$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85/ddb3fe35-de01-37de-97b9-af36a60b3a63.roa File: ddb3fe35-de01-37de-97b9-af36a60b3a63.roa (raw, json) Hash identifier: nkRtzv8+o94kpbQ2/xVTp70Gyo97Mf2Nwd9H+qCAzb4= Subject key identifier: CC:EF:14:88:17:C9:2F:30:FA:DD:66:29:7B:F7:E7:33:F9:E6:90:C9 Certificate issuer: /CN=c682a716-bb81-4916-beba-279628f77a85 Certificate serial: 010D0C9F4328584AC9DBA251BEAD81AE68531400 Authority key identifier: 31:33:86:30:81:B6:CE:2C:43:BF:2D:C1:E2:63:81:23:C4:07:DA:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85/ddb3fe35-de01-37de-97b9-af36a60b3a63.roa Signing time: Fri 08 Aug 2025 13:00:40 +0000 ROA not before: Fri 08 Aug 2025 13:00:40 +0000 ROA not after: Thu 06 Nov 2025 14:00:40 +0000 asID: 14618 IP address blocks: 192.122.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85/c682a716-bb81-4916-beba-279628f77a85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85/c682a716-bb81-4916-beba-279628f77a85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c9:db:a2:51:be:ad:81:ae:68:53:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c682a716-bb81-4916-beba-279628f77a85 Validity Not Before: Aug 8 13:00:40 2025 GMT Not After : Nov 6 14:00:40 2025 GMT Subject: CN=588111cc-e9ae-4eb2-a31b-b619ee5b8b72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ce:ed:68:46:f4:60:0b:b0:62:1a:f8:e7:c8: ec:be:3c:b5:fa:10:fa:3a:b7:17:5f:43:37:0b:12: 66:e8:7b:ea:21:c5:19:1c:87:2a:c8:e8:bf:98:ac: 35:f7:da:a0:8a:cf:14:76:bf:60:d8:c3:3d:14:b7: 36:14:47:58:f8:95:7e:58:6a:aa:99:a8:29:b1:6b: da:ca:3f:59:63:e4:56:7a:14:e2:3a:19:ca:cb:e4: 18:d0:f3:c1:6d:3d:ce:09:e5:cc:a0:f2:1f:f1:a4: e5:6b:2e:c4:ca:e9:70:e7:67:ac:b3:b7:95:e6:e6: 99:62:73:cb:aa:1c:ff:c1:a3:75:e2:57:44:5f:95: eb:24:cb:c3:67:45:1e:0b:f4:7a:64:cb:e8:d0:30: a2:14:ed:c0:a8:59:3a:a8:51:3c:89:0a:05:af:66: e4:fb:d0:e8:af:c1:8b:43:8c:bf:4b:d5:20:d2:57: 7e:94:e2:ab:d7:79:08:cc:3b:0d:7e:e3:df:dd:0a: e9:4c:18:a6:ce:16:7a:34:dd:3a:61:d3:20:5e:b8: d7:12:0a:2f:89:d9:bb:b7:74:7b:9b:98:08:90:4a: 62:62:52:67:5e:c9:d3:50:b1:ee:2f:0c:82:a3:2a: 85:bd:36:18:60:9a:32:cd:48:44:93:02:ae:68:54: 7d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:EF:14:88:17:C9:2F:30:FA:DD:66:29:7B:F7:E7:33:F9:E6:90:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85/ddb3fe35-de01-37de-97b9-af36a60b3a63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85/c682a716-bb81-4916-beba-279628f77a85.crl X509v3 Authority Key Identifier: keyid:31:33:86:30:81:B6:CE:2C:43:BF:2D:C1:E2:63:81:23:C4:07:DA:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85.cer sbgp-ipAddrBlock: critical IPv4: 192.122.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:8d:71:89:57:0e:df:2e:e9:f0:94:87:3c:a9:04:0a:de:54: 20:ab:49:c6:35:15:19:60:94:05:a3:04:6d:b5:8f:e1:a8:cf: 05:5a:0d:dc:5b:78:18:31:c1:c3:7b:b0:82:b1:a5:b9:b2:8d: 76:0b:48:80:41:e9:24:5f:cf:0b:45:86:f1:07:e1:bf:21:49: 0a:55:93:f1:7e:20:0c:58:c7:99:ef:c4:5a:5d:55:59:21:d8: 41:65:dc:b8:e1:03:8d:22:dd:5b:87:35:f0:d6:52:0d:9b:3f: 3e:5c:b4:36:0a:d1:83:9c:e6:d7:9a:ab:d4:b9:d2:c9:ce:1d: 00:8f:6f:3e:93:d5:78:1c:03:1f:14:77:32:5f:76:1b:86:1a: a6:0a:0b:c5:f4:ee:1a:5b:82:41:e6:3b:eb:19:57:8b:06:0c: 93:e6:25:24:41:31:13:c8:c7:d9:d0:de:9e:0a:99:24:ce:aa: a4:a9:16:90:6d:68:9e:80:0d:ee:55:2e:96:1c:0e:bf:8f:51: b9:4f:58:23:27:30:aa:df:5c:5b:4a:05:2d:5a:6b:a7:31:d0: a5:1e:71:28:e8:7a:9f:40:b8:8c:16:8d:82:ff:d5:12:d7:28: f4:26:84:24:8f:f0:d9:5f:68:93:83:e4:bf:a6:8c:49:3a:a0: b8:25:6f:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErJ26JRvq2BrmhTFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzY4MmE3MTYtYmI4MS00OTE2LWJlYmEtMjc5NjI4Zjc3 YTg1MB4XDTI1MDgwODEzMDA0MFoXDTI1MTEwNjE0MDA0MFowLzEtMCsGA1UEAxMk NTg4MTExY2MtZTlhZS00ZWIyLWEzMWItYjYxOWVlNWI4YjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzc7taEb0YAuwYhr458jsvjy1+hD6OrcXX0M3 CxJm6HvqIcUZHIcqyOi/mKw199qgis8Udr9g2MM9FLc2FEdY+JV+WGqqmagpsWva yj9ZY+RWehTiOhnKy+QY0PPBbT3OCeXMoPIf8aTlay7Eyulw52ess7eV5uaZYnPL qhz/waN14ldEX5XrJMvDZ0UeC/R6ZMvo0DCiFO3AqFk6qFE8iQoFr2bk+9Dor8GL Q4y/S9Ug0ld+lOKr13kIzDsNfuPf3QrpTBimzhZ6NN06YdMgXrjXEgovidm7t3R7 m5gIkEpiYlJnXsnTULHuLwyCoyqFvTYYYJoyzUhEkwKuaFR9iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMzvFIgXyS8w+t1mKXv35zP55pDJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNjgy YTcxNi1iYjgxLTQ5MTYtYmViYS0yNzk2MjhmNzdhODUvZGRiM2ZlMzUtZGUwMS0z N2RlLTk3YjktYWYzNmE2MGIzYTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzY4MmE3MTYtYmI4MS00OTE2LWJl YmEtMjc5NjI4Zjc3YTg1L2M2ODJhNzE2LWJiODEtNDkxNi1iZWJhLTI3OTYyOGY3 N2E4NS5jcmwwHwYDVR0jBBgwFoAUMTOGMIG2zixDvy3B4mOBI8QH2vUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNjgyYTcxNi1iYjgxLTQ5MTYtYmViYS0yNzk2 MjhmNzdhODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHr/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSNcYlXDt8u6fCUhzypBAreVCCrScY1FRlglAWjBG21j+GozwVaDdxb eBgxwcN7sIKxpbmyjXYLSIBB6SRfzwtFhvEH4b8hSQpVk/F+IAxYx5nvxFpdVVkh 2EFl3LjhA40i3VuHNfDWUg2bPz5ctDYK0YOc5teaq9S50snOHQCPbz6T1XgcAx8U dzJfdhuGGqYKC8X07hpbgkHmO+sZV4sGDJPmJSRBMRPIx9nQ3p4KmSTOqqSpFpBt aJ6ADe5VLpYcDr+PUblPWCMnMKrfXFtKBS1aa6cx0KUecSjoep9AuIwWjYL/1RLX KPQmhCSP8NlfaJOD5L+mjEk6oLglb30= -----END CERTIFICATE-----Generated at Sat Aug 23 06:40:06 2025 by rpki-client