$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/429747c5-c7e0-337f-97dd-1c905d4631ce.roa File: 429747c5-c7e0-337f-97dd-1c905d4631ce.roa (raw, json) Hash identifier: rQJmeB4NRiJ4Eofyfzgv+W2jREcfUoSncQajzgaCJrU= Subject key identifier: DC:5A:33:22:4A:4C:66:19:6A:3E:0C:00:21:95:5C:31:42:D9:98:50 Certificate issuer: /CN=45fe4043-69f6-4f38-9003-897cd909fb3b Certificate serial: 010D0C9F4328584AB650ED59314C4F6392019CA0 Authority key identifier: D0:31:C8:68:F7:13:5C:D1:51:FE:FC:08:83:5F:D5:29:CD:A3:16:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/429747c5-c7e0-337f-97dd-1c905d4631ce.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 14618 IP address blocks: 199.19.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/45fe4043-69f6-4f38-9003-897cd909fb3b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/45fe4043-69f6-4f38-9003-897cd909fb3b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:50:ed:59:31:4c:4f:63:92:01:9c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45fe4043-69f6-4f38-9003-897cd909fb3b Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=14fec6df-136c-4d13-be50-fa85c59def23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:fb:6a:c6:79:5a:0a:47:d7:0f:23:cc:78:a7: e6:09:d9:1b:85:73:4e:62:61:31:df:ec:e7:6f:67: 35:ab:3f:71:92:8b:fc:ea:9a:98:e1:d8:52:67:79: f2:4f:18:0e:29:15:81:59:03:35:78:ee:e3:b4:28: d3:12:32:0c:de:d0:08:b2:10:08:cf:b2:fa:e9:b8: 38:d8:34:7b:76:7b:b0:d3:81:80:4a:12:6e:ef:31: b1:40:d8:37:88:8d:ee:2b:a0:21:6f:10:f2:c1:36: a6:17:65:c8:57:0f:66:78:07:00:56:50:e3:c9:52: 49:f4:13:a2:36:a1:32:db:09:c1:d1:b7:da:ba:bd: 46:98:a3:1c:d2:67:6a:c1:98:0a:03:17:46:67:e6: b4:f9:56:24:c6:bf:fb:20:ae:5d:a0:f7:f5:4f:a9: 18:a5:f7:a7:76:6a:43:5d:e9:a0:2a:b8:8f:40:05: b2:eb:d3:8b:b2:e7:d3:42:5c:41:d3:09:db:46:05: bf:f3:79:d9:fd:1a:2c:5e:6b:55:06:49:fd:37:7c: 4c:f7:37:b4:d8:8d:69:39:7e:76:78:8e:5f:c6:1c: ad:32:86:d9:e4:7c:9c:18:5d:2d:3f:0d:ac:a7:f3: 1f:10:df:72:43:cb:5f:eb:ee:d1:c3:cb:df:54:95: d3:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:5A:33:22:4A:4C:66:19:6A:3E:0C:00:21:95:5C:31:42:D9:98:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/429747c5-c7e0-337f-97dd-1c905d4631ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/45fe4043-69f6-4f38-9003-897cd909fb3b.crl X509v3 Authority Key Identifier: keyid:D0:31:C8:68:F7:13:5C:D1:51:FE:FC:08:83:5F:D5:29:CD:A3:16:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b.cer sbgp-ipAddrBlock: critical IPv4: 199.19.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:b3:9a:3d:24:ea:92:5b:2b:9a:de:56:02:40:12:a6:99:b7: 83:63:7e:6c:2f:9c:30:3d:8a:cf:31:cd:af:0e:6d:5f:12:59: a8:25:60:9c:7f:99:62:a8:be:db:51:c9:3e:ca:9f:b9:a6:1a: b8:bd:c0:65:9f:b7:0c:f9:1c:ae:5d:96:ac:de:10:15:c0:9b: 09:fd:51:f9:e3:f2:3e:03:fb:fe:1a:58:66:b3:ce:66:32:82: 05:c2:fd:ee:a1:62:b7:00:11:e7:33:d1:61:bb:c3:8b:1d:c5: 42:88:ef:71:d7:ab:76:c1:ce:01:2b:ef:38:de:f3:91:f5:41: d8:12:91:58:8d:75:60:c7:9a:74:9c:5a:51:1e:f4:44:47:94: 52:f5:9f:a5:17:b0:41:0c:25:73:1d:31:70:41:49:e4:8b:f9: 70:e8:60:cf:d2:84:1e:f9:06:9b:2b:74:0c:d6:19:57:00:21: 68:73:0f:6d:e4:34:d6:1c:26:31:7a:b1:98:09:72:db:71:53: e7:53:9a:4d:ca:e7:a5:73:78:49:28:d8:2b:57:f2:73:e1:96: d0:cf:44:80:a1:cc:f8:17:9c:9d:ca:60:4a:87:01:f2:ba:ca: a0:c2:fb:87:54:fb:67:5c:67:5a:dc:46:cb:d9:8e:93:5c:f3: ec:5b:f2:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq2UO1ZMUxPY5IBnKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVmZTQwNDMtNjlmNi00ZjM4LTkwMDMtODk3Y2Q5MDlm YjNiMB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk MTRmZWM2ZGYtMTM2Yy00ZDEzLWJlNTAtZmE4NWM1OWRlZjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4/tqxnlaCkfXDyPMeKfmCdkbhXNOYmEx3+zn b2c1qz9xkov86pqY4dhSZ3nyTxgOKRWBWQM1eO7jtCjTEjIM3tAIshAIz7L66bg4 2DR7dnuw04GAShJu7zGxQNg3iI3uK6AhbxDywTamF2XIVw9meAcAVlDjyVJJ9BOi NqEy2wnB0bfaur1GmKMc0mdqwZgKAxdGZ+a0+VYkxr/7IK5doPf1T6kYpfendmpD XemgKriPQAWy69OLsufTQlxB0wnbRgW/83nZ/RosXmtVBkn9N3xM9ze02I1pOX52 eI5fxhytMobZ5HycGF0tPw2sp/MfEN9yQ8tf6+7Rw8vfVJXT4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNxaMyJKTGYZaj4MACGVXDFC2ZhQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80NWZl NDA0My02OWY2LTRmMzgtOTAwMy04OTdjZDkwOWZiM2IvNDI5NzQ3YzUtYzdlMC0z MzdmLTk3ZGQtMWM5MDVkNDYzMWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDVmZTQwNDMtNjlmNi00ZjM4LTkw MDMtODk3Y2Q5MDlmYjNiLzQ1ZmU0MDQzLTY5ZjYtNGYzOC05MDAzLTg5N2NkOTA5 ZmIzYi5jcmwwHwYDVR0jBBgwFoAU0DHIaPcTXNFR/vwIg1/VKc2jFhQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80NWZlNDA0My02OWY2LTRmMzgtOTAwMy04OTdj ZDkwOWZiM2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxxPAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSzmj0k6pJbK5reVgJAEqaZt4NjfmwvnDA9is8xza8ObV8SWaglYJx/ mWKovttRyT7Kn7mmGri9wGWftwz5HK5dlqzeEBXAmwn9Ufnj8j4D+/4aWGazzmYy ggXC/e6hYrcAEecz0WG7w4sdxUKI73HXq3bBzgEr7zje85H1QdgSkViNdWDHmnSc WlEe9ERHlFL1n6UXsEEMJXMdMXBBSeSL+XDoYM/ShB75BpsrdAzWGVcAIWhzD23k NNYcJjF6sZgJcttxU+dTmk3K56VzeEko2CtX8nPhltDPRIChzPgXnJ3KYEqHAfK6 yqDC+4dU+2dcZ1rcRsvZjpNc8+xb8i0= -----END CERTIFICATE-----Generated at Sat Aug 23 06:55:44 2025 by rpki-client