$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/8c39e9e5-bff9-3bf9-b082-a78db797d7b6.roa File: 8c39e9e5-bff9-3bf9-b082-a78db797d7b6.roa (raw, json) Hash identifier: CGFXhoD0O8icUuGRkR/bAIghthY4g6eHY2ge+ouc5L4= Subject key identifier: 98:3A:75:00:69:A4:C8:5D:D5:F2:5D:B7:E3:15:46:25:F8:74:D7:5B Certificate issuer: /CN=0c82e125-4df5-4912-a714-101a1caa5b99 Certificate serial: 010D0C9F4328584A96368AF806FADF2D1E1E9760 Authority key identifier: C8:3C:B8:82:00:3B:32:08:ED:C5:10:F7:50:10:E0:68:D4:96:44:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/8c39e9e5-bff9-3bf9-b082-a78db797d7b6.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 54054 IP address blocks: 199.168.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:8a:f8:06:fa:df:2d:1e:1e:97:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c82e125-4df5-4912-a714-101a1caa5b99 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=57dc5942-62b8-417f-a135-9286f3502a38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e3:24:6a:61:0d:99:33:48:a4:86:89:5c:39: c6:57:32:fe:e0:85:e6:9a:65:cf:f9:8a:f7:f4:1c: 32:ed:23:20:8a:85:07:0b:be:17:43:a4:9e:3b:dd: a9:ba:1e:cd:08:81:87:51:39:dd:2a:e5:e8:67:50: 84:59:86:c0:f6:6b:39:27:33:e8:7e:f3:0d:2d:08: 5a:e8:67:d8:c5:fa:68:3d:d8:df:60:f1:91:65:dc: 1e:06:63:13:2c:b6:6c:02:26:37:40:dc:fc:93:4c: 1a:b6:67:fc:61:0f:49:79:88:17:43:17:26:21:77: 3d:8d:4e:79:51:2e:09:25:a8:05:c3:f0:5a:2d:33: 38:57:b2:d5:94:8c:68:61:23:8c:fb:24:54:33:bf: 4d:c1:f6:d0:7d:0e:14:4b:a1:cb:19:b0:f7:79:c6: 74:0f:af:71:3a:bd:bf:97:77:ca:84:e0:a0:11:d4: 67:70:07:21:11:50:32:09:79:4e:a1:1a:f6:f6:65: 34:ca:77:c0:1e:b6:ad:05:e9:43:03:1b:5a:f7:97: a8:3a:31:44:16:32:17:67:80:9f:22:ba:05:fe:f1: 38:87:f8:ca:a6:bd:0b:05:0c:d0:39:3c:a3:17:f9: 13:8b:8c:cc:74:5e:08:7b:36:42:3f:4c:17:48:52: 20:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:3A:75:00:69:A4:C8:5D:D5:F2:5D:B7:E3:15:46:25:F8:74:D7:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/8c39e9e5-bff9-3bf9-b082-a78db797d7b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.crl X509v3 Authority Key Identifier: keyid:C8:3C:B8:82:00:3B:32:08:ED:C5:10:F7:50:10:E0:68:D4:96:44:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer sbgp-ipAddrBlock: critical IPv4: 199.168.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:a0:6b:6f:ca:fc:5a:6b:ff:dd:9a:91:7f:d6:bc:ac:d6:00: 14:f1:6e:f7:16:df:4a:20:98:cc:ce:d7:d8:d0:05:3b:16:cb: 95:0a:b4:8d:4b:4c:bc:69:da:3a:21:ef:b1:75:fd:ec:af:55: b3:86:6d:f0:22:45:d7:db:b0:2d:38:2a:5e:6d:13:69:9d:27: 1a:1d:db:0d:91:71:e4:69:e7:70:7a:3e:e3:f8:08:27:f9:6d: 63:4e:4d:b8:18:bb:cf:0c:82:4f:df:4e:e0:b2:c0:c2:01:08: 6d:5e:8e:ec:be:c7:e0:8c:5e:d1:62:44:b3:de:15:a7:58:90: b4:1c:ab:dc:78:17:3c:5f:6a:7c:f2:88:60:da:5f:3c:1b:51: 34:bf:bd:77:5f:92:65:d2:8a:b3:3c:d3:62:9f:42:53:70:6a: 51:fe:ac:eb:35:4f:ad:78:73:32:cf:b8:94:6c:92:ad:36:90: 9d:79:bd:b4:4e:c8:30:73:5c:44:48:5b:0f:b7:5e:84:f1:8c: 83:33:5f:04:f4:84:29:01:67:40:fa:7d:6c:ce:72:11:fa:23: 89:ea:26:c2:aa:99:15:e9:47:fb:04:6b:57:80:89:50:f3:f7: db:37:15:9e:b6:2f:c2:43:4e:13:06:19:ed:5f:73:9d:9d:3b: 9d:84:2d:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNor4BvrfLR4el2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGM4MmUxMjUtNGRmNS00OTEyLWE3MTQtMTAxYTFjYWE1 Yjk5MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk NTdkYzU5NDItNjJiOC00MTdmLWExMzUtOTI4NmYzNTAyYTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuMkamENmTNIpIaJXDnGVzL+4IXmmmXP+Yr3 9Bwy7SMgioUHC74XQ6SeO92puh7NCIGHUTndKuXoZ1CEWYbA9ms5JzPofvMNLQha 6GfYxfpoPdjfYPGRZdweBmMTLLZsAiY3QNz8k0watmf8YQ9JeYgXQxcmIXc9jU55 US4JJagFw/BaLTM4V7LVlIxoYSOM+yRUM79NwfbQfQ4US6HLGbD3ecZ0D69xOr2/ l3fKhOCgEdRncAchEVAyCXlOoRr29mU0ynfAHratBelDAxta95eoOjFEFjIXZ4Cf IroF/vE4h/jKpr0LBQzQOTyjF/kTi4zMdF4IezZCP0wXSFIgSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJg6dQBppMhd1fJdt+MVRiX4dNdbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYzgy ZTEyNS00ZGY1LTQ5MTItYTcxNC0xMDFhMWNhYTViOTkvOGMzOWU5ZTUtYmZmOS0z YmY5LWIwODItYTc4ZGI3OTdkN2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGM4MmUxMjUtNGRmNS00OTEyLWE3 MTQtMTAxYTFjYWE1Yjk5LzBjODJlMTI1LTRkZjUtNDkxMi1hNzE0LTEwMWExY2Fh NWI5OS5jcmwwHwYDVR0jBBgwFoAUyDy4ggA7MgjtxRD3UBDgaNSWRPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYzgyZTEyNS00ZGY1LTQ5MTItYTcxNC0xMDFh MWNhYTViOTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx6hYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6ga2/K/Fpr/92akX/WvKzWABTxbvcW30ogmMzO19jQBTsWy5UKtI1L TLxp2joh77F1/eyvVbOGbfAiRdfbsC04Kl5tE2mdJxod2w2RceRp53B6PuP4CCf5 bWNOTbgYu88Mgk/fTuCywMIBCG1ejuy+x+CMXtFiRLPeFadYkLQcq9x4Fzxfanzy iGDaXzwbUTS/vXdfkmXSirM802KfQlNwalH+rOs1T614czLPuJRskq02kJ15vbRO yDBzXERIWw+3XoTxjIMzXwT0hCkBZ0D6fWzOchH6I4nqJsKqmRXpR/sEa1eAiVDz 99s3FZ62L8JDThMGGe1fc52dO52ELTU= -----END CERTIFICATE-----Generated at Wed Jul 30 20:25:56 2025 by rpki-client