$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/7782712d-1e27-3c4f-bb3f-01c6dad76529.roa File: 7782712d-1e27-3c4f-bb3f-01c6dad76529.roa (raw, json) Hash identifier: 9EA95F7GBln0pWftKTxdoYmG2CcGFFgA2ENj7qv19G0= Subject key identifier: 10:EF:3F:EF:BC:8E:AD:85:24:86:52:89:3F:E1:50:45:71:32:BB:F9 Certificate issuer: /CN=2a71f00e-0200-48df-9cb4-008df9a4a854 Certificate serial: 010D0C9F4328584B12EE2AEA6367A7F2BA52D5A0 Authority key identifier: 38:0D:64:C0:FC:18:06:FB:A2:13:99:2A:01:58:BD:19:46:77:76:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/7782712d-1e27-3c4f-bb3f-01c6dad76529.roa Signing time: Wed 03 Sep 2025 17:12:08 +0000 ROA not before: Wed 03 Sep 2025 17:12:08 +0000 ROA not after: Tue 02 Dec 2025 18:12:08 +0000 asID: 22855 IP address blocks: 199.230.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/2a71f00e-0200-48df-9cb4-008df9a4a854.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/2a71f00e-0200-48df-9cb4-008df9a4a854.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Sep 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:12:ee:2a:ea:63:67:a7:f2:ba:52:d5:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a71f00e-0200-48df-9cb4-008df9a4a854 Validity Not Before: Sep 3 17:12:08 2025 GMT Not After : Dec 2 18:12:08 2025 GMT Subject: CN=cc82450c-d58a-42fb-9d7f-b7daf2e47e92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:af:7c:d7:69:87:4b:d7:18:3a:04:a8:f4:70: b8:fb:a4:09:70:11:1d:1f:ae:49:9a:67:33:e0:0c: 6b:d7:5f:b9:35:30:c7:aa:35:a8:35:2a:8c:65:7e: c5:3a:6a:11:1f:ec:c8:83:04:5e:6b:bd:8d:ae:a7: d5:8c:a3:ea:77:37:4a:5c:f5:c6:53:0a:07:a4:91: 57:9a:58:3a:50:1a:f8:2d:69:ac:50:8d:b4:30:71: 50:45:00:18:33:f9:59:f5:ad:84:57:1f:e9:2b:51: d1:97:dc:54:e5:7a:1b:3d:51:83:9b:b5:c8:1b:33: 21:85:63:18:1b:1f:e5:10:cb:a4:79:89:08:40:b3: df:5d:3b:51:fb:27:d9:63:ad:26:a2:f7:73:78:dc: 65:de:55:5d:cc:a5:3c:0d:32:c0:80:fb:95:71:ff: fa:a0:5a:99:6d:c9:94:87:8b:4d:e8:f6:11:2d:51: 2d:97:bb:a7:37:e3:d7:4c:ac:95:f6:27:c0:ff:f1: b0:a2:81:ee:89:d1:c5:1f:28:bf:37:ed:4f:cc:c3: df:7f:80:13:dc:37:f4:15:30:b6:25:60:aa:90:4e: f8:cb:15:3a:a2:ef:a3:97:ea:b0:97:2e:59:8d:04: 84:fd:eb:b4:e8:10:61:53:a6:f0:c0:83:e1:bf:77: 66:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:EF:3F:EF:BC:8E:AD:85:24:86:52:89:3F:E1:50:45:71:32:BB:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/7782712d-1e27-3c4f-bb3f-01c6dad76529.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/2a71f00e-0200-48df-9cb4-008df9a4a854.crl X509v3 Authority Key Identifier: keyid:38:0D:64:C0:FC:18:06:FB:A2:13:99:2A:01:58:BD:19:46:77:76:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854.cer sbgp-ipAddrBlock: critical IPv4: 199.230.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:a3:1b:dd:52:75:a0:a2:7f:e6:fb:ad:ad:4f:4c:e1:cc:09: f4:c1:ec:15:9d:2f:f3:ba:30:df:5f:23:47:c1:c0:fc:a5:d1: aa:f1:47:90:94:dc:a1:f7:cc:82:c6:a3:13:39:52:0c:e1:cd: b3:f1:dc:11:c4:7d:19:4f:98:5c:58:f5:1d:dd:0d:fc:52:cf: 1c:1d:c3:21:00:5e:aa:14:fb:1a:e9:d9:79:62:2e:87:69:3d: ff:77:4e:24:f5:a1:75:47:8d:e7:fe:ae:eb:19:0a:95:27:fb: a5:44:73:84:a8:c3:91:66:c1:2c:bc:1f:3c:60:dd:96:cc:c6: 65:e4:84:3b:74:7e:03:9d:09:f6:89:8a:c2:90:8b:b3:12:67: 52:36:74:9e:e0:4e:55:25:15:05:7b:00:f8:2c:22:c2:ce:2a: a1:73:5f:59:3c:22:5f:09:c9:c4:8a:c5:92:fc:d1:6d:70:ee: 58:ba:6c:25:a7:01:48:f6:eb:81:f3:57:32:28:4e:b2:d0:0e: d9:c8:2a:a1:b1:0a:56:b2:83:46:71:f2:79:51:b0:c4:9f:0e: 69:3d:93:48:61:e2:7e:97:b0:ca:b7:cc:43:47:64:2a:60:f6: 61:42:d9:05:76:d8:91:e5:e3:0a:93:84:9b:a0:ae:c5:b6:53: 74:d1:90:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsS7irqY2en8rpS1aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE3MWYwMGUtMDIwMC00OGRmLTljYjQtMDA4ZGY5YTRh ODU0MB4XDTI1MDkwMzE3MTIwOFoXDTI1MTIwMjE4MTIwOFowLzEtMCsGA1UEAxMk Y2M4MjQ1MGMtZDU4YS00MmZiLTlkN2YtYjdkYWYyZTQ3ZTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlq9812mHS9cYOgSo9HC4+6QJcBEdH65Jmmcz 4Axr11+5NTDHqjWoNSqMZX7FOmoRH+zIgwRea72NrqfVjKPqdzdKXPXGUwoHpJFX mlg6UBr4LWmsUI20MHFQRQAYM/lZ9a2EVx/pK1HRl9xU5XobPVGDm7XIGzMhhWMY Gx/lEMukeYkIQLPfXTtR+yfZY60movdzeNxl3lVdzKU8DTLAgPuVcf/6oFqZbcmU h4tN6PYRLVEtl7unN+PXTKyV9ifA//GwooHuidHFHyi/N+1PzMPff4AT3Df0FTC2 JWCqkE74yxU6ou+jl+qwly5ZjQSE/eu06BBhU6bwwIPhv3dmlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBDvP++8jq2FJIZSiT/hUEVxMrv5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yYTcx ZjAwZS0wMjAwLTQ4ZGYtOWNiNC0wMDhkZjlhNGE4NTQvNzc4MjcxMmQtMWUyNy0z YzRmLWJiM2YtMDFjNmRhZDc2NTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMmE3MWYwMGUtMDIwMC00OGRmLTlj YjQtMDA4ZGY5YTRhODU0LzJhNzFmMDBlLTAyMDAtNDhkZi05Y2I0LTAwOGRmOWE0 YTg1NC5jcmwwHwYDVR0jBBgwFoAUOA1kwPwYBvuiE5kqAVi9GUZ3do0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yYTcxZjAwZS0wMjAwLTQ4ZGYtOWNiNC0wMDhk ZjlhNGE4NTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHx+aAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGjG91SdaCif+b7ra1PTOHMCfTB7BWdL/O6MN9fI0fBwPyl0arxR5CU 3KH3zILGoxM5UgzhzbPx3BHEfRlPmFxY9R3dDfxSzxwdwyEAXqoU+xrp2XliLodp Pf93TiT1oXVHjef+rusZCpUn+6VEc4Sow5FmwSy8Hzxg3ZbMxmXkhDt0fgOdCfaJ isKQi7MSZ1I2dJ7gTlUlFQV7APgsIsLOKqFzX1k8Il8JycSKxZL80W1w7li6bCWn AUj264HzVzIoTrLQDtnIKqGxClayg0Zx8nlRsMSfDmk9k0hh4n6XsMq3zENHZCpg 9mFC2QV22JHl4wqThJugrsW2U3TRkOc= -----END CERTIFICATE-----Generated at Wed Sep 17 09:28:03 2025 by rpki-client