$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa/09da335a-7bde-3f25-9732-e626e6be5353.roa File: 09da335a-7bde-3f25-9732-e626e6be5353.roa (raw, json) Hash identifier: BM1Xde+AY9zSLFWh+XLTg2BS5Bgaog3m+F2sgN0QLuA= Subject key identifier: 2F:68:A5:BF:AD:5D:F8:EB:41:9E:A8:A4:1C:35:AD:5A:95:0D:C1:C1 Certificate issuer: /CN=d2442e49-fb31-4bf7-aee6-2a7033a57cfa Certificate serial: 010D0C9F4328584AE461227E0D675BDC8CFB4300 Authority key identifier: 37:A2:03:56:95:92:2C:35:BD:99:C2:5A:9B:82:20:77:73:14:1E:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa/09da335a-7bde-3f25-9732-e626e6be5353.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 16509 IP address blocks: 199.193.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa/d2442e49-fb31-4bf7-aee6-2a7033a57cfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa/d2442e49-fb31-4bf7-aee6-2a7033a57cfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:22:7e:0d:67:5b:dc:8c:fb:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2442e49-fb31-4bf7-aee6-2a7033a57cfa Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=073fcd77-1505-4e42-9385-594087f4a538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:78:27:f9:e7:8e:67:bc:e1:c1:3b:e3:05:8e: 9d:21:11:4e:b8:d1:2a:8a:8c:2b:8f:24:ba:19:bb: c2:f2:45:f2:09:c9:5d:5c:9c:04:b5:b1:68:fb:6b: aa:ff:10:45:6a:a1:ce:de:f6:83:6f:fe:fc:43:02: c9:3c:02:cd:2e:9f:3e:97:81:8c:08:f0:8b:0b:97: dc:ac:2d:f2:fb:4c:49:21:f5:b9:18:27:a4:67:c5: d5:d7:7d:99:96:e9:74:d1:95:9e:b2:da:89:62:be: 7d:e8:99:e6:31:ce:08:4c:47:e1:21:6a:64:5d:62: cd:01:a4:5e:03:91:d5:94:37:83:c3:12:8f:03:f2: bc:d2:97:2a:e6:5f:9f:09:f2:9b:29:01:92:d7:f8: d2:3c:4c:0f:3a:2b:cd:d1:ee:f0:0a:1a:b2:d7:84: e5:b5:93:87:99:b0:a9:04:73:f9:c9:51:4a:9b:9b: 6d:9e:be:ce:87:f5:64:0d:de:a4:bf:97:00:b7:a0: e2:5e:b5:f6:cf:80:3d:5d:19:a8:37:f9:59:36:bf: 42:69:ef:41:81:20:28:be:a4:d1:46:b2:62:7a:ae: ab:90:8a:04:d9:65:5f:78:e3:ae:b8:50:00:d9:8d: b5:21:72:fa:ab:fe:f4:38:58:29:b6:1a:01:fd:d1: 35:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:68:A5:BF:AD:5D:F8:EB:41:9E:A8:A4:1C:35:AD:5A:95:0D:C1:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa/09da335a-7bde-3f25-9732-e626e6be5353.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa/d2442e49-fb31-4bf7-aee6-2a7033a57cfa.crl X509v3 Authority Key Identifier: keyid:37:A2:03:56:95:92:2C:35:BD:99:C2:5A:9B:82:20:77:73:14:1E:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa.cer sbgp-ipAddrBlock: critical IPv4: 199.193.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:3c:2a:75:72:a4:fd:37:ff:bc:28:ae:fc:82:95:4a:8e:81: 21:ba:36:55:83:b5:e4:3a:36:55:de:88:15:85:9e:f7:4f:12: d1:53:eb:2a:44:0f:ad:9a:2c:46:34:06:18:67:59:c2:d0:03: a2:6f:9a:49:b2:23:d1:e8:30:8f:b2:db:79:d3:ee:9d:df:3c: 6a:3d:a3:9b:cb:1a:c3:08:65:32:3f:42:75:07:3b:ab:42:cc: 7f:92:4f:a6:ad:a6:57:7c:31:6e:49:07:6b:6f:15:58:33:7f: 30:98:b9:62:7e:6f:0f:08:96:8f:8f:eb:8c:2c:48:01:ad:a5: 82:33:07:ea:25:6b:a1:52:3e:07:37:2c:a1:7e:04:cd:7e:3d: c9:de:9f:f7:bb:a1:23:71:4a:1c:17:d4:15:0a:a4:27:c2:29: f0:68:29:a1:d4:3a:00:09:84:22:b3:96:17:d4:d2:94:2e:af: 39:ce:ef:11:42:08:db:c9:e1:51:ca:25:8d:38:48:a6:52:ab: a6:f1:90:85:84:d8:60:c4:fa:31:8d:cc:cd:68:ec:6d:7b:03: d4:00:a4:f9:eb:de:d5:fa:fd:27:7c:d8:f6:cc:58:c1:f1:af: 15:19:a4:e3:2e:4d:a5:d7:11:fa:3f:6d:a8:fd:4a:0e:e6:15: e8:f9:4e:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYSJ+DWdb3Iz7QwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDI0NDJlNDktZmIzMS00YmY3LWFlZTYtMmE3MDMzYTU3 Y2ZhMB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk MDczZmNkNzctMTUwNS00ZTQyLTkzODUtNTk0MDg3ZjRhNTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhngn+eeOZ7zhwTvjBY6dIRFOuNEqiowrjyS6 GbvC8kXyCcldXJwEtbFo+2uq/xBFaqHO3vaDb/78QwLJPALNLp8+l4GMCPCLC5fc rC3y+0xJIfW5GCekZ8XV132Zlul00ZWestqJYr596JnmMc4ITEfhIWpkXWLNAaRe A5HVlDeDwxKPA/K80pcq5l+fCfKbKQGS1/jSPEwPOivN0e7wChqy14TltZOHmbCp BHP5yVFKm5ttnr7Oh/VkDd6kv5cAt6DiXrX2z4A9XRmoN/lZNr9Cae9BgSAovqTR RrJieq6rkIoE2WVfeOOuuFAA2Y21IXL6q/70OFgpthoB/dE1YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC9opb+tXfjrQZ6opBw1rVqVDcHBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kMjQ0 MmU0OS1mYjMxLTRiZjctYWVlNi0yYTcwMzNhNTdjZmEvMDlkYTMzNWEtN2JkZS0z ZjI1LTk3MzItZTYyNmU2YmU1MzUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDI0NDJlNDktZmIzMS00YmY3LWFl ZTYtMmE3MDMzYTU3Y2ZhL2QyNDQyZTQ5LWZiMzEtNGJmNy1hZWU2LTJhNzAzM2E1 N2NmYS5jcmwwHwYDVR0jBBgwFoAUN6IDVpWSLDW9mcJam4Igd3MUHn0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kMjQ0MmU0OS1mYjMxLTRiZjctYWVlNi0yYTcw MzNhNTdjZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx8GJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJo8KnVypP03/7worvyClUqOgSG6NlWDteQ6NlXeiBWFnvdPEtFT6ypE D62aLEY0BhhnWcLQA6JvmkmyI9HoMI+y23nT7p3fPGo9o5vLGsMIZTI/QnUHO6tC zH+ST6atpld8MW5JB2tvFVgzfzCYuWJ+bw8Ilo+P64wsSAGtpYIzB+ola6FSPgc3 LKF+BM1+Pcnen/e7oSNxShwX1BUKpCfCKfBoKaHUOgAJhCKzlhfU0pQurznO7xFC CNvJ4VHKJY04SKZSq6bxkIWE2GDE+jGNzM1o7G17A9QApPnr3tX6/Sd82PbMWMHx rxUZpOMuTaXXEfo/baj9Sg7mFej5TvE= -----END CERTIFICATE-----Generated at Wed Aug 20 10:43:31 2025 by rpki-client