$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e/02d90035-da81-3e67-96c7-9feeef8b261e.roa File: 02d90035-da81-3e67-96c7-9feeef8b261e.roa (raw, json) Hash identifier: JMxIgCunw5pmdl+QP+z+IePumqAa+QMbJDgyOOXTMA4= Subject key identifier: B4:E4:0E:91:31:B1:DD:CE:2D:91:83:BC:E0:37:48:DD:A7:81:DE:15 Certificate issuer: /CN=45657d9f-043b-4838-9072-ef0906bb567e Certificate serial: 010D0C9F4328584AE1966DDC9577766685328100 Authority key identifier: D8:35:B5:C1:42:EB:91:5F:06:FB:C3:99:31:65:E8:42:24:63:EE:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e/02d90035-da81-3e67-96c7-9feeef8b261e.roa Signing time: Sun 17 Aug 2025 01:00:32 +0000 ROA not before: Sun 17 Aug 2025 01:00:32 +0000 ROA not after: Sat 15 Nov 2025 02:00:32 +0000 asID: 16652 IP address blocks: 199.254.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e/45657d9f-043b-4838-9072-ef0906bb567e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e/45657d9f-043b-4838-9072-ef0906bb567e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:96:6d:dc:95:77:76:66:85:32:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45657d9f-043b-4838-9072-ef0906bb567e Validity Not Before: Aug 17 01:00:32 2025 GMT Not After : Nov 15 02:00:32 2025 GMT Subject: CN=7d55f067-0b9f-40bc-8236-3fdee29fd0ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:cc:4f:6c:3a:75:75:74:8e:34:58:d3:be:8d: fd:d2:25:de:fa:aa:9a:07:6c:84:4a:d1:ff:71:91: ce:d2:b2:df:32:e7:be:d0:ec:ef:93:f0:d0:e3:8f: d5:79:df:a3:ec:c5:57:d0:35:25:d9:74:d0:eb:08: 10:78:f9:07:26:56:bb:2a:04:b8:4a:6f:50:80:fb: 6f:54:a1:0c:d7:81:26:64:07:9c:68:57:2d:1d:17: 0b:77:38:7e:7d:01:6c:4e:de:64:f3:fe:28:d4:92: 8c:79:86:0f:b9:b2:a9:65:fb:83:ff:f7:11:f2:cb: f6:84:02:fc:07:7c:d1:c8:b8:c4:67:09:58:d2:c0: d9:82:ab:32:3e:d6:92:81:f3:e3:61:3c:ed:d0:54: 76:46:b1:40:fa:20:43:97:af:26:12:3b:e1:e8:f5: cc:fb:0f:0f:ce:cd:a3:76:41:24:a9:19:3d:e9:c7: a6:d1:da:4a:f4:29:23:ed:30:38:32:d1:55:9e:55: 6a:8c:73:2f:2e:71:60:fa:bf:a5:5d:6d:c6:8a:69: f5:e3:c3:16:a0:07:71:6e:76:86:8f:c1:f3:17:2f: ce:30:8c:5b:1a:59:f0:15:ec:91:91:ea:32:a5:86: 54:e4:90:04:bd:b8:65:e9:2b:f3:38:eb:a7:5e:38: 01:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:E4:0E:91:31:B1:DD:CE:2D:91:83:BC:E0:37:48:DD:A7:81:DE:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e/02d90035-da81-3e67-96c7-9feeef8b261e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e/45657d9f-043b-4838-9072-ef0906bb567e.crl X509v3 Authority Key Identifier: keyid:D8:35:B5:C1:42:EB:91:5F:06:FB:C3:99:31:65:E8:42:24:63:EE:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e.cer sbgp-ipAddrBlock: critical IPv4: 199.254.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:3e:fe:77:f1:27:0c:ce:62:0b:f8:65:36:49:58:6a:47:d8: d2:3c:3e:d5:db:41:7d:a3:42:b3:d5:91:ba:c8:57:8a:66:0f: 96:a7:2f:cd:e0:a0:e3:e7:24:09:bf:30:76:b9:f8:60:6f:a8: e0:fe:57:c4:4e:e8:25:c8:7d:1d:dc:cb:93:f5:30:01:ed:9b: a2:c9:ac:be:5d:ae:6c:08:d6:55:d9:74:ef:7c:19:5c:46:be: 5e:0f:c4:e3:dc:af:ce:c5:2a:c5:38:c7:2c:b4:52:29:3e:26: f0:41:a3:0c:ad:9b:55:c9:eb:41:51:59:e6:32:8c:13:a7:c7: 80:bb:a6:2e:c5:a2:1b:ef:24:eb:50:5a:9c:5e:77:37:fe:0a: ef:be:5b:43:97:be:84:1c:30:11:e0:50:2a:20:fc:6b:00:6e: a0:6a:f0:21:65:6c:aa:68:d3:71:9b:df:63:ef:3a:ee:71:99: 22:38:3b:0e:99:91:c0:f7:20:45:a4:af:3e:99:8e:3b:5e:88: d2:b7:93:70:49:f1:0a:6c:8a:5e:79:34:38:4b:76:85:0c:6e: 08:f1:2d:21:8c:c8:e4:bf:7c:27:51:02:22:fc:77:5c:8b:c2: 1d:8d:78:68:60:9c:df:54:01:eb:7b:09:b5:91:d3:80:cf:3e: 2e:3c:5d:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErhlm3clXd2ZoUygQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU2NTdkOWYtMDQzYi00ODM4LTkwNzItZWYwOTA2YmI1 NjdlMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk N2Q1NWYwNjctMGI5Zi00MGJjLTgyMzYtM2ZkZWUyOWZkMGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsxPbDp1dXSONFjTvo390iXe+qqaB2yEStH/ cZHO0rLfMue+0Ozvk/DQ44/Ved+j7MVX0DUl2XTQ6wgQePkHJla7KgS4Sm9QgPtv VKEM14EmZAecaFctHRcLdzh+fQFsTt5k8/4o1JKMeYYPubKpZfuD//cR8sv2hAL8 B3zRyLjEZwlY0sDZgqsyPtaSgfPjYTzt0FR2RrFA+iBDl68mEjvh6PXM+w8Pzs2j dkEkqRk96cem0dpK9Ckj7TA4MtFVnlVqjHMvLnFg+r+lXW3Gimn148MWoAdxbnaG j8HzFy/OMIxbGlnwFeyRkeoypYZU5JAEvbhl6SvzOOunXjgBTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLTkDpExsd3OLZGDvOA3SN2ngd4VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NTY1 N2Q5Zi0wNDNiLTQ4MzgtOTA3Mi1lZjA5MDZiYjU2N2UvMDJkOTAwMzUtZGE4MS0z ZTY3LTk2YzctOWZlZWVmOGIyNjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU2NTdkOWYtMDQzYi00ODM4LTkw NzItZWYwOTA2YmI1NjdlLzQ1NjU3ZDlmLTA0M2ItNDgzOC05MDcyLWVmMDkwNmJi NTY3ZS5jcmwwHwYDVR0jBBgwFoAU2DW1wULrkV8G+8OZMWXoQiRj7mAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NTY1N2Q5Zi0wNDNiLTQ4MzgtOTA3Mi1lZjA5 MDZiYjU2N2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/7uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4+/nfxJwzOYgv4ZTZJWGpH2NI8PtXbQX2jQrPVkbrIV4pmD5anL83g oOPnJAm/MHa5+GBvqOD+V8RO6CXIfR3cy5P1MAHtm6LJrL5drmwI1lXZdO98GVxG vl4PxOPcr87FKsU4xyy0Uik+JvBBowytm1XJ60FRWeYyjBOnx4C7pi7FohvvJOtQ Wpxedzf+Cu++W0OXvoQcMBHgUCog/GsAbqBq8CFlbKpo03Gb32PvOu5xmSI4Ow6Z kcD3IEWkrz6ZjjteiNK3k3BJ8Qpsil55NDhLdoUMbgjxLSGMyOS/fCdRAiL8d1yL wh2NeGhgnN9UAet7CbWR04DPPi48XSQ= -----END CERTIFICATE-----Generated at Sun Aug 24 08:47:48 2025 by rpki-client