$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/f432be9d-4e43-38b6-962c-e71fb0b4fcc4.roa File: f432be9d-4e43-38b6-962c-e71fb0b4fcc4.roa (raw, json) Hash identifier: 1WEA8KkJG3OUzvi1wkdiheMCgz+/h3/5NIp7EVvbrlU= Subject key identifier: 0D:BF:47:EE:34:49:98:B3:45:6D:E6:16:91:0A:20:8C:01:9B:45:29 Certificate issuer: /CN=c54d5f74-3f0f-446f-b8af-258f72dede61 Certificate serial: 010D0C9F4328584AC9DBA483E6685F24A4389100 Authority key identifier: B5:CA:9C:D5:AE:53:00:A7:55:A8:FB:D3:65:18:4A:07:D2:CC:E2:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/f432be9d-4e43-38b6-962c-e71fb0b4fcc4.roa Signing time: Fri 08 Aug 2025 13:00:40 +0000 ROA not before: Fri 08 Aug 2025 13:00:40 +0000 ROA not after: Thu 06 Nov 2025 14:00:40 +0000 asID: 16509 IP address blocks: 199.167.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/c54d5f74-3f0f-446f-b8af-258f72dede61.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/c54d5f74-3f0f-446f-b8af-258f72dede61.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c9:db:a4:83:e6:68:5f:24:a4:38:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c54d5f74-3f0f-446f-b8af-258f72dede61 Validity Not Before: Aug 8 13:00:40 2025 GMT Not After : Nov 6 14:00:40 2025 GMT Subject: CN=b0a051cb-bf45-472c-9a98-80ff014c6361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:16:3d:e7:cb:2a:3d:28:93:0d:4c:8b:94:23: d0:6b:81:70:d9:69:4a:29:33:e6:7f:49:83:72:08: d4:09:10:82:a6:d5:91:6f:d6:d3:f4:1d:a4:7a:7f: 70:7b:0f:6b:fb:06:05:57:d9:a2:4b:d8:20:02:ff: f1:5c:8c:98:4b:10:92:80:1a:b3:59:39:22:06:ad: 56:a5:e5:9c:8a:ee:9b:c0:e2:a6:c3:fd:f7:e2:87: 04:51:d3:29:7f:85:a1:3a:f4:f0:72:50:e0:5a:d7: 19:07:25:71:63:ae:db:5f:02:18:c3:a1:12:c4:d5: 7a:5e:00:27:30:99:ea:6b:dc:cb:bc:89:ce:5d:2b: 48:85:26:2e:04:b8:20:a7:15:30:73:d6:e3:47:bc: d9:60:16:4d:b4:00:e3:11:39:e2:f9:c2:bb:3b:e6: b9:d7:ed:e1:2a:29:27:89:39:3a:53:d9:5d:2c:4d: f7:63:88:4c:0b:60:dd:0b:d8:f6:33:56:b1:6b:aa: ff:cb:a5:ad:03:fa:f4:90:04:1e:71:3f:b8:55:b5: ec:4f:0d:dd:cc:27:48:28:8c:3f:b0:21:2c:f0:4e: 16:9d:38:da:b8:4a:4e:c8:23:59:e4:a5:dd:73:10: 45:87:4b:20:bb:56:aa:9f:77:b9:90:ce:3c:29:5f: 90:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:BF:47:EE:34:49:98:B3:45:6D:E6:16:91:0A:20:8C:01:9B:45:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/f432be9d-4e43-38b6-962c-e71fb0b4fcc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/c54d5f74-3f0f-446f-b8af-258f72dede61.crl X509v3 Authority Key Identifier: keyid:B5:CA:9C:D5:AE:53:00:A7:55:A8:FB:D3:65:18:4A:07:D2:CC:E2:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61.cer sbgp-ipAddrBlock: critical IPv4: 199.167.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:49:fb:e6:67:b3:69:7c:94:5f:58:e7:3d:1c:26:24:00:a1: 8e:48:5e:ea:0d:f0:a2:78:8e:66:7a:fd:5b:d4:14:b4:ec:24: 7c:3c:1b:44:b1:90:75:11:92:5b:41:41:7d:2e:66:25:63:ba: b4:7a:12:3d:fb:7b:c8:6d:5d:97:60:af:3b:cc:9b:26:fc:73: 1b:61:16:0f:9b:8a:1c:b3:d8:10:f5:76:6e:11:cd:ed:d8:f4: 14:ed:c1:a4:0b:68:a9:9b:aa:23:49:3d:f5:84:7c:a8:89:66: 3a:16:df:63:cc:2e:a3:76:02:01:c4:0d:0d:83:ef:f1:f0:4a: a8:01:a0:e9:86:91:53:b7:79:99:e0:5c:66:b6:3e:90:ba:84: e2:63:11:01:d7:0e:8d:79:36:b9:60:e0:3e:64:29:5a:b4:28: 83:ac:aa:bf:61:0c:65:72:64:88:b5:c6:80:8b:2e:63:69:6d: 3c:cb:64:df:65:e8:dc:d6:49:ae:f5:a2:44:10:b4:b1:d1:75: fd:2d:f9:5b:7e:26:30:c7:1d:5e:e2:a6:f6:82:e8:5a:1d:0d: 41:46:15:0f:8a:16:8e:86:8c:86:af:65:c9:23:5f:e6:26:da: b5:b8:52:dc:c3:cf:ed:08:0d:72:48:2b:2a:cf:03:54:be:e7: b0:32:d7:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErJ26SD5mhfJKQ4kQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzU0ZDVmNzQtM2YwZi00NDZmLWI4YWYtMjU4ZjcyZGVk ZTYxMB4XDTI1MDgwODEzMDA0MFoXDTI1MTEwNjE0MDA0MFowLzEtMCsGA1UEAxMk YjBhMDUxY2ItYmY0NS00NzJjLTlhOTgtODBmZjAxNGM2MzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxY958sqPSiTDUyLlCPQa4Fw2WlKKTPmf0mD cgjUCRCCptWRb9bT9B2ken9wew9r+wYFV9miS9ggAv/xXIyYSxCSgBqzWTkiBq1W peWciu6bwOKmw/334ocEUdMpf4WhOvTwclDgWtcZByVxY67bXwIYw6ESxNV6XgAn MJnqa9zLvInOXStIhSYuBLggpxUwc9bjR7zZYBZNtADjETni+cK7O+a51+3hKikn iTk6U9ldLE33Y4hMC2DdC9j2M1axa6r/y6WtA/r0kAQecT+4VbXsTw3dzCdIKIw/ sCEs8E4WnTjauEpOyCNZ5KXdcxBFh0sgu1aqn3e5kM48KV+QVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA2/R+40SZizRW3mFpEKIIwBm0UpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jNTRk NWY3NC0zZjBmLTQ0NmYtYjhhZi0yNThmNzJkZWRlNjEvZjQzMmJlOWQtNGU0My0z OGI2LTk2MmMtZTcxZmIwYjRmY2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzU0ZDVmNzQtM2YwZi00NDZmLWI4 YWYtMjU4ZjcyZGVkZTYxL2M1NGQ1Zjc0LTNmMGYtNDQ2Zi1iOGFmLTI1OGY3MmRl ZGU2MS5jcmwwHwYDVR0jBBgwFoAUtcqc1a5TAKdVqPvTZRhKB9LM4n8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jNTRkNWY3NC0zZjBmLTQ0NmYtYjhhZi0yNThm NzJkZWRlNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6fhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNJ++Zns2l8lF9Y5z0cJiQAoY5IXuoN8KJ4jmZ6/VvUFLTsJHw8G0Sx kHURkltBQX0uZiVjurR6Ej37e8htXZdgrzvMmyb8cxthFg+bihyz2BD1dm4Rze3Y 9BTtwaQLaKmbqiNJPfWEfKiJZjoW32PMLqN2AgHEDQ2D7/HwSqgBoOmGkVO3eZng XGa2PpC6hOJjEQHXDo15Nrlg4D5kKVq0KIOsqr9hDGVyZIi1xoCLLmNpbTzLZN9l 6NzWSa71okQQtLHRdf0t+Vt+JjDHHV7ipvaC6FodDUFGFQ+KFo6GjIavZckjX+Ym 2rW4UtzDz+0IDXJIKyrPA1S+57Ay16M= -----END CERTIFICATE-----Generated at Sat Aug 23 10:18:10 2025 by rpki-client