$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d5b3fa47-47cb-35ec-98a4-4cb9a46da12f.roa File: d5b3fa47-47cb-35ec-98a4-4cb9a46da12f.roa (raw, json) Hash identifier: pusPmFVRFv7mRBCdrnrIoX2cLo+6OfiqkhFEffszf0g= Subject key identifier: 4A:64:36:92:8A:B7:CE:FD:32:A5:17:4E:88:55:47:AE:FF:25:A0:63 Certificate issuer: /CN=d455139a-f627-4743-8284-7fbd2f76dd8b Certificate serial: 010D0C9F4328584AE89123B430DB7314725F2370 Authority key identifier: 05:07:B2:96:74:08:2D:02:EF:EC:F8:37:85:3C:62:40:1C:25:37:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d5b3fa47-47cb-35ec-98a4-4cb9a46da12f.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 14618 IP address blocks: 199.255.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:23:b4:30:db:73:14:72:5f:23:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d455139a-f627-4743-8284-7fbd2f76dd8b Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=181156e0-9b7f-4965-94d0-a9d640f7b7d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:52:f5:4c:28:06:f2:59:ff:29:3c:f0:89:c1: 17:94:fa:4b:1d:83:a9:99:64:48:1f:c1:ce:60:22: 36:9e:ee:61:a3:9d:12:a7:68:ad:66:78:ec:94:cd: 73:40:57:c8:12:89:ef:af:04:55:54:b0:1e:8e:30: 1f:32:7f:3d:8c:40:27:6a:4b:66:a7:7d:c9:6b:fe: a2:93:e7:8e:eb:0b:da:c5:17:7d:7d:fc:1f:1c:fc: c1:9a:5a:e3:3b:61:65:59:3f:bd:25:19:b5:ab:24: 3e:a9:0c:0f:87:eb:b1:31:a2:30:68:c8:ef:ea:c5: 1b:a7:c0:24:e4:02:8b:fb:6e:30:03:1f:e7:e2:57: 8c:04:8d:95:46:40:8b:b1:e6:ce:64:0c:d7:33:92: 4c:eb:24:16:fd:be:a5:69:b2:4d:77:10:4e:a2:30: f3:c2:31:39:bf:96:86:78:f8:12:6c:9a:b1:89:ab: 19:73:ca:ef:73:ec:e2:ee:3d:96:5c:fc:e7:ed:8b: 92:4a:81:34:82:8d:8e:d0:d9:02:ef:cd:37:c4:eb: d9:c4:e9:88:b0:8b:70:f0:64:21:4c:40:4a:42:9a: 9a:46:f3:08:1d:b0:c5:86:83:ca:73:01:1f:2f:15: 0d:6d:72:35:6c:55:f0:fb:23:94:7a:cc:a2:4e:05: 67:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:64:36:92:8A:B7:CE:FD:32:A5:17:4E:88:55:47:AE:FF:25:A0:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d5b3fa47-47cb-35ec-98a4-4cb9a46da12f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.crl X509v3 Authority Key Identifier: keyid:05:07:B2:96:74:08:2D:02:EF:EC:F8:37:85:3C:62:40:1C:25:37:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b.cer sbgp-ipAddrBlock: critical IPv4: 199.255.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:69:3f:fc:2a:b7:b1:f4:bf:ad:04:71:26:cc:95:d0:eb:4f: f3:7b:4c:09:e8:18:d4:26:bc:7b:8b:e7:a0:85:2d:2e:b7:65: 15:c0:89:6f:e5:5f:5e:51:5f:74:e6:59:78:e4:60:e6:9a:5b: d9:15:6d:de:cd:e5:65:88:6f:62:14:81:83:c9:c8:04:47:6a: e6:8f:7a:bc:50:e8:a8:d9:ce:fa:97:0b:58:c6:83:9d:e0:c8: 5a:bb:42:a3:52:26:83:54:f4:3e:18:45:5c:93:9d:82:08:5d: 18:9d:dd:0e:b2:cb:ef:be:1c:f4:16:8d:b7:a5:c8:a1:73:28: 1e:12:70:aa:b2:3a:c2:bd:4e:ad:5d:d5:8b:7e:a8:94:ec:74: 0f:64:99:db:0f:bb:02:50:e3:eb:90:8e:fb:3f:fd:7d:09:04: 34:ea:bc:d5:a6:7d:0c:b4:30:12:44:9e:08:89:57:9f:75:26: 40:41:18:4e:e0:92:73:40:06:67:14:36:2e:7a:5a:d7:c0:f7: 3a:58:ec:c1:43:c2:7c:64:ea:7f:4a:fd:38:18:85:d8:06:40: d9:8f:fb:9f:2b:02:5b:0d:6d:a1:6f:83:37:88:2c:2c:c0:4b: 51:a9:88:40:98:9b:bc:bd:58:dc:c7:dc:c5:fc:1c:a1:00:b5: 0d:e2:c8:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokSO0MNtzFHJfI3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NTEzOWEtZjYyNy00NzQzLTgyODQtN2ZiZDJmNzZk ZDhiMB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk MTgxMTU2ZTAtOWI3Zi00OTY1LTk0ZDAtYTlkNjQwZjdiN2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFL1TCgG8ln/KTzwicEXlPpLHYOpmWRIH8HO YCI2nu5ho50Sp2itZnjslM1zQFfIEonvrwRVVLAejjAfMn89jEAnaktmp33Ja/6i k+eO6wvaxRd9ffwfHPzBmlrjO2FlWT+9JRm1qyQ+qQwPh+uxMaIwaMjv6sUbp8Ak 5AKL+24wAx/n4leMBI2VRkCLsebOZAzXM5JM6yQW/b6labJNdxBOojDzwjE5v5aG ePgSbJqxiasZc8rvc+zi7j2WXPzn7YuSSoE0go2O0NkC7803xOvZxOmIsItw8GQh TEBKQpqaRvMIHbDFhoPKcwEfLxUNbXI1bFXw+yOUesyiTgVnzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEpkNpKKt879MqUXTohVR67/JaBjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNDU1 MTM5YS1mNjI3LTQ3NDMtODI4NC03ZmJkMmY3NmRkOGIvZDViM2ZhNDctNDdjYi0z NWVjLTk4YTQtNGNiOWE0NmRhMTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDQ1NTEzOWEtZjYyNy00NzQzLTgy ODQtN2ZiZDJmNzZkZDhiL2Q0NTUxMzlhLWY2MjctNDc0My04Mjg0LTdmYmQyZjc2 ZGQ4Yi5jcmwwHwYDVR0jBBgwFoAUBQeylnQILQLv7Pg3hTxiQBwlN6owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNDU1MTM5YS1mNjI3LTQ3NDMtODI4NC03ZmJk MmY3NmRkOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx//yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAINpP/wqt7H0v60EcSbMldDrT/N7TAnoGNQmvHuL56CFLS63ZRXAiW/l X15RX3TmWXjkYOaaW9kVbd7N5WWIb2IUgYPJyARHauaPerxQ6KjZzvqXC1jGg53g yFq7QqNSJoNU9D4YRVyTnYIIXRid3Q6yy+++HPQWjbelyKFzKB4ScKqyOsK9Tq1d 1Yt+qJTsdA9kmdsPuwJQ4+uQjvs//X0JBDTqvNWmfQy0MBJEngiJV591JkBBGE7g knNABmcUNi56WtfA9zpY7MFDwnxk6n9K/TgYhdgGQNmP+58rAlsNbaFvgzeILCzA S1GpiECYm7y9WNzH3MX8HKEAtQ3iyIE= -----END CERTIFICATE-----Generated at Sat Aug 23 09:09:31 2025 by rpki-client