$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c743b329-2385-4bb0-899d-c1639569faa3/67c811c4-c2ac-3048-91a0-e33dc9f4049e.roa File: 67c811c4-c2ac-3048-91a0-e33dc9f4049e.roa (raw, json) Hash identifier: vP1rCpEootDOoHV/zhPYauGnW4Mucvt77BAI8JE6FK8= Subject key identifier: A5:CF:D6:3E:32:BE:C1:02:48:65:49:F8:17:F8:C4:8D:18:B2:AD:9A Certificate issuer: /CN=c743b329-2385-4bb0-899d-c1639569faa3 Certificate serial: 010D0C9F4328584AC0163200EE2BE6E4945063E0 Authority key identifier: 9B:D7:5F:66:B7:3C:80:89:49:B2:4A:36:5B:57:D2:58:0F:F8:3A:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c743b329-2385-4bb0-899d-c1639569faa3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c743b329-2385-4bb0-899d-c1639569faa3/67c811c4-c2ac-3048-91a0-e33dc9f4049e.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 399199 IP address blocks: 172.99.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c743b329-2385-4bb0-899d-c1639569faa3/c743b329-2385-4bb0-899d-c1639569faa3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c743b329-2385-4bb0-899d-c1639569faa3/c743b329-2385-4bb0-899d-c1639569faa3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c743b329-2385-4bb0-899d-c1639569faa3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:32:00:ee:2b:e6:e4:94:50:63:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c743b329-2385-4bb0-899d-c1639569faa3 Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=310df561-76e6-46bf-b459-9631bfc02915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ff:42:39:fc:8c:68:62:0e:8a:53:49:b3:fc: ed:16:12:5d:c8:c6:df:d1:32:4d:99:15:5b:f2:a2: bc:14:a3:91:1a:e2:4c:30:d2:ad:5c:51:a8:c2:f2: 67:be:f8:6e:b9:61:50:b8:e4:36:4d:b9:47:cb:56: c8:57:73:71:84:d6:75:52:ab:2c:b0:9b:e4:4f:ab: 06:3b:c8:9b:c9:0a:be:2f:38:82:dc:7b:3d:a5:70: c8:cd:c9:51:2b:25:8c:90:e7:26:89:a8:95:7f:ce: 27:95:7a:5b:b4:68:7a:f5:c1:6e:22:40:bc:e4:8d: cf:52:1a:fe:cb:f9:ca:55:d5:94:5d:bb:d7:9e:aa: db:6a:f8:58:9d:38:6c:a1:b8:f5:a5:32:1d:32:06: be:a0:df:c9:8b:0b:13:cf:c2:17:9d:66:c6:51:e6: 0f:1a:ed:24:d6:92:ae:2e:fd:53:c8:d0:74:9d:12: ee:2e:29:42:11:53:53:70:86:e9:d2:ef:3d:d1:97: 92:6c:6a:c1:89:76:66:1a:dd:1d:47:10:af:30:eb: 4b:8a:88:f6:4a:98:65:8b:31:e4:61:69:76:fe:b4: 6c:f6:aa:26:89:18:47:13:a3:0b:c2:86:d6:0e:7d: 33:0e:9c:f5:29:3f:ef:da:53:a2:51:e5:69:27:7e: 1e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:CF:D6:3E:32:BE:C1:02:48:65:49:F8:17:F8:C4:8D:18:B2:AD:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c743b329-2385-4bb0-899d-c1639569faa3/67c811c4-c2ac-3048-91a0-e33dc9f4049e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c743b329-2385-4bb0-899d-c1639569faa3/c743b329-2385-4bb0-899d-c1639569faa3.crl X509v3 Authority Key Identifier: keyid:9B:D7:5F:66:B7:3C:80:89:49:B2:4A:36:5B:57:D2:58:0F:F8:3A:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c743b329-2385-4bb0-899d-c1639569faa3.cer sbgp-ipAddrBlock: critical IPv4: 172.99.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:f1:50:ad:36:53:d9:ab:24:fa:67:8f:82:7b:1d:2c:42:bc: ed:8f:8c:15:a2:f4:48:e1:62:16:95:0e:62:9b:8a:10:c0:3b: 80:a2:7e:80:00:5c:bb:36:91:3c:7d:b8:b6:b3:f5:57:c6:78: 66:7d:7a:f5:b7:5c:aa:be:a6:3c:d3:66:6c:21:d6:73:b2:c3: 29:de:f8:15:c8:f3:2f:03:db:f6:c0:92:a1:67:7a:18:e3:e5: 53:3a:79:87:ce:15:35:fe:4f:c3:5a:da:cf:0b:42:97:0b:4d: 71:75:d5:93:1c:e7:79:77:7c:d9:64:68:50:35:b4:35:31:e2: f3:86:e2:de:4f:51:09:ca:3e:79:6c:64:4b:b1:3b:86:1b:36: 0e:fd:91:2c:3a:85:1a:69:b7:48:65:3e:7b:b8:76:27:39:5f: e2:45:b5:95:cf:2d:3c:5c:13:16:c7:5d:bf:c3:71:c7:5d:78: af:92:86:6d:26:ec:65:7d:a4:3c:f3:0a:78:64:7f:3d:d2:87: bf:c8:cb:3e:fa:63:15:f4:2a:48:52:46:83:05:1c:ff:81:d2: 5f:ed:87:ee:90:d7:9b:5c:1e:a4:63:55:b4:c9:40:d1:03:53: 33:95:b4:9e:e3:6d:74:f9:9a:4f:dc:62:32:f5:96:0b:36:26: 1c:fb:f3:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFjIA7ivm5JRQY+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzc0M2IzMjktMjM4NS00YmIwLTg5OWQtYzE2Mzk1Njlm YWEzMB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk MzEwZGY1NjEtNzZlNi00NmJmLWI0NTktOTYzMWJmYzAyOTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwv9COfyMaGIOilNJs/ztFhJdyMbf0TJNmRVb 8qK8FKORGuJMMNKtXFGowvJnvvhuuWFQuOQ2TblHy1bIV3NxhNZ1UqsssJvkT6sG O8ibyQq+LziC3Hs9pXDIzclRKyWMkOcmiaiVf84nlXpbtGh69cFuIkC85I3PUhr+ y/nKVdWUXbvXnqrbavhYnThsobj1pTIdMga+oN/JiwsTz8IXnWbGUeYPGu0k1pKu Lv1TyNB0nRLuLilCEVNTcIbp0u890ZeSbGrBiXZmGt0dRxCvMOtLioj2SphlizHk YWl2/rRs9qomiRhHE6MLwobWDn0zDpz1KT/v2lOiUeVpJ34eGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKXP1j4yvsECSGVJ+Bf4xI0Ysq2aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jNzQz YjMyOS0yMzg1LTRiYjAtODk5ZC1jMTYzOTU2OWZhYTMvNjdjODExYzQtYzJhYy0z MDQ4LTkxYTAtZTMzZGM5ZjQwNDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzc0M2IzMjktMjM4NS00YmIwLTg5 OWQtYzE2Mzk1NjlmYWEzL2M3NDNiMzI5LTIzODUtNGJiMC04OTlkLWMxNjM5NTY5 ZmFhMy5jcmwwHwYDVR0jBBgwFoAUm9dfZrc8gIlJsko2W1fSWA/4OgowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jNzQzYjMyOS0yMzg1LTRiYjAtODk5ZC1jMTYz OTU2OWZhYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGPAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIfxUK02U9mrJPpnj4J7HSxCvO2PjBWi9EjhYhaVDmKbihDAO4CifoAA XLs2kTx9uLaz9VfGeGZ9evW3XKq+pjzTZmwh1nOywyne+BXI8y8D2/bAkqFnehjj 5VM6eYfOFTX+T8Na2s8LQpcLTXF11ZMc53l3fNlkaFA1tDUx4vOG4t5PUQnKPnls ZEuxO4YbNg79kSw6hRppt0hlPnu4dic5X+JFtZXPLTxcExbHXb/DccddeK+Shm0m 7GV9pDzzCnhkfz3Sh7/Iyz76YxX0KkhSRoMFHP+B0l/th+6Q15tcHqRjVbTJQNED UzOVtJ7jbXT5mk/cYjL1lgs2Jhz78xk= -----END CERTIFICATE-----Generated at Sun Aug 24 01:18:00 2025 by rpki-client