$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/5aa2b6e2-03f3-3bfb-be2b-de257658ed9d.roa File: 5aa2b6e2-03f3-3bfb-be2b-de257658ed9d.roa (raw, json) Hash identifier: qptQkND8rO4enUteT0PhScvIS04C59koy0oio6PPt5U= Subject key identifier: 3A:DE:99:4A:A1:B2:8D:7E:19:AD:83:F2:23:CB:78:A5:A0:C3:AC:F2 Certificate issuer: /CN=ee74c799-7d4c-4df3-b711-296c34338ef5 Certificate serial: 010D0C9F4328584A78E5F46D88D1B60D473FF720 Authority key identifier: 6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/5aa2b6e2-03f3-3bfb-be2b-de257658ed9d.roa Signing time: Thu 10 Jul 2025 13:01:02 +0000 ROA not before: Thu 10 Jul 2025 13:01:02 +0000 ROA not after: Wed 08 Oct 2025 13:01:02 +0000 asID: 845 IP address blocks: 199.96.86.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:e5:f4:6d:88:d1:b6:0d:47:3f:f7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee74c799-7d4c-4df3-b711-296c34338ef5 Validity Not Before: Jul 10 13:01:02 2025 GMT Not After : Oct 8 13:01:02 2025 GMT Subject: CN=fecb5cab-8d0c-4209-98fc-088530b5ce45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:7c:9e:3c:8a:67:9b:d4:86:f3:a8:0b:7e:62: 36:a3:a2:a1:91:65:aa:37:3a:b1:4b:74:2e:a0:77: c1:4c:dc:14:5b:9a:0a:4d:c9:da:b5:63:a0:9a:07: b0:c3:2c:6a:68:1b:f0:20:03:6b:75:02:8e:52:3c: 26:5c:95:ea:66:91:17:17:40:24:ec:1b:72:d0:d9: b3:69:53:81:c8:02:74:88:57:06:b2:70:e2:75:e9: 3b:ea:79:69:37:69:6d:89:5d:1e:64:64:47:37:46: 1f:df:72:a9:db:07:84:95:fb:af:4a:bf:4f:8f:d2: 1b:24:32:54:a5:dc:59:b0:6a:05:d8:27:db:29:2f: 4c:13:bb:ad:bf:ff:b2:37:fe:e7:1c:f3:d3:84:82: 57:e8:8d:a9:7c:cf:d1:88:6f:52:ed:ea:bc:c2:5c: 6a:d1:c8:bb:c7:5d:f2:d4:5d:c2:c8:8f:15:93:3e: 2e:fb:41:0e:ab:de:31:8d:72:9a:eb:18:ae:f5:c7: f9:dd:89:b3:28:e6:a3:0d:16:ef:69:c8:5f:bd:4b: ea:09:96:57:e4:30:65:06:f5:2a:bd:30:9e:83:e9: 7d:dd:9d:50:d2:15:62:0f:18:45:11:7a:a8:a1:6e: 24:86:00:38:7b:01:3f:74:00:58:7d:40:5a:5b:81: 6e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:DE:99:4A:A1:B2:8D:7E:19:AD:83:F2:23:CB:78:A5:A0:C3:AC:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/5aa2b6e2-03f3-3bfb-be2b-de257658ed9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl X509v3 Authority Key Identifier: keyid:6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer sbgp-ipAddrBlock: critical IPv4: 199.96.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:8f:fe:9a:c1:3e:79:79:d3:87:d7:4a:12:37:d6:a8:03:4d: 27:23:1a:ce:08:1c:88:d9:bf:f1:0c:85:b5:d1:ed:c4:b9:c5: 4d:eb:7a:22:66:4c:72:52:aa:5a:99:e7:ca:c1:ab:f7:4b:f1: b1:ba:22:2e:9c:f2:9d:c0:f0:4d:e5:e6:7c:40:db:f7:aa:a5: a8:8f:74:04:c7:67:09:31:a5:80:9b:bc:61:12:0b:c9:27:00: 19:63:5e:7d:b6:51:80:29:23:f7:24:27:5d:51:11:10:3a:12: f5:f4:8e:36:bd:f3:ed:f8:7f:88:1c:c9:e6:78:87:2a:4f:e5: d9:e8:cd:3f:ae:09:13:ed:1e:74:ea:0b:10:d2:f2:fa:50:a2: f6:3f:60:ee:67:64:cb:84:40:c7:84:c4:92:27:be:0d:01:f6: 65:db:9d:3e:cf:0e:25:45:b7:18:f3:3b:6f:83:87:e1:64:e2: d8:b9:a6:80:af:0d:42:38:c1:9c:4e:5b:00:4d:20:5d:a7:a4: 8d:fc:e6:3d:83:66:a9:93:86:b9:5a:12:0d:22:d1:77:f7:81: c2:ba:cf:ae:f4:05:4b:73:47:2f:42:62:a2:ab:1b:0c:27:9d: 3f:11:f0:05:16:6d:18:6c:3c:ac:31:21:c1:96:b5:27:de:df: 4f:e5:f9:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp45fRtiNG2DUc/9yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWU3NGM3OTktN2Q0Yy00ZGYzLWI3MTEtMjk2YzM0MzM4 ZWY1MB4XDTI1MDcxMDEzMDEwMloXDTI1MTAwODEzMDEwMlowLzEtMCsGA1UEAxMk ZmVjYjVjYWItOGQwYy00MjA5LTk4ZmMtMDg4NTMwYjVjZTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHyePIpnm9SG86gLfmI2o6KhkWWqNzqxS3Qu oHfBTNwUW5oKTcnatWOgmgewwyxqaBvwIANrdQKOUjwmXJXqZpEXF0Ak7Bty0Nmz aVOByAJ0iFcGsnDidek76nlpN2ltiV0eZGRHN0Yf33Kp2weElfuvSr9Pj9IbJDJU pdxZsGoF2CfbKS9ME7utv/+yN/7nHPPThIJX6I2pfM/RiG9S7eq8wlxq0ci7x13y 1F3CyI8Vkz4u+0EOq94xjXKa6xiu9cf53YmzKOajDRbvachfvUvqCZZX5DBlBvUq vTCeg+l93Z1Q0hViDxhFEXqooW4khgA4ewE/dABYfUBaW4FuQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDremUqhso1+Ga2D8iPLeKWgw6zyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lZTc0 Yzc5OS03ZDRjLTRkZjMtYjcxMS0yOTZjMzQzMzhlZjUvNWFhMmI2ZTItMDNmMy0z YmZiLWJlMmItZGUyNTc2NThlZDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZWU3NGM3OTktN2Q0Yy00ZGYzLWI3 MTEtMjk2YzM0MzM4ZWY1L2VlNzRjNzk5LTdkNGMtNGRmMy1iNzExLTI5NmMzNDMz OGVmNS5jcmwwHwYDVR0jBBgwFoAUbNfgDzg2OujJMgu3w5YFtxms98QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lZTc0Yzc5OS03ZDRjLTRkZjMtYjcxMS0yOTZj MzQzMzhlZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx2BWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALaP/prBPnl504fXShI31qgDTScjGs4IHIjZv/EMhbXR7cS5xU3reiJm THJSqlqZ58rBq/dL8bG6Ii6c8p3A8E3l5nxA2/eqpaiPdATHZwkxpYCbvGESC8kn ABljXn22UYApI/ckJ11RERA6EvX0jja98+34f4gcyeZ4hypP5dnozT+uCRPtHnTq CxDS8vpQovY/YO5nZMuEQMeExJInvg0B9mXbnT7PDiVFtxjzO2+Dh+Fk4ti5poCv DUI4wZxOWwBNIF2npI385j2DZqmThrlaEg0i0Xf3gcK6z670BUtzRy9CYqKrGwwn nT8R8AUWbRhsPKwxIcGWtSfe30/l+TY= -----END CERTIFICATE-----Generated at Sun Jul 20 13:02:49 2025 by rpki-client