$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c03f09b-6404-4b04-b989-df1493d00cbb/99d98cbf-a424-394a-80b4-1fed4526e550.roa File: 99d98cbf-a424-394a-80b4-1fed4526e550.roa (raw, json) Hash identifier: 4AzBSP7tZapgFcERQlmqOy/KTXYMMgrluGKiui4nbRY= Subject key identifier: 33:52:50:9F:78:F6:08:70:7C:0E:99:51:1B:C3:2F:4F:C1:2A:2C:9B Certificate issuer: /CN=2c03f09b-6404-4b04-b989-df1493d00cbb Certificate serial: 010D0C9F4328584B0A115CDCA5932351F655CF40 Authority key identifier: 34:D4:E9:AF:27:E0:F3:8B:54:3A:AE:54:73:53:93:30:8E:EE:6B:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c03f09b-6404-4b04-b989-df1493d00cbb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c03f09b-6404-4b04-b989-df1493d00cbb/99d98cbf-a424-394a-80b4-1fed4526e550.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 14618 IP address blocks: 192.230.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c03f09b-6404-4b04-b989-df1493d00cbb/2c03f09b-6404-4b04-b989-df1493d00cbb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c03f09b-6404-4b04-b989-df1493d00cbb/2c03f09b-6404-4b04-b989-df1493d00cbb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c03f09b-6404-4b04-b989-df1493d00cbb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 03 Sep 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:5c:dc:a5:93:23:51:f6:55:cf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c03f09b-6404-4b04-b989-df1493d00cbb Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=39c9af7d-3804-47d9-86b5-0995bf1107bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ff:f1:8c:38:13:8f:1e:9e:41:30:87:1d:a0: 52:49:93:77:e2:8c:49:ae:88:2a:59:2b:4e:b4:65: fe:18:88:d5:ce:b7:34:f4:e9:70:a6:4d:96:59:c8: 28:93:23:94:cb:9d:f1:3d:d4:ef:6e:ae:1b:5f:7d: eb:8f:20:bd:01:28:39:f4:3d:d1:22:eb:63:9c:f8: 93:29:7e:59:09:19:4c:32:f8:2b:93:4b:72:1a:f1: 50:ed:fd:87:56:8a:04:09:80:c6:91:6e:09:53:07: 47:6f:a5:60:6d:1a:96:bc:0f:31:b0:4a:08:3e:bf: a0:a0:00:14:35:cb:28:a7:37:f6:e8:8e:da:18:43: 26:ab:f1:e1:4c:10:4f:22:b4:95:e9:6b:20:77:38: d7:aa:03:cf:b6:93:68:e9:8c:19:ba:83:b6:fc:4b: 9a:67:57:be:85:62:26:f3:da:f8:6a:9b:7d:87:f8: c5:af:e3:4d:16:78:2f:f8:83:f5:a2:d9:99:35:59: b9:a2:f1:f0:ef:2e:dd:95:5e:21:94:be:69:49:41: 10:3b:65:fb:07:f1:a4:f6:34:ed:71:21:3b:ee:fa: 25:a8:f0:89:9d:d1:3b:9f:12:2b:a1:63:e7:61:46: ce:bd:a0:6b:e3:f3:5e:1b:3c:6f:0e:31:be:7b:dd: b4:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:52:50:9F:78:F6:08:70:7C:0E:99:51:1B:C3:2F:4F:C1:2A:2C:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c03f09b-6404-4b04-b989-df1493d00cbb/99d98cbf-a424-394a-80b4-1fed4526e550.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c03f09b-6404-4b04-b989-df1493d00cbb/2c03f09b-6404-4b04-b989-df1493d00cbb.crl X509v3 Authority Key Identifier: keyid:34:D4:E9:AF:27:E0:F3:8B:54:3A:AE:54:73:53:93:30:8E:EE:6B:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c03f09b-6404-4b04-b989-df1493d00cbb.cer sbgp-ipAddrBlock: critical IPv4: 192.230.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:5c:94:45:a2:ae:0f:4e:72:8c:9c:95:5a:ca:03:e2:b9:22: fb:cc:56:8c:90:e5:dc:11:8c:5f:a7:86:3b:eb:18:c5:2d:4d: 95:54:e3:7d:4a:ce:1b:e9:56:86:dc:5d:55:a8:01:fd:a6:51: 51:38:16:1d:15:bb:d5:14:73:5a:a9:98:57:05:99:03:01:73: 56:c4:7c:f4:17:61:d0:08:ad:b1:90:e9:4a:e1:c5:98:0a:df: 62:b6:1d:40:55:62:48:57:d1:c4:cb:e3:98:bb:8a:84:d4:90: bf:80:42:71:bf:f1:0c:20:9e:07:be:3b:bf:85:e1:ba:7a:43: b1:fe:55:7e:79:2a:62:7c:36:8a:ff:9a:13:69:4d:12:3a:2d: 99:96:3f:ec:b4:b4:60:05:94:9f:b3:35:4b:a7:5d:52:0c:b9: 8b:30:bb:ce:1e:9e:05:c9:01:63:2d:2a:5d:fd:5f:a8:83:2d: 5f:32:7d:e1:cc:3d:b0:59:eb:29:a0:b2:72:e5:83:44:c3:e4: b1:81:02:71:f1:d3:a0:4c:6d:3e:da:4e:4f:72:80:92:59:84: 13:d9:57:c9:28:8d:8a:7a:0b:80:08:62:48:0f:c9:60:7d:06: d5:4b:9f:5e:99:6f:3e:92:42:a7:bc:06:f7:37:61:5f:7c:cb: a9:60:f8:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsKEVzcpZMjUfZVz0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmMwM2YwOWItNjQwNC00YjA0LWI5ODktZGYxNDkzZDAw Y2JiMB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk MzljOWFmN2QtMzgwNC00N2Q5LTg2YjUtMDk5NWJmMTEwN2JjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3P/xjDgTjx6eQTCHHaBSSZN34oxJrogqWStO tGX+GIjVzrc09Olwpk2WWcgokyOUy53xPdTvbq4bX33rjyC9ASg59D3RIutjnPiT KX5ZCRlMMvgrk0tyGvFQ7f2HVooECYDGkW4JUwdHb6VgbRqWvA8xsEoIPr+goAAU Ncsopzf26I7aGEMmq/HhTBBPIrSV6WsgdzjXqgPPtpNo6YwZuoO2/EuaZ1e+hWIm 89r4apt9h/jFr+NNFngv+IP1otmZNVm5ovHw7y7dlV4hlL5pSUEQO2X7B/Gk9jTt cSE77volqPCJndE7nxIroWPnYUbOvaBr4/NeGzxvDjG+e920sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNSUJ949ghwfA6ZURvDL0/BKiybMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yYzAz ZjA5Yi02NDA0LTRiMDQtYjk4OS1kZjE0OTNkMDBjYmIvOTlkOThjYmYtYTQyNC0z OTRhLTgwYjQtMWZlZDQ1MjZlNTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmMwM2YwOWItNjQwNC00YjA0LWI5 ODktZGYxNDkzZDAwY2JiLzJjMDNmMDliLTY0MDQtNGIwNC1iOTg5LWRmMTQ5M2Qw MGNiYi5jcmwwHwYDVR0jBBgwFoAUNNTpryfg84tUOq5Uc1OTMI7ua18wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yYzAzZjA5Yi02NDA0LTRiMDQtYjk4OS1kZjE0 OTNkMDBjYmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwObuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtclEWirg9OcoyclVrKA+K5IvvMVoyQ5dwRjF+nhjvrGMUtTZVU431K zhvpVobcXVWoAf2mUVE4Fh0Vu9UUc1qpmFcFmQMBc1bEfPQXYdAIrbGQ6UrhxZgK 32K2HUBVYkhX0cTL45i7ioTUkL+AQnG/8Qwgnge+O7+F4bp6Q7H+VX55KmJ8Nor/ mhNpTRI6LZmWP+y0tGAFlJ+zNUunXVIMuYswu84engXJAWMtKl39X6iDLV8yfeHM PbBZ6ymgsnLlg0TD5LGBAnHx06BMbT7aTk9ygJJZhBPZV8kojYp6C4AIYkgPyWB9 BtVLn16Zbz6SQqe8Bvc3YV98y6lg+HY= -----END CERTIFICATE-----Generated at Sun Aug 31 21:59:09 2025 by rpki-client