$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/03a4cc23-30b0-3516-9da1-e6894a6d8ad8.roa File: 03a4cc23-30b0-3516-9da1-e6894a6d8ad8.roa (raw, json) Hash identifier: DddOleQSLfsBzFVlJs4vwiMeXL1VBlqKe1qPlmNEyX0= Subject key identifier: 64:F5:9F:84:3A:01:70:6B:21:DD:48:B6:D9:75:A5:4D:39:43:86:5F Certificate issuer: /CN=58520fc1-e07b-4b1b-ad59-5756198c9756 Certificate serial: 010D0C9F4328584B153C13392EBB26074215E580 Authority key identifier: 8B:68:5A:47:96:D3:96:D1:F9:A1:5F:E7:38:95:E0:29:83:E6:D4:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/03a4cc23-30b0-3516-9da1-e6894a6d8ad8.roa Signing time: Thu 04 Sep 2025 13:00:41 +0000 ROA not before: Thu 04 Sep 2025 13:00:41 +0000 ROA not after: Wed 03 Dec 2025 14:00:41 +0000 asID: 22770 IP address blocks: 199.181.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/58520fc1-e07b-4b1b-ad59-5756198c9756.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/58520fc1-e07b-4b1b-ad59-5756198c9756.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:3c:13:39:2e:bb:26:07:42:15:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58520fc1-e07b-4b1b-ad59-5756198c9756 Validity Not Before: Sep 4 13:00:41 2025 GMT Not After : Dec 3 14:00:41 2025 GMT Subject: CN=86ab3b18-dc83-4ad4-99ee-ed0817ec1023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ca:16:9f:93:80:24:34:c1:22:0a:27:db:e4: 61:69:98:c3:2c:0b:04:8c:30:4f:7d:f3:cc:67:25: 79:ad:65:f5:2d:64:d6:bc:d3:a6:fb:45:c2:70:30: 77:2d:2e:42:5c:12:ae:6a:cc:b2:f4:bd:3a:2f:8b: ad:8b:f1:f0:ff:2e:7e:12:16:f2:c0:ee:5f:1f:23: 5c:fd:15:cb:eb:e4:5d:15:57:48:c1:34:9e:47:2d: fd:21:00:c5:15:d7:48:0d:ff:01:17:42:12:bf:4a: 64:d9:f2:e4:12:2c:bb:14:c2:a2:14:d9:13:47:c6: a1:14:1f:18:62:b0:db:86:3b:ed:82:1a:d9:26:d9: dd:42:f2:d3:67:f4:cd:fa:ae:30:ec:d0:c7:04:f8: 67:32:8c:11:ef:7e:6b:02:e4:8c:3f:fd:c0:29:78: f8:3f:d2:f5:28:fe:fa:82:8d:56:52:8a:09:f4:1d: 1f:a4:6c:61:9f:c9:fa:d7:00:47:61:f9:86:e4:83: 2e:1c:a8:e1:7d:42:0d:1a:7d:ae:83:4b:70:15:5c: 90:76:35:cc:a3:bb:1b:42:ca:ae:40:ab:df:cb:d3: f4:3e:72:cd:6b:c5:7f:27:ca:58:a7:17:be:1a:b7: d5:50:86:3f:f4:a2:1e:e9:88:c0:93:5c:7e:7c:fb: 19:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:F5:9F:84:3A:01:70:6B:21:DD:48:B6:D9:75:A5:4D:39:43:86:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/03a4cc23-30b0-3516-9da1-e6894a6d8ad8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/58520fc1-e07b-4b1b-ad59-5756198c9756.crl X509v3 Authority Key Identifier: keyid:8B:68:5A:47:96:D3:96:D1:F9:A1:5F:E7:38:95:E0:29:83:E6:D4:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756.cer sbgp-ipAddrBlock: critical IPv4: 199.181.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:f8:da:88:f7:b7:eb:0c:3f:cf:a8:e7:54:1b:de:05:1d:35: 10:d1:df:d9:8c:91:ad:cb:24:88:97:a1:0e:0a:f6:93:23:c7: 83:35:11:d8:a2:47:c4:fe:18:07:dc:01:c6:17:b0:52:3c:a1: ac:3d:69:47:30:bf:26:14:a7:4d:22:10:6d:35:73:33:11:4e: 8b:81:93:6d:cf:1c:05:63:bf:4e:43:9e:c9:de:f9:a0:81:1e: 31:53:bb:a0:d9:1b:41:1f:d4:79:62:4e:b1:58:2f:9d:2f:05: d3:48:c1:82:86:46:df:e3:13:f6:30:da:03:d5:0f:5f:45:f7: 93:b4:f5:25:7d:59:09:a8:5f:77:e4:6b:6b:3a:f7:6a:32:bd: ec:c9:98:7a:29:e2:b0:9f:a8:7c:d3:96:34:e0:b9:33:70:2b: 66:37:40:17:bb:39:3a:94:41:88:a6:a9:ea:e2:de:a4:bd:08: 60:bb:c3:fd:27:70:98:09:3a:35:e8:b4:b6:e7:0a:2e:92:00: 7b:94:28:3a:fd:bf:dc:c6:6c:1b:41:95:ef:c5:b0:a9:b7:85: 06:c0:f6:3b:01:4b:ca:7f:56:d5:ae:e3:d2:60:92:e0:5d:07: 32:c9:cf:0e:d9:1a:17:06:29:d0:80:ba:69:1a:0e:a4:8b:2d: 03:24:74:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsVPBM5LrsmB0IV5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTg1MjBmYzEtZTA3Yi00YjFiLWFkNTktNTc1NjE5OGM5 NzU2MB4XDTI1MDkwNDEzMDA0MVoXDTI1MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk ODZhYjNiMTgtZGM4My00YWQ0LTk5ZWUtZWQwODE3ZWMxMDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsoWn5OAJDTBIgon2+RhaZjDLAsEjDBPffPM ZyV5rWX1LWTWvNOm+0XCcDB3LS5CXBKuasyy9L06L4uti/Hw/y5+EhbywO5fHyNc /RXL6+RdFVdIwTSeRy39IQDFFddIDf8BF0ISv0pk2fLkEiy7FMKiFNkTR8ahFB8Y YrDbhjvtghrZJtndQvLTZ/TN+q4w7NDHBPhnMowR735rAuSMP/3AKXj4P9L1KP76 go1WUooJ9B0fpGxhn8n61wBHYfmG5IMuHKjhfUINGn2ug0twFVyQdjXMo7sbQsqu QKvfy9P0PnLNa8V/J8pYpxe+GrfVUIY/9KIe6YjAk1x+fPsZ9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGT1n4Q6AXBrId1Ittl1pU05Q4ZfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81ODUy MGZjMS1lMDdiLTRiMWItYWQ1OS01NzU2MTk4Yzk3NTYvMDNhNGNjMjMtMzBiMC0z NTE2LTlkYTEtZTY4OTRhNmQ4YWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNTg1MjBmYzEtZTA3Yi00YjFiLWFk NTktNTc1NjE5OGM5NzU2LzU4NTIwZmMxLWUwN2ItNGIxYi1hZDU5LTU3NTYxOThj OTc1Ni5jcmwwHwYDVR0jBBgwFoAUi2haR5bTltH5oV/nOJXgKYPm1AUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81ODUyMGZjMS1lMDdiLTRiMWItYWQ1OS01NzU2 MTk4Yzk3NTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7UhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/42oj3t+sMP8+o51Qb3gUdNRDR39mMka3LJIiXoQ4K9pMjx4M1Edii R8T+GAfcAcYXsFI8oaw9aUcwvyYUp00iEG01czMRTouBk23PHAVjv05Dnsne+aCB HjFTu6DZG0Ef1HliTrFYL50vBdNIwYKGRt/jE/Yw2gPVD19F95O09SV9WQmoX3fk a2s692oyvezJmHop4rCfqHzTljTguTNwK2Y3QBe7OTqUQYimqeri3qS9CGC7w/0n cJgJOjXotLbnCi6SAHuUKDr9v9zGbBtBle/FsKm3hQbA9jsBS8p/VtWu49JgkuBd BzLJzw7ZGhcGKdCAumkaDqSLLQMkdIo= -----END CERTIFICATE-----Generated at Fri Oct 10 22:06:33 2025 by rpki-client