$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bf30da6-02ba-45ce-94e7-031c45374cd8/654d6eb1-c7c0-32a5-b89c-a3d89e52a0be.roa File: 654d6eb1-c7c0-32a5-b89c-a3d89e52a0be.roa (raw, json) Hash identifier: 0v4EqMa0hMRZBIearCe7zS/0CGgn2y9ClObQz0VwNpc= Subject key identifier: 2E:FD:A2:ED:80:38:0E:F9:2E:8F:80:88:D1:F6:1B:DF:C5:55:14:0E Certificate issuer: /CN=9bf30da6-02ba-45ce-94e7-031c45374cd8 Certificate serial: 010D0C9F4328584AD332BA2EF3E234E386C1F400 Authority key identifier: 99:C8:82:90:49:B0:19:59:FD:B5:80:ED:C3:62:94:EA:1A:8B:45:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bf30da6-02ba-45ce-94e7-031c45374cd8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bf30da6-02ba-45ce-94e7-031c45374cd8/654d6eb1-c7c0-32a5-b89c-a3d89e52a0be.roa Signing time: Mon 11 Aug 2025 21:18:32 +0000 ROA not before: Mon 11 Aug 2025 21:18:32 +0000 ROA not after: Sun 09 Nov 2025 22:18:32 +0000 asID: 22652 IP address blocks: 199.38.96.0/24 maxlen: 24 199.38.97.0/24 maxlen: 24 199.38.98.0/24 maxlen: 24 199.38.99.0/24 maxlen: 24 199.38.100.0/24 maxlen: 24 199.38.101.0/24 maxlen: 24 199.38.102.0/24 maxlen: 24 199.38.103.0/24 maxlen: 24 2607:3840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bf30da6-02ba-45ce-94e7-031c45374cd8/9bf30da6-02ba-45ce-94e7-031c45374cd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bf30da6-02ba-45ce-94e7-031c45374cd8/9bf30da6-02ba-45ce-94e7-031c45374cd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bf30da6-02ba-45ce-94e7-031c45374cd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:32:ba:2e:f3:e2:34:e3:86:c1:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bf30da6-02ba-45ce-94e7-031c45374cd8 Validity Not Before: Aug 11 21:18:32 2025 GMT Not After : Nov 9 22:18:32 2025 GMT Subject: CN=8c0d4a45-6b47-4ed1-9e06-08d0321b5435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a5:8b:a2:70:e3:43:c6:de:ca:06:e8:d8:a5: 33:50:8d:55:f9:75:5b:bb:e7:b8:2f:27:7f:cd:4d: 59:39:46:d0:55:5e:2b:47:7e:60:09:51:8d:5b:97: 8c:df:b0:08:c0:fe:c1:81:06:0c:6d:1e:be:5b:69: 04:c5:44:af:25:8e:0a:af:63:8e:ec:4c:47:1d:3d: 47:ae:05:4b:62:9e:84:8f:dd:c7:f0:69:34:c1:7d: 4d:a6:26:89:8f:66:4c:f5:f5:0c:ef:f2:13:46:69: ec:6d:59:b3:fc:13:27:7d:e4:5b:f8:2d:70:55:50: e2:80:dd:64:80:6f:44:99:88:ee:c8:45:4c:3d:69: 4c:91:91:84:f8:e9:7d:10:b5:d9:9c:a0:e3:b4:8e: 0b:d8:9a:6f:4f:c6:83:9f:37:a1:a0:a3:7b:3a:9a: b5:b5:e3:40:a9:98:6f:4a:b3:3e:7d:15:b1:e0:4d: d9:75:a6:8e:79:aa:92:bd:aa:d6:e8:7d:08:18:c8: 6f:42:f1:0e:95:42:cc:fe:81:6b:23:fb:67:36:11: 86:52:81:c8:f5:93:d7:8a:65:f0:d4:69:19:87:7f: 01:c5:ad:a2:7b:30:9a:9d:72:6f:a7:64:c3:30:76: 44:e0:ab:de:c0:92:4d:05:da:58:1f:cf:33:05:dc: 54:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:FD:A2:ED:80:38:0E:F9:2E:8F:80:88:D1:F6:1B:DF:C5:55:14:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bf30da6-02ba-45ce-94e7-031c45374cd8/654d6eb1-c7c0-32a5-b89c-a3d89e52a0be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bf30da6-02ba-45ce-94e7-031c45374cd8/9bf30da6-02ba-45ce-94e7-031c45374cd8.crl X509v3 Authority Key Identifier: keyid:99:C8:82:90:49:B0:19:59:FD:B5:80:ED:C3:62:94:EA:1A:8B:45:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bf30da6-02ba-45ce-94e7-031c45374cd8.cer sbgp-ipAddrBlock: critical IPv4: 199.38.96.0/21 IPv6: 2607:3840::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:ef:18:48:f0:9e:fc:28:47:99:87:2e:3a:64:93:24:60:d4: a3:be:6c:74:3f:dd:ce:d0:d0:43:39:9f:3b:a6:30:f2:89:78: 4a:4c:23:6f:c6:5e:3e:f7:90:24:c4:a4:0f:82:10:33:36:04: 85:32:9b:87:c0:f0:e5:62:4b:4e:8d:57:03:d2:74:7a:fe:07: f3:80:1b:37:c8:57:e5:83:24:27:5b:a2:38:7a:42:46:54:25: b7:90:2c:47:e3:24:e3:8a:ff:3e:07:b5:27:95:c2:fb:06:a0: 72:90:d0:99:88:74:b7:2e:62:89:db:cc:5c:07:8e:e1:a0:23: a8:78:68:04:c8:15:02:82:5d:28:e8:7d:28:7d:66:ee:39:db: 46:66:74:59:aa:9e:6a:8d:45:fe:7d:90:72:b1:9f:a6:8a:b1: 9d:6b:d8:46:73:c8:0e:9c:2b:b7:26:10:cf:e8:3c:9a:d4:ad: 6d:5d:0c:f7:4f:95:13:81:8f:78:66:88:9c:98:fc:0f:3f:98: a0:c4:ea:a9:7f:a5:f3:e0:6a:b9:00:94:db:35:eb:d4:94:b9: 14:9f:34:07:64:c6:5a:4a:28:d1:3a:96:53:57:9b:32:5c:ef: 4d:b9:f3:a6:87:d2:32:38:a9:a8:24:e2:8e:12:b6:ff:dc:43: 42:b0:92:48 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWErTMrou8+I044bB9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWJmMzBkYTYtMDJiYS00NWNlLTk0ZTctMDMxYzQ1Mzc0 Y2Q4MB4XDTI1MDgxMTIxMTgzMloXDTI1MTEwOTIyMTgzMlowLzEtMCsGA1UEAxMk OGMwZDRhNDUtNmI0Ny00ZWQxLTllMDYtMDhkMDMyMWI1NDM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6WLonDjQ8beygbo2KUzUI1V+XVbu+e4Lyd/ zU1ZOUbQVV4rR35gCVGNW5eM37AIwP7BgQYMbR6+W2kExUSvJY4Kr2OO7ExHHT1H rgVLYp6Ej93H8Gk0wX1NpiaJj2ZM9fUM7/ITRmnsbVmz/BMnfeRb+C1wVVDigN1k gG9EmYjuyEVMPWlMkZGE+Ol9ELXZnKDjtI4L2JpvT8aDnzehoKN7Opq1teNAqZhv SrM+fRWx4E3ZdaaOeaqSvarW6H0IGMhvQvEOlULM/oFrI/tnNhGGUoHI9ZPXimXw 1GkZh38Bxa2iezCanXJvp2TDMHZE4KvewJJNBdpYH88zBdxU5QIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFC79ou2AOA75Lo+AiNH2G9/FVRQOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85YmYz MGRhNi0wMmJhLTQ1Y2UtOTRlNy0wMzFjNDUzNzRjZDgvNjU0ZDZlYjEtYzdjMC0z MmE1LWI4OWMtYTNkODllNTJhMGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOWJmMzBkYTYtMDJiYS00NWNlLTk0 ZTctMDMxYzQ1Mzc0Y2Q4LzliZjMwZGE2LTAyYmEtNDVjZS05NGU3LTAzMWM0NTM3 NGNkOC5jcmwwHwYDVR0jBBgwFoAUmciCkEmwGVn9tYDtw2KU6hqLRR4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85YmYzMGRhNi0wMmJhLTQ1Y2UtOTRlNy0wMzFj NDUzNzRjZDguY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDxyZgMA0E AgACMAcDBQAmBzhAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAITvGEjwnvwoR5mHLjpkkyRg1KO+bHQ/3c7Q 0EM5nzumMPKJeEpMI2/GXj73kCTEpA+CEDM2BIUym4fA8OViS06NVwPSdHr+B/OA GzfIV+WDJCdbojh6QkZUJbeQLEfjJOOK/z4HtSeVwvsGoHKQ0JmIdLcuYonbzFwH juGgI6h4aATIFQKCXSjofSh9Zu4520ZmdFmqnmqNRf59kHKxn6aKsZ1r2EZzyA6c K7cmEM/oPJrUrW1dDPdPlROBj3hmiJyY/A8/mKDE6ql/pfPgarkAlNs169SUuRSf NAdkxlpKKNE6llNXmzJc702586aH0jI4qagk4o4Stv/cQ0Kwkkg= -----END CERTIFICATE-----Generated at Wed Aug 20 10:42:41 2025 by rpki-client