$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c/f829599e-00f8-3c5a-95c8-1624e200ebd0.roa File: f829599e-00f8-3c5a-95c8-1624e200ebd0.roa (raw, json) Hash identifier: abQzfcnNm5bdR5s5GuCaX4yjCjlpNDj3heAKtwbDk8Y= Subject key identifier: C7:D3:8B:03:36:2E:69:2C:B2:18:0F:4A:1B:AF:6A:DB:1B:D9:56:F5 Certificate issuer: /CN=b414afc1-d8ed-4d3f-8f5b-ff72e57f699c Certificate serial: 010D0C9F4328584AE46110C1F4E820ACCBFEB600 Authority key identifier: 84:18:2E:63:63:C3:F9:7A:FD:FC:D9:56:B9:F2:6A:9E:82:CB:58:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c/f829599e-00f8-3c5a-95c8-1624e200ebd0.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 194 IP address blocks: 128.117.0.0/16 maxlen: 16 192.43.244.0/24 maxlen: 24 192.52.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:10:c1:f4:e8:20:ac:cb:fe:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b414afc1-d8ed-4d3f-8f5b-ff72e57f699c Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=90d99516-2071-49c7-97bf-9b46ffca59b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:08:ee:a3:e9:92:44:d4:b7:71:71:f4:70:e3: 0c:7b:ec:dc:b3:60:e9:63:81:ed:a6:fa:1f:42:c4: 99:c6:a2:f3:c1:69:f0:b4:88:ab:f3:b7:77:5d:ae: b6:c1:ea:5a:4e:91:ac:b7:35:c3:f6:04:aa:1f:bf: cd:01:93:f3:d6:fc:53:f8:05:d2:f8:e3:92:df:e7: e3:3c:f1:7f:92:ba:21:e6:76:60:87:fb:a2:ac:ce: 3a:34:2f:30:67:68:42:ee:08:63:33:24:5f:f7:4b: 92:04:29:03:1b:3a:0f:39:b5:e8:8f:40:95:64:e7: 6d:f8:eb:1c:1e:9a:e1:70:c1:54:22:c6:12:f8:94: 15:b2:31:6e:c2:92:af:7d:4e:b6:93:75:83:69:13: c7:8a:6c:ea:49:86:67:66:c1:ab:2c:8f:80:ae:9a: dc:51:21:b5:47:e2:eb:00:4d:ff:4f:4a:1e:f4:67: 3c:b3:6a:a0:68:44:49:82:01:59:a5:ea:90:20:85: a4:cb:f9:c5:e7:c6:42:79:b0:45:18:8a:e6:57:2c: c9:62:94:01:a9:52:2f:09:83:dd:ed:08:a1:3d:5e: 74:18:8e:26:e6:eb:42:65:06:b2:d8:67:a9:87:12: 64:0b:17:1d:8b:a8:2e:29:6d:3a:94:cd:a8:72:c9: f9:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:D3:8B:03:36:2E:69:2C:B2:18:0F:4A:1B:AF:6A:DB:1B:D9:56:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c/f829599e-00f8-3c5a-95c8-1624e200ebd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c.crl X509v3 Authority Key Identifier: keyid:84:18:2E:63:63:C3:F9:7A:FD:FC:D9:56:B9:F2:6A:9E:82:CB:58:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c.cer sbgp-ipAddrBlock: critical IPv4: 128.117.0.0/16 192.43.244.0/24 192.52.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:21:14:c9:ca:52:ca:ef:73:4e:21:c4:f5:b4:fa:2e:50:49: 15:fd:09:00:28:e5:49:44:39:08:43:fa:26:f6:91:b3:45:61: 18:a9:6f:40:db:c7:48:d2:4c:7b:4e:a0:63:ae:de:5f:55:a7: 92:86:90:3e:c5:8d:27:b0:2f:a2:16:31:42:74:1a:f9:b5:7d: 94:de:40:73:02:ab:10:04:c2:db:87:a9:06:ad:82:04:69:8d: 40:5b:36:fe:fd:57:25:6d:35:c4:5e:9b:39:03:70:09:24:eb: 98:f3:36:88:85:67:74:82:3c:ab:fd:f2:13:91:03:b9:97:fe: 9b:e0:80:24:17:1d:00:cf:db:63:c3:df:23:30:1d:31:09:42: f0:7a:3f:55:a1:58:51:71:93:0b:e1:46:f3:b9:6f:93:f2:6e: ff:64:0c:59:b4:01:29:2e:e2:88:40:f0:f9:a3:07:ce:cb:0f: bd:b3:f5:29:d5:d6:57:d5:f3:27:bb:a2:5c:c8:dd:d1:a6:48: 34:f2:21:c7:e0:83:c6:cf:60:03:c5:b2:f3:95:93:5e:b1:a4: 31:ce:c2:eb:9f:bd:c7:6a:ed:da:a2:3a:d6:ad:06:b0:4f:2f: 37:06:08:cc:f5:cd:49:95:74:60:e7:6f:21:36:77:a9:77:75: eb:b0:b4:c2 -----BEGIN CERTIFICATE----- MIIGTjCCBTagAwIBAgIUAQ0Mn0MoWErkYRDB9OggrMv+tgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQxNGFmYzEtZDhlZC00ZDNmLThmNWItZmY3MmU1N2Y2 OTljMB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk OTBkOTk1MTYtMjA3MS00OWM3LTk3YmYtOWI0NmZmY2E1OWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigjuo+mSRNS3cXH0cOMMe+zcs2DpY4Htpvof QsSZxqLzwWnwtIir87d3Xa62wepaTpGstzXD9gSqH7/NAZPz1vxT+AXS+OOS3+fj PPF/kroh5nZgh/uirM46NC8wZ2hC7ghjMyRf90uSBCkDGzoPObXoj0CVZOdt+Osc HprhcMFUIsYS+JQVsjFuwpKvfU62k3WDaRPHimzqSYZnZsGrLI+ArprcUSG1R+Lr AE3/T0oe9Gc8s2qgaERJggFZpeqQIIWky/nF58ZCebBFGIrmVyzJYpQBqVIvCYPd 7QihPV50GI4m5utCZQay2GephxJkCxcdi6guKW06lM2ocsn5fwIDAQABo4IDYDCC A1wwHQYDVR0OBBYEFMfTiwM2LmksshgPShuvatsb2Vb1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iNDE0 YWZjMS1kOGVkLTRkM2YtOGY1Yi1mZjcyZTU3ZjY5OWMvZjgyOTU5OWUtMDBmOC0z YzVhLTk1YzgtMTYyNGUyMDBlYmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjQxNGFmYzEtZDhlZC00ZDNmLThm NWItZmY3MmU1N2Y2OTljL2I0MTRhZmMxLWQ4ZWQtNGQzZi04ZjViLWZmNzJlNTdm Njk5Yy5jcmwwHwYDVR0jBBgwFoAUhBguY2PD+Xr9/NlWufJqnoLLWNcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iNDE0YWZjMS1kOGVkLTRkM2YtOGY1Yi1mZjcy ZTU3ZjY5OWMuY2VyMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAATARAwMAgHUDBADA K/QDBADANGowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAgyEUycpSyu9zTiHE9bT6LlBJFf0JACjlSUQ5CEP6 JvaRs0VhGKlvQNvHSNJMe06gY67eX1WnkoaQPsWNJ7AvohYxQnQa+bV9lN5AcwKr EATC24epBq2CBGmNQFs2/v1XJW01xF6bOQNwCSTrmPM2iIVndII8q/3yE5EDuZf+ m+CAJBcdAM/bY8PfIzAdMQlC8Ho/VaFYUXGTC+FG87lvk/Ju/2QMWbQBKS7iiEDw +aMHzssPvbP1KdXWV9XzJ7uiXMjd0aZINPIhx+CDxs9gA8Wy85WTXrGkMc7C65+9 x2rt2qI61q0GsE8vNwYIzPXNSZV0YOdvITZ3qXd167C0wg== -----END CERTIFICATE-----Generated at Sun Aug 24 02:55:01 2025 by rpki-client