$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/77008fd0-bbe3-3d06-b0e9-c02c39f6fec6.roa File: 77008fd0-bbe3-3d06-b0e9-c02c39f6fec6.roa (raw, json) Hash identifier: gyQWHt7JWXJV7F1Jb0jDMrA6/9CIz1AFYOP43wPSV34= Subject key identifier: A8:3B:3F:D8:65:FE:ED:17:74:0D:68:C0:98:14:66:18:88:05:1F:73 Certificate issuer: /CN=44bc2b87-223c-4280-a9b3-634e66111eeb Certificate serial: 010D0C9F4328584AECC11AEE587E66CAB36DA400 Authority key identifier: 3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/77008fd0-bbe3-3d06-b0e9-c02c39f6fec6.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 397423 IP address blocks: 192.154.224.0/21 maxlen: 24 192.158.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:1a:ee:58:7e:66:ca:b3:6d:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44bc2b87-223c-4280-a9b3-634e66111eeb Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=7e2044db-cae0-474e-a8f2-1b70f97d2a54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:8f:55:34:31:78:97:af:4b:82:a3:0f:9d:02: c1:d0:cb:68:ae:2a:c7:d7:e1:07:ec:9e:b5:92:d8: 1a:4a:10:1c:9c:2e:13:bd:20:97:e5:b5:54:5e:f1: a3:2e:94:26:3a:d9:b3:4d:d2:37:3a:5c:8f:36:fc: 32:31:cf:fb:41:50:7a:ae:04:f1:6d:5d:06:82:bc: 4f:98:36:d6:6b:f4:bd:9d:10:36:0d:6f:53:f3:d4: 43:d1:02:33:e9:1e:40:10:a0:c8:54:44:0c:31:f2: 29:ff:83:56:29:e6:26:44:bc:c0:40:18:6c:c3:4f: 3c:ab:e9:9a:d9:53:1e:05:c0:3d:f3:77:af:5c:1f: 1d:68:ac:cf:bf:83:6f:b9:b6:7c:7b:f4:34:5f:61: 0f:30:49:99:54:d1:26:62:77:e5:1d:06:51:1d:6a: 7e:43:54:ab:41:77:f7:30:ba:6b:6b:70:45:56:15: e1:e3:19:95:a1:af:69:34:9a:59:d5:cf:15:50:83: 91:3c:c2:4f:de:96:ce:50:a2:f8:28:2f:87:12:dd: 74:16:9a:18:38:3e:c9:64:10:54:ba:1e:c8:ee:fa: d4:b3:a7:fa:f2:84:25:36:9c:78:cb:47:a8:a6:51: a6:39:cb:c7:e4:cd:0f:57:7e:30:ee:55:16:5d:11: c6:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:3B:3F:D8:65:FE:ED:17:74:0D:68:C0:98:14:66:18:88:05:1F:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/77008fd0-bbe3-3d06-b0e9-c02c39f6fec6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl X509v3 Authority Key Identifier: keyid:3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer sbgp-ipAddrBlock: critical IPv4: 192.154.224.0/21 192.158.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:8d:b2:47:69:10:a8:ae:5a:e9:ff:63:6b:03:bb:a3:4a:c2: 19:31:9d:e6:69:40:9c:fb:e0:f2:57:c8:a6:88:b7:2d:6c:6c: ee:1a:17:78:39:71:a8:12:b8:b3:e8:b2:62:a8:69:1a:7f:89: 71:47:e2:ab:dc:38:54:2e:50:83:96:93:77:0f:6f:6a:e9:98: bb:f9:82:0e:a6:dd:d6:bf:ac:71:fc:e4:ea:15:25:91:c8:f1: ba:b1:03:1c:cb:3c:e7:4a:c1:dd:a5:15:7b:03:4a:4f:b0:63: a0:a9:33:fc:f2:9e:3c:16:ba:20:e2:83:4a:b5:82:8b:34:9d: a0:ca:13:60:0d:6d:8a:a7:a3:5d:6e:73:ed:28:fa:36:85:6e: 33:0e:d5:51:df:d9:89:2b:e0:80:97:01:2f:81:86:b4:6f:23: 8c:fb:7d:06:d5:88:c4:1a:26:54:f4:ef:75:a7:04:54:6f:16: 1d:7b:60:2a:45:54:08:d4:fc:ac:a0:c6:27:af:72:e2:95:77: 96:4d:2a:29:1d:d1:6f:0e:c6:91:92:d4:8c:ad:8e:d4:8d:ef: 7a:a4:4d:16:d4:47:f3:41:7b:73:7e:65:c0:bc:07:cb:dd:ce: 9e:0f:88:a7:77:7e:f8:70:87:f5:0f:9e:d8:3d:20:2c:1c:7b: c1:c9:7e:c0 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWErswRruWH5myrNtpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDRiYzJiODctMjIzYy00MjgwLWE5YjMtNjM0ZTY2MTEx ZWViMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk N2UyMDQ0ZGItY2FlMC00NzRlLWE4ZjItMWI3MGY5N2QyYTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1o9VNDF4l69LgqMPnQLB0MtorirH1+EH7J61 ktgaShAcnC4TvSCX5bVUXvGjLpQmOtmzTdI3OlyPNvwyMc/7QVB6rgTxbV0GgrxP mDbWa/S9nRA2DW9T89RD0QIz6R5AEKDIVEQMMfIp/4NWKeYmRLzAQBhsw088q+ma 2VMeBcA983evXB8daKzPv4NvubZ8e/Q0X2EPMEmZVNEmYnflHQZRHWp+Q1SrQXf3 MLpra3BFVhXh4xmVoa9pNJpZ1c8VUIORPMJP3pbOUKL4KC+HEt10FpoYOD7JZBBU uh7I7vrUs6f68oQlNpx4y0eoplGmOcvH5M0PV34w7lUWXRHG4QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKg7P9hl/u0XdA1owJgUZhiIBR9zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NGJj MmI4Ny0yMjNjLTQyODAtYTliMy02MzRlNjYxMTFlZWIvNzcwMDhmZDAtYmJlMy0z ZDA2LWIwZTktYzAyYzM5ZjZmZWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDRiYzJiODctMjIzYy00MjgwLWE5 YjMtNjM0ZTY2MTExZWViLzQ0YmMyYjg3LTIyM2MtNDI4MC1hOWIzLTYzNGU2NjEx MWVlYi5jcmwwHwYDVR0jBBgwFoAUPxjW1UuMY2iuDtn3fpgQlOXg7XowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NGJjMmI4Ny0yMjNjLTQyODAtYTliMy02MzRl NjYxMTFlZWIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDwJrgAwQE wJ7gMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEONskdpEKiuWun/Y2sDu6NKwhkxneZpQJz74PJXyKaIty1s bO4aF3g5cagSuLPosmKoaRp/iXFH4qvcOFQuUIOWk3cPb2rpmLv5gg6m3da/rHH8 5OoVJZHI8bqxAxzLPOdKwd2lFXsDSk+wY6CpM/zynjwWuiDig0q1gos0naDKE2AN bYqno11uc+0o+jaFbjMO1VHf2Ykr4ICXAS+BhrRvI4z7fQbViMQaJlT073WnBFRv Fh17YCpFVAjU/KygxievcuKVd5ZNKikd0W8OxpGS1IytjtSN73qkTRbUR/NBe3N+ ZcC8B8vdzp4PiKd3fvhwh/UPntg9ICwce8HJfsA= -----END CERTIFICATE-----Generated at Sat Aug 23 10:09:07 2025 by rpki-client