$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/76128ce9-79ee-3f1a-9953-cad3bfe282d8.roa File: 76128ce9-79ee-3f1a-9953-cad3bfe282d8.roa (raw, json) Hash identifier: tNMCxBcFhCxeAVxBIzH331JmaUdGaoYbX+A/DcUVNSA= Subject key identifier: 22:23:DD:A2:05:A8:E8:4B:1A:2B:14:7E:ED:9C:9B:8E:E2:8C:B6:1D Certificate issuer: /CN=fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47 Certificate serial: 010D0C9F4328584AC7111F7C4ABCE37C6FCE15C0 Authority key identifier: 3C:6C:69:39:64:64:92:8F:20:CE:38:CA:26:66:1B:C8:69:F6:52:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/76128ce9-79ee-3f1a-9953-cad3bfe282d8.roa Signing time: Thu 07 Aug 2025 13:00:40 +0000 ROA not before: Thu 07 Aug 2025 13:00:40 +0000 ROA not after: Wed 05 Nov 2025 14:00:40 +0000 asID: 14618 IP address blocks: 157.239.12.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c7:11:1f:7c:4a:bc:e3:7c:6f:ce:15:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47 Validity Not Before: Aug 7 13:00:40 2025 GMT Not After : Nov 5 14:00:40 2025 GMT Subject: CN=2e05aeee-a8cd-4aa3-8b8a-ec3b3d46748d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:31:d9:59:36:54:3d:13:1e:27:84:6e:d8:b7: 5f:92:95:8b:7e:8e:b3:33:7b:01:a2:23:ba:04:44: 07:46:e9:26:10:d4:e0:20:90:16:0a:6c:cc:a4:38: 19:00:4a:cf:14:fb:a8:ca:48:fb:e0:67:ed:cc:86: 7a:c0:df:2d:fb:8d:37:16:aa:49:46:89:a3:e5:6e: e6:3c:c0:77:6b:77:ee:ab:6e:8d:5d:c3:c9:4f:be: 64:39:fa:df:99:ab:0e:d3:60:ab:ad:29:3b:df:b8: 96:58:ad:1e:8b:db:72:3c:73:09:ac:82:fe:9f:66: 6b:ad:ff:c2:4e:5f:b0:b5:b8:29:e7:49:76:0c:38: 16:ae:67:be:2a:b1:b8:d4:d1:f9:41:5d:e5:7b:06: 20:4e:3d:78:ec:d4:12:b0:a5:a2:13:c5:e2:0f:a3: 91:04:e4:63:e3:e9:2a:b2:58:5d:80:20:1c:29:2e: d5:5c:bd:67:ad:b8:74:9f:91:b3:0c:a0:de:a6:65: 18:f4:b0:da:33:4b:d3:5d:d7:cf:8c:14:27:14:ac: 5a:f3:ec:cb:77:66:60:5e:d4:ad:18:a1:f5:fe:6b: 17:a6:00:05:cb:b4:6c:13:e7:db:4e:ec:d6:89:6a: be:6c:15:7a:c6:26:1b:5f:56:d1:e8:90:33:bf:3a: ac:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:23:DD:A2:05:A8:E8:4B:1A:2B:14:7E:ED:9C:9B:8E:E2:8C:B6:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/76128ce9-79ee-3f1a-9953-cad3bfe282d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.crl X509v3 Authority Key Identifier: keyid:3C:6C:69:39:64:64:92:8F:20:CE:38:CA:26:66:1B:C8:69:F6:52:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer sbgp-ipAddrBlock: critical IPv4: 157.239.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:04:a6:df:10:6e:1b:06:8f:18:e3:d6:a0:73:57:d3:df:9f: c8:a4:4e:4f:5e:2c:55:61:da:f3:3b:91:06:9c:53:4c:1b:07: f0:50:fc:f1:16:ce:1d:0e:fe:5a:8a:1b:ae:0e:2b:00:27:cf: 87:b1:4d:2d:d5:dc:fc:55:a1:18:9f:59:19:32:c5:6b:8d:bc: a5:e5:ac:95:0f:fc:8c:fc:9b:97:ba:36:b7:2a:1d:da:73:f0: 31:92:a2:49:50:a8:df:a2:9e:e5:3a:1b:4e:b0:85:24:c4:e6: 46:b2:3f:e1:fa:43:3e:d4:2d:3a:d0:ef:6a:fe:c4:bd:16:19: 09:af:92:64:51:c0:15:8b:d9:eb:f8:16:ed:53:73:f8:6a:6a: b0:7d:b8:69:0f:77:32:5b:02:3a:11:d6:f9:ae:92:b8:d1:8d: c2:47:46:4d:f0:ce:e1:45:c7:27:32:a6:4d:58:4b:57:a8:65: de:83:43:72:90:cb:fa:b0:cb:e3:d0:79:a7:1b:b4:95:a6:2b: 5e:e8:be:c4:3a:90:1a:ca:ef:77:b9:af:57:fe:7c:47:4e:f8: af:7c:78:5b:51:9a:3c:b2:7a:b4:33:61:96:7e:81:93:76:16: 9b:1d:2b:0b:18:ad:37:e3:42:c5:1b:94:97:b0:4b:01:25:da: 71:d0:68:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErHER98SrzjfG/OFcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRkNGI1YWQtYmJjYS00ZmU5LTg1YjQtOGYyZTVjY2Ex ZDQ3MB4XDTI1MDgwNzEzMDA0MFoXDTI1MTEwNTE0MDA0MFowLzEtMCsGA1UEAxMk MmUwNWFlZWUtYThjZC00YWEzLThiOGEtZWMzYjNkNDY3NDhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8zHZWTZUPRMeJ4Ru2LdfkpWLfo6zM3sBoiO6 BEQHRukmENTgIJAWCmzMpDgZAErPFPuoykj74GftzIZ6wN8t+403FqpJRomj5W7m PMB3a3fuq26NXcPJT75kOfrfmasO02CrrSk737iWWK0ei9tyPHMJrIL+n2Zrrf/C Tl+wtbgp50l2DDgWrme+KrG41NH5QV3lewYgTj147NQSsKWiE8XiD6ORBORj4+kq slhdgCAcKS7VXL1nrbh0n5GzDKDepmUY9LDaM0vTXdfPjBQnFKxa8+zLd2ZgXtSt GKH1/msXpgAFy7RsE+fbTuzWiWq+bBV6xiYbX1bR6JAzvzqsNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCIj3aIFqOhLGisUfu2cm47ijLYdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mZGQ0 YjVhZC1iYmNhLTRmZTktODViNC04ZjJlNWNjYTFkNDcvNzYxMjhjZTktNzllZS0z ZjFhLTk5NTMtY2FkM2JmZTI4MmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZmRkNGI1YWQtYmJjYS00ZmU5LTg1 YjQtOGYyZTVjY2ExZDQ3L2ZkZDRiNWFkLWJiY2EtNGZlOS04NWI0LThmMmU1Y2Nh MWQ0Ny5jcmwwHwYDVR0jBBgwFoAUPGxpOWRkko8gzjjKJmYbyGn2UjwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9mZGQ0YjVhZC1iYmNhLTRmZTktODViNC04ZjJl NWNjYTFkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBne8MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYEpt8QbhsGjxjj1qBzV9Pfn8ikTk9eLFVh2vM7kQacU0wbB/BQ/PEW zh0O/lqKG64OKwAnz4exTS3V3PxVoRifWRkyxWuNvKXlrJUP/Iz8m5e6NrcqHdpz 8DGSoklQqN+inuU6G06whSTE5kayP+H6Qz7ULTrQ72r+xL0WGQmvkmRRwBWL2ev4 Fu1Tc/hqarB9uGkPdzJbAjoR1vmukrjRjcJHRk3wzuFFxycypk1YS1eoZd6DQ3KQ y/qwy+PQeacbtJWmK17ovsQ6kBrK73e5r1f+fEdO+K98eFtRmjyyerQzYZZ+gZN2 FpsdKwsYrTfjQsUblJewSwEl2nHQaCE= -----END CERTIFICATE-----Generated at Sat Aug 23 06:54:07 2025 by rpki-client