$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d29c11ab-c477-4c3c-8a5d-aa4ac4233132/c844b065-2a1a-31c2-88f6-22f75ccc8a82.roa File: c844b065-2a1a-31c2-88f6-22f75ccc8a82.roa (raw, json) Hash identifier: aTf4JSOK08rFkV1ioovFQrKkEtnFNANvi1PNjl99ys8= Subject key identifier: 2D:C1:9A:AD:4D:A1:68:23:07:F1:3E:E0:91:31:16:66:A3:5A:91:BA Certificate issuer: /CN=d29c11ab-c477-4c3c-8a5d-aa4ac4233132 Certificate serial: 010D0C9F4328584AD68C58A963E64750D97E0DC0 Authority key identifier: CE:33:02:1B:7C:ED:F3:76:C3:A0:82:31:3C:FC:D5:6C:F0:E8:89:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d29c11ab-c477-4c3c-8a5d-aa4ac4233132.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d29c11ab-c477-4c3c-8a5d-aa4ac4233132/c844b065-2a1a-31c2-88f6-22f75ccc8a82.roa Signing time: Wed 13 Aug 2025 02:06:32 +0000 ROA not before: Wed 13 Aug 2025 02:06:32 +0000 ROA not after: Tue 11 Nov 2025 03:06:32 +0000 asID: 394149 IP address blocks: 199.185.184.0/23 maxlen: 23 2620:121:9000::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d29c11ab-c477-4c3c-8a5d-aa4ac4233132/d29c11ab-c477-4c3c-8a5d-aa4ac4233132.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d29c11ab-c477-4c3c-8a5d-aa4ac4233132/d29c11ab-c477-4c3c-8a5d-aa4ac4233132.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d29c11ab-c477-4c3c-8a5d-aa4ac4233132.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d6:8c:58:a9:63:e6:47:50:d9:7e:0d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d29c11ab-c477-4c3c-8a5d-aa4ac4233132 Validity Not Before: Aug 13 02:06:32 2025 GMT Not After : Nov 11 03:06:32 2025 GMT Subject: CN=486fecfc-2a50-4f8c-9708-fbb958f63ecd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:a5:e8:a7:92:b4:1e:ed:46:29:58:8f:a6:b0: 45:ed:ee:eb:7d:ec:c6:0a:8d:c2:14:5d:f6:4c:a8: 30:91:f8:f0:9f:69:31:d5:8c:92:a7:de:29:1b:7c: 0e:97:8c:29:85:08:c1:ad:a3:f6:e9:21:6d:76:23: b0:42:26:88:65:c8:d0:76:42:08:43:83:73:26:7a: de:7d:53:59:3d:ef:25:e4:af:30:e5:cb:50:4f:98: 6f:6e:0f:9d:9c:f8:f3:df:5d:26:9b:35:ef:72:1b: a5:0f:d5:46:c5:6f:08:63:60:2d:32:d0:47:1f:62: d6:12:36:ee:db:ef:73:14:dc:d5:93:22:b0:0b:5c: be:6d:79:d4:8b:23:18:3f:41:4c:52:13:c1:34:de: 17:d2:52:9e:d7:c0:7a:ca:e3:c6:fc:70:0a:75:75: 0a:1d:6a:33:74:46:72:f1:36:ed:e4:48:73:bf:70: de:9f:a6:9a:22:c4:ad:1f:1a:e8:c4:e8:79:82:11: 4d:04:54:b2:0f:cd:84:3d:56:79:4f:2c:8a:da:f1: 9c:c2:d6:16:3b:24:06:4c:e0:84:22:c3:e7:bd:47: 92:77:18:51:7d:26:a2:2a:6f:3b:3f:34:a2:dd:4c: 54:ce:03:cf:6f:74:6c:08:42:1f:54:e2:67:10:a9: 62:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:C1:9A:AD:4D:A1:68:23:07:F1:3E:E0:91:31:16:66:A3:5A:91:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d29c11ab-c477-4c3c-8a5d-aa4ac4233132/c844b065-2a1a-31c2-88f6-22f75ccc8a82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d29c11ab-c477-4c3c-8a5d-aa4ac4233132/d29c11ab-c477-4c3c-8a5d-aa4ac4233132.crl X509v3 Authority Key Identifier: keyid:CE:33:02:1B:7C:ED:F3:76:C3:A0:82:31:3C:FC:D5:6C:F0:E8:89:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d29c11ab-c477-4c3c-8a5d-aa4ac4233132.cer sbgp-ipAddrBlock: critical IPv4: 199.185.184.0/23 IPv6: 2620:121:9000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:47:d6:be:da:2f:01:a5:3a:3d:8d:eb:c4:1b:78:d4:0c:c7: 8a:59:45:b0:44:90:de:36:2d:6f:0b:fc:05:e9:d7:3b:1a:9a: 61:8e:d0:4a:77:14:c8:7d:81:bf:4d:78:1a:03:6a:4d:aa:a3: e3:0f:6b:89:c2:5b:b7:f6:ee:b8:2d:d8:6a:4e:7a:3f:ea:9d: 3e:77:7c:c4:0d:7c:56:b8:8c:23:ef:8d:c5:b4:ce:5c:0d:f3: 42:89:16:17:93:e8:e5:0e:5f:7f:29:08:90:64:52:72:64:6c: af:b6:8a:66:41:45:16:4c:57:98:35:f5:44:cf:e2:26:5b:ad: fc:37:d1:4f:83:6c:8f:77:16:bf:1d:1a:94:de:e6:07:0d:38: 34:52:fa:1e:a1:3d:50:d0:5a:96:45:7e:4d:1b:50:7c:bc:24: aa:60:99:a0:7d:f7:8c:06:dc:3e:fa:4b:a2:06:56:df:2b:07: 2f:2f:d3:67:c1:a6:1d:13:f6:55:88:10:46:c1:27:00:c8:a8: 9d:54:dc:33:70:c7:60:46:f1:76:b9:55:0f:88:a7:04:2e:ed: 09:95:e6:21:4a:e2:ce:17:ed:cc:c0:f4:a3:68:6f:f9:f4:d1: 25:79:f2:93:86:de:10:b0:ac:55:33:12:bf:2c:26:a0:d6:4b: bc:be:30:5b -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWErWjFipY+ZHUNl+DcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDI5YzExYWItYzQ3Ny00YzNjLThhNWQtYWE0YWM0MjMz MTMyMB4XDTI1MDgxMzAyMDYzMloXDTI1MTExMTAzMDYzMlowLzEtMCsGA1UEAxMk NDg2ZmVjZmMtMmE1MC00ZjhjLTk3MDgtZmJiOTU4ZjYzZWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56Xop5K0Hu1GKViPprBF7e7rfezGCo3CFF32 TKgwkfjwn2kx1YySp94pG3wOl4wphQjBraP26SFtdiOwQiaIZcjQdkIIQ4NzJnre fVNZPe8l5K8w5ctQT5hvbg+dnPjz310mmzXvchulD9VGxW8IY2AtMtBHH2LWEjbu 2+9zFNzVkyKwC1y+bXnUiyMYP0FMUhPBNN4X0lKe18B6yuPG/HAKdXUKHWozdEZy 8Tbt5Ehzv3Den6aaIsStHxroxOh5ghFNBFSyD82EPVZ5TyyK2vGcwtYWOyQGTOCE IsPnvUeSdxhRfSaiKm87PzSi3UxUzgPPb3RsCEIfVOJnEKliBwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFC3Bmq1NoWgjB/E+4JExFmajWpG6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kMjlj MTFhYi1jNDc3LTRjM2MtOGE1ZC1hYTRhYzQyMzMxMzIvYzg0NGIwNjUtMmExYS0z MWMyLTg4ZjYtMjJmNzVjY2M4YTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDI5YzExYWItYzQ3Ny00YzNjLThh NWQtYWE0YWM0MjMzMTMyL2QyOWMxMWFiLWM0NzctNGMzYy04YTVkLWFhNGFjNDIz MzEzMi5jcmwwHwYDVR0jBBgwFoAUzjMCG3zt83bDoIIxPPzVbPDoibwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kMjljMTFhYi1jNDc3LTRjM2MtOGE1ZC1hYTRh YzQyMzMxMzIuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBx7m4MA8E AgACMAkDBwQmIAEhkAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAZUfWvtovAaU6PY3rxBt41AzHillFsESQ 3jYtbwv8BenXOxqaYY7QSncUyH2Bv014GgNqTaqj4w9ricJbt/buuC3Yak56P+qd Pnd8xA18VriMI++NxbTOXA3zQokWF5Po5Q5ffykIkGRScmRsr7aKZkFFFkxXmDX1 RM/iJlut/DfRT4Nsj3cWvx0alN7mBw04NFL6HqE9UNBalkV+TRtQfLwkqmCZoH33 jAbcPvpLogZW3ysHLy/TZ8GmHRP2VYgQRsEnAMionVTcM3DHYEbxdrlVD4inBC7t CZXmIUrizhftzMD0o2hv+fTRJXnyk4beELCsVTMSvywmoNZLvL4wWw== -----END CERTIFICATE-----Generated at Sat Aug 23 20:56:14 2025 by rpki-client