$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5d42a494-a697-43ad-93a4-e9456779ed9a/99e556d5-93d1-3e21-bd16-71af71731fec.roa File: 99e556d5-93d1-3e21-bd16-71af71731fec.roa (raw, json) Hash identifier: LGl5fWFeTNVGzJdfz0WwDhNo7pHx0X6HvmnLIlIEc3w= Subject key identifier: 2E:F6:EB:95:CE:ED:22:50:28:A4:8F:4C:D0:BA:AF:0A:F9:FF:5F:CF Certificate issuer: /CN=5d42a494-a697-43ad-93a4-e9456779ed9a Certificate serial: 010D0C9F4328584AECC2143793259168078D8CC0 Authority key identifier: D8:20:80:25:0E:59:5F:0E:FC:52:D3:76:D6:77:CB:AA:0F:2D:09:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5d42a494-a697-43ad-93a4-e9456779ed9a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5d42a494-a697-43ad-93a4-e9456779ed9a/99e556d5-93d1-3e21-bd16-71af71731fec.roa Signing time: Thu 21 Aug 2025 01:02:35 +0000 ROA not before: Thu 21 Aug 2025 01:02:35 +0000 ROA not after: Wed 19 Nov 2025 02:02:35 +0000 asID: 32086 IP address blocks: 204.115.254.0/23 maxlen: 24 2620:44:8000::/48 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5d42a494-a697-43ad-93a4-e9456779ed9a/5d42a494-a697-43ad-93a4-e9456779ed9a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5d42a494-a697-43ad-93a4-e9456779ed9a/5d42a494-a697-43ad-93a4-e9456779ed9a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5d42a494-a697-43ad-93a4-e9456779ed9a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:14:37:93:25:91:68:07:8d:8c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d42a494-a697-43ad-93a4-e9456779ed9a Validity Not Before: Aug 21 01:02:35 2025 GMT Not After : Nov 19 02:02:35 2025 GMT Subject: CN=116f6bdc-78dd-4e9f-9953-b819cca89e95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:1a:47:25:e9:3c:d9:ed:a1:cb:17:66:11:ea: 2d:e2:bb:07:94:34:7e:c3:ac:09:07:bd:ce:3b:68: 93:2d:b0:4a:87:75:7f:52:bd:b9:af:66:b8:02:26: 8d:02:48:ed:79:ad:f0:10:54:bb:2a:f1:00:8a:b5: 19:7e:a8:35:04:7a:b3:5b:dc:e2:62:94:78:52:b2: f9:15:85:50:b4:5b:fb:2e:07:6c:b0:7f:e4:9d:db: 56:a5:07:2b:81:ce:6e:00:b2:0f:5c:0c:7f:84:bc: b5:a2:ad:af:c0:bd:64:87:44:54:4a:08:e1:37:6a: 3b:47:24:50:0a:e1:60:9a:c9:51:e0:b6:5c:3e:ae: ac:07:ce:71:75:87:1a:96:0a:4e:bb:b5:8e:59:09: 1a:aa:f0:e4:86:28:c9:be:6f:b5:19:d8:f8:94:19: a8:a9:36:c1:a4:5e:d8:bb:a9:8a:96:6f:e5:f4:6c: 01:8b:f6:d6:78:a4:09:e3:ca:9f:c7:90:33:00:dc: 96:f7:58:b3:0b:eb:b3:e8:d5:e5:02:3d:a9:f8:9a: e8:36:83:43:c1:9c:72:38:99:d2:ad:ea:45:18:32: ad:f4:d3:e0:c0:f5:86:af:49:3e:37:67:f2:b5:88: 6c:d5:ea:30:62:74:61:f5:61:69:d4:3a:16:2d:a0: 19:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:F6:EB:95:CE:ED:22:50:28:A4:8F:4C:D0:BA:AF:0A:F9:FF:5F:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5d42a494-a697-43ad-93a4-e9456779ed9a/99e556d5-93d1-3e21-bd16-71af71731fec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5d42a494-a697-43ad-93a4-e9456779ed9a/5d42a494-a697-43ad-93a4-e9456779ed9a.crl X509v3 Authority Key Identifier: keyid:D8:20:80:25:0E:59:5F:0E:FC:52:D3:76:D6:77:CB:AA:0F:2D:09:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5d42a494-a697-43ad-93a4-e9456779ed9a.cer sbgp-ipAddrBlock: critical IPv4: 204.115.254.0/23 IPv6: 2620:44:8000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:7c:d3:93:92:61:f6:a5:a7:28:52:02:52:4f:ba:15:e4:4a: 17:8c:9b:c9:c4:aa:cb:fe:8a:34:1a:2b:69:73:d5:64:74:ef: 74:4e:61:0c:a0:91:fb:e0:86:de:64:a0:22:56:10:3e:de:e4: 9d:89:08:bf:d8:e0:25:aa:66:bb:b4:b9:11:a8:21:29:e4:c2: 9c:a1:03:4d:09:f1:da:4e:60:10:5d:9e:df:48:c1:91:ae:9c: 77:b5:95:90:75:ab:7f:7b:63:fd:5b:71:6b:18:63:47:08:ea: 71:2e:9a:dd:fc:c9:76:6a:33:31:6d:d1:27:40:c5:e0:09:7b: 2d:cf:c0:96:7e:b1:30:df:20:06:c4:a6:a4:bd:b5:99:e7:11: da:ae:0e:5d:b9:42:40:7a:01:e7:f1:2f:6d:d8:9e:df:24:ee: d0:2b:44:7c:a3:7a:6e:d3:99:a9:b8:7d:ed:3a:1e:29:09:61: a3:06:11:44:51:8e:ea:45:a3:a2:38:b1:14:cd:7d:72:f8:46: 0f:90:f3:2e:7a:c9:e8:d5:03:bf:c4:9e:c9:36:f0:40:72:9c: f7:17:ad:e2:f8:d6:96:28:84:40:82:b6:2b:6c:b2:d2:5d:74: df:f3:ff:56:3c:a6:73:f3:b4:68:11:10:0a:7b:8f:c3:cc:3a: a0:32:9a:49 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWErswhQ3kyWRaAeNjMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ0MmE0OTQtYTY5Ny00M2FkLTkzYTQtZTk0NTY3Nzll ZDlhMB4XDTI1MDgyMTAxMDIzNVoXDTI1MTExOTAyMDIzNVowLzEtMCsGA1UEAxMk MTE2ZjZiZGMtNzhkZC00ZTlmLTk5NTMtYjgxOWNjYTg5ZTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBpHJek82e2hyxdmEeot4rsHlDR+w6wJB73O O2iTLbBKh3V/Ur25r2a4AiaNAkjtea3wEFS7KvEAirUZfqg1BHqzW9ziYpR4UrL5 FYVQtFv7LgdssH/kndtWpQcrgc5uALIPXAx/hLy1oq2vwL1kh0RUSgjhN2o7RyRQ CuFgmslR4LZcPq6sB85xdYcalgpOu7WOWQkaqvDkhijJvm+1Gdj4lBmoqTbBpF7Y u6mKlm/l9GwBi/bWeKQJ48qfx5AzANyW91izC+uz6NXlAj2p+JroNoNDwZxyOJnS repFGDKt9NPgwPWGr0k+N2fytYhs1eowYnRh9WFp1DoWLaAZbwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFC7265XO7SJQKKSPTNC6rwr5/1/PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81ZDQy YTQ5NC1hNjk3LTQzYWQtOTNhNC1lOTQ1Njc3OWVkOWEvOTllNTU2ZDUtOTNkMS0z ZTIxLWJkMTYtNzFhZjcxNzMxZmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWQ0MmE0OTQtYTY5Ny00M2FkLTkz YTQtZTk0NTY3NzllZDlhLzVkNDJhNDk0LWE2OTctNDNhZC05M2E0LWU5NDU2Nzc5 ZWQ5YS5jcmwwHwYDVR0jBBgwFoAU2CCAJQ5ZXw78UtN21nfLqg8tCeIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81ZDQyYTQ5NC1hNjk3LTQzYWQtOTNhNC1lOTQ1 Njc3OWVkOWEuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBzHP+MA8E AgACMAkDBwAmIABEgAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAoHzTk5Jh9qWnKFICUk+6FeRKF4ybycSq y/6KNBoraXPVZHTvdE5hDKCR++CG3mSgIlYQPt7knYkIv9jgJapmu7S5EaghKeTC nKEDTQnx2k5gEF2e30jBka6cd7WVkHWrf3tj/VtxaxhjRwjqcS6a3fzJdmozMW3R J0DF4Al7Lc/Aln6xMN8gBsSmpL21mecR2q4OXblCQHoB5/Evbdie3yTu0CtEfKN6 btOZqbh97ToeKQlhowYRRFGO6kWjojixFM19cvhGD5DzLnrJ6NUDv8SeyTbwQHKc 9xet4vjWliiEQIK2K2yy0l103/P/Vjymc/O0aBEQCnuPw8w6oDKaSQ== -----END CERTIFICATE-----Generated at Thu Aug 21 14:21:20 2025 by rpki-client