$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d99cb051-c6d4-3f0e-a402-dec46de49224.roa File: d99cb051-c6d4-3f0e-a402-dec46de49224.roa (raw, json) Hash identifier: ni/oVCXaEP7BmvyhkrurGX8+2sAMNNUG6XsxsXDusfc= Subject key identifier: 0B:3B:B6:DA:A2:07:16:31:2D:62:62:D2:BA:00:5A:23:15:CE:87:22 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584A936B5BF45C92F0D0A0F63E80 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d99cb051-c6d4-3f0e-a402-dec46de49224.roa Signing time: Sun 20 Jul 2025 01:00:50 +0000 ROA not before: Sun 20 Jul 2025 01:00:50 +0000 ROA not after: Sat 18 Oct 2025 01:00:50 +0000 asID: 0 IP address blocks: 199.255.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:93:6b:5b:f4:5c:92:f0:d0:a0:f6:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Jul 20 01:00:50 2025 GMT Not After : Oct 18 01:00:50 2025 GMT Subject: CN=d83adb89-f5a1-414c-ac9b-055ca2c43b2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:0e:c0:fa:6f:e7:77:d5:0c:25:49:aa:b0:7f: c5:62:94:05:58:4a:b5:bd:1e:52:5b:62:60:4a:47: 11:e7:f4:ac:83:4f:fe:c4:da:d4:a4:7b:f5:fd:4b: 9b:f6:a3:57:58:24:ac:20:01:91:4c:54:bc:26:5a: 7d:27:78:56:4e:d5:06:02:91:47:2d:60:0c:94:b9: 6a:42:be:f3:47:8e:4b:f3:3e:6f:00:f4:d7:38:cb: 04:8e:f1:aa:a6:07:98:85:47:6d:bf:d2:ab:fe:73: 51:06:fa:03:44:65:04:94:98:d8:58:18:0e:9c:fa: 4f:06:81:2b:9b:cc:18:a8:d7:9b:64:ad:5f:66:36: 53:49:43:5e:ba:f1:fc:04:ad:08:a8:81:24:a7:b9: b4:df:8c:85:5c:1b:95:31:9a:18:a1:f1:75:c4:9e: 1f:ed:0f:80:d9:3f:e2:c3:b4:aa:03:b8:b7:32:20: 15:11:01:2a:b3:bd:ec:dd:8d:99:99:a0:ea:d6:f3: 72:d3:2e:e8:84:44:64:4b:c7:60:8f:0a:63:5b:dc: a0:4e:48:d7:fe:e1:14:a8:b7:fd:66:ba:11:0d:a0: aa:2c:a1:33:84:47:bb:5b:fb:5d:34:ac:3f:f9:39: ed:26:ce:7a:6c:6f:4d:1d:3a:39:81:0e:9b:9a:15: 00:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:3B:B6:DA:A2:07:16:31:2D:62:62:D2:BA:00:5A:23:15:CE:87:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d99cb051-c6d4-3f0e-a402-dec46de49224.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 199.255.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:54:21:c9:19:03:a3:2a:ec:bc:00:1d:ed:34:2d:a1:09:a7: 2f:80:6f:54:1c:41:0c:d0:7c:eb:4a:00:36:5f:42:b6:db:0b: b2:a1:55:ce:5a:6c:8a:f8:2c:ac:c2:82:71:c9:f5:31:dc:19: ff:04:34:9d:81:a1:91:87:d0:d2:1e:f0:d9:2a:6d:be:3a:54: c5:fe:67:1c:f3:e5:dd:64:8e:db:25:e6:01:f9:c6:14:9c:27: 45:be:36:32:71:05:1e:c1:07:e1:2d:75:b1:f2:45:99:9c:3b: f0:66:f6:8f:76:0f:d6:e1:dc:41:5e:d0:08:1b:f0:17:30:74: 07:1e:3d:68:3b:16:d9:c0:5f:76:aa:ba:64:82:17:2f:f7:4d: 06:d1:74:21:6d:fb:7d:89:80:dc:f7:52:27:08:42:82:d8:45: 52:6e:91:90:9a:e8:15:9e:ff:99:8a:3d:52:ff:cd:20:e6:69: 90:7d:0b:95:d5:f9:0e:63:6b:58:8f:61:ea:e1:3c:d0:41:54: fc:af:b2:5e:dd:a6:92:5e:61:0f:69:be:59:44:36:2d:68:41: 70:94:92:a4:30:78:95:eb:d8:33:a0:25:30:2b:21:43:5a:32: 9c:dd:a9:c4:3c:d3:37:93:4e:af:bd:cc:5a:eb:58:50:29:01: 28:45:99:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqTa1v0XJLw0KD2PoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDcyMDAxMDA1MFoXDTI1MTAxODAxMDA1MFowLzEtMCsGA1UEAxMk ZDgzYWRiODktZjVhMS00MTRjLWFjOWItMDU1Y2EyYzQzYjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhA7A+m/nd9UMJUmqsH/FYpQFWEq1vR5SW2Jg SkcR5/Ssg0/+xNrUpHv1/Uub9qNXWCSsIAGRTFS8Jlp9J3hWTtUGApFHLWAMlLlq Qr7zR45L8z5vAPTXOMsEjvGqpgeYhUdtv9Kr/nNRBvoDRGUElJjYWBgOnPpPBoEr m8wYqNebZK1fZjZTSUNeuvH8BK0IqIEkp7m034yFXBuVMZoYofF1xJ4f7Q+A2T/i w7SqA7i3MiAVEQEqs73s3Y2ZmaDq1vNy0y7ohERkS8dgjwpjW9ygTkjX/uEUqLf9 ZroRDaCqLKEzhEe7W/tdNKw/+TntJs56bG9NHTo5gQ6bmhUAFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAs7ttqiBxYxLWJi0roAWiMVzociMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvZDk5Y2IwNTEtYzZkNC0z ZjBlLWE0MDItZGVjNDZkZTQ5MjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx//oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJUIckZA6Mq7LwAHe00LaEJpy+Ab1QcQQzQfOtKADZfQrbbC7KhVc5a bIr4LKzCgnHJ9THcGf8ENJ2BoZGH0NIe8Nkqbb46VMX+Zxzz5d1kjtsl5gH5xhSc J0W+NjJxBR7BB+EtdbHyRZmcO/Bm9o92D9bh3EFe0Agb8BcwdAcePWg7FtnAX3aq umSCFy/3TQbRdCFt+32JgNz3UicIQoLYRVJukZCa6BWe/5mKPVL/zSDmaZB9C5XV +Q5ja1iPYerhPNBBVPyvsl7dppJeYQ9pvllENi1oQXCUkqQweJXr2DOgJTArIUNa MpzdqcQ80zeTTq+9zFrrWFApAShFmSE= -----END CERTIFICATE-----Generated at Tue Jul 22 04:44:59 2025 by rpki-client