$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bf30da6-02ba-45ce-94e7-031c45374cd8/7722da27-45e1-3732-a4d4-8186e8994e5d.roa File: 7722da27-45e1-3732-a4d4-8186e8994e5d.roa (raw, json) Hash identifier: Cm0+/mqCwhssw2FGTJGSCpVTiMgaLXf8VxG4CtdNM58= Subject key identifier: 5F:DC:C5:A2:2E:B0:BE:D5:8D:FF:69:FB:83:CB:F3:CF:19:7C:13:B8 Certificate issuer: /CN=9bf30da6-02ba-45ce-94e7-031c45374cd8 Certificate serial: 010D0C9F4328584AD3CC0E7D9E17A8D8DE3C6480 Authority key identifier: 99:C8:82:90:49:B0:19:59:FD:B5:80:ED:C3:62:94:EA:1A:8B:45:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bf30da6-02ba-45ce-94e7-031c45374cd8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bf30da6-02ba-45ce-94e7-031c45374cd8/7722da27-45e1-3732-a4d4-8186e8994e5d.roa Signing time: Tue 12 Aug 2025 02:27:28 +0000 ROA not before: Tue 12 Aug 2025 02:27:28 +0000 ROA not after: Mon 10 Nov 2025 03:27:28 +0000 asID: 22748 IP address blocks: 199.38.96.0/24 maxlen: 24 199.38.97.0/24 maxlen: 24 199.38.98.0/24 maxlen: 24 199.38.99.0/24 maxlen: 24 199.38.100.0/24 maxlen: 24 199.38.101.0/24 maxlen: 24 199.38.102.0/24 maxlen: 24 199.38.103.0/24 maxlen: 24 2607:3840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bf30da6-02ba-45ce-94e7-031c45374cd8/9bf30da6-02ba-45ce-94e7-031c45374cd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bf30da6-02ba-45ce-94e7-031c45374cd8/9bf30da6-02ba-45ce-94e7-031c45374cd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bf30da6-02ba-45ce-94e7-031c45374cd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:cc:0e:7d:9e:17:a8:d8:de:3c:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bf30da6-02ba-45ce-94e7-031c45374cd8 Validity Not Before: Aug 12 02:27:28 2025 GMT Not After : Nov 10 03:27:28 2025 GMT Subject: CN=a8826a7d-9db5-4287-b89f-67c4740a43a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:af:58:e2:66:c7:b8:85:ec:99:ba:30:7c:fb: 11:ba:da:f8:d9:23:46:75:0f:31:af:31:de:00:fe: bd:93:e3:18:02:1d:83:a1:6a:bf:3a:2e:12:79:c9: b9:23:7f:77:7c:3d:40:ce:57:3b:9f:d6:fa:db:94: 0f:4e:5d:d4:02:c9:c7:0d:be:7a:71:b8:30:cc:51: cd:b8:87:e5:7a:3d:46:71:4f:08:a8:49:22:c0:58: dd:88:f4:6b:4b:df:ff:18:ae:1f:d8:73:be:2b:8b: 54:58:5a:ed:13:46:a7:be:47:9d:f8:2e:2b:68:57: e7:fb:fa:d9:69:da:5f:60:71:31:be:8c:d3:f8:23: 6c:4c:aa:e1:7d:52:51:4e:97:07:d8:07:04:7c:97: c6:9e:96:fc:1a:7c:68:13:e2:0f:b0:4a:60:58:f8: 1f:32:f6:c3:8e:34:38:4a:02:33:be:f7:fc:58:a6: 70:06:ef:84:7c:1e:7d:66:50:38:36:b5:f2:d9:8e: 7f:7f:ba:ce:ee:50:fe:b7:2a:04:9e:b7:c3:14:31: f7:fe:f2:49:b2:2c:c2:84:c8:8e:b6:63:c3:78:1c: a4:34:f5:56:30:f8:78:d5:d0:d2:a7:54:a3:f0:7c: 56:14:49:bb:eb:c7:e2:d5:52:20:cb:43:c1:15:47: 2f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:DC:C5:A2:2E:B0:BE:D5:8D:FF:69:FB:83:CB:F3:CF:19:7C:13:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bf30da6-02ba-45ce-94e7-031c45374cd8/7722da27-45e1-3732-a4d4-8186e8994e5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bf30da6-02ba-45ce-94e7-031c45374cd8/9bf30da6-02ba-45ce-94e7-031c45374cd8.crl X509v3 Authority Key Identifier: keyid:99:C8:82:90:49:B0:19:59:FD:B5:80:ED:C3:62:94:EA:1A:8B:45:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bf30da6-02ba-45ce-94e7-031c45374cd8.cer sbgp-ipAddrBlock: critical IPv4: 199.38.96.0/21 IPv6: 2607:3840::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:61:e7:68:28:d8:b0:a7:5d:d1:41:ce:d0:e4:3d:43:a0:57: d8:69:51:af:df:c5:69:6c:48:1c:04:92:cd:e4:58:57:68:de: d9:e8:12:cc:9e:27:ad:66:4c:8f:ae:0f:e6:d6:31:46:50:53: d2:c6:78:2a:8a:2c:72:fc:25:39:f4:f0:eb:e2:8e:9c:e0:1e: c5:f2:42:95:71:85:2a:63:88:54:72:23:5f:fd:af:77:0e:0e: ff:0f:18:0a:9d:b2:75:00:08:d2:b8:84:c9:35:36:c6:d8:fa: 60:f5:2e:ef:f7:4b:07:87:e1:56:5a:84:70:d8:52:02:4a:e8: 56:78:04:4b:f7:98:73:54:c3:99:0f:b1:b8:b0:aa:8b:18:bb: 9d:6f:1f:20:4c:51:99:89:62:44:6f:23:e1:ec:ed:89:32:d4: 56:a0:c4:f7:b4:97:72:62:a0:7a:16:c1:8e:cb:12:bc:16:3f: eb:15:5c:f5:27:71:78:ff:90:5b:c4:00:ff:87:e2:0e:32:92: af:26:aa:28:05:99:5e:b7:90:bf:61:9d:9e:0f:07:43:f3:da: ab:46:60:c7:81:f1:d7:d2:23:84:1b:e4:05:c6:d2:ca:ae:27: c3:f0:fa:cf:e5:cd:7d:4c:66:3a:74:60:d5:c1:57:cb:4d:88: 56:df:95:51 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWErTzA59nheo2N48ZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWJmMzBkYTYtMDJiYS00NWNlLTk0ZTctMDMxYzQ1Mzc0 Y2Q4MB4XDTI1MDgxMjAyMjcyOFoXDTI1MTExMDAzMjcyOFowLzEtMCsGA1UEAxMk YTg4MjZhN2QtOWRiNS00Mjg3LWI4OWYtNjdjNDc0MGE0M2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAua9Y4mbHuIXsmbowfPsRutr42SNGdQ8xrzHe AP69k+MYAh2DoWq/Oi4Secm5I393fD1Azlc7n9b625QPTl3UAsnHDb56cbgwzFHN uIflej1GcU8IqEkiwFjdiPRrS9//GK4f2HO+K4tUWFrtE0anvked+C4raFfn+/rZ adpfYHExvozT+CNsTKrhfVJRTpcH2AcEfJfGnpb8GnxoE+IPsEpgWPgfMvbDjjQ4 SgIzvvf8WKZwBu+EfB59ZlA4NrXy2Y5/f7rO7lD+tyoEnrfDFDH3/vJJsizChMiO tmPDeBykNPVWMPh41dDSp1Sj8HxWFEm768fi1VIgy0PBFUcvKQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFF/cxaIusL7Vjf9p+4PL888ZfBO4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85YmYz MGRhNi0wMmJhLTQ1Y2UtOTRlNy0wMzFjNDUzNzRjZDgvNzcyMmRhMjctNDVlMS0z NzMyLWE0ZDQtODE4NmU4OTk0ZTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOWJmMzBkYTYtMDJiYS00NWNlLTk0 ZTctMDMxYzQ1Mzc0Y2Q4LzliZjMwZGE2LTAyYmEtNDVjZS05NGU3LTAzMWM0NTM3 NGNkOC5jcmwwHwYDVR0jBBgwFoAUmciCkEmwGVn9tYDtw2KU6hqLRR4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85YmYzMGRhNi0wMmJhLTQ1Y2UtOTRlNy0wMzFj NDUzNzRjZDguY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDxyZgMA0E AgACMAcDBQAmBzhAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAERh52go2LCnXdFBztDkPUOgV9hpUa/fxWls SBwEks3kWFdo3tnoEsyeJ61mTI+uD+bWMUZQU9LGeCqKLHL8JTn08OvijpzgHsXy QpVxhSpjiFRyI1/9r3cODv8PGAqdsnUACNK4hMk1NsbY+mD1Lu/3SweH4VZahHDY UgJK6FZ4BEv3mHNUw5kPsbiwqosYu51vHyBMUZmJYkRvI+Hs7Yky1FagxPe0l3Ji oHoWwY7LErwWP+sVXPUncXj/kFvEAP+H4g4ykq8mqigFmV63kL9hnZ4PB0Pz2qtG YMeB8dfSI4Qb5AXG0squJ8Pw+s/lzX1MZjp0YNXBV8tNiFbflVE= -----END CERTIFICATE-----Generated at Wed Aug 20 13:12:56 2025 by rpki-client