$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/0fa850de-079b-3985-8c4e-c1c41937a99b.roa File: 0fa850de-079b-3985-8c4e-c1c41937a99b.roa (raw, json) Hash identifier: naSvzC3Xy9NBmvLR0XkpDhMw1r9kkazhFwlGuXiMMFA= Subject key identifier: 94:EA:5E:3E:28:98:F5:1E:78:E5:6D:D9:D2:3F:DD:8D:E2:94:D1:80 Certificate issuer: /CN=5ddde1fe-7525-49e3-9718-412c13cd42ca Certificate serial: 010D0C9F4328584AA1621BE8CB0FCC675B30DE00 Authority key identifier: 3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/0fa850de-079b-3985-8c4e-c1c41937a99b.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 16509 IP address blocks: 199.101.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:62:1b:e8:cb:0f:cc:67:5b:30:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ddde1fe-7525-49e3-9718-412c13cd42ca Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=4c8f67b2-6916-47c4-b0bc-c415250a625b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:79:33:d9:0e:7a:c0:be:de:1c:21:e7:02:e5: 4f:0b:58:ca:56:55:b9:a9:db:d8:15:7a:78:57:6e: ea:10:41:2b:ff:3f:11:28:54:38:ab:07:cd:6e:1a: 28:01:08:3f:e7:e2:e6:c3:db:8c:cc:63:ae:7c:43: 1e:26:18:ba:10:c6:58:08:fb:18:42:af:13:ab:9f: 2f:cf:5b:56:20:b6:57:26:3f:bc:8d:c4:68:41:4a: 26:27:ec:8a:7c:e7:7c:c4:5a:61:81:20:69:6a:ce: 7a:bc:af:da:a6:bd:42:ae:9c:e0:03:04:b6:49:a2: 39:47:e5:b1:9f:41:7d:f2:1a:c3:7e:1e:e4:d8:b9: 65:11:3a:33:64:f9:e5:2b:6c:27:c8:05:0d:aa:1a: 4f:33:8d:83:0c:8a:a6:36:4a:99:5b:4c:43:4c:7c: 54:cf:28:e0:bb:5b:f9:a4:e2:53:93:a3:b6:06:84: ef:92:c7:55:c6:c0:0f:0a:cd:a9:cd:91:c9:85:f4: 31:32:cc:bd:99:84:1b:1b:ba:30:50:17:af:6e:97: d9:89:22:c6:b2:7f:87:63:f7:20:c6:a1:c9:54:f3: 4e:15:32:3d:ec:a1:0d:83:76:bf:83:49:04:0b:f4: ea:ea:bc:1e:03:75:d1:04:04:a4:69:04:7d:3c:82: ea:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:EA:5E:3E:28:98:F5:1E:78:E5:6D:D9:D2:3F:DD:8D:E2:94:D1:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/0fa850de-079b-3985-8c4e-c1c41937a99b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.crl X509v3 Authority Key Identifier: keyid:3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer sbgp-ipAddrBlock: critical IPv4: 199.101.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:69:55:96:8c:c3:1f:6a:ca:5c:9b:07:25:f9:e0:4d:81:dd: 8e:43:90:38:ca:27:2f:a7:5b:6d:a1:cc:4e:5b:5e:55:1c:b1: 48:4d:e7:e8:7c:e2:53:e1:5c:a6:88:40:4e:0b:e6:a0:3b:13: 4b:e5:bc:6f:91:88:dd:b5:c6:e9:22:08:bd:cf:a1:7d:17:96: 18:0d:9c:1a:04:44:3f:80:3f:92:60:05:d1:9f:31:b4:b9:f8: 43:23:69:1a:78:34:9d:f0:00:4a:b6:0b:f4:14:e3:b3:18:b9: aa:a3:f7:fe:d6:9f:de:7d:89:8a:d3:b7:38:31:2f:27:55:e1: ee:83:0a:43:1b:57:82:1e:35:5e:63:c6:d0:01:a5:a3:ba:53: dd:e7:48:d4:73:fa:20:8f:80:8e:cc:2c:f1:3f:fb:a7:8d:cc: 25:c3:ed:6f:14:eb:65:4d:96:d2:81:98:e9:01:2b:3d:d3:1f: 81:c1:f9:c5:a6:24:a8:2a:3d:1c:97:22:14:27:f8:a6:e7:d1: bc:5f:4c:ad:85:b1:ab:91:3e:4a:3d:0a:86:e9:55:ec:b7:96: 44:e8:81:43:50:c6:c8:fe:dc:d1:07:29:f6:64:f5:47:26:9d: c0:88:81:40:12:d0:c3:ef:3e:0a:22:96:b7:f6:54:6c:c4:81: 0d:cc:79:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYhvoyw/MZ1sw3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRkZGUxZmUtNzUyNS00OWUzLTk3MTgtNDEyYzEzY2Q0 MmNhMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk NGM4ZjY3YjItNjkxNi00N2M0LWIwYmMtYzQxNTI1MGE2MjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnkz2Q56wL7eHCHnAuVPC1jKVlW5qdvYFXp4 V27qEEEr/z8RKFQ4qwfNbhooAQg/5+Lmw9uMzGOufEMeJhi6EMZYCPsYQq8Tq58v z1tWILZXJj+8jcRoQUomJ+yKfOd8xFphgSBpas56vK/apr1CrpzgAwS2SaI5R+Wx n0F98hrDfh7k2LllETozZPnlK2wnyAUNqhpPM42DDIqmNkqZW0xDTHxUzyjgu1v5 pOJTk6O2BoTvksdVxsAPCs2pzZHJhfQxMsy9mYQbG7owUBevbpfZiSLGsn+HY/cg xqHJVPNOFTI97KENg3a/g0kEC/Tq6rweA3XRBASkaQR9PILqkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJTqXj4omPUeeOVt2dI/3Y3ilNGAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZGRk ZTFmZS03NTI1LTQ5ZTMtOTcxOC00MTJjMTNjZDQyY2EvMGZhODUwZGUtMDc5Yi0z OTg1LThjNGUtYzFjNDE5MzdhOTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWRkZGUxZmUtNzUyNS00OWUzLTk3 MTgtNDEyYzEzY2Q0MmNhLzVkZGRlMWZlLTc1MjUtNDllMy05NzE4LTQxMmMxM2Nk NDJjYS5jcmwwHwYDVR0jBBgwFoAUPyEX+C90LrvdwcZoG6YcjoqBYSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZGRkZTFmZS03NTI1LTQ5ZTMtOTcxOC00MTJj MTNjZDQyY2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx2XGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExpVZaMwx9qylybByX54E2B3Y5DkDjKJy+nW22hzE5bXlUcsUhN5+h8 4lPhXKaIQE4L5qA7E0vlvG+RiN21xukiCL3PoX0XlhgNnBoERD+AP5JgBdGfMbS5 +EMjaRp4NJ3wAEq2C/QU47MYuaqj9/7Wn959iYrTtzgxLydV4e6DCkMbV4IeNV5j xtABpaO6U93nSNRz+iCPgI7MLPE/+6eNzCXD7W8U62VNltKBmOkBKz3TH4HB+cWm JKgqPRyXIhQn+Kbn0bxfTK2FsauRPko9CobpVey3lkTogUNQxsj+3NEHKfZk9Ucm ncCIgUAS0MPvPgoilrf2VGzEgQ3Mec4= -----END CERTIFICATE-----Generated at Fri Jul 25 21:06:26 2025 by rpki-client