$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/1a402687-73f0-38f9-b900-9c98f4cd0bd6.roa File: 1a402687-73f0-38f9-b900-9c98f4cd0bd6.roa (raw, json) Hash identifier: o8fZ9G1rvriZAwV/UILVfJ3+8kkvB0s4aw1ZT3rMQ00= Subject key identifier: AD:96:1F:03:3F:C8:1C:CD:CD:8B:E3:1A:F6:C0:C2:D3:41:00:BC:7E Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584AA6F62CDEF98138D8D79C2DA0 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/1a402687-73f0-38f9-b900-9c98f4cd0bd6.roa Signing time: Sun 27 Jul 2025 01:00:49 +0000 ROA not before: Sun 27 Jul 2025 01:00:49 +0000 ROA not after: Sat 25 Oct 2025 01:00:49 +0000 asID: 3356 IP address blocks: 199.35.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 02 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a6:f6:2c:de:f9:81:38:d8:d7:9c:2d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Jul 27 01:00:49 2025 GMT Not After : Oct 25 01:00:49 2025 GMT Subject: CN=faf9e57b-3169-47f2-a139-bd92a3304e75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:cc:50:99:d1:72:b6:46:4b:41:4e:15:63:c7: c4:62:1e:ae:e9:76:90:70:e2:93:ad:c8:26:2a:70: bf:bb:8c:74:fe:00:24:2d:ff:c7:06:9c:98:d6:99: a1:a0:83:c7:53:89:5e:6e:5a:e7:5d:72:dc:74:7c: 07:c5:eb:69:eb:62:88:8c:5d:8f:3d:0e:92:e4:8e: d8:c3:e8:0b:1c:5a:4b:6e:26:53:f9:26:28:d7:f3: af:f7:12:cf:bb:58:42:33:11:14:32:ca:f9:4f:66: 03:2e:9a:67:a7:57:f5:48:4f:af:6f:4d:02:00:3e: c0:fc:2a:08:85:3a:1b:2f:dc:4c:af:91:66:70:9a: da:1d:6c:68:64:fc:96:8b:8d:b0:c3:f6:21:b0:b0: 38:ae:16:81:16:17:b2:4a:21:5a:5d:80:0b:db:5a: 40:79:9c:ed:6a:cc:2f:7f:11:3e:9b:02:ac:27:2b: 71:ab:31:3f:96:d3:69:ed:5b:59:41:ed:df:37:ab: 1b:73:5a:9f:a1:3e:4c:f6:5d:a3:08:1b:8d:8b:bd: 1c:ba:9f:e6:27:e4:31:b1:9d:f2:4c:df:c7:21:b0: dc:b8:87:95:cf:80:9b:ba:0e:07:7e:27:7b:e8:c5: 03:75:e2:34:5e:9e:86:86:08:c9:f8:bb:8e:9a:96: af:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:96:1F:03:3F:C8:1C:CD:CD:8B:E3:1A:F6:C0:C2:D3:41:00:BC:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/1a402687-73f0-38f9-b900-9c98f4cd0bd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 199.35.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:cf:e7:bc:c0:81:e4:41:27:ab:08:f9:64:4c:12:33:b7:f8: b3:ce:5d:61:21:01:ba:95:db:0b:f8:8d:68:a2:46:88:df:ec: 8f:c6:7a:1e:a9:e5:39:49:e0:4f:2f:5d:fe:07:68:42:35:83: cf:30:7a:52:d6:45:90:86:9f:b0:e0:74:7f:b7:ab:30:b8:77: 78:f6:25:f0:1c:bd:d0:3d:78:ce:1e:d3:f6:ab:b8:73:6c:5f: 2a:09:55:63:99:12:74:ea:0a:ed:45:17:92:05:eb:4f:4f:ba: 4b:ed:86:a5:12:a1:34:7b:13:cf:6b:3a:40:a5:8d:c4:71:36: 85:9d:fe:95:74:40:4d:53:9f:c9:1b:8b:ff:62:e3:6b:a3:80: 6b:58:7d:9a:58:17:fe:a1:ca:b2:3f:7c:93:da:40:ab:a9:df: 53:ed:91:64:5f:29:44:57:98:9c:29:74:71:d6:f7:4c:65:bb: c0:ba:1b:db:76:ed:5d:de:c7:4d:38:f9:fb:19:c5:f0:4b:d6: 45:5b:e3:74:5e:d7:a2:e9:1b:99:e8:d4:36:ad:e4:46:07:b1: 19:2d:9f:a0:20:db:b2:5f:07:e1:a7:54:85:02:5e:ae:f8:57: 9c:7d:01:3d:85:37:0d:e2:5d:f9:6e:e0:6c:ca:cb:a9:e8:b3: 22:a2:ee:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqm9ize+YE42NecLaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDcyNzAxMDA0OVoXDTI1MTAyNTAxMDA0OVowLzEtMCsGA1UEAxMk ZmFmOWU1N2ItMzE2OS00N2YyLWExMzktYmQ5MmEzMzA0ZTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMxQmdFytkZLQU4VY8fEYh6u6XaQcOKTrcgm KnC/u4x0/gAkLf/HBpyY1pmhoIPHU4leblrnXXLcdHwHxetp62KIjF2PPQ6S5I7Y w+gLHFpLbiZT+SYo1/Ov9xLPu1hCMxEUMsr5T2YDLppnp1f1SE+vb00CAD7A/CoI hTobL9xMr5FmcJraHWxoZPyWi42ww/YhsLA4rhaBFheySiFaXYAL21pAeZztaswv fxE+mwKsJytxqzE/ltNp7VtZQe3fN6sbc1qfoT5M9l2jCBuNi70cup/mJ+QxsZ3y TN/HIbDcuIeVz4Cbug4Hfid76MUDdeI0Xp6GhgjJ+LuOmpavAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK2WHwM/yBzNzYvjGvbAwtNBALx+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMWE0MDI2ODctNzNmMC0z OGY5LWI5MDAtOWM5OGY0Y2QwYmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHxyOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7P57zAgeRBJ6sI+WRMEjO3+LPOXWEhAbqV2wv4jWiiRojf7I/Geh6p 5TlJ4E8vXf4HaEI1g88welLWRZCGn7DgdH+3qzC4d3j2JfAcvdA9eM4e0/aruHNs XyoJVWOZEnTqCu1FF5IF609PukvthqUSoTR7E89rOkCljcRxNoWd/pV0QE1Tn8kb i/9i42ujgGtYfZpYF/6hyrI/fJPaQKup31PtkWRfKURXmJwpdHHW90xlu8C6G9t2 7V3ex004+fsZxfBL1kVb43Re16LpG5no1Dat5EYHsRktn6Ag27JfB+GnVIUCXq74 V5x9AT2FNw3iXflu4GzKy6nosyKi7pc= -----END CERTIFICATE-----Generated at Thu Jul 31 02:10:13 2025 by rpki-client