKvxbOTNEUFhQxb9lpkKNo1uK5/QtTN8H8Bcgt+PLS8YY tUaHGopjirNOgm2w+KIt7kZYfYOt3HW2BcfRxUMWn/KzK7Qu7klCkMRQlj3inxWG pUf2GSyAJksN7yulYTk4vIPH4MAmZjuMHd8WLg+3CFNeONf9oAZZDexlxd01dyIJ B/4KKHkDjHKZFUzOLBGQA9W4Gis/cZCK8Rn8n6HS7jnhxoYJHk9FIMiZBF6vMzPV kAo+WsxjAqALVkJWdmQ+8RjuoCYGdZ7GURqt6/OupTNTMPbjLs6uwXAfirTVttEZ kdBj5bDN1tjXd2uolBbQL4KMUzIqAyA= -----END CERTIFICATE-----Generated at Sun Aug 10 13:44:48 2025 by rpki-client