$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/a3a579fa-a9dd-32a3-9b85-d1875cf1d8f2.roa File: a3a579fa-a9dd-32a3-9b85-d1875cf1d8f2.roa (raw, json) Hash identifier: ZlrzMOqE8Q7rQ5wQXISrOcZnltvLQNeoJkmBQXTQC+c= Subject key identifier: 94:5D:9B:29:FE:78:E2:32:36:90:65:34:70:F6:57:65:ED:BD:73:E1 Certificate issuer: /CN=d455139a-f627-4743-8284-7fbd2f76dd8b Certificate serial: 010D0C9F4328584AE891241E7C186247C7BAB880 Authority key identifier: 05:07:B2:96:74:08:2D:02:EF:EC:F8:37:85:3C:62:40:1C:25:37:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/a3a579fa-a9dd-32a3-9b85-d1875cf1d8f2.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 53542 IP address blocks: 199.255.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:24:1e:7c:18:62:47:c7:ba:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d455139a-f627-4743-8284-7fbd2f76dd8b Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=ea69a645-ccea-410b-a464-40e334287c5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2c:c5:37:25:a8:3e:81:20:d3:b2:15:be:de: f4:a4:6d:d2:9f:09:13:5f:a8:11:4a:63:0d:a0:42: ef:fd:48:68:c8:d4:9c:63:2a:92:8b:51:c8:83:69: 04:e9:14:96:9b:0b:00:1a:6a:39:5b:b1:58:21:be: 38:29:13:46:e5:89:fc:8b:73:0c:c4:32:39:5d:08: ed:e7:ba:c1:f9:a4:8e:23:ba:8f:70:c1:d5:e7:1b: 85:95:33:54:98:46:b2:c0:a3:35:98:ab:82:a4:fa: de:8f:35:9c:03:2f:2c:aa:e4:4d:e9:9a:2a:5f:01: f9:bb:06:9c:a0:b6:6d:05:c8:e2:eb:52:06:66:3b: 63:97:26:5a:9d:18:6b:6c:5c:61:37:2b:f8:88:f2: d6:35:68:13:9e:17:90:b6:19:c0:5f:ba:d5:83:dd: 6d:0d:b6:4c:7d:1b:b1:cd:23:61:af:fc:ae:3a:e8: 02:f7:85:48:96:51:0e:41:f5:b4:83:65:6c:82:2a: b5:40:67:68:dc:57:bb:d8:da:99:66:c0:fa:ee:44: b1:7a:2c:54:90:b5:d9:57:db:02:69:5f:0a:ce:47: 52:78:cc:4f:c8:54:1c:2b:13:ab:7c:8a:3d:df:c3: 1b:d5:fc:09:80:11:5b:ea:64:20:6c:57:06:20:90: 49:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:5D:9B:29:FE:78:E2:32:36:90:65:34:70:F6:57:65:ED:BD:73:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/a3a579fa-a9dd-32a3-9b85-d1875cf1d8f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.crl X509v3 Authority Key Identifier: keyid:05:07:B2:96:74:08:2D:02:EF:EC:F8:37:85:3C:62:40:1C:25:37:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b.cer sbgp-ipAddrBlock: critical IPv4: 199.255.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:b3:49:72:23:40:b3:c1:b3:d8:e4:b5:09:60:1e:64:4e:af: a3:a0:4a:7e:1c:06:26:38:08:a2:29:02:d1:9b:6a:74:a9:10: 3b:54:89:3b:12:cf:d9:73:99:06:00:9a:3c:84:5b:8a:5a:7c: 89:1d:53:69:7a:1d:c5:35:aa:9b:3e:54:5c:04:b9:33:48:6f: b0:69:91:7e:3f:d2:18:c1:31:01:c7:45:51:c4:37:e0:4a:61: bc:37:bf:78:a8:d1:39:28:00:4f:8a:af:be:22:5f:b1:be:6d: 88:1c:47:62:98:28:80:a3:0f:f8:63:92:93:d3:fb:8d:48:2c: 4a:52:d7:52:b0:f5:30:56:24:c8:de:ca:f2:08:35:69:3b:af: ba:6b:3e:64:fe:d5:fd:6b:5b:29:b7:9d:2c:d5:ea:21:d4:dd: 66:bb:a6:d9:7f:48:1c:90:a9:d9:58:60:86:4e:15:ee:83:92: f8:68:b3:95:94:12:87:ce:d0:e5:df:03:5f:fe:ce:ee:d7:a4: 0a:21:e0:c4:ff:c5:8c:5a:b8:b7:07:81:96:ce:33:7d:90:00: c9:ff:e1:16:43:ff:21:4c:cf:fd:f6:fe:45:46:37:47:10:87: 84:e8:28:1b:9d:77:c7:99:ce:0d:fe:9d:94:f9:ed:b3:8d:dc: 61:eb:47:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokSQefBhiR8e6uIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NTEzOWEtZjYyNy00NzQzLTgyODQtN2ZiZDJmNzZk ZDhiMB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk ZWE2OWE2NDUtY2NlYS00MTBiLWE0NjQtNDBlMzM0Mjg3YzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwizFNyWoPoEg07IVvt70pG3SnwkTX6gRSmMN oELv/UhoyNScYyqSi1HIg2kE6RSWmwsAGmo5W7FYIb44KRNG5Yn8i3MMxDI5XQjt 57rB+aSOI7qPcMHV5xuFlTNUmEaywKM1mKuCpPrejzWcAy8squRN6ZoqXwH5uwac oLZtBcji61IGZjtjlyZanRhrbFxhNyv4iPLWNWgTnheQthnAX7rVg91tDbZMfRux zSNhr/yuOugC94VIllEOQfW0g2Vsgiq1QGdo3Fe72NqZZsD67kSxeixUkLXZV9sC aV8KzkdSeMxPyFQcKxOrfIo938Mb1fwJgBFb6mQgbFcGIJBJWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJRdmyn+eOIyNpBlNHD2V2XtvXPhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNDU1 MTM5YS1mNjI3LTQ3NDMtODI4NC03ZmJkMmY3NmRkOGIvYTNhNTc5ZmEtYTlkZC0z MmEzLTliODUtZDE4NzVjZjFkOGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDQ1NTEzOWEtZjYyNy00NzQzLTgy ODQtN2ZiZDJmNzZkZDhiL2Q0NTUxMzlhLWY2MjctNDc0My04Mjg0LTdmYmQyZjc2 ZGQ4Yi5jcmwwHwYDVR0jBBgwFoAUBQeylnQILQLv7Pg3hTxiQBwlN6owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNDU1MTM5YS1mNjI3LTQ3NDMtODI4NC03ZmJk MmY3NmRkOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx//yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6zSXIjQLPBs9jktQlgHmROr6OgSn4cBiY4CKIpAtGbanSpEDtUiTsS z9lzmQYAmjyEW4pafIkdU2l6HcU1qps+VFwEuTNIb7BpkX4/0hjBMQHHRVHEN+BK Ybw3v3io0TkoAE+Kr74iX7G+bYgcR2KYKICjD/hjkpPT+41ILEpS11Kw9TBWJMje yvIINWk7r7prPmT+1f1rWym3nSzV6iHU3Wa7ptl/SByQqdlYYIZOFe6Dkvhos5WU EofO0OXfA1/+zu7XpAoh4MT/xYxauLcHgZbOM32QAMn/4RZD/yFMz/32/kVGN0cQ h4ToKBudd8eZzg3+nZT57bON3GHrR00= -----END CERTIFICATE-----Generated at Sat Aug 23 15:54:47 2025 by rpki-client