$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0343b711-b166-32e1-a57e-37f4a9a72c7d.roa File: 0343b711-b166-32e1-a57e-37f4a9a72c7d.roa (raw, json) Hash identifier: Qv3hNSj41aUxHou1y+GZFtn8V8z6rHwwj5AzFbt1/Ik= Subject key identifier: 43:AD:1A:D7:A8:D4:5C:9C:F3:5F:00:F8:B3:C1:4F:43:B3:F9:FD:D4 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584ABAB00CFDB254DE341BA6EEE0 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0343b711-b166-32e1-a57e-37f4a9a72c7d.roa Signing time: Sun 03 Aug 2025 02:35:50 +0000 ROA not before: Sun 03 Aug 2025 02:35:50 +0000 ROA not after: Sat 01 Nov 2025 02:35:50 +0000 asID: 62044 IP address blocks: 209.55.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ba:b0:0c:fd:b2:54:de:34:1b:a6:ee:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Aug 3 02:35:50 2025 GMT Not After : Nov 1 02:35:50 2025 GMT Subject: CN=41bc97e5-a98e-446c-a72b-6401e1beb8f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c3:8d:24:ae:2d:88:7b:0d:c3:83:bd:e4:1a: 92:ec:25:d9:80:d3:49:13:0b:26:ba:5e:0d:a3:f7: 73:76:25:85:29:7c:ae:de:af:24:8a:5a:9e:33:7e: 21:45:33:d5:92:3a:90:24:b1:0a:0c:15:c0:d4:35: 1a:f5:99:b8:ed:87:33:82:0e:02:5e:7a:7e:8b:ef: b1:8c:bc:dd:33:de:d9:ef:45:c7:26:eb:ff:d8:42: 9b:47:8e:38:49:72:18:04:53:30:b2:b5:b4:ac:ce: c4:2a:04:b4:ad:cb:bd:8d:b5:4f:3e:ae:f4:c0:eb: a2:d9:df:09:9d:83:8b:23:b8:ca:98:00:00:df:2b: a3:98:a7:8a:e7:7e:f7:20:9b:aa:9c:19:12:1a:9f: 41:ba:3e:d1:57:fa:e0:3d:56:2b:a1:5c:2b:d6:3b: 70:f0:b9:6c:05:84:06:5c:db:1f:d9:71:52:ee:00: 5c:7c:4d:8c:2d:47:01:d0:bc:9d:13:42:fa:fe:f4: ca:d5:52:bc:89:56:db:d6:43:e5:ab:f4:8f:db:3b: 60:87:98:6d:e9:f2:81:9f:3f:31:cc:b0:65:45:df: c4:1e:c9:b0:c0:d3:3c:ed:ed:a7:ec:70:1f:b7:47: c4:b0:e9:d3:88:36:0b:4e:9f:f4:b3:b8:c9:a7:48: 43:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:AD:1A:D7:A8:D4:5C:9C:F3:5F:00:F8:B3:C1:4F:43:B3:F9:FD:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0343b711-b166-32e1-a57e-37f4a9a72c7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 209.55.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:54:a0:18:9a:11:85:4a:62:e2:2e:cd:9c:33:60:6c:6d:f8: 71:bc:04:7f:7a:4f:3a:bb:18:10:fa:3c:62:71:7f:b6:04:b2: 23:cb:1c:01:f8:ea:64:6d:6e:5e:9c:8a:75:39:0f:24:ee:c2: 54:bf:63:ad:f9:e0:4e:cd:7d:ec:67:b0:5f:e3:f1:94:24:26: ae:c6:fe:19:3c:17:07:0b:3a:78:37:ed:78:a8:1c:d8:87:83: 2b:5e:0a:ed:26:58:11:d6:ef:db:5b:c0:d1:2e:fb:cc:a3:db: f9:de:62:45:b4:18:19:bc:5d:63:78:cf:50:21:2b:c1:81:97: 7c:ff:31:32:4f:45:57:b7:00:5c:82:d9:4b:ea:a6:a3:2e:a5: d3:22:eb:b6:fc:3e:63:e6:96:e8:17:c4:39:ce:ef:ec:13:51: b7:da:86:fa:58:3c:68:28:81:ba:c1:a0:4b:c6:d0:80:b1:53: 26:cb:ee:26:97:18:f3:b7:e7:fa:ea:9e:43:58:67:07:2e:4a: c7:be:a0:45:28:f7:85:af:a6:b4:9a:b6:48:5a:98:41:0d:f3: a5:e2:27:76:e8:63:77:7c:ba:4c:87:07:f0:10:fc:1b:f2:7f: 69:4d:13:05:f6:5d:f1:2c:67:b4:95:23:b7:10:ed:eb:69:da: 15:3e:b3:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq6sAz9slTeNBum7uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDgwMzAyMzU1MFoXDTI1MTEwMTAyMzU1MFowLzEtMCsGA1UEAxMk NDFiYzk3ZTUtYTk4ZS00NDZjLWE3MmItNjQwMWUxYmViOGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcONJK4tiHsNw4O95BqS7CXZgNNJEwsmul4N o/dzdiWFKXyu3q8kilqeM34hRTPVkjqQJLEKDBXA1DUa9Zm47Yczgg4CXnp+i++x jLzdM97Z70XHJuv/2EKbR444SXIYBFMwsrW0rM7EKgS0rcu9jbVPPq70wOui2d8J nYOLI7jKmAAA3yujmKeK5373IJuqnBkSGp9Buj7RV/rgPVYroVwr1jtw8LlsBYQG XNsf2XFS7gBcfE2MLUcB0LydE0L6/vTK1VK8iVbb1kPlq/SP2ztgh5ht6fKBnz8x zLBlRd/EHsmwwNM87e2n7HAft0fEsOnTiDYLTp/0s7jJp0hDvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEOtGteo1Fyc818A+LPBT0Oz+f3UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMDM0M2I3MTEtYjE2Ni0z MmUxLWE1N2UtMzdmNGE5YTcyYzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TePMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFUoBiaEYVKYuIuzZwzYGxt+HG8BH96Tzq7GBD6PGJxf7YEsiPLHAH4 6mRtbl6cinU5DyTuwlS/Y6354E7NfexnsF/j8ZQkJq7G/hk8FwcLOng37XioHNiH gyteCu0mWBHW79tbwNEu+8yj2/neYkW0GBm8XWN4z1AhK8GBl3z/MTJPRVe3AFyC 2UvqpqMupdMi67b8PmPmlugXxDnO7+wTUbfahvpYPGgogbrBoEvG0ICxUybL7iaX GPO35/rqnkNYZwcuSse+oEUo94WvprSatkhamEEN86XiJ3boY3d8ukyHB/AQ/Bvy f2lNEwX2XfEsZ7SVI7cQ7etp2hU+s38= -----END CERTIFICATE-----Generated at Tue Aug 5 16:43:32 2025 by rpki-client