$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e/295d7e62-9ba8-30e9-976f-7b86d221816e.roa File: 295d7e62-9ba8-30e9-976f-7b86d221816e.roa (raw, json) Hash identifier: j9x6SFhOHZ1oMPyNHAuJG71R73eRq0j5W0pm++oiyuk= Subject key identifier: 99:12:23:F4:DD:43:58:D2:C7:50:DC:B0:58:51:1A:05:66:0E:32:BF Certificate issuer: /CN=a57f543d-54f7-4dd6-a478-95849cb77e5e Certificate serial: 010D0C9F4328584AB220D0DB2BF43D750C45AF00 Authority key identifier: CD:02:D8:4E:6E:D1:32:04:CA:3F:38:D8:21:96:7D:BB:E0:34:9D:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e/295d7e62-9ba8-30e9-976f-7b86d221816e.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 14618 IP address blocks: 162.219.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e/a57f543d-54f7-4dd6-a478-95849cb77e5e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e/a57f543d-54f7-4dd6-a478-95849cb77e5e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 03 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:20:d0:db:2b:f4:3d:75:0c:45:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a57f543d-54f7-4dd6-a478-95849cb77e5e Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=f2446f4d-09ed-4dbf-9351-9238f6e2325f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ff:0f:99:cc:34:37:21:37:f0:b5:8a:d2:dd: 43:89:1c:8c:ca:8f:79:70:a9:e1:e4:26:c1:19:ee: 1c:32:bf:ba:c3:e0:18:30:69:93:e7:be:5d:dd:f8: 47:9f:df:71:5a:a4:ca:62:7d:b5:ab:57:c1:cb:89: c3:b3:03:b8:e4:b9:d4:c8:af:33:e2:36:c9:31:a7: fe:ad:4e:a8:5e:5d:aa:b8:a8:d6:5a:00:f8:49:04: a1:8b:73:6e:9d:2e:90:fd:db:ce:f6:e9:a0:bb:fb: 7e:cb:0d:91:67:11:c5:e6:ac:09:25:a2:87:70:5a: 10:ab:b4:2c:36:42:d8:a3:fd:be:c9:43:bc:c8:32: c1:2c:c2:1a:58:9b:d0:e7:e5:54:42:79:60:3c:46: c8:da:02:84:5b:5f:26:47:04:30:9e:11:54:74:16: 3f:68:4c:4b:45:13:02:b8:57:de:6d:c9:b8:7b:14: 77:d2:fd:e5:f0:9d:e0:42:d5:2e:31:a5:59:9a:59: 13:d3:5a:77:92:8e:aa:2d:e9:c9:f4:6f:48:c2:5e: d1:92:f6:77:99:b6:2a:c9:a2:ae:be:6d:c5:da:7e: 9f:7e:b5:3c:13:2a:bc:c0:62:cd:c4:74:70:af:90: 69:67:66:a2:fa:af:09:b3:54:77:79:ad:50:a5:2d: 77:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:12:23:F4:DD:43:58:D2:C7:50:DC:B0:58:51:1A:05:66:0E:32:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e/295d7e62-9ba8-30e9-976f-7b86d221816e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e/a57f543d-54f7-4dd6-a478-95849cb77e5e.crl X509v3 Authority Key Identifier: keyid:CD:02:D8:4E:6E:D1:32:04:CA:3F:38:D8:21:96:7D:BB:E0:34:9D:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e.cer sbgp-ipAddrBlock: critical IPv4: 162.219.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:07:cf:1f:4a:f1:ff:70:3e:21:ee:1d:3b:6f:53:ae:d7:9f: 74:0d:24:4e:19:78:fc:97:b4:ac:d0:52:22:44:17:b3:7c:6c: a8:e8:f3:e4:9b:d3:3d:14:ce:e3:c1:35:4e:9d:fb:94:ca:73: 05:7f:1c:a2:6c:4e:86:70:a0:39:ea:71:47:63:7a:a4:0b:60: 84:e9:9a:99:4f:fa:a9:35:32:7f:85:91:90:26:82:62:86:4a: aa:c5:df:f0:87:fd:c6:1f:e1:9c:31:e0:f6:01:ae:35:26:ed: a5:4a:d3:b9:bf:2d:ae:24:41:78:19:6f:7b:81:f5:6e:2f:4b: 22:66:00:53:9e:dd:b3:bc:9b:30:3c:39:d1:2e:ee:cc:26:77: 8a:d5:68:db:bc:d5:69:ea:05:60:a7:18:f2:51:27:36:50:72: 86:ec:d7:5c:e7:4d:1b:ea:b4:2a:71:b2:3a:85:34:52:a2:25: 52:22:2c:39:12:46:0d:79:f0:27:bd:c7:de:4f:34:f0:e5:e4: 1a:20:72:39:b3:9e:cc:e4:46:3b:ac:20:66:c1:72:71:94:e8: 37:00:43:de:45:0e:32:d3:2e:13:a8:32:70:0e:c1:17:6e:74: 2d:0e:46:62:31:98:73:22:38:ca:f1:02:0b:ce:6e:e4:7f:93: 3b:eb:b9:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyINDbK/Q9dQxFrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTU3ZjU0M2QtNTRmNy00ZGQ2LWE0NzgtOTU4NDljYjc3 ZTVlMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZjI0NDZmNGQtMDllZC00ZGJmLTkzNTEtOTIzOGY2ZTIzMjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmP8Pmcw0NyE38LWK0t1DiRyMyo95cKnh5CbB Ge4cMr+6w+AYMGmT575d3fhHn99xWqTKYn21q1fBy4nDswO45LnUyK8z4jbJMaf+ rU6oXl2quKjWWgD4SQShi3NunS6Q/dvO9umgu/t+yw2RZxHF5qwJJaKHcFoQq7Qs NkLYo/2+yUO8yDLBLMIaWJvQ5+VUQnlgPEbI2gKEW18mRwQwnhFUdBY/aExLRRMC uFfebcm4exR30v3l8J3gQtUuMaVZmlkT01p3ko6qLenJ9G9Iwl7RkvZ3mbYqyaKu vm3F2n6ffrU8Eyq8wGLNxHRwr5BpZ2ai+q8Js1R3ea1QpS13wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJkSI/TdQ1jSx1DcsFhRGgVmDjK/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hNTdm NTQzZC01NGY3LTRkZDYtYTQ3OC05NTg0OWNiNzdlNWUvMjk1ZDdlNjItOWJhOC0z MGU5LTk3NmYtN2I4NmQyMjE4MTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYTU3ZjU0M2QtNTRmNy00ZGQ2LWE0 NzgtOTU4NDljYjc3ZTVlL2E1N2Y1NDNkLTU0ZjctNGRkNi1hNDc4LTk1ODQ5Y2I3 N2U1ZS5jcmwwHwYDVR0jBBgwFoAUzQLYTm7RMgTKPzjYIZZ9u+A0nZowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hNTdmNTQzZC01NGY3LTRkZDYtYTQ3OC05NTg0 OWNiNzdlNWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDotsIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0Hzx9K8f9wPiHuHTtvU67Xn3QNJE4ZePyXtKzQUiJEF7N8bKjo8+Sb 0z0UzuPBNU6d+5TKcwV/HKJsToZwoDnqcUdjeqQLYITpmplP+qk1Mn+FkZAmgmKG SqrF3/CH/cYf4Zwx4PYBrjUm7aVK07m/La4kQXgZb3uB9W4vSyJmAFOe3bO8mzA8 OdEu7swmd4rVaNu81WnqBWCnGPJRJzZQcobs11znTRvqtCpxsjqFNFKiJVIiLDkS Rg158Ce9x95PNPDl5BogcjmznszkRjusIGbBcnGU6DcAQ95FDjLTLhOoMnAOwRdu dC0ORmIxmHMiOMrxAgvObuR/kzvruXQ= -----END CERTIFICATE-----Generated at Sat Aug 2 05:24:51 2025 by rpki-client