$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/d9130e45-ea0d-3373-b9c3-2b0c7395a2fd.roa File: d9130e45-ea0d-3373-b9c3-2b0c7395a2fd.roa (raw, json) Hash identifier: uVOrbQsgw/31P6ag5ZrparmCxv7GyRpBOehyq9rHwmE= Subject key identifier: E4:2C:E9:52:CA:56:5C:29:E8:28:5F:8C:21:66:DB:C3:36:47:9F:26 Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Certificate serial: 010D0C9F4328584AB4EF04D37FC8E530B79C7B00 Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/d9130e45-ea0d-3373-b9c3-2b0c7395a2fd.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 3477 IP address blocks: 199.242.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ef:04:d3:7f:c8:e5:30:b7:9c:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=34290cf0-56b6-43cf-a0b1-2ac6df163f40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ea:88:9b:14:15:48:c0:d6:a7:fa:b0:f8:cf: e3:08:21:74:df:e4:74:5e:6d:47:a0:cb:a6:5d:66: d6:03:cc:04:b7:cc:b7:75:04:df:4f:ae:1e:1c:64: 95:63:64:e1:a3:3c:01:d3:9e:80:42:90:65:a2:97: 5e:15:07:04:53:3c:36:c7:16:36:87:97:9a:2b:1d: 60:3c:02:e4:8b:bd:d7:57:34:0a:33:70:2e:eb:69: b3:e9:b1:9f:9a:25:5b:96:10:a7:6c:b6:9a:c5:13: fc:08:3a:09:9d:1a:21:57:26:7a:db:84:bc:03:7a: fc:97:8d:68:4e:59:ea:7f:29:7a:c1:d7:71:bb:6d: cd:d6:91:88:06:68:e8:47:7c:40:59:6e:bf:da:4c: 02:fc:13:70:97:69:20:18:39:d9:25:2c:48:34:d9: 03:63:c3:2f:92:00:cc:e1:e3:44:70:f1:52:e1:f0: 7a:d6:b4:dc:f5:27:a3:99:dc:01:1b:12:e3:0a:eb: bd:19:c4:46:e7:c8:19:19:d9:82:af:13:eb:e0:c3: f5:c9:aa:ff:a5:7a:ed:3b:be:3f:a7:c6:1d:49:28: 83:46:3c:ef:d2:6c:b7:c5:f5:65:aa:f7:a9:39:22: b5:1d:57:a1:34:ee:de:c2:22:41:67:39:ab:27:00: 36:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:2C:E9:52:CA:56:5C:29:E8:28:5F:8C:21:66:DB:C3:36:47:9F:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/d9130e45-ea0d-3373-b9c3-2b0c7395a2fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl X509v3 Authority Key Identifier: keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer sbgp-ipAddrBlock: critical IPv4: 199.242.232.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:94:d7:a6:b1:33:07:38:f2:15:fe:e3:dd:80:24:56:3b:ee: 9b:4a:aa:9a:6e:79:bf:21:5e:da:85:a9:bd:e1:98:3c:08:76: 9d:d2:52:c0:35:27:ef:8b:58:92:f5:52:f1:80:54:1b:a7:b3: 73:02:0f:ef:63:80:30:1f:65:0c:41:f3:34:ac:fe:58:c3:a5: de:23:9b:d5:6b:76:ef:5f:56:96:d7:fa:5c:58:83:c5:db:92: 39:8e:ae:81:67:2d:d2:3a:c6:5d:76:f1:ea:81:e1:a6:90:88: 2d:19:c0:69:2b:14:4d:79:19:b7:e7:14:23:a1:86:57:6f:a5: 02:72:ea:07:9c:39:da:db:0a:6b:0c:9d:80:1e:d0:0c:4f:b8: e9:d5:02:f5:6e:d6:ce:d7:71:d6:84:93:cd:a7:29:1e:b3:84: 58:7a:07:d7:f7:f6:31:0b:8e:36:f4:5f:3c:30:40:98:6c:ed: 3b:3b:bb:3a:64:c4:f4:76:00:a7:35:bd:2f:85:dc:4b:b5:9b: 3d:c3:ac:12:8d:d2:7e:9a:5d:f2:39:28:4d:3a:cf:42:49:72: ab:6c:f2:79:eb:99:cd:7d:4b:45:6d:a4:dc:43:3d:4e:10:16: d1:61:38:2b:78:d3:cd:42:e6:e9:d6:6e:c7:44:f2:ab:d2:77: 5c:ac:7e:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07wTTf8jlMLecewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzVlMTM4ZGEtZGJhMy00ZDg5LWFiM2YtNjU2ZmJhNGI5 YzIwMB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk MzQyOTBjZjAtNTZiNi00M2NmLWEwYjEtMmFjNmRmMTYzZjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeqImxQVSMDWp/qw+M/jCCF03+R0Xm1HoMum XWbWA8wEt8y3dQTfT64eHGSVY2ThozwB056AQpBlopdeFQcEUzw2xxY2h5eaKx1g PALki73XVzQKM3Au62mz6bGfmiVblhCnbLaaxRP8CDoJnRohVyZ624S8A3r8l41o Tlnqfyl6wddxu23N1pGIBmjoR3xAWW6/2kwC/BNwl2kgGDnZJSxINNkDY8MvkgDM 4eNEcPFS4fB61rTc9SejmdwBGxLjCuu9GcRG58gZGdmCrxPr4MP1yar/pXrtO74/ p8YdSSiDRjzv0my3xfVlqvepOSK1HVehNO7ewiJBZzmrJwA2dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQs6VLKVlwp6ChfjCFm28M2R58mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NWUx MzhkYS1kYmEzLTRkODktYWIzZi02NTZmYmE0YjljMjAvZDkxMzBlNDUtZWEwZC0z MzczLWI5YzMtMmIwYzczOTVhMmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzVlMTM4ZGEtZGJhMy00ZDg5LWFi M2YtNjU2ZmJhNGI5YzIwLzc1ZTEzOGRhLWRiYTMtNGQ4OS1hYjNmLTY1NmZiYTRi OWMyMC5jcmwwHwYDVR0jBBgwFoAUWY+WJt0yBRKzMlQ7ckHYRmR2yWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83NWUxMzhkYS1kYmEzLTRkODktYWIzZi02NTZm YmE0YjljMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx/LoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuU16axMwc48hX+492AJFY77ptKqppueb8hXtqFqb3hmDwIdp3SUsA1 J++LWJL1UvGAVBuns3MCD+9jgDAfZQxB8zSs/ljDpd4jm9Vrdu9fVpbX+lxYg8Xb kjmOroFnLdI6xl128eqB4aaQiC0ZwGkrFE15GbfnFCOhhldvpQJy6gecOdrbCmsM nYAe0AxPuOnVAvVu1s7XcdaEk82nKR6zhFh6B9f39jELjjb0XzwwQJhs7Ts7uzpk xPR2AKc1vS+F3Eu1mz3DrBKN0n6aXfI5KE06z0JJcqts8nnrmc19S0VtpNxDPU4Q FtFhOCt4081C5unWbsdE8qvSd1ysftA= -----END CERTIFICATE-----Generated at Tue Aug 5 16:37:31 2025 by rpki-client