$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/8772e1e2-8469-31f4-ba7a-299142b35b0c.roa File: 8772e1e2-8469-31f4-ba7a-299142b35b0c.roa (raw, json) Hash identifier: Jwniy2TXEKP4lhWlYKKj3Upz1UFZ8t1y/aZnf6Q6iyA= Subject key identifier: 66:92:99:D8:8C:01:B4:BB:B9:B9:7F:1F:E6:74:B9:88:80:66:C9:EA Certificate issuer: /CN=9050423a-b7ae-4879-a880-ea3be6e193a8 Certificate serial: 010D0C9F4328584AA160CFA9AD94ACF82EE1ED80 Authority key identifier: E7:C5:42:5E:A0:DF:33:80:77:AB:80:B8:30:18:49:53:42:A5:B6:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/8772e1e2-8469-31f4-ba7a-299142b35b0c.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 22188 IP address blocks: 168.151.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:60:cf:a9:ad:94:ac:f8:2e:e1:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9050423a-b7ae-4879-a880-ea3be6e193a8 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=541ec1fa-729a-448e-9968-0d3c05657153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:23:ac:0e:bb:56:19:5a:cb:cd:e5:2e:f7:a1: 73:dd:99:9d:3e:fe:e2:40:82:0b:1a:18:20:0b:b6: 29:71:ef:03:e1:23:a8:38:eb:e9:2c:0d:d5:1a:d0: 42:6d:4a:b8:c4:89:47:0a:d6:7e:9b:54:1c:bd:d7: e7:b1:6c:c2:7e:07:08:bf:e0:9e:0c:39:a6:72:76: 78:10:5c:71:fd:d8:6d:72:00:74:25:2b:fa:31:8d: c0:fd:c2:4a:33:a0:af:b0:7a:48:5f:85:15:91:a3: e0:1f:e7:3a:7f:85:f3:24:9f:9f:dd:2b:36:54:e9: 9d:e6:6b:25:6e:85:4b:ac:94:63:a8:e5:d2:61:df: 1f:a8:a9:05:0d:8e:f5:74:93:b3:7c:43:75:d8:15: 33:e9:7a:d4:40:97:fb:0a:0f:4d:1e:2e:f2:57:18: b8:6d:b8:ea:e9:b1:b7:0d:d8:26:07:d8:38:b1:4d: f1:14:9c:38:05:7b:47:3f:81:41:a0:7c:28:df:68: b3:dd:98:f4:a5:31:e4:59:37:ed:f0:d5:b4:57:97: 00:9c:6b:37:e9:a4:2a:b5:f4:32:9e:92:b0:a4:8f: e6:33:13:5f:d8:e9:94:cb:e3:9e:a7:b7:44:4c:09: 57:23:97:72:70:f5:2a:2e:ce:b4:72:37:38:e3:4f: 2d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:92:99:D8:8C:01:B4:BB:B9:B9:7F:1F:E6:74:B9:88:80:66:C9:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/8772e1e2-8469-31f4-ba7a-299142b35b0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.crl X509v3 Authority Key Identifier: keyid:E7:C5:42:5E:A0:DF:33:80:77:AB:80:B8:30:18:49:53:42:A5:B6:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer sbgp-ipAddrBlock: critical IPv4: 168.151.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:0e:9f:e3:a8:9a:6f:f0:7c:72:d3:20:29:5b:a9:89:eb:82: 95:89:76:e6:ca:12:46:6f:ed:59:bf:04:30:8a:7c:26:60:39: 8b:57:3a:65:c2:67:48:0b:28:ea:c5:7a:d0:14:74:55:69:c3: c0:79:77:23:e5:52:cb:d5:97:17:cd:69:90:0b:b2:9a:99:f8: b5:55:09:25:14:cf:64:e7:5f:c2:58:f3:27:ab:02:59:76:57: b6:ab:a2:5a:1e:0b:c2:20:dd:93:40:f4:bc:32:76:0f:32:96: bc:a7:39:6b:96:52:4d:be:96:6b:31:85:6b:ea:33:66:bd:cc: 03:ef:12:f8:42:90:54:9e:3b:3a:a6:d1:4a:ec:ef:fb:0e:55: 7e:22:fb:f4:c8:37:7e:40:82:bf:78:b7:16:4d:21:f1:b1:13: f2:b3:09:f9:78:f6:4b:cb:0e:14:70:ba:ff:e8:b7:b4:5f:9d: e4:e0:44:b0:2a:41:50:12:e2:c6:e9:35:3f:72:17:93:3b:46: f1:bf:da:04:a2:c4:d0:96:5e:73:c0:c3:58:2b:66:13:dd:29: c0:4a:f7:41:bf:42:c4:6d:65:cb:12:36:2e:1f:84:2d:f7:91: 6e:a9:e7:70:88:b0:bd:d5:c3:f8:f7:95:b7:04:06:a8:ab:11: ff:98:80:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYM+prZSs+C7h7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA1MDQyM2EtYjdhZS00ODc5LWE4ODAtZWEzYmU2ZTE5 M2E4MB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk NTQxZWMxZmEtNzI5YS00NDhlLTk5NjgtMGQzYzA1NjU3MTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCOsDrtWGVrLzeUu96Fz3ZmdPv7iQIILGhgg C7Ypce8D4SOoOOvpLA3VGtBCbUq4xIlHCtZ+m1QcvdfnsWzCfgcIv+CeDDmmcnZ4 EFxx/dhtcgB0JSv6MY3A/cJKM6CvsHpIX4UVkaPgH+c6f4XzJJ+f3Ss2VOmd5msl boVLrJRjqOXSYd8fqKkFDY71dJOzfEN12BUz6XrUQJf7Cg9NHi7yVxi4bbjq6bG3 DdgmB9g4sU3xFJw4BXtHP4FBoHwo32iz3Zj0pTHkWTft8NW0V5cAnGs36aQqtfQy npKwpI/mMxNf2OmUy+Oep7dETAlXI5dycPUqLs60cjc4408tPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGaSmdiMAbS7ubl/H+Z0uYiAZsnqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDUw NDIzYS1iN2FlLTQ4NzktYTg4MC1lYTNiZTZlMTkzYTgvODc3MmUxZTItODQ2OS0z MWY0LWJhN2EtMjk5MTQyYjM1YjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTA1MDQyM2EtYjdhZS00ODc5LWE4 ODAtZWEzYmU2ZTE5M2E4LzkwNTA0MjNhLWI3YWUtNDg3OS1hODgwLWVhM2JlNmUx OTNhOC5jcmwwHwYDVR0jBBgwFoAU58VCXqDfM4B3q4C4MBhJU0KltnYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDUwNDIzYS1iN2FlLTQ4NzktYTg4MC1lYTNi ZTZlMTkzYTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqJcKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsOn+Oomm/wfHLTIClbqYnrgpWJdubKEkZv7Vm/BDCKfCZgOYtXOmXC Z0gLKOrFetAUdFVpw8B5dyPlUsvVlxfNaZALspqZ+LVVCSUUz2TnX8JY8yerAll2 V7aroloeC8Ig3ZNA9Lwydg8ylrynOWuWUk2+lmsxhWvqM2a9zAPvEvhCkFSeOzqm 0Urs7/sOVX4i+/TIN35Agr94txZNIfGxE/KzCfl49kvLDhRwuv/ot7RfneTgRLAq QVAS4sbpNT9yF5M7RvG/2gSixNCWXnPAw1grZhPdKcBK90G/QsRtZcsSNi4fhC33 kW6p53CIsL3Vw/j3lbcEBqirEf+YgKs= -----END CERTIFICATE-----Generated at Sun Jul 27 04:58:11 2025 by rpki-client