$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/1a475a05-1bff-3e3d-bc59-d988ebc9c4f3.roa File: 1a475a05-1bff-3e3d-bc59-d988ebc9c4f3.roa (raw, json) Hash identifier: trIcwoS1kEuMsQVn07Xmi5wlT3pdFIQ+WI8GTBinqV4= Subject key identifier: FB:AC:3A:7E:9A:5B:A4:24:A7:0E:C1:8A:E3:57:7E:55:85:9E:C8:C3 Certificate issuer: /CN=3ed3e995-4cff-4a3d-af9b-7728ddaff70d Certificate serial: 010D0C9F4328584AE5C677DEA4AF307DE60A4480 Authority key identifier: F3:75:96:E2:1C:D8:1C:9A:D5:67:D1:E9:54:49:B0:A4:32:C1:A4:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/1a475a05-1bff-3e3d-bc59-d988ebc9c4f3.roa Signing time: Mon 18 Aug 2025 13:00:41 +0000 ROA not before: Mon 18 Aug 2025 13:00:41 +0000 ROA not after: Sun 16 Nov 2025 14:00:41 +0000 asID: 62915 IP address blocks: 199.66.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e5:c6:77:de:a4:af:30:7d:e6:0a:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ed3e995-4cff-4a3d-af9b-7728ddaff70d Validity Not Before: Aug 18 13:00:41 2025 GMT Not After : Nov 16 14:00:41 2025 GMT Subject: CN=8620b5a2-89b2-4508-8e27-444feeab8318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:68:94:52:0b:b3:63:cd:2c:dc:b2:de:7c:7d: ab:bc:ce:f3:34:98:ec:ca:af:c9:bc:0d:60:63:72: 8f:4f:f5:f2:a0:40:3c:5f:94:d2:19:81:af:fc:11: fd:9c:a8:2c:8e:15:31:27:9b:c4:0a:6a:ce:34:11: 00:aa:41:b6:18:6b:9d:d2:9e:99:18:ae:d8:ae:79: 7b:47:ff:72:61:c0:27:e3:13:df:36:2f:cc:99:8a: e1:78:77:99:17:81:be:4f:66:64:ea:e6:38:f2:7c: 07:30:dc:b2:0d:45:a8:27:ea:f1:6c:00:30:cd:76: 34:76:57:48:a3:dd:0b:66:03:4e:c2:8b:55:49:d6: a0:80:37:77:ec:d0:6e:76:ae:64:9a:be:6d:57:6f: 3a:f6:f8:bc:6d:78:95:e6:4c:1c:74:9b:68:3c:e6: 57:e2:59:b1:f7:6a:87:00:84:60:b6:df:40:e9:e1: 39:01:8e:0f:21:57:e4:50:b9:f7:bf:72:e1:8f:8b: 5a:72:59:3c:05:d9:a3:b6:84:de:ad:84:9e:09:7a: 74:4e:77:e9:0b:f8:2c:2a:54:a1:42:36:04:6f:1e: 7c:ed:6d:73:11:fb:d9:a8:3e:4e:f2:a6:1e:06:5b: 77:35:d4:78:d8:fe:90:dc:dc:2f:df:ff:92:75:12: 0e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:AC:3A:7E:9A:5B:A4:24:A7:0E:C1:8A:E3:57:7E:55:85:9E:C8:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/1a475a05-1bff-3e3d-bc59-d988ebc9c4f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.crl X509v3 Authority Key Identifier: keyid:F3:75:96:E2:1C:D8:1C:9A:D5:67:D1:E9:54:49:B0:A4:32:C1:A4:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.cer sbgp-ipAddrBlock: critical IPv4: 199.66.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:95:0c:99:52:84:4f:0a:92:43:c6:d5:7a:8a:3e:61:9d:31: 59:27:54:b0:a2:94:8e:99:ff:b7:a3:54:da:f0:81:74:8e:58: 81:92:1f:59:63:aa:7c:4e:1a:e4:b0:e1:37:f1:39:bb:1d:48: 16:7d:38:f1:f9:32:1c:55:69:c5:4f:11:f6:c9:84:35:4f:65: 89:96:6f:3c:0f:1e:83:88:94:3f:0a:f9:ba:57:ef:23:1c:b0: 25:1f:29:5d:3c:81:ad:b1:dd:19:9a:30:48:e1:6b:01:f3:2e: 06:79:11:68:b7:84:50:8b:94:95:19:26:7e:65:58:d4:b2:be: ea:f5:e3:7e:1b:80:b5:e3:85:6a:1b:dd:ab:02:a0:a3:a8:86: 9a:dd:74:47:b7:9d:bf:d8:35:25:f4:71:6b:87:2a:a6:d8:7e: 1d:00:43:1f:72:34:87:73:17:f0:ea:0b:cd:d0:eb:26:5f:60: ea:af:14:b9:77:84:a4:a6:73:8a:16:01:59:da:56:bb:f3:9c: a0:15:cb:06:31:8b:69:b7:69:cf:fe:03:30:64:37:ef:4b:f7: f3:f1:cf:de:ca:8e:63:d8:19:4b:ed:c4:f1:22:f3:d4:be:d7: 94:96:a6:68:7d:93:ef:f7:2f:88:48:62:25:e7:86:3d:45:4a: c7:91:13:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErlxnfepK8wfeYKRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VkM2U5OTUtNGNmZi00YTNkLWFmOWItNzcyOGRkYWZm NzBkMB4XDTI1MDgxODEzMDA0MVoXDTI1MTExNjE0MDA0MVowLzEtMCsGA1UEAxMk ODYyMGI1YTItODliMi00NTA4LThlMjctNDQ0ZmVlYWI4MzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGiUUguzY80s3LLefH2rvM7zNJjsyq/JvA1g Y3KPT/XyoEA8X5TSGYGv/BH9nKgsjhUxJ5vECmrONBEAqkG2GGud0p6ZGK7Yrnl7 R/9yYcAn4xPfNi/MmYrheHeZF4G+T2Zk6uY48nwHMNyyDUWoJ+rxbAAwzXY0dldI o90LZgNOwotVSdaggDd37NBudq5kmr5tV2869vi8bXiV5kwcdJtoPOZX4lmx92qH AIRgtt9A6eE5AY4PIVfkULn3v3Lhj4taclk8BdmjtoTerYSeCXp0TnfpC/gsKlSh QjYEbx587W1zEfvZqD5O8qYeBlt3NdR42P6Q3Nwv3/+SdRIONQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPusOn6aW6Qkpw7BiuNXflWFnsjDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zZWQz ZTk5NS00Y2ZmLTRhM2QtYWY5Yi03NzI4ZGRhZmY3MGQvMWE0NzVhMDUtMWJmZi0z ZTNkLWJjNTktZDk4OGViYzljNGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvM2VkM2U5OTUtNGNmZi00YTNkLWFm OWItNzcyOGRkYWZmNzBkLzNlZDNlOTk1LTRjZmYtNGEzZC1hZjliLTc3MjhkZGFm ZjcwZC5jcmwwHwYDVR0jBBgwFoAU83WW4hzYHJrVZ9HpVEmwpDLBpIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zZWQzZTk5NS00Y2ZmLTRhM2QtYWY5Yi03NzI4 ZGRhZmY3MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx0JUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOVDJlShE8KkkPG1XqKPmGdMVknVLCilI6Z/7ejVNrwgXSOWIGSH1lj qnxOGuSw4TfxObsdSBZ9OPH5MhxVacVPEfbJhDVPZYmWbzwPHoOIlD8K+bpX7yMc sCUfKV08ga2x3RmaMEjhawHzLgZ5EWi3hFCLlJUZJn5lWNSyvur1434bgLXjhWob 3asCoKOohprddEe3nb/YNSX0cWuHKqbYfh0AQx9yNIdzF/DqC83Q6yZfYOqvFLl3 hKSmc4oWAVnaVrvznKAVywYxi2m3ac/+AzBkN+9L9/Pxz97KjmPYGUvtxPEi89S+ 15SWpmh9k+/3L4hIYiXnhj1FSseREzo= -----END CERTIFICATE-----Generated at Sun Aug 24 07:11:18 2025 by rpki-client