$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/7b8aba06-eaab-37cd-8ec4-c9a7eaa3c4a4.roa File: 7b8aba06-eaab-37cd-8ec4-c9a7eaa3c4a4.roa (raw, json) Hash identifier: pbz3a+xd+woMBL3ZcibzwkIeCfK9R4CEXTkj9mm2UN4= Subject key identifier: 66:94:79:3D:41:B7:F4:6C:F5:79:C6:CB:18:C5:89:CE:EA:1C:C9:C7 Certificate issuer: /CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f Certificate serial: 010D0C9F4328584ACE0BA61CB298D0F9BE4EE800 Authority key identifier: F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/7b8aba06-eaab-37cd-8ec4-c9a7eaa3c4a4.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 396856 IP address blocks: 172.99.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:a6:1c:b2:98:d0:f9:be:4e:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=e50a8174-5198-4374-bef2-117bb5df786b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:22:75:ec:cc:ee:61:d4:60:91:b9:6b:c4:13: e7:12:74:01:32:76:18:c4:7f:d3:2b:e2:c8:06:f7: 39:50:12:f6:66:42:8f:e5:b1:a9:b2:e5:a6:ad:1e: 91:5a:c3:72:3a:0d:78:5a:45:cb:83:8c:47:5c:d7: b9:8b:d6:71:2d:7f:2a:2a:0e:92:51:c6:8a:5a:9f: b4:31:8c:32:32:3b:c9:a1:1a:e2:6e:ea:33:b3:61: e7:33:fb:1e:74:62:4b:2e:e7:12:d1:79:3e:06:ec: af:aa:03:fd:44:87:74:a6:5c:ed:6e:b8:10:d0:6e: 24:3b:88:b1:85:58:a2:b1:7c:d5:df:48:56:69:37: a7:52:38:54:a2:3d:a7:ec:81:04:90:e2:9d:5a:c8: 52:8d:e1:91:0b:70:ec:b0:db:7d:92:bf:da:18:0e: e9:c5:c0:bf:ac:50:aa:1e:3d:b7:08:6f:be:95:dc: df:48:6a:25:14:ce:ad:7c:aa:28:d9:09:52:b0:36: 5d:ae:6c:6f:da:47:b3:69:26:a8:2d:9b:3f:03:fd: 2b:3d:5e:bc:29:ef:a1:7d:9c:f3:2d:82:d0:e3:da: d0:84:47:c9:0f:a6:bb:e5:52:ca:2c:18:c5:d2:c1: 19:f9:fa:06:8e:fd:e0:47:9f:96:ba:86:42:97:d3: cf:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:94:79:3D:41:B7:F4:6C:F5:79:C6:CB:18:C5:89:CE:EA:1C:C9:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/7b8aba06-eaab-37cd-8ec4-c9a7eaa3c4a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl X509v3 Authority Key Identifier: keyid:F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer sbgp-ipAddrBlock: critical IPv4: 172.99.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:6f:bd:8f:8e:a7:ad:d2:a8:60:ca:ed:d5:a2:af:af:d6:a9: 01:09:5c:16:8f:33:e9:e6:67:24:5c:b5:f6:75:ef:ee:8f:07: 25:bf:b8:a9:63:ae:5b:97:ef:b4:a8:43:84:80:81:27:1c:f6: 38:0d:27:ce:a7:a2:6a:25:0c:aa:fa:c9:ec:12:0a:41:be:08: 16:bf:5e:4f:c3:b1:2e:b9:13:a3:30:a7:88:a6:ed:09:06:51: 21:83:c3:63:de:31:ee:bf:bf:5f:87:b5:83:56:aa:65:cc:c0: d4:46:6a:5e:3e:98:3c:e1:6b:d4:c2:60:10:e3:dd:b5:27:92: 00:8f:2a:19:3c:7c:d0:18:bd:78:bb:27:33:ac:40:14:43:4d: 98:1d:1b:d5:c1:97:85:61:ba:4b:d6:2e:93:42:7e:d8:65:0c: cb:e3:28:16:c0:76:4b:d1:46:ec:bd:ef:e5:c0:f4:2c:00:9f: 99:c6:61:78:2c:21:47:a4:41:e7:19:46:01:bb:02:60:90:da: 9d:bc:2c:44:ec:f0:8f:29:e4:6c:e6:9d:61:73:9e:dc:33:4e: b3:43:a1:01:63:b2:e0:5f:1c:19:b5:5f:dc:ae:2e:fa:28:1f: 78:eb:c1:64:b8:1a:11:3a:6c:4e:29:35:4a:4d:2a:04:f0:7d: 70:f5:47:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErOC6YcspjQ+b5O6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM4NmUyNTYtMmRjMy00ZDIxLTkzYjktYzI1M2RjZDM3 ZTRmMB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk ZTUwYTgxNzQtNTE5OC00Mzc0LWJlZjItMTE3YmI1ZGY3ODZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSJ17MzuYdRgkblrxBPnEnQBMnYYxH/TK+LI Bvc5UBL2ZkKP5bGpsuWmrR6RWsNyOg14WkXLg4xHXNe5i9ZxLX8qKg6SUcaKWp+0 MYwyMjvJoRribuozs2HnM/sedGJLLucS0Xk+BuyvqgP9RId0plztbrgQ0G4kO4ix hViisXzV30hWaTenUjhUoj2n7IEEkOKdWshSjeGRC3DssNt9kr/aGA7pxcC/rFCq Hj23CG++ldzfSGolFM6tfKoo2QlSsDZdrmxv2kezaSaoLZs/A/0rPV68Ke+hfZzz LYLQ49rQhEfJD6a75VLKLBjF0sEZ+foGjv3gR5+WuoZCl9PPCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGaUeT1Bt/Rs9XnGyxjFic7qHMnHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iMzg2 ZTI1Ni0yZGMzLTRkMjEtOTNiOS1jMjUzZGNkMzdlNGYvN2I4YWJhMDYtZWFhYi0z N2NkLThlYzQtYzlhN2VhYTNjNGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjM4NmUyNTYtMmRjMy00ZDIxLTkz YjktYzI1M2RjZDM3ZTRmL2IzODZlMjU2LTJkYzMtNGQyMS05M2I5LWMyNTNkY2Qz N2U0Zi5jcmwwHwYDVR0jBBgwFoAU8iJcB8LMp4SDvdYUpquzee8m3jwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iMzg2ZTI1Ni0yZGMzLTRkMjEtOTNiOS1jMjUz ZGNkMzdlNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGOIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtvvY+Op63SqGDK7dWir6/WqQEJXBaPM+nmZyRctfZ17+6PByW/uKlj rluX77SoQ4SAgScc9jgNJ86nomolDKr6yewSCkG+CBa/Xk/DsS65E6Mwp4im7QkG USGDw2PeMe6/v1+HtYNWqmXMwNRGal4+mDzha9TCYBDj3bUnkgCPKhk8fNAYvXi7 JzOsQBRDTZgdG9XBl4VhukvWLpNCfthlDMvjKBbAdkvRRuy97+XA9CwAn5nGYXgs IUekQecZRgG7AmCQ2p28LETs8I8p5GzmnWFzntwzTrNDoQFjsuBfHBm1X9yuLvoo H3jrwWS4GhE6bE4pNUpNKgTwfXD1R7s= -----END CERTIFICATE-----Generated at Sat Aug 23 22:00:22 2025 by rpki-client