$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/4fbf2e6d-2935-36c0-8e49-fd5a8e002992.roa File: 4fbf2e6d-2935-36c0-8e49-fd5a8e002992.roa (raw, json) Hash identifier: 7O7Okn63Q/m6esw5k9nkHZCki5KlMoIQe57Xbe0iB7o= Subject key identifier: 9C:AF:BD:F7:F8:0B:A3:0B:EB:2C:09:08:25:EC:3C:2D:CC:9B:B8:D4 Certificate issuer: /CN=17e20fae-392b-4b22-b475-c6dff7142fa6 Certificate serial: 010D0C9F4328584AAB264A9F977BCA29FBDA1F80 Authority key identifier: A1:92:8C:F9:58:DA:45:07:22:A0:BC:C9:76:E1:3D:EE:08:F7:66:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/4fbf2e6d-2935-36c0-8e49-fd5a8e002992.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 715 IP address blocks: 199.120.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/17e20fae-392b-4b22-b475-c6dff7142fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/17e20fae-392b-4b22-b475-c6dff7142fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:4a:9f:97:7b:ca:29:fb:da:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17e20fae-392b-4b22-b475-c6dff7142fa6 Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=2f5428b0-ac35-4af6-a2e3-62f882bf6850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e4:a2:48:fb:0a:38:e4:28:64:a6:50:9e:46: 1a:99:89:ad:b6:87:e8:72:be:bd:71:4a:37:ee:f9: 9c:9e:fe:89:14:a4:cb:f2:5f:70:49:cb:16:b3:76: bf:11:e8:1a:ec:c5:a3:a7:15:fc:7b:ad:65:b8:8d: 89:78:76:08:b0:bd:b9:52:0a:87:7e:c6:21:d7:44: d6:d2:2e:d3:15:0e:34:d0:eb:d1:bf:8e:35:2a:75: 97:b2:c1:29:1c:51:5a:c4:29:a9:57:67:0a:d5:0d: ff:89:b3:15:a4:80:14:ef:f3:e7:e3:85:e0:45:1c: d7:21:10:db:c9:d2:48:d2:84:7b:d7:f6:d6:15:c0: 04:4b:2c:bc:2e:97:3e:18:dd:94:ed:8b:13:c7:32: 1e:36:81:2d:4f:a5:0f:58:de:36:e2:b5:22:e2:aa: ff:15:be:11:31:8e:0e:e7:93:5d:1d:8e:2d:f8:2e: 87:76:77:27:a0:44:c7:e8:5b:db:ad:63:44:d8:71: 8e:65:8b:f0:1b:cf:ce:ae:fe:79:db:68:2e:ec:dd: a0:eb:3b:84:f5:fb:a8:43:91:9f:b2:28:77:3b:a8: b7:a9:10:1a:da:67:fe:96:6c:ab:ae:9e:89:7e:7a: ce:2e:d8:d5:c7:28:2b:74:69:55:c8:92:6d:40:22: 79:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:AF:BD:F7:F8:0B:A3:0B:EB:2C:09:08:25:EC:3C:2D:CC:9B:B8:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/4fbf2e6d-2935-36c0-8e49-fd5a8e002992.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/17e20fae-392b-4b22-b475-c6dff7142fa6.crl X509v3 Authority Key Identifier: keyid:A1:92:8C:F9:58:DA:45:07:22:A0:BC:C9:76:E1:3D:EE:08:F7:66:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6.cer sbgp-ipAddrBlock: critical IPv4: 199.120.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:e1:fc:46:8d:31:14:cf:f8:da:b9:23:ed:8d:2e:fe:82:5e: 1e:fe:c0:7b:87:78:23:9f:52:5b:5c:cb:b4:93:39:e1:05:d2: d1:d8:3d:ac:fe:b7:6a:23:0c:bf:a8:3d:e4:4a:af:0b:fa:e9: 36:cc:b4:8c:b3:40:96:56:0a:f4:25:85:61:21:b3:bc:c0:fb: 82:29:67:69:b9:61:8c:1f:cc:8d:9b:ae:5d:74:02:c9:db:f1: 6a:d2:0a:68:c9:d5:d2:14:0b:6f:27:09:bf:27:ef:44:4f:dc: 38:42:9c:75:34:45:5f:e4:70:cb:93:e6:f4:ae:e7:db:6c:53: 9b:7e:5c:56:8d:d5:d0:17:2b:0c:9c:40:83:cb:be:ae:f7:58: 58:b3:67:0e:98:de:aa:c7:fb:d9:1e:e6:05:56:ea:a3:c5:65: 05:72:16:26:b9:50:f4:6f:5d:d9:f1:fd:e1:aa:eb:02:24:52: 27:90:f4:d9:2f:a9:cc:c0:fa:62:ba:88:95:41:89:16:98:46: 53:f7:bc:ce:d1:a4:81:da:7a:8c:48:5d:fd:ed:53:0c:c6:58: 62:7a:42:a8:55:55:cd:15:fc:30:8a:fc:c1:53:0c:31:e4:bc: de:b2:4c:ee:bc:e6:28:de:6e:52:42:af:48:b8:8c:71:c1:10: eb:9e:4d:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJkqfl3vKKfvaH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTdlMjBmYWUtMzkyYi00YjIyLWI0NzUtYzZkZmY3MTQy ZmE2MB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk MmY1NDI4YjAtYWMzNS00YWY2LWEyZTMtNjJmODgyYmY2ODUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOSiSPsKOOQoZKZQnkYamYmttofocr69cUo3 7vmcnv6JFKTL8l9wScsWs3a/Eega7MWjpxX8e61luI2JeHYIsL25UgqHfsYh10TW 0i7TFQ400OvRv441KnWXssEpHFFaxCmpV2cK1Q3/ibMVpIAU7/Pn44XgRRzXIRDb ydJI0oR71/bWFcAESyy8Lpc+GN2U7YsTxzIeNoEtT6UPWN424rUi4qr/Fb4RMY4O 55NdHY4t+C6HdncnoETH6FvbrWNE2HGOZYvwG8/Orv5522gu7N2g6zuE9fuoQ5Gf sih3O6i3qRAa2mf+lmyrrp6JfnrOLtjVxygrdGlVyJJtQCJ5QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJyvvff4C6ML6ywJCCXsPC3Mm7jUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xN2Uy MGZhZS0zOTJiLTRiMjItYjQ3NS1jNmRmZjcxNDJmYTYvNGZiZjJlNmQtMjkzNS0z NmMwLThlNDktZmQ1YThlMDAyOTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMTdlMjBmYWUtMzkyYi00YjIyLWI0 NzUtYzZkZmY3MTQyZmE2LzE3ZTIwZmFlLTM5MmItNGIyMi1iNDc1LWM2ZGZmNzE0 MmZhNi5jcmwwHwYDVR0jBBgwFoAUoZKM+VjaRQcioLzJduE97gj3ZmswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xN2UyMGZhZS0zOTJiLTRiMjItYjQ3NS1jNmRm ZjcxNDJmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx3iQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALzh/EaNMRTP+Nq5I+2NLv6CXh7+wHuHeCOfUltcy7STOeEF0tHYPaz+ t2ojDL+oPeRKrwv66TbMtIyzQJZWCvQlhWEhs7zA+4IpZ2m5YYwfzI2brl10Asnb 8WrSCmjJ1dIUC28nCb8n70RP3DhCnHU0RV/kcMuT5vSu59tsU5t+XFaN1dAXKwyc QIPLvq73WFizZw6Y3qrH+9ke5gVW6qPFZQVyFia5UPRvXdnx/eGq6wIkUieQ9Nkv qczA+mK6iJVBiRaYRlP3vM7RpIHaeoxIXf3tUwzGWGJ6QqhVVc0V/DCK/MFTDDHk vN6yTO685ijeblJCr0i4jHHBEOueTfA= -----END CERTIFICATE-----Generated at Wed Aug 6 13:04:09 2025 by rpki-client