$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/03fb2dd6-1aa8-34cb-85e1-f09cea534fa1.roa File: 03fb2dd6-1aa8-34cb-85e1-f09cea534fa1.roa (raw, json) Hash identifier: jNk0US3xGOkasPxLj9aZ9rCZ/uQ8mHqkpxaBAwhS8uc= Subject key identifier: DF:6A:9E:58:95:6C:D2:29:4E:21:1F:93:59:CD:B7:87:07:AC:3C:A7 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584B13D6FA471EA4EE2D2FF73D00 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/03fb2dd6-1aa8-34cb-85e1-f09cea534fa1.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 54113 IP address blocks: 199.232.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:fa:47:1e:a4:ee:2d:2f:f7:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=e0744329-a007-4fb6-92a8-54a4cccdda8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f4:68:f2:ee:a8:40:de:f2:92:93:70:fd:ca: 1e:d2:46:43:02:fb:ab:be:c5:5e:d4:9a:59:e0:66: fe:e8:cc:ab:76:e4:1f:9d:82:09:43:1d:fd:b5:b6: dc:d4:b3:72:59:37:05:ab:ba:d1:25:7e:05:e9:0e: 64:91:57:45:53:bc:de:d8:9a:18:d9:b1:16:c1:d0: e3:78:53:22:00:50:cb:c9:f7:2b:e1:35:a9:6f:71: f0:94:65:43:1e:2b:a0:a0:d3:a0:8a:a7:6e:a1:f2: c1:fa:17:12:eb:17:4e:06:fb:6d:17:d4:7a:e7:de: 3f:8d:a4:7e:20:0b:47:53:6f:60:e1:11:73:e5:59: 13:d8:08:33:54:62:e8:5c:39:0c:b6:65:f0:0a:6c: 4a:31:89:00:79:b2:51:88:02:0b:68:9a:97:00:39: fa:98:7b:8e:c6:ed:66:bd:df:7b:4e:ed:14:98:62: dc:d3:cc:91:ee:9c:fd:25:44:56:9f:69:1f:75:40: 98:50:d7:44:1f:08:6e:d2:98:4c:fe:e4:dc:b2:4b: 20:08:91:be:f3:cd:8f:0d:18:d0:dd:ae:db:04:2c: b0:ee:20:bb:85:4a:bd:d3:80:5b:19:2d:8c:9b:f3: 5f:c7:18:d8:c3:4b:59:5f:4b:b5:f3:1b:6d:27:fb: 90:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:6A:9E:58:95:6C:D2:29:4E:21:1F:93:59:CD:B7:87:07:AC:3C:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/03fb2dd6-1aa8-34cb-85e1-f09cea534fa1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 199.232.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:06:b4:8b:c0:7c:80:a7:cd:cc:a0:f8:9a:d1:8e:f3:e6:18: 67:27:16:12:d1:fa:a6:b2:ab:e7:f9:99:63:62:2b:a9:d2:3d: 33:96:65:a3:69:0a:89:73:14:a1:d1:60:30:a6:81:31:9d:36: 5a:cf:27:6d:e3:4b:d4:b4:4c:d7:57:01:28:98:ec:e0:f8:c9: ce:e3:16:06:18:9f:6c:88:f7:94:fd:6b:df:fb:cc:da:10:bc: c1:24:67:8f:2d:f8:b9:76:95:ce:94:d8:d3:9f:e2:23:87:5b: f7:86:23:a1:88:a4:8e:8e:38:c8:f5:22:15:3e:1b:fa:68:ff: 11:95:51:43:bc:44:0b:5d:00:7f:55:ef:a1:58:a5:9e:a2:a0: 2e:38:c4:d8:5f:28:6c:66:1c:66:50:8c:9c:22:40:52:3f:6b: f4:49:27:38:ab:d0:2e:f4:82:98:93:e8:c5:d6:82:89:3e:ea: f9:44:28:8d:a0:a9:db:6a:d3:ac:d9:1b:00:7a:fb:ea:7d:bb: 2f:5c:d2:6f:de:da:d6:ba:99:54:2c:ca:37:a1:44:6d:99:33: 91:50:fb:bb:c0:5e:af:28:82:e1:e0:2c:77:a3:65:aa:b1:23: cf:ee:51:30:36:2e:6c:4a:cd:25:22:3c:8b:33:79:c8:c6:d3: 70:ac:51:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1vpHHqTuLS/3PQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk ZTA3NDQzMjktYTAwNy00ZmI2LTkyYTgtNTRhNGNjY2RkYThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/Ro8u6oQN7ykpNw/coe0kZDAvurvsVe1JpZ 4Gb+6MyrduQfnYIJQx39tbbc1LNyWTcFq7rRJX4F6Q5kkVdFU7ze2JoY2bEWwdDj eFMiAFDLyfcr4TWpb3HwlGVDHiugoNOgiqduofLB+hcS6xdOBvttF9R6594/jaR+ IAtHU29g4RFz5VkT2AgzVGLoXDkMtmXwCmxKMYkAebJRiAILaJqXADn6mHuOxu1m vd97Tu0UmGLc08yR7pz9JURWn2kfdUCYUNdEHwhu0phM/uTcsksgCJG+882PDRjQ 3a7bBCyw7iC7hUq904BbGS2Mm/NfxxjYw0tZX0u18xttJ/uQmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN9qnliVbNIpTiEfk1nNt4cHrDynMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvMDNmYjJkZDYtMWFhOC0z NGNiLTg1ZTEtZjA5Y2VhNTM0ZmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx+iYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYGtIvAfICnzcyg+JrRjvPmGGcnFhLR+qayq+f5mWNiK6nSPTOWZaNp ColzFKHRYDCmgTGdNlrPJ23jS9S0TNdXASiY7OD4yc7jFgYYn2yI95T9a9/7zNoQ vMEkZ48t+Ll2lc6U2NOf4iOHW/eGI6GIpI6OOMj1IhU+G/po/xGVUUO8RAtdAH9V 76FYpZ6ioC44xNhfKGxmHGZQjJwiQFI/a/RJJzir0C70gpiT6MXWgok+6vlEKI2g qdtq06zZGwB6++p9uy9c0m/e2ta6mVQsyjehRG2ZM5FQ+7vAXq8oguHgLHejZaqx I8/uUTA2LmxKzSUiPIszecjG03CsUcE= -----END CERTIFICATE-----Generated at Thu Oct 9 05:43:29 2025 by rpki-client