$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/f959bf4c-909f-31f8-a9e0-6f0e8039547e.roa File: f959bf4c-909f-31f8-a9e0-6f0e8039547e.roa (raw, json) Hash identifier: UO50+aNj5B0te2f70D4ZHelETdoWAee5WLGzu73onx4= Subject key identifier: 44:8F:38:D7:0E:16:B5:69:53:FC:95:31:95:17:E3:EB:7E:6D:A0:84 Certificate issuer: /CN=c54d5f74-3f0f-446f-b8af-258f72dede61 Certificate serial: 010D0C9F4328584AC9DBA08EB06E74090A070E40 Authority key identifier: B5:CA:9C:D5:AE:53:00:A7:55:A8:FB:D3:65:18:4A:07:D2:CC:E2:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/f959bf4c-909f-31f8-a9e0-6f0e8039547e.roa Signing time: Fri 08 Aug 2025 13:00:40 +0000 ROA not before: Fri 08 Aug 2025 13:00:40 +0000 ROA not after: Thu 06 Nov 2025 14:00:40 +0000 asID: 16509 IP address blocks: 199.167.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/c54d5f74-3f0f-446f-b8af-258f72dede61.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/c54d5f74-3f0f-446f-b8af-258f72dede61.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c9:db:a0:8e:b0:6e:74:09:0a:07:0e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c54d5f74-3f0f-446f-b8af-258f72dede61 Validity Not Before: Aug 8 13:00:40 2025 GMT Not After : Nov 6 14:00:40 2025 GMT Subject: CN=3e1cc012-50eb-445b-ae98-1cfcf4c9924f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:74:7c:9b:03:dd:75:dd:f0:a0:97:3b:56:c3: 73:2d:53:b5:e5:65:1a:16:51:34:02:33:96:69:3a: 6a:7e:cb:19:32:8f:7d:21:48:15:73:c6:c5:e0:30: 58:13:7c:06:c3:5b:f7:2c:bc:b1:1f:9c:9c:a4:ba: a5:b1:7f:2b:b4:96:9c:4a:29:66:07:4c:79:62:52: 1e:d0:82:fe:32:67:9f:d6:66:75:81:0f:be:14:8a: ff:bb:1a:f4:10:61:2b:8c:53:4f:18:74:d7:c9:d4: fd:62:58:12:48:5b:c4:85:58:7d:85:1b:ca:ad:26: 87:c9:73:a8:74:16:d9:f4:f2:e6:14:ca:7a:fe:e0: 95:5a:c9:aa:d3:f9:30:9e:28:23:1d:d5:3f:4c:bf: 9f:b0:0e:6a:39:12:24:a3:c5:ac:fe:df:a3:0f:bc: d7:59:f4:4c:00:b4:4e:91:b3:cc:86:a2:76:87:82: 70:28:00:9c:09:c0:06:7e:51:8e:a3:16:a8:ce:7e: f9:d5:5d:dd:c5:4f:98:f4:a3:a1:fe:4d:f6:13:fe: 33:ed:37:b2:a9:4a:2a:80:83:e1:ea:08:da:db:17: 55:e4:71:8a:91:e7:2b:3b:aa:f0:7e:37:9b:f9:1d: 47:1b:cb:45:83:35:d2:39:2d:69:c1:cb:98:15:70: 7c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:8F:38:D7:0E:16:B5:69:53:FC:95:31:95:17:E3:EB:7E:6D:A0:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/f959bf4c-909f-31f8-a9e0-6f0e8039547e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/c54d5f74-3f0f-446f-b8af-258f72dede61.crl X509v3 Authority Key Identifier: keyid:B5:CA:9C:D5:AE:53:00:A7:55:A8:FB:D3:65:18:4A:07:D2:CC:E2:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61.cer sbgp-ipAddrBlock: critical IPv4: 199.167.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:b8:7a:93:6d:3d:54:4c:c8:1b:86:a6:22:50:81:d4:0e:6e: e1:6d:85:2d:9e:a5:9d:6d:3a:4f:f4:92:05:c8:d1:99:63:3b: 00:de:96:fc:e1:3d:ad:b1:10:64:2e:a9:2f:6d:0f:0c:1e:d7: e4:b9:ab:f4:1f:7c:c8:b7:68:8c:8b:c7:db:35:ce:31:f6:22: a5:37:f9:9c:10:f7:70:ca:b3:37:c5:80:07:a6:39:23:5c:f2: a6:71:f8:0d:af:eb:63:93:f4:24:88:39:78:2a:8b:4a:87:c9: 27:08:20:9e:34:7a:3d:67:9d:35:6f:34:f9:25:9d:1f:3b:82: 03:f3:75:7c:9a:4c:e0:b6:54:e4:12:96:cf:04:97:38:8f:40: ce:65:9d:6f:4b:6b:f1:05:d6:dc:15:5d:41:9b:e4:01:88:cb: a2:63:2e:54:1c:3e:83:3a:f9:18:78:8f:ee:56:99:b8:97:02: dd:4a:4c:51:cf:48:ac:fc:51:08:34:8b:79:c3:1f:36:93:40: 93:83:0b:28:f9:f1:3a:f1:72:83:20:14:3d:c4:8a:d3:c7:d4: d8:11:ee:00:50:19:49:bc:d3:ab:cc:62:5c:71:97:1d:2e:7a: ab:3b:53:55:ca:4a:d8:0a:72:66:9d:19:f3:44:9f:1a:95:c4: c5:d2:a5:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErJ26COsG50CQoHDkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzU0ZDVmNzQtM2YwZi00NDZmLWI4YWYtMjU4ZjcyZGVk ZTYxMB4XDTI1MDgwODEzMDA0MFoXDTI1MTEwNjE0MDA0MFowLzEtMCsGA1UEAxMk M2UxY2MwMTItNTBlYi00NDViLWFlOTgtMWNmY2Y0Yzk5MjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHR8mwPddd3woJc7VsNzLVO15WUaFlE0AjOW aTpqfssZMo99IUgVc8bF4DBYE3wGw1v3LLyxH5ycpLqlsX8rtJacSilmB0x5YlIe 0IL+Mmef1mZ1gQ++FIr/uxr0EGErjFNPGHTXydT9YlgSSFvEhVh9hRvKrSaHyXOo dBbZ9PLmFMp6/uCVWsmq0/kwnigjHdU/TL+fsA5qORIko8Ws/t+jD7zXWfRMALRO kbPMhqJ2h4JwKACcCcAGflGOoxaozn751V3dxU+Y9KOh/k32E/4z7TeyqUoqgIPh 6gja2xdV5HGKkecrO6rwfjeb+R1HG8tFgzXSOS1pwcuYFXB8BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFESPONcOFrVpU/yVMZUX4+t+baCEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jNTRk NWY3NC0zZjBmLTQ0NmYtYjhhZi0yNThmNzJkZWRlNjEvZjk1OWJmNGMtOTA5Zi0z MWY4LWE5ZTAtNmYwZTgwMzk1NDdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzU0ZDVmNzQtM2YwZi00NDZmLWI4 YWYtMjU4ZjcyZGVkZTYxL2M1NGQ1Zjc0LTNmMGYtNDQ2Zi1iOGFmLTI1OGY3MmRl ZGU2MS5jcmwwHwYDVR0jBBgwFoAUtcqc1a5TAKdVqPvTZRhKB9LM4n8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jNTRkNWY3NC0zZjBmLTQ0NmYtYjhhZi0yNThm NzJkZWRlNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6fiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADS4epNtPVRMyBuGpiJQgdQObuFthS2epZ1tOk/0kgXI0ZljOwDelvzh Pa2xEGQuqS9tDwwe1+S5q/QffMi3aIyLx9s1zjH2IqU3+ZwQ93DKszfFgAemOSNc 8qZx+A2v62OT9CSIOXgqi0qHyScIIJ40ej1nnTVvNPklnR87ggPzdXyaTOC2VOQS ls8ElziPQM5lnW9La/EF1twVXUGb5AGIy6JjLlQcPoM6+Rh4j+5WmbiXAt1KTFHP SKz8UQg0i3nDHzaTQJODCyj58TrxcoMgFD3EitPH1NgR7gBQGUm806vMYlxxlx0u eqs7U1XKStgKcmadGfNEnxqVxMXSpQQ= -----END CERTIFICATE-----Generated at Sat Aug 23 12:22:41 2025 by rpki-client