$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/09ddca0c-00ea-3e20-b685-50e6b951950b.roa File: 09ddca0c-00ea-3e20-b685-50e6b951950b.roa (raw, json) Hash identifier: irZS/VTW/BRIhePJKy7HGfazueBKT/qhaFaRmGA4IW4= Subject key identifier: 8F:BD:B7:B9:A1:76:03:BD:C7:9D:24:8A:7C:AB:64:05:22:9E:A3:FA Certificate issuer: /CN=b985122e-f2ff-4349-8e7b-d604ee2577f1 Certificate serial: 010D0C9F4328584AE03118D23678B86B2BDF5D80 Authority key identifier: 32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/09ddca0c-00ea-3e20-b685-50e6b951950b.roa Signing time: Sat 16 Aug 2025 13:00:42 +0000 ROA not before: Sat 16 Aug 2025 13:00:42 +0000 ROA not after: Fri 14 Nov 2025 14:00:42 +0000 asID: 203 IP address blocks: 199.249.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e0:31:18:d2:36:78:b8:6b:2b:df:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b985122e-f2ff-4349-8e7b-d604ee2577f1 Validity Not Before: Aug 16 13:00:42 2025 GMT Not After : Nov 14 14:00:42 2025 GMT Subject: CN=651366eb-f138-450c-8444-0918f4d226c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:86:19:94:0a:bc:fe:e8:11:7c:f4:69:72:d6: 5c:ef:58:4c:4b:18:0f:17:a1:7f:64:a1:f1:dc:02: 4d:00:4d:5e:c3:e5:f2:6c:33:2f:5f:b7:f4:3d:17: 60:13:3f:e8:8b:24:b7:30:0f:1b:2f:3f:b1:65:9e: 16:6b:a3:3d:78:84:af:29:f2:ac:9c:b8:47:64:a2: 85:82:3a:46:f5:40:b2:6e:45:48:ea:f6:4f:21:ed: 87:b1:51:9a:f8:99:de:5e:d8:a8:cf:d9:53:60:7c: b9:36:98:c3:2a:c8:77:ca:72:b4:4d:c6:57:ed:15: d4:82:fd:69:3e:b1:84:62:24:ba:11:e6:62:12:1c: a8:5e:81:29:30:01:c8:ee:30:02:64:8b:02:94:3c: 09:4c:30:02:f8:0f:8a:c9:a0:5d:ea:8f:cc:51:4e: bf:db:d3:a7:57:d6:70:3c:bf:2f:57:52:2e:c2:a3: 78:96:5c:7f:42:4a:80:54:90:b2:e4:bd:e6:a2:24: ab:bb:57:e7:30:40:ef:64:c6:5f:af:7b:e6:b7:1b: e2:b3:05:27:ab:dd:3a:2f:6f:61:ec:9b:83:2c:f7: 7f:14:eb:1f:aa:92:57:93:c8:9e:e8:c5:5f:3a:53: 7d:02:fc:3d:07:7f:2d:ee:c5:72:15:f1:42:50:71: 04:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:BD:B7:B9:A1:76:03:BD:C7:9D:24:8A:7C:AB:64:05:22:9E:A3:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/09ddca0c-00ea-3e20-b685-50e6b951950b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl X509v3 Authority Key Identifier: keyid:32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer sbgp-ipAddrBlock: critical IPv4: 199.249.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:27:42:e6:39:16:84:27:c2:83:c0:1d:05:23:34:ee:28:1e: af:7f:4f:af:fc:2f:35:09:0b:bc:04:38:e8:55:9c:ff:db:33: 5f:c8:77:82:c8:5a:85:14:15:4f:7d:06:2f:3c:cb:d5:07:ea: 58:7b:a8:39:23:7f:3b:ba:b2:03:e3:3d:fe:c3:3b:73:9c:cf: 49:79:23:ed:dd:07:21:55:62:71:35:9d:e0:a6:14:f1:68:35: 70:8a:98:aa:b8:f9:aa:37:54:9d:bf:46:33:3d:73:59:d5:25: 41:3e:31:45:48:a5:27:47:df:85:56:b4:9a:5b:fc:b2:a2:a3: be:53:49:4f:42:22:21:34:d4:23:ae:39:90:e0:21:6b:2b:72: 58:f8:7a:44:62:36:e4:34:f2:52:b0:d8:f1:c0:79:f2:c7:cf: 18:10:bd:7b:96:c2:f9:80:38:4d:27:b3:07:9b:4d:41:9c:90: 0f:c3:97:5f:6f:87:6c:52:16:82:d8:b2:c4:3e:df:19:5a:3e: 37:7d:f2:d2:29:30:21:c3:f6:d8:ba:7e:2c:3e:bc:0e:6c:28: 69:89:19:cd:02:31:29:7c:4f:a2:a0:41:40:48:c9:a1:d0:54: 27:61:c1:0e:61:1a:ae:aa:cb:65:e6:67:33:02:d5:40:21:4b: 61:0a:8b:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErgMRjSNni4ayvfXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk4NTEyMmUtZjJmZi00MzQ5LThlN2ItZDYwNGVlMjU3 N2YxMB4XDTI1MDgxNjEzMDA0MloXDTI1MTExNDE0MDA0MlowLzEtMCsGA1UEAxMk NjUxMzY2ZWItZjEzOC00NTBjLTg0NDQtMDkxOGY0ZDIyNmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIYZlAq8/ugRfPRpctZc71hMSxgPF6F/ZKHx 3AJNAE1ew+XybDMvX7f0PRdgEz/oiyS3MA8bLz+xZZ4Wa6M9eISvKfKsnLhHZKKF gjpG9UCybkVI6vZPIe2HsVGa+JneXtioz9lTYHy5NpjDKsh3ynK0TcZX7RXUgv1p PrGEYiS6EeZiEhyoXoEpMAHI7jACZIsClDwJTDAC+A+KyaBd6o/MUU6/29OnV9Zw PL8vV1IuwqN4llx/QkqAVJCy5L3moiSru1fnMEDvZMZfr3vmtxviswUnq906L29h 7JuDLPd/FOsfqpJXk8ie6MVfOlN9Avw9B38t7sVyFfFCUHEEdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI+9t7mhdgO9x50kinyrZAUinqP6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iOTg1 MTIyZS1mMmZmLTQzNDktOGU3Yi1kNjA0ZWUyNTc3ZjEvMDlkZGNhMGMtMDBlYS0z ZTIwLWI2ODUtNTBlNmI5NTE5NTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjk4NTEyMmUtZjJmZi00MzQ5LThl N2ItZDYwNGVlMjU3N2YxL2I5ODUxMjJlLWYyZmYtNDM0OS04ZTdiLWQ2MDRlZTI1 NzdmMS5jcmwwHwYDVR0jBBgwFoAUMkPnPPcbBd82CkZOMRZRS4dhJtswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iOTg1MTIyZS1mMmZmLTQzNDktOGU3Yi1kNjA0 ZWUyNTc3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/nuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgnQuY5FoQnwoPAHQUjNO4oHq9/T6/8LzUJC7wEOOhVnP/bM1/Id4LI WoUUFU99Bi88y9UH6lh7qDkjfzu6sgPjPf7DO3Ocz0l5I+3dByFVYnE1neCmFPFo NXCKmKq4+ao3VJ2/RjM9c1nVJUE+MUVIpSdH34VWtJpb/LKio75TSU9CIiE01COu OZDgIWsrclj4ekRiNuQ08lKw2PHAefLHzxgQvXuWwvmAOE0nswebTUGckA/Dl19v h2xSFoLYssQ+3xlaPjd98tIpMCHD9ti6fiw+vA5sKGmJGc0CMSl8T6KgQUBIyaHQ VCdhwQ5hGq6qy2XmZzMC1UAhS2EKi/4= -----END CERTIFICATE-----Generated at Sun Aug 24 03:50:30 2025 by rpki-client