$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/0999b1e3-4785-38ae-a00d-63b70427c4f0.roa File: 0999b1e3-4785-38ae-a00d-63b70427c4f0.roa (raw, json) Hash identifier: RHh+1IoFWbjjvjmaveiOOkOPjAcwk+/lZtTnCWpryHg= Subject key identifier: FA:75:28:AC:98:94:03:7E:8A:57:31:A3:C1:8D:4E:E8:F3:B5:74:78 Certificate issuer: /CN=822ab581-a0b4-4f01-9ab1-8dac6d881508 Certificate serial: 010D0C9F4328584A7E7B5BCAC5CC2E1300DE63B0 Authority key identifier: 41:AB:0B:AD:05:EC:30:E9:3C:36:D9:74:0F:59:A2:B6:07:1D:5A:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/0999b1e3-4785-38ae-a00d-63b70427c4f0.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 14618 IP address blocks: 192.190.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/822ab581-a0b4-4f01-9ab1-8dac6d881508.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/822ab581-a0b4-4f01-9ab1-8dac6d881508.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:5b:ca:c5:cc:2e:13:00:de:63:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=822ab581-a0b4-4f01-9ab1-8dac6d881508 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=07c6f952-c40d-4f5f-8e2f-92cd77858086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:2f:4d:cf:0b:59:32:81:7b:aa:12:40:e0:f4: 6f:69:f2:0e:64:fb:89:5f:87:82:f1:b0:50:b5:20: f0:9f:99:fe:0c:3e:de:b3:79:1f:c3:d4:c2:cc:c7: 60:6f:c6:60:26:4a:6b:13:1c:f1:9c:ec:4a:2b:b0: 32:eb:85:89:76:9a:ad:f5:a3:51:9e:e7:fe:7c:36: 1c:de:d7:63:66:93:39:b8:bc:33:27:0a:1a:d9:8f: 4f:e3:61:92:f9:da:fe:b6:c2:97:71:43:a2:b3:fc: 12:bf:28:18:2c:17:e0:5c:a3:0a:39:c0:b5:65:14: 14:7c:c5:2f:72:60:14:ae:93:81:f1:e8:a1:45:83: 23:77:92:4d:67:71:12:d6:b9:62:3f:36:16:52:81: c9:09:80:41:70:3e:ad:b0:d3:c7:f9:c1:93:19:06: ce:cb:13:3b:17:2b:f4:45:4d:8a:7b:7b:8e:c7:36: be:ff:e4:db:4a:04:d8:69:0c:4b:d6:e5:de:e7:d6: 6e:38:b8:60:72:bd:b8:30:0a:49:71:a2:9d:2d:e5: 8c:f4:c0:e5:2e:4d:16:29:30:fe:79:8c:18:04:e0: 2e:d2:6c:8f:ef:32:4e:f1:eb:27:08:d5:71:f2:64: 0d:5c:37:01:3b:60:98:26:12:27:07:72:d9:5f:be: d5:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:75:28:AC:98:94:03:7E:8A:57:31:A3:C1:8D:4E:E8:F3:B5:74:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/0999b1e3-4785-38ae-a00d-63b70427c4f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/822ab581-a0b4-4f01-9ab1-8dac6d881508.crl X509v3 Authority Key Identifier: keyid:41:AB:0B:AD:05:EC:30:E9:3C:36:D9:74:0F:59:A2:B6:07:1D:5A:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508.cer sbgp-ipAddrBlock: critical IPv4: 192.190.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:9c:aa:9f:e2:54:e0:61:c8:cd:26:9c:7b:7e:05:26:67:b8: f8:38:fe:66:c1:27:2b:15:f7:e2:ca:d6:a2:b7:30:b9:62:1c: 0c:50:ff:6d:c8:0c:51:bf:94:d2:db:c1:6c:01:9c:b7:eb:d9: a7:2b:16:6f:91:ed:f1:6d:97:6b:a9:09:75:8a:15:e9:66:43: 60:9e:cf:ea:04:be:bd:a1:1a:9b:99:39:de:c8:61:1c:f2:a9: 32:76:06:c5:df:8f:d3:0e:04:62:09:fc:c0:15:2c:06:7c:c2: 77:13:be:86:b3:ae:6e:97:bc:8d:23:21:ff:a8:d6:aa:b5:e0: 22:25:ae:aa:0f:cb:d5:b0:15:3a:bc:72:1c:cc:5e:f8:72:75: 60:4f:b8:cd:ff:fa:8c:17:d2:a2:c3:19:c4:25:14:98:ef:f7: ac:7c:c3:a2:4e:78:ad:dd:2c:69:9a:a3:75:a4:6a:93:31:fe: ef:c6:ee:ad:c5:ee:d4:7d:20:3e:6e:90:d7:f6:28:b1:0a:1f: ef:2f:22:a2:df:d8:b3:16:2d:f0:e3:10:b5:d8:89:26:7a:8c: 06:a2:05:51:76:2e:9b:8f:9e:dc:a9:b7:8c:2b:c1:ff:36:5a: db:08:5b:03:bb:b2:32:d5:5c:99:7d:38:41:e9:e9:cc:6f:29: 3c:c4:3c:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e1vKxcwuEwDeY7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIyYWI1ODEtYTBiNC00ZjAxLTlhYjEtOGRhYzZkODgx NTA4MB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk MDdjNmY5NTItYzQwZC00ZjVmLThlMmYtOTJjZDc3ODU4MDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlC9NzwtZMoF7qhJA4PRvafIOZPuJX4eC8bBQ tSDwn5n+DD7es3kfw9TCzMdgb8ZgJkprExzxnOxKK7Ay64WJdpqt9aNRnuf+fDYc 3tdjZpM5uLwzJwoa2Y9P42GS+dr+tsKXcUOis/wSvygYLBfgXKMKOcC1ZRQUfMUv cmAUrpOB8eihRYMjd5JNZ3ES1rliPzYWUoHJCYBBcD6tsNPH+cGTGQbOyxM7Fyv0 RU2Ke3uOxza+/+TbSgTYaQxL1uXe59ZuOLhgcr24MApJcaKdLeWM9MDlLk0WKTD+ eYwYBOAu0myP7zJO8esnCNVx8mQNXDcBO2CYJhInB3LZX77VnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPp1KKyYlAN+ilcxo8GNTujztXR4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84MjJh YjU4MS1hMGI0LTRmMDEtOWFiMS04ZGFjNmQ4ODE1MDgvMDk5OWIxZTMtNDc4NS0z OGFlLWEwMGQtNjNiNzA0MjdjNGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODIyYWI1ODEtYTBiNC00ZjAxLTlh YjEtOGRhYzZkODgxNTA4LzgyMmFiNTgxLWEwYjQtNGYwMS05YWIxLThkYWM2ZDg4 MTUwOC5jcmwwHwYDVR0jBBgwFoAUQasLrQXsMOk8Ntl0D1mitgcdWtEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84MjJhYjU4MS1hMGI0LTRmMDEtOWFiMS04ZGFj NmQ4ODE1MDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwL7tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+cqp/iVOBhyM0mnHt+BSZnuPg4/mbBJysV9+LK1qK3MLliHAxQ/23I DFG/lNLbwWwBnLfr2acrFm+R7fFtl2upCXWKFelmQ2Cez+oEvr2hGpuZOd7IYRzy qTJ2BsXfj9MOBGIJ/MAVLAZ8wncTvoazrm6XvI0jIf+o1qq14CIlrqoPy9WwFTq8 chzMXvhydWBPuM3/+owX0qLDGcQlFJjv96x8w6JOeK3dLGmao3WkapMx/u/G7q3F 7tR9ID5ukNf2KLEKH+8vIqLf2LMWLfDjELXYiSZ6jAaiBVF2LpuPntypt4wrwf82 WtsIWwO7sjLVXJl9OEHp6cxvKTzEPNE= -----END CERTIFICATE-----Generated at Fri Aug 8 00:44:13 2025 by rpki-client