$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/ca9437ab-3b47-3b28-9b71-b7f4e42135dc.roa File: ca9437ab-3b47-3b28-9b71-b7f4e42135dc.roa (raw, json) Hash identifier: lApao/w2w9BEu9Fm1/UkDPdofDuy7ZhqHvKomas/mHk= Subject key identifier: C2:88:7A:E2:D8:CB:DB:E4:01:D1:5C:63:A5:4B:78:8E:A9:9F:E9:4E Certificate issuer: /CN=d455139a-f627-4743-8284-7fbd2f76dd8b Certificate serial: 010D0C9F4328584A4970614BF0FB378EA00B5760 Authority key identifier: 05:07:B2:96:74:08:2D:02:EF:EC:F8:37:85:3C:62:40:1C:25:37:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/ca9437ab-3b47-3b28-9b71-b7f4e42135dc.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 16509 IP address blocks: 199.255.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:61:4b:f0:fb:37:8e:a0:0b:57:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d455139a-f627-4743-8284-7fbd2f76dd8b Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=0366bd75-f777-4e2d-b045-e43b191d2de2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:2b:f4:0d:dd:0c:13:84:03:48:93:2f:06:6e: 4d:51:79:fc:ab:d6:d5:11:d1:85:9d:a7:ef:3b:c4: 21:7b:b6:3e:25:d5:56:a9:87:7b:8f:d7:25:16:87: 6d:67:1f:05:af:51:ff:90:84:82:2c:0f:a7:b0:36: 78:b1:13:f3:7f:2a:2f:90:b0:54:74:c8:c7:d2:cc: 83:ec:dd:50:de:45:57:0d:b9:6e:69:43:a1:f2:97: 91:81:77:67:d7:e2:b4:d7:cf:2c:39:3e:05:63:49: ec:cc:de:0f:1f:72:5e:7c:1f:57:8b:93:ce:60:90: 39:2c:a9:cb:5c:40:2a:e2:e9:d4:c1:1b:57:2a:ce: a2:91:34:92:2a:9c:54:54:5b:93:e1:97:fc:90:cd: 09:fa:a7:fa:e3:e2:be:dd:40:c6:93:90:02:58:e4: 06:b6:f6:5e:0d:59:53:d0:bf:cf:7f:1d:96:0c:34: ee:21:0b:68:62:4c:90:c0:b2:40:1a:df:eb:4c:67: eb:32:8d:f4:eb:26:82:19:b8:63:d0:5a:ef:b3:2b: 6e:70:3a:a9:a2:16:79:e5:d2:26:b7:27:53:7e:1d: db:4a:97:30:cd:4c:62:57:cf:1c:2e:9b:f6:ed:cb: 9c:9d:46:3e:89:20:5d:30:1c:c1:50:18:32:2c:75: 4a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:88:7A:E2:D8:CB:DB:E4:01:D1:5C:63:A5:4B:78:8E:A9:9F:E9:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/ca9437ab-3b47-3b28-9b71-b7f4e42135dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.crl X509v3 Authority Key Identifier: keyid:05:07:B2:96:74:08:2D:02:EF:EC:F8:37:85:3C:62:40:1C:25:37:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b.cer sbgp-ipAddrBlock: critical IPv4: 199.255.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:fa:09:f6:28:69:7d:35:06:28:72:25:e0:bf:82:de:50:9e: 16:0a:22:64:ef:e0:9c:84:b2:1c:d0:2b:ad:30:2b:4f:9f:b2: 4c:49:3c:33:f3:84:9f:54:18:77:d6:e3:54:f9:fb:e9:10:55: 49:8c:e2:da:38:10:ca:ab:4c:61:2f:12:af:41:6b:c9:d5:39: 65:1d:7b:4d:63:ff:71:d7:cd:60:32:f2:d1:83:9f:d8:4c:8d: 90:32:67:60:9e:a3:06:65:d0:91:23:12:bb:6e:3c:a0:64:f7: 6b:f5:40:3b:62:d5:64:b3:25:6a:3a:47:4a:71:6f:bc:31:93: 8d:1a:c8:29:42:e7:aa:32:1b:d4:d1:c9:21:a2:be:ed:da:16: 80:44:32:82:b7:a5:fe:ba:01:5f:c0:5a:eb:78:8c:80:19:29: 43:8a:7a:fe:64:94:d2:36:d4:ee:61:ea:4d:9e:36:5b:5d:a7: 51:5d:ae:a7:d8:d6:31:e4:44:cf:60:0a:cd:5e:d4:ef:4e:c8: c2:04:61:b6:f4:79:4a:d0:ce:d2:98:91:67:f1:7c:9c:77:a8: 1d:80:b5:ae:1f:36:47:8e:3c:14:91:a1:fb:68:b0:33:47:89: 3c:14:89:58:6c:b2:34:74:f7:e0:c5:54:4f:8c:45:72:29:a6: ab:35:b6:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcGFL8Ps3jqALV2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NTEzOWEtZjYyNy00NzQzLTgyODQtN2ZiZDJmNzZk ZDhiMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk MDM2NmJkNzUtZjc3Ny00ZTJkLWIwNDUtZTQzYjE5MWQyZGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSv0Dd0ME4QDSJMvBm5NUXn8q9bVEdGFnafv O8Qhe7Y+JdVWqYd7j9clFodtZx8Fr1H/kISCLA+nsDZ4sRPzfyovkLBUdMjH0syD 7N1Q3kVXDbluaUOh8peRgXdn1+K0188sOT4FY0nszN4PH3JefB9Xi5POYJA5LKnL XEAq4unUwRtXKs6ikTSSKpxUVFuT4Zf8kM0J+qf64+K+3UDGk5ACWOQGtvZeDVlT 0L/Pfx2WDDTuIQtoYkyQwLJAGt/rTGfrMo306yaCGbhj0FrvsytucDqpohZ55dIm tydTfh3bSpcwzUxiV88cLpv27cucnUY+iSBdMBzBUBgyLHVKPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMKIeuLYy9vkAdFcY6VLeI6pn+lOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNDU1 MTM5YS1mNjI3LTQ3NDMtODI4NC03ZmJkMmY3NmRkOGIvY2E5NDM3YWItM2I0Ny0z YjI4LTliNzEtYjdmNGU0MjEzNWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDQ1NTEzOWEtZjYyNy00NzQzLTgy ODQtN2ZiZDJmNzZkZDhiL2Q0NTUxMzlhLWY2MjctNDc0My04Mjg0LTdmYmQyZjc2 ZGQ4Yi5jcmwwHwYDVR0jBBgwFoAUBQeylnQILQLv7Pg3hTxiQBwlN6owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNDU1MTM5YS1mNjI3LTQ3NDMtODI4NC03ZmJk MmY3NmRkOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx//wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIj6CfYoaX01BihyJeC/gt5QnhYKImTv4JyEshzQK60wK0+fskxJPDPz hJ9UGHfW41T5++kQVUmM4to4EMqrTGEvEq9Ba8nVOWUde01j/3HXzWAy8tGDn9hM jZAyZ2CeowZl0JEjErtuPKBk92v1QDti1WSzJWo6R0pxb7wxk40ayClC56oyG9TR ySGivu3aFoBEMoK3pf66AV/AWut4jIAZKUOKev5klNI21O5h6k2eNltdp1FdrqfY 1jHkRM9gCs1e1O9OyMIEYbb0eUrQztKYkWfxfJx3qB2Ata4fNkeOPBSRoftosDNH iTwUiVhssjR09+DFVE+MRXIppqs1tic= -----END CERTIFICATE-----Generated at Wed Aug 20 13:19:27 2025 by rpki-client