$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/633b9541-72dd-3fc2-9037-a3ec32e55320.roa File: 633b9541-72dd-3fc2-9037-a3ec32e55320.roa (raw, json) Hash identifier: nNvuKQejUhwt0pC4oR/MHJbo0hlI1kHvWMaiTNrOX9E= Subject key identifier: FF:1D:A3:17:6D:DA:9C:C3:50:EC:38:03:7B:25:F5:11:4A:0A:31:44 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584ACCA667CBA00CE2E3060E10C0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/633b9541-72dd-3fc2-9037-a3ec32e55320.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 16591 IP address blocks: 99.198.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:67:cb:a0:0c:e2:e3:06:0e:10:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=068ecff0-dd13-453d-a545-f9b2f3a1c1e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:3f:d9:85:53:41:e1:73:d7:d7:cb:19:dd:24: 1c:5c:7c:c7:dc:9f:cd:bb:80:bd:38:d4:65:7c:5a: 1c:09:94:20:e7:57:2b:c3:0c:05:f3:e8:16:e6:27: f9:e1:3f:d5:a0:04:1e:94:a3:8f:dc:61:67:27:0c: d6:d5:fb:63:d5:56:28:52:b8:40:45:75:68:ac:4a: 69:38:58:09:5d:74:49:e5:f5:07:91:a8:b2:ed:9e: d3:71:52:4f:59:47:54:8b:b7:73:8d:1f:3d:16:7e: 3f:5e:8c:18:18:f3:10:f3:dd:2f:fa:2f:68:63:fd: a4:12:9f:18:16:5b:1d:e6:cb:2b:e8:a8:b7:45:1b: ff:4f:ce:74:0d:23:7b:07:ef:91:67:83:73:3f:89: e3:75:10:de:00:76:56:61:c5:c1:e4:f4:94:09:10: a5:de:bc:0b:cc:fd:d7:b4:04:2a:c8:ab:e7:2d:d0: 4c:fb:2f:84:f0:3e:25:5b:3d:61:52:e2:b0:92:6d: 22:b3:7a:d3:cb:8f:cf:36:28:22:3f:1a:e7:11:b9: d9:52:79:d6:f1:09:b7:21:dc:16:a8:61:88:23:10: bc:f2:5b:a0:89:f1:6a:2d:44:94:99:f9:41:a6:ad: f7:d1:56:43:64:7b:44:f3:bc:4d:bd:ac:23:f3:c2: 80:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:1D:A3:17:6D:DA:9C:C3:50:EC:38:03:7B:25:F5:11:4A:0A:31:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/633b9541-72dd-3fc2-9037-a3ec32e55320.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 99.198.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:3d:a5:aa:e4:73:5b:a5:ce:56:20:36:9c:09:72:f5:10:e6: 65:03:c3:75:76:5b:a9:31:1d:07:a0:36:b9:fb:47:bb:ff:be: aa:45:da:0b:10:0b:66:3c:8a:00:04:28:18:0c:de:d1:d6:93: 83:ba:fe:37:58:a5:79:e4:40:4d:5c:93:52:bf:10:14:ff:a7: 3d:31:aa:e5:76:5a:dd:9b:0d:1b:4f:da:c1:db:cf:fd:b2:5b: a7:49:ea:79:12:51:d6:42:ac:2e:5e:4d:40:43:87:64:72:ef: ad:1c:28:52:8a:60:2e:4b:a0:70:71:4a:1e:6c:3b:5c:db:c7: 00:5f:d9:dd:72:74:2b:f6:c6:47:96:0d:c2:e9:90:0e:8e:ce: 51:44:90:ba:0f:55:89:7b:d8:a5:73:4c:74:ce:b3:a6:6d:4b: 0c:f4:66:1a:eb:b6:55:ac:d8:81:61:ea:6c:b2:25:22:a7:64: 7a:42:18:4f:d4:be:63:77:89:13:e3:bb:8b:5f:7d:19:7c:06: fa:10:bc:89:38:d6:2a:19:99:95:0c:cb:f0:e6:5b:23:16:c7: 1f:75:8e:0e:fa:f9:8c:01:9c:78:1f:44:b6:c1:8d:e9:c8:f3: 2d:4a:68:d5:48:d8:98:97:38:71:6b:d1:12:86:79:ad:73:68: bc:22:bc:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErMpmfLoAzi4wYOEMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk MDY4ZWNmZjAtZGQxMy00NTNkLWE1NDUtZjliMmYzYTFjMWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhz/ZhVNB4XPX18sZ3SQcXHzH3J/Nu4C9ONRl fFocCZQg51crwwwF8+gW5if54T/VoAQelKOP3GFnJwzW1ftj1VYoUrhARXVorEpp OFgJXXRJ5fUHkaiy7Z7TcVJPWUdUi7dzjR89Fn4/XowYGPMQ890v+i9oY/2kEp8Y Flsd5ssr6Ki3RRv/T850DSN7B++RZ4NzP4njdRDeAHZWYcXB5PSUCRCl3rwLzP3X tAQqyKvnLdBM+y+E8D4lWz1hUuKwkm0is3rTy4/PNigiPxrnEbnZUnnW8Qm3IdwW qGGIIxC88lugifFqLUSUmflBpq330VZDZHtE87xNvawj88KArwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP8doxdt2pzDUOw4A3sl9RFKCjFEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNjMzYjk1NDEtNzJkZC0z ZmMyLTkwMzctYTNlYzMyZTU1MzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHY8aAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB49parkc1ulzlYgNpwJcvUQ5mUDw3V2W6kxHQegNrn7R7v/vqpF2gsQ C2Y8igAEKBgM3tHWk4O6/jdYpXnkQE1ck1K/EBT/pz0xquV2Wt2bDRtP2sHbz/2y W6dJ6nkSUdZCrC5eTUBDh2Ry760cKFKKYC5LoHBxSh5sO1zbxwBf2d1ydCv2xkeW DcLpkA6OzlFEkLoPVYl72KVzTHTOs6ZtSwz0ZhrrtlWs2IFh6myyJSKnZHpCGE/U vmN3iRPju4tffRl8BvoQvIk41ioZmZUMy/DmWyMWxx91jg76+YwBnHgfRLbBjenI 8y1KaNVI2JiXOHFr0RKGea1zaLwivJA= -----END CERTIFICATE-----Generated at Sun Aug 24 05:12:12 2025 by rpki-client