$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/887cf1c3-7f40-3dcf-a528-1de80a9f3bc0.roa File: 887cf1c3-7f40-3dcf-a528-1de80a9f3bc0.roa (raw, json) Hash identifier: H+j8eGpc+oCsWjoRkzSOq3zAepU1s0hx1uFXBX0ghVc= Subject key identifier: 58:AB:06:1D:25:D8:4A:95:DC:F7:B0:19:55:40:CC:0B:92:85:14:9B Certificate issuer: /CN=888d6cc7-0aa2-467e-9649-a453942c2d85 Certificate serial: 010D0C9F4328584A73D71FC8DDD3D3C1810CE640 Authority key identifier: 85:9E:C9:BC:47:3A:4F:8D:1F:C8:6B:8F:48:E7:B2:AA:BE:7A:56:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/887cf1c3-7f40-3dcf-a528-1de80a9f3bc0.roa Signing time: Tue 08 Jul 2025 17:32:10 +0000 ROA not before: Tue 08 Jul 2025 17:32:10 +0000 ROA not after: Mon 06 Oct 2025 17:32:10 +0000 asID: 53356 IP address blocks: 199.7.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/888d6cc7-0aa2-467e-9649-a453942c2d85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/888d6cc7-0aa2-467e-9649-a453942c2d85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:d7:1f:c8:dd:d3:d3:c1:81:0c:e6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=888d6cc7-0aa2-467e-9649-a453942c2d85 Validity Not Before: Jul 8 17:32:10 2025 GMT Not After : Oct 6 17:32:10 2025 GMT Subject: CN=ca710259-ecb1-4826-b16b-06feb1275cb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:3d:36:20:92:a4:35:3d:a8:a1:10:5d:9c:24: a0:cd:b8:48:b1:0a:dd:fc:d4:51:72:e9:5b:77:a7: 4e:53:f1:fe:99:2c:f3:a8:a8:37:fa:b1:39:0e:cf: 6f:a5:37:ac:f0:7b:fb:73:3b:58:2f:1c:1d:cb:85: 56:8f:9e:ad:d4:f2:10:79:5a:71:d5:dd:6b:3e:73: f4:e9:8e:15:5a:69:e7:67:92:0d:e6:ce:28:1c:f7: 58:f4:e7:e8:cc:37:71:97:5f:af:8d:81:16:b6:ca: a9:f7:1c:83:54:aa:a6:78:b8:f2:c6:87:f5:cd:a5: 1a:c1:5e:55:ff:ac:89:6f:89:16:47:05:cc:d0:ee: ab:52:09:d7:13:91:fa:ae:3e:80:55:31:a4:4c:40: 71:7d:1f:9b:a4:36:2e:4b:a4:9b:7a:6f:7e:7a:50: 8e:f4:69:41:a9:f5:87:d2:c5:f0:2e:d0:c2:ee:a4: 2c:f7:d3:12:af:e2:68:29:e9:1d:56:6c:27:67:b7: 1f:7a:b5:03:e6:4f:aa:80:5d:03:84:63:6f:f4:15: bc:f5:b2:8f:84:77:78:a2:6f:bd:72:be:cf:32:cf: aa:52:8f:4d:46:34:ba:8c:0b:f6:1c:e7:1b:29:a1: 64:26:b1:83:cf:42:b7:d7:32:db:8e:23:2f:75:7c: 52:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:AB:06:1D:25:D8:4A:95:DC:F7:B0:19:55:40:CC:0B:92:85:14:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/887cf1c3-7f40-3dcf-a528-1de80a9f3bc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/888d6cc7-0aa2-467e-9649-a453942c2d85.crl X509v3 Authority Key Identifier: keyid:85:9E:C9:BC:47:3A:4F:8D:1F:C8:6B:8F:48:E7:B2:AA:BE:7A:56:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85.cer sbgp-ipAddrBlock: critical IPv4: 199.7.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:90:7e:ca:11:01:8b:1a:2c:5f:f1:5e:ee:00:9e:37:c2:6f: 1b:c4:ce:1e:b5:02:b7:b9:ae:18:9d:a3:c8:d0:1f:27:fe:6e: 57:5e:09:cd:e1:a5:97:2d:2d:db:04:ab:d2:d3:22:3d:84:47: 91:f7:d9:e5:86:b6:b3:80:97:44:33:89:9d:11:c8:6d:96:42: a8:44:14:92:24:56:f0:d8:da:97:1f:d2:ba:ea:6c:9b:07:8c: 46:48:bf:be:c7:1e:8b:43:ed:88:a7:dc:86:67:c1:92:52:76: 13:6d:60:21:15:25:32:ff:27:63:2f:5a:b1:1d:dc:aa:d7:1b: 52:f8:d4:00:77:0e:93:3e:3b:54:e6:40:91:de:e3:7e:99:c4: ca:39:35:a0:c7:8d:39:99:13:af:c0:9d:1f:8c:21:ce:9f:07: 8e:a3:84:f0:92:0c:dc:66:7d:5e:26:2d:09:85:bf:79:db:13: f6:4f:b1:7e:58:d8:b1:6a:d2:af:53:a2:4b:82:e2:ef:31:9b: e1:53:03:fc:4e:49:95:3f:42:67:e4:17:77:aa:c7:de:7a:66: c4:4a:1d:78:4a:12:f3:45:f6:c9:c5:ce:85:e2:a9:68:f8:eb: b8:5c:e9:5d:38:08:13:5a:2c:44:f9:dd:e9:a7:2a:fe:d7:6a: 57:34:61:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpz1x/I3dPTwYEM5kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg4ZDZjYzctMGFhMi00NjdlLTk2NDktYTQ1Mzk0MmMy ZDg1MB4XDTI1MDcwODE3MzIxMFoXDTI1MTAwNjE3MzIxMFowLzEtMCsGA1UEAxMk Y2E3MTAyNTktZWNiMS00ODI2LWIxNmItMDZmZWIxMjc1Y2I2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlD02IJKkNT2ooRBdnCSgzbhIsQrd/NRRculb d6dOU/H+mSzzqKg3+rE5Ds9vpTes8Hv7cztYLxwdy4VWj56t1PIQeVpx1d1rPnP0 6Y4VWmnnZ5IN5s4oHPdY9OfozDdxl1+vjYEWtsqp9xyDVKqmeLjyxof1zaUawV5V /6yJb4kWRwXM0O6rUgnXE5H6rj6AVTGkTEBxfR+bpDYuS6Sbem9+elCO9GlBqfWH 0sXwLtDC7qQs99MSr+JoKekdVmwnZ7cferUD5k+qgF0DhGNv9BW89bKPhHd4om+9 cr7PMs+qUo9NRjS6jAv2HOcbKaFkJrGDz0K31zLbjiMvdXxSIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFirBh0l2EqV3PewGVVAzAuShRSbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84ODhk NmNjNy0wYWEyLTQ2N2UtOTY0OS1hNDUzOTQyYzJkODUvODg3Y2YxYzMtN2Y0MC0z ZGNmLWE1MjgtMWRlODBhOWYzYmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODg4ZDZjYzctMGFhMi00NjdlLTk2 NDktYTQ1Mzk0MmMyZDg1Lzg4OGQ2Y2M3LTBhYTItNDY3ZS05NjQ5LWE0NTM5NDJj MmQ4NS5jcmwwHwYDVR0jBBgwFoAUhZ7JvEc6T40fyGuPSOeyqr56VrIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84ODhkNmNjNy0wYWEyLTQ2N2UtOTY0OS1hNDUz OTQyYzJkODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxweNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKSQfsoRAYsaLF/xXu4AnjfCbxvEzh61Are5rhido8jQHyf+bldeCc3h pZctLdsEq9LTIj2ER5H32eWGtrOAl0QziZ0RyG2WQqhEFJIkVvDY2pcf0rrqbJsH jEZIv77HHotD7Yin3IZnwZJSdhNtYCEVJTL/J2MvWrEd3KrXG1L41AB3DpM+O1Tm QJHe436ZxMo5NaDHjTmZE6/AnR+MIc6fB46jhPCSDNxmfV4mLQmFv3nbE/ZPsX5Y 2LFq0q9TokuC4u8xm+FTA/xOSZU/QmfkF3eqx956ZsRKHXhKEvNF9snFzoXiqWj4 67hc6V04CBNaLET53emnKv7Xalc0YSU= -----END CERTIFICATE-----Generated at Sun Jul 20 14:14:05 2025 by rpki-client