$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b/d3a2508e-0220-3c1b-9180-e11c07412c6c.roa File: d3a2508e-0220-3c1b-9180-e11c07412c6c.roa (raw, json) Hash identifier: y86nS7tSqEP1gUhK2DLMmvvwPRiq/0BAN4Ik4anqP+k= Subject key identifier: CB:A7:EB:7B:CD:89:11:8E:E0:8C:28:FB:0A:38:AF:64:CD:4C:25:F5 Certificate issuer: /CN=7c74b511-7d11-4209-84c2-f7b800242a7b Certificate serial: 010D0C9F4328584AF256795688C26E01CE3C6B80 Authority key identifier: 76:B9:36:87:B8:4E:A3:D9:B3:51:34:02:21:D6:12:2F:82:E4:2C:E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b/d3a2508e-0220-3c1b-9180-e11c07412c6c.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 21976 IP address blocks: 192.231.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b/7c74b511-7d11-4209-84c2-f7b800242a7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b/7c74b511-7d11-4209-84c2-f7b800242a7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:79:56:88:c2:6e:01:ce:3c:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c74b511-7d11-4209-84c2-f7b800242a7b Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=aa2f7cab-9976-4a64-9455-2e4941bca2a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:43:a7:be:1a:92:e0:d0:3b:8f:35:a2:b4:8e: d9:06:57:ba:8d:bc:e4:83:23:d3:02:b7:eb:9f:56: f9:01:b4:18:56:f2:4b:9b:53:a4:01:1e:54:b7:b1: 9a:6b:0e:60:89:b2:52:30:ca:2d:90:eb:3e:d5:dd: af:4a:35:9a:52:cb:bb:01:40:f7:de:eb:49:28:e0: e3:93:25:e7:bc:31:2a:7b:65:e2:0f:db:a1:b9:39: bf:d8:31:09:50:cd:a2:99:68:dc:85:99:86:0e:a7: 6e:36:70:ac:5d:66:36:4d:5d:07:e4:31:c3:f1:09: c2:89:3c:dc:fc:67:d9:f5:fb:4b:ec:88:a4:94:c1: 87:c2:fc:8b:da:2b:61:5b:51:18:1e:0b:1c:73:fe: e2:bd:5b:45:05:e4:f6:e5:26:40:c2:58:e8:3d:6c: 14:71:86:35:2b:58:19:c7:58:61:b1:70:c0:cb:9b: 2d:12:21:43:a0:94:28:5c:18:0e:b2:64:ec:aa:a0: 4b:fb:22:e6:b4:15:1d:b4:7a:40:51:6a:8e:8c:bf: e5:12:c7:da:e4:c9:69:b9:96:8a:a7:af:84:62:aa: 6a:d1:2b:a7:8e:a8:2a:e0:71:a5:2e:f1:b0:67:6f: 25:e7:14:87:ef:b7:83:9c:94:c3:d1:cc:78:82:9c: c4:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:A7:EB:7B:CD:89:11:8E:E0:8C:28:FB:0A:38:AF:64:CD:4C:25:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b/d3a2508e-0220-3c1b-9180-e11c07412c6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b/7c74b511-7d11-4209-84c2-f7b800242a7b.crl X509v3 Authority Key Identifier: keyid:76:B9:36:87:B8:4E:A3:D9:B3:51:34:02:21:D6:12:2F:82:E4:2C:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b.cer sbgp-ipAddrBlock: critical IPv4: 192.231.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:bb:ee:c8:d4:bf:57:f4:36:18:40:62:dd:11:60:49:12:e2: af:a9:07:79:e3:06:ec:67:b7:f3:50:f1:85:91:49:43:e5:c2: 83:dd:4b:17:54:7c:2b:2f:e6:78:a4:a4:d3:56:bf:0b:e6:91: 79:29:76:32:cb:ce:7a:72:e2:0c:a1:4d:a8:46:ee:e2:d8:3b: c4:0e:e4:28:5b:0a:7f:d9:2c:76:69:59:f7:cc:11:9e:f5:14: f4:61:c1:c4:b3:65:f6:70:e0:1d:f6:cf:a1:a0:28:ab:81:7a: 06:c4:f0:b4:3a:cc:89:12:00:fa:bc:f3:93:c5:07:ec:e8:f6: d1:6d:ac:bd:74:92:6d:20:fb:d5:29:91:92:b7:d2:3b:ec:f0: 30:f3:1a:11:e6:f5:c6:99:85:e4:61:7a:a0:50:f8:00:4c:46: 89:0d:8e:63:fb:3a:b8:77:0c:14:74:82:4f:d8:47:98:22:85: 66:b3:c6:33:a6:b6:16:03:68:ea:48:d0:34:13:5c:63:d9:13: 92:67:35:98:90:cf:9e:32:19:57:29:8a:19:99:8b:43:4a:a1: 58:db:8f:d5:07:8f:b2:b2:a7:80:2d:a9:a7:92:d0:69:0d:9d: 6f:76:56:84:77:46:ec:c4:62:59:31:21:2f:f7:37:18:6e:83: 0c:56:78:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVnlWiMJuAc48a4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2M3NGI1MTEtN2QxMS00MjA5LTg0YzItZjdiODAwMjQy YTdiMB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk YWEyZjdjYWItOTk3Ni00YTY0LTk0NTUtMmU0OTQxYmNhMmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEOnvhqS4NA7jzWitI7ZBle6jbzkgyPTArfr n1b5AbQYVvJLm1OkAR5Ut7Gaaw5gibJSMMotkOs+1d2vSjWaUsu7AUD33utJKODj kyXnvDEqe2XiD9uhuTm/2DEJUM2imWjchZmGDqduNnCsXWY2TV0H5DHD8QnCiTzc /GfZ9ftL7IiklMGHwvyL2ithW1EYHgscc/7ivVtFBeT25SZAwljoPWwUcYY1K1gZ x1hhsXDAy5stEiFDoJQoXBgOsmTsqqBL+yLmtBUdtHpAUWqOjL/lEsfa5MlpuZaK p6+EYqpq0Sunjqgq4HGlLvGwZ28l5xSH77eDnJTD0cx4gpzErwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMun63vNiRGO4Iwo+wo4r2TNTCX1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83Yzc0 YjUxMS03ZDExLTQyMDktODRjMi1mN2I4MDAyNDJhN2IvZDNhMjUwOGUtMDIyMC0z YzFiLTkxODAtZTExYzA3NDEyYzZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2M3NGI1MTEtN2QxMS00MjA5LTg0 YzItZjdiODAwMjQyYTdiLzdjNzRiNTExLTdkMTEtNDIwOS04NGMyLWY3YjgwMDI0 MmE3Yi5jcmwwHwYDVR0jBBgwFoAUdrk2h7hOo9mzUTQCIdYSL4LkLOgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83Yzc0YjUxMS03ZDExLTQyMDktODRjMi1mN2I4 MDAyNDJhN2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOfKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGK77sjUv1f0NhhAYt0RYEkS4q+pB3njBuxnt/NQ8YWRSUPlwoPdSxdU fCsv5nikpNNWvwvmkXkpdjLLznpy4gyhTahG7uLYO8QO5ChbCn/ZLHZpWffMEZ71 FPRhwcSzZfZw4B32z6GgKKuBegbE8LQ6zIkSAPq885PFB+zo9tFtrL10km0g+9Up kZK30jvs8DDzGhHm9caZheRheqBQ+ABMRokNjmP7Orh3DBR0gk/YR5gihWazxjOm thYDaOpI0DQTXGPZE5JnNZiQz54yGVcpihmZi0NKoVjbj9UHj7Kyp4AtqaeS0GkN nW92VoR3RuzEYlkxIS/3NxhugwxWeM0= -----END CERTIFICATE-----Generated at Sun Aug 24 02:28:51 2025 by rpki-client