$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/789da6a0-2c7a-3a3d-9143-50da694cacaa.roa File: 789da6a0-2c7a-3a3d-9143-50da694cacaa.roa (raw, json) Hash identifier: MJrw7RhL+Iq4eCLIHb8d9GEBIKVMHtYtN7xz7TiDMcg= Subject key identifier: 6E:23:B3:07:17:57:DE:DB:ED:23:80:70:02:77:5A:D8:45:D4:84:44 Certificate issuer: /CN=e2311284-478e-4111-8d73-27148a01fa21 Certificate serial: 010D0C9F4328584A612B17F63C0F685DC6F5EA40 Authority key identifier: 8C:F0:68:8D:CD:E2:2E:A8:36:9C:31:30:10:0F:98:75:1A:87:DB:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/789da6a0-2c7a-3a3d-9143-50da694cacaa.roa Signing time: Wed 02 Jul 2025 01:00:49 +0000 ROA not before: Wed 02 Jul 2025 01:00:49 +0000 ROA not after: Tue 30 Sep 2025 01:00:49 +0000 asID: 17056 IP address blocks: 199.168.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/e2311284-478e-4111-8d73-27148a01fa21.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/e2311284-478e-4111-8d73-27148a01fa21.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:61:2b:17:f6:3c:0f:68:5d:c6:f5:ea:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2311284-478e-4111-8d73-27148a01fa21 Validity Not Before: Jul 2 01:00:49 2025 GMT Not After : Sep 30 01:00:49 2025 GMT Subject: CN=22081ccd-5778-4331-9f2d-ca01849f22b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:dc:96:28:c7:dd:df:fe:c1:a0:6c:ca:cd:8a: a0:08:df:d4:e2:e5:26:c7:b4:2d:b9:0f:46:7e:64: 80:4f:70:fb:0d:75:45:c0:8e:1e:b3:48:e4:ed:04: 31:fc:31:b6:e8:63:9d:a5:86:d2:61:85:c9:92:8a: 51:31:99:27:6b:f2:a9:f0:df:7e:84:b1:40:b3:00: 49:ab:bb:6e:d4:bc:08:54:db:2c:00:0b:5c:92:61: a4:40:8a:80:ef:0e:42:4f:c1:6b:1d:5a:ec:46:61: 03:66:e3:59:59:38:8e:45:56:c3:90:9e:4a:33:f5: 04:c2:11:de:64:ca:f3:9a:c9:a5:e9:14:1a:21:47: e1:7c:4a:90:4b:35:0d:9c:f0:62:88:c0:1a:62:0e: c4:30:8f:50:a5:2c:06:54:35:aa:cd:15:42:38:7d: b8:a4:9d:41:da:79:37:0d:f4:26:72:76:2b:86:0a: 0b:9b:38:20:53:a6:bc:41:ff:d5:74:56:49:f0:7d: 4a:11:74:4d:ce:b3:1b:fa:69:1d:a0:26:b1:f3:e2: cf:89:f0:7a:ad:4d:c0:0a:de:3b:14:d3:63:e5:2c: 90:51:a8:23:12:07:01:90:ac:a0:2d:a5:71:11:bf: d9:07:18:51:b6:c3:15:0d:7b:cc:8d:73:f6:db:6a: 4b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:23:B3:07:17:57:DE:DB:ED:23:80:70:02:77:5A:D8:45:D4:84:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/789da6a0-2c7a-3a3d-9143-50da694cacaa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/e2311284-478e-4111-8d73-27148a01fa21.crl X509v3 Authority Key Identifier: keyid:8C:F0:68:8D:CD:E2:2E:A8:36:9C:31:30:10:0F:98:75:1A:87:DB:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21.cer sbgp-ipAddrBlock: critical IPv4: 199.168.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:14:73:c5:0a:d6:d4:d9:87:c6:a3:e1:93:2a:ba:da:e7:76: 10:56:ef:2c:cd:f0:10:4a:ed:05:70:92:d8:10:6b:a3:d5:5e: 32:24:79:86:c0:74:3c:99:6a:3b:f4:cd:ad:6f:ba:2f:5d:f7: 64:d9:89:cb:2b:26:c3:72:21:f4:2e:92:63:2c:d6:cf:27:9d: fa:6c:23:95:98:7b:d4:74:f1:3d:fd:44:7d:02:ee:8d:dc:f7: 0a:96:59:39:be:fb:82:16:30:7a:2e:c6:85:f1:3f:87:50:55: 58:42:35:d8:95:e9:b4:07:ac:a9:ce:d3:d5:b5:1c:e6:af:28: 72:74:a9:82:bd:2c:b9:42:44:ce:fa:f2:82:9d:0d:d9:69:09: 3a:de:b6:17:98:09:65:ee:0a:f2:89:af:c3:44:7f:d7:4c:72: fb:d6:e4:7f:79:16:64:51:fc:22:73:de:88:92:18:8e:28:ee: 63:f5:4f:fb:49:b9:47:53:19:e3:7c:7b:59:61:52:c4:9c:a7: e3:71:06:a9:12:d9:40:e9:f4:da:ea:bf:97:86:bc:dc:3e:27: bd:87:be:e6:26:da:43:e5:5f:a2:0f:d3:71:b9:e3:bb:26:12: 1e:ba:43:79:bb:c1:44:91:5e:80:fb:a3:18:4e:4a:ab:16:10: 8f:81:e3:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEphKxf2PA9oXcb16kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIzMTEyODQtNDc4ZS00MTExLThkNzMtMjcxNDhhMDFm YTIxMB4XDTI1MDcwMjAxMDA0OVoXDTI1MDkzMDAxMDA0OVowLzEtMCsGA1UEAxMk MjIwODFjY2QtNTc3OC00MzMxLTlmMmQtY2EwMTg0OWYyMmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNyWKMfd3/7BoGzKzYqgCN/U4uUmx7QtuQ9G fmSAT3D7DXVFwI4es0jk7QQx/DG26GOdpYbSYYXJkopRMZkna/Kp8N9+hLFAswBJ q7tu1LwIVNssAAtckmGkQIqA7w5CT8FrHVrsRmEDZuNZWTiORVbDkJ5KM/UEwhHe ZMrzmsml6RQaIUfhfEqQSzUNnPBiiMAaYg7EMI9QpSwGVDWqzRVCOH24pJ1B2nk3 DfQmcnYrhgoLmzggU6a8Qf/VdFZJ8H1KEXRNzrMb+mkdoCax8+LPifB6rU3ACt47 FNNj5SyQUagjEgcBkKygLaVxEb/ZBxhRtsMVDXvMjXP222pLwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG4jswcXV97b7SOAcAJ3WthF1IREMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lMjMx MTI4NC00NzhlLTQxMTEtOGQ3My0yNzE0OGEwMWZhMjEvNzg5ZGE2YTAtMmM3YS0z YTNkLTkxNDMtNTBkYTY5NGNhY2FhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZTIzMTEyODQtNDc4ZS00MTExLThk NzMtMjcxNDhhMDFmYTIxL2UyMzExMjg0LTQ3OGUtNDExMS04ZDczLTI3MTQ4YTAx ZmEyMS5jcmwwHwYDVR0jBBgwFoAUjPBojc3iLqg2nDEwEA+YdRqH274wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9lMjMxMTI4NC00NzhlLTQxMTEtOGQ3My0yNzE0 OGEwMWZhMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx6jgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIkUc8UK1tTZh8aj4ZMqutrndhBW7yzN8BBK7QVwktgQa6PVXjIkeYbA dDyZajv0za1vui9d92TZicsrJsNyIfQukmMs1s8nnfpsI5WYe9R08T39RH0C7o3c 9wqWWTm++4IWMHouxoXxP4dQVVhCNdiV6bQHrKnO09W1HOavKHJ0qYK9LLlCRM76 8oKdDdlpCTretheYCWXuCvKJr8NEf9dMcvvW5H95FmRR/CJz3oiSGI4o7mP1T/tJ uUdTGeN8e1lhUsScp+NxBqkS2UDp9Nrqv5eGvNw+J72HvuYm2kPlX6IP03G547sm Eh66Q3m7wUSRXoD7oxhOSqsWEI+B45c= -----END CERTIFICATE-----Generated at Sun Aug 24 08:47:47 2025 by rpki-client