$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/714ca7b2-f876-35db-9239-9283a111da5a.roa File: 714ca7b2-f876-35db-9239-9283a111da5a.roa (raw, json) Hash identifier: kTUjlK3Q2BlxGHSjQbozoZhrEwO2Wnpq4BCco9M7+30= Subject key identifier: 4B:53:1F:4D:89:DA:F3:AB:A7:3C:E8:C8:31:A9:8E:5A:67:56:0B:D4 Certificate issuer: /CN=fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47 Certificate serial: 010D0C9F4328584AC7111F376EF2F73D4325D8C0 Authority key identifier: 3C:6C:69:39:64:64:92:8F:20:CE:38:CA:26:66:1B:C8:69:F6:52:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/714ca7b2-f876-35db-9239-9283a111da5a.roa Signing time: Thu 07 Aug 2025 13:00:40 +0000 ROA not before: Thu 07 Aug 2025 13:00:40 +0000 ROA not after: Wed 05 Nov 2025 14:00:40 +0000 asID: 14618 IP address blocks: 157.239.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c7:11:1f:37:6e:f2:f7:3d:43:25:d8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47 Validity Not Before: Aug 7 13:00:40 2025 GMT Not After : Nov 5 14:00:40 2025 GMT Subject: CN=2d40b3ee-08c0-444d-b80d-c978b56289fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:3a:01:a8:3a:d6:56:68:10:36:ce:1a:67:79: 03:1b:de:d8:cb:c6:e8:f8:5e:22:dc:fa:b0:e2:b8: 5c:1c:e9:e1:d6:68:34:ff:5d:88:f3:96:6b:48:de: 8b:c1:c5:8a:31:ee:3a:c2:85:ca:12:3d:12:4e:21: 27:d9:49:54:92:2f:20:2c:3a:83:97:ab:2f:d5:60: 64:03:58:22:70:7e:ea:f1:cc:70:95:bc:60:9a:92: 6b:cc:6e:bb:ce:e3:b2:58:56:e2:04:35:72:d3:d4: 3f:ab:35:5e:0b:72:71:9c:e5:50:8d:02:61:5a:58: 3c:6d:f5:4c:a4:80:82:b3:9a:f1:22:e9:34:11:9e: 64:05:65:eb:79:3e:71:5e:75:f1:1f:50:ee:a5:bc: 62:fb:46:7d:6b:bd:5a:a5:23:78:ca:ef:81:f9:55: 2f:e3:92:d7:f1:34:fb:d2:88:86:1c:58:f2:61:4f: 80:55:ad:c4:01:7e:d1:8a:79:14:6f:f4:df:e0:40: d6:e4:ef:23:5a:1f:7c:e7:4c:e2:45:c9:f7:fe:30: a8:bf:7f:c8:30:82:14:37:27:11:9d:f6:c9:4e:90: f4:38:5f:9e:3c:d9:25:f6:a4:2c:7a:79:18:2a:5f: da:ef:c9:c6:08:29:a3:8d:bf:9d:0c:14:e3:b1:09: 80:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:53:1F:4D:89:DA:F3:AB:A7:3C:E8:C8:31:A9:8E:5A:67:56:0B:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/714ca7b2-f876-35db-9239-9283a111da5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.crl X509v3 Authority Key Identifier: keyid:3C:6C:69:39:64:64:92:8F:20:CE:38:CA:26:66:1B:C8:69:F6:52:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer sbgp-ipAddrBlock: critical IPv4: 157.239.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:23:eb:4d:f3:47:60:45:d5:87:91:d5:d1:7c:7d:9a:7c:ae: a6:b7:74:62:fb:ef:57:f2:22:73:18:86:bc:4b:8b:75:63:5c: bf:22:da:d3:6d:15:c1:7e:cd:16:41:8b:54:c3:b7:3a:b4:da: 2d:ff:19:15:19:a3:34:8a:c0:3a:ba:fb:55:5c:4c:a4:89:11: 9f:ed:8a:37:15:a3:2a:ed:b2:4c:5c:3f:3a:c9:9b:c6:70:a3: 60:c6:73:c9:94:e1:b7:76:76:dc:49:15:54:0d:f3:00:32:8e: ef:22:54:3c:dc:cc:da:66:f5:58:26:38:3c:f3:24:bc:a9:c4: c6:7a:f5:c2:69:45:26:9e:72:66:e8:fa:26:05:1f:e7:0d:3c: 18:42:8c:c6:0a:25:a9:9c:36:45:00:d7:d7:84:7e:21:f2:25: fc:3d:8f:34:38:95:4e:9b:a3:26:e1:3e:bd:46:5c:77:3d:74: 10:17:10:f9:a4:98:95:4f:2f:83:42:7e:1c:61:7a:b1:3b:0b: 60:77:c0:92:95:67:39:fc:d9:8c:54:00:16:26:86:b4:3f:36: a7:34:e7:d4:64:1a:99:4f:c4:7f:8d:a9:da:6b:68:ed:8c:1f: 8c:65:23:28:e7:22:69:6c:29:ec:a7:96:55:98:94:9d:cc:a3: c8:a9:20:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErHER83bvL3PUMl2MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRkNGI1YWQtYmJjYS00ZmU5LTg1YjQtOGYyZTVjY2Ex ZDQ3MB4XDTI1MDgwNzEzMDA0MFoXDTI1MTEwNTE0MDA0MFowLzEtMCsGA1UEAxMk MmQ0MGIzZWUtMDhjMC00NDRkLWI4MGQtYzk3OGI1NjI4OWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlToBqDrWVmgQNs4aZ3kDG97Yy8bo+F4i3Pqw 4rhcHOnh1mg0/12I85ZrSN6LwcWKMe46woXKEj0STiEn2UlUki8gLDqDl6sv1WBk A1gicH7q8cxwlbxgmpJrzG67zuOyWFbiBDVy09Q/qzVeC3JxnOVQjQJhWlg8bfVM pICCs5rxIuk0EZ5kBWXreT5xXnXxH1Dupbxi+0Z9a71apSN4yu+B+VUv45LX8TT7 0oiGHFjyYU+AVa3EAX7RinkUb/Tf4EDW5O8jWh9850ziRcn3/jCov3/IMIIUNycR nfbJTpD0OF+ePNkl9qQsenkYKl/a78nGCCmjjb+dDBTjsQmAcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEtTH02J2vOrpzzoyDGpjlpnVgvUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mZGQ0 YjVhZC1iYmNhLTRmZTktODViNC04ZjJlNWNjYTFkNDcvNzE0Y2E3YjItZjg3Ni0z NWRiLTkyMzktOTI4M2ExMTFkYTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZmRkNGI1YWQtYmJjYS00ZmU5LTg1 YjQtOGYyZTVjY2ExZDQ3L2ZkZDRiNWFkLWJiY2EtNGZlOS04NWI0LThmMmU1Y2Nh MWQ0Ny5jcmwwHwYDVR0jBBgwFoAUPGxpOWRkko8gzjjKJmYbyGn2UjwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9mZGQ0YjVhZC1iYmNhLTRmZTktODViNC04ZjJl NWNjYTFkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDne8AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEj603zR2BF1YeR1dF8fZp8rqa3dGL771fyInMYhrxLi3VjXL8i2tNt FcF+zRZBi1TDtzq02i3/GRUZozSKwDq6+1VcTKSJEZ/tijcVoyrtskxcPzrJm8Zw o2DGc8mU4bd2dtxJFVQN8wAyju8iVDzczNpm9VgmODzzJLypxMZ69cJpRSaecmbo +iYFH+cNPBhCjMYKJamcNkUA19eEfiHyJfw9jzQ4lU6boybhPr1GXHc9dBAXEPmk mJVPL4NCfhxherE7C2B3wJKVZzn82YxUABYmhrQ/Nqc059RkGplPxH+NqdpraO2M H4xlIyjnImlsKeynllWYlJ3Mo8ipILk= -----END CERTIFICATE-----Generated at Sat Aug 23 08:24:41 2025 by rpki-client