$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/502add25-2a1e-3d32-aa97-b2f7d5d8dc9e.roa File: 502add25-2a1e-3d32-aa97-b2f7d5d8dc9e.roa (raw, json) Hash identifier: m3ukx2uMNVsuhLo1ZQg5tNbEc3LZg5xDWShHUl58A3M= Subject key identifier: EA:8A:C2:C1:4B:96:8C:34:0E:1C:E1:84:EC:35:74:47:28:D7:E0:75 Certificate issuer: /CN=603ec9c3-6a7f-4455-baee-5999e253e735 Certificate serial: 010D0C9F4328584A9FFB9B6EA3556FF1516E3D00 Authority key identifier: 8E:2C:C0:E0:03:39:DF:F9:32:13:AA:61:21:F8:AB:2D:67:F8:BA:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/502add25-2a1e-3d32-aa97-b2f7d5d8dc9e.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 3677 IP address blocks: 199.201.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:9b:6e:a3:55:6f:f1:51:6e:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=603ec9c3-6a7f-4455-baee-5999e253e735 Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=66b796cc-adf3-4e3d-bfe5-48b3d273500d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d4:c4:53:77:89:c6:ee:b1:3c:14:74:a1:ff: 6f:bb:09:e6:73:33:dc:52:28:8f:d4:95:ff:ba:2a: d0:9c:88:3f:fe:a6:16:f8:25:26:da:61:30:d0:c6: c3:cc:7d:38:57:c4:ec:33:c2:e6:21:e8:45:d0:6e: f4:dc:9f:ea:16:fa:9d:36:87:d3:0e:5a:e5:84:97: 3e:5a:5a:82:08:f0:9c:3f:81:44:c6:43:ec:22:ed: 89:58:c9:de:0f:3b:fd:f2:c6:41:78:d5:9c:0f:ef: a9:af:8a:a2:57:c9:f5:13:65:22:24:9a:53:11:c6: 95:c6:01:36:4d:85:87:3b:44:21:01:90:b9:d8:25: d8:c7:73:9a:77:d4:a7:30:30:a1:67:d2:be:c7:92: b6:bd:a7:39:5a:43:30:db:df:be:a2:be:89:be:b2: 83:b7:21:0a:4a:d3:e5:9d:9e:c5:d5:d9:4c:ac:0b: 34:54:1f:ac:b3:1c:32:57:65:c6:c9:00:40:92:0b: 3d:8f:f7:20:6b:81:ad:f5:e1:48:24:ad:2a:05:00: 75:f0:ef:5e:f8:da:8e:12:db:7f:46:44:37:64:16: 3a:fd:c0:3b:3b:f9:e7:c3:22:59:a1:ec:e2:55:06: 7c:a3:81:08:3e:fd:9c:c8:41:1e:1f:7e:ab:53:da: 68:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:8A:C2:C1:4B:96:8C:34:0E:1C:E1:84:EC:35:74:47:28:D7:E0:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/502add25-2a1e-3d32-aa97-b2f7d5d8dc9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.crl X509v3 Authority Key Identifier: keyid:8E:2C:C0:E0:03:39:DF:F9:32:13:AA:61:21:F8:AB:2D:67:F8:BA:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer sbgp-ipAddrBlock: critical IPv4: 199.201.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:eb:71:62:af:dc:d0:be:d1:da:a5:31:40:40:f7:d0:ea:eb: bb:f8:77:5f:c4:f4:3e:24:39:d0:5b:ce:68:54:9f:7b:a8:a3: f4:de:d9:c3:6a:d2:c0:e3:22:d9:f2:2f:d3:e1:d2:0a:06:ae: ac:9a:4c:a9:70:ff:0f:b1:21:e8:94:d7:79:84:30:18:16:f1: 59:df:a9:ee:0d:0d:ae:5e:75:24:79:7c:1c:c9:c6:37:0f:6f: 13:42:66:38:4d:8e:ac:e7:f8:8d:20:74:41:37:57:de:2c:0c: 9a:8c:b3:a4:b4:12:9a:5b:64:25:c6:bf:ac:c1:a8:82:19:19: ba:37:9b:97:08:f0:64:4c:56:d3:d9:16:af:8d:e2:89:5b:80: 5d:46:3a:25:2a:46:ff:61:7e:ee:50:15:75:82:24:43:69:af: 7b:6e:37:88:97:86:89:b6:8d:28:96:52:24:87:d3:ba:ed:51: 69:ac:d8:b6:4d:07:16:2a:ec:a0:c4:e1:be:ad:d5:f2:e7:89: 13:03:33:46:ac:a1:84:b1:df:1d:73:66:8d:41:5b:fa:dc:ae: f5:4f:0d:b3:a6:80:28:95:16:36:30:ea:ec:ea:a0:fc:65:fb: b0:55:7e:4b:5a:a9:40:f1:c9:f9:ff:85:f3:02:48:4a:a9:ea: 4b:18:d8:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf+5tuo1Vv8VFuPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAzZWM5YzMtNmE3Zi00NDU1LWJhZWUtNTk5OWUyNTNl NzM1MB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk NjZiNzk2Y2MtYWRmMy00ZTNkLWJmZTUtNDhiM2QyNzM1MDBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdTEU3eJxu6xPBR0of9vuwnmczPcUiiP1JX/ uirQnIg//qYW+CUm2mEw0MbDzH04V8TsM8LmIehF0G703J/qFvqdNofTDlrlhJc+ WlqCCPCcP4FExkPsIu2JWMneDzv98sZBeNWcD++pr4qiV8n1E2UiJJpTEcaVxgE2 TYWHO0QhAZC52CXYx3Oad9SnMDChZ9K+x5K2vac5WkMw29++or6JvrKDtyEKStPl nZ7F1dlMrAs0VB+ssxwyV2XGyQBAkgs9j/cga4Gt9eFIJK0qBQB18O9e+NqOEtt/ RkQ3ZBY6/cA7O/nnwyJZoeziVQZ8o4EIPv2cyEEeH36rU9poTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOqKwsFLlow0DhzhhOw1dEco1+B1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82MDNl YzljMy02YTdmLTQ0NTUtYmFlZS01OTk5ZTI1M2U3MzUvNTAyYWRkMjUtMmExZS0z ZDMyLWFhOTctYjJmN2Q1ZDhkYzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjAzZWM5YzMtNmE3Zi00NDU1LWJh ZWUtNTk5OWUyNTNlNzM1LzYwM2VjOWMzLTZhN2YtNDQ1NS1iYWVlLTU5OTllMjUz ZTczNS5jcmwwHwYDVR0jBBgwFoAUjizA4AM53/kyE6phIfirLWf4uvEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82MDNlYzljMy02YTdmLTQ0NTUtYmFlZS01OTk5 ZTI1M2U3MzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx8nNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLrcWKv3NC+0dqlMUBA99Dq67v4d1/E9D4kOdBbzmhUn3uoo/Te2cNq 0sDjItnyL9Ph0goGrqyaTKlw/w+xIeiU13mEMBgW8Vnfqe4NDa5edSR5fBzJxjcP bxNCZjhNjqzn+I0gdEE3V94sDJqMs6S0EppbZCXGv6zBqIIZGbo3m5cI8GRMVtPZ Fq+N4olbgF1GOiUqRv9hfu5QFXWCJENpr3tuN4iXhom2jSiWUiSH07rtUWms2LZN BxYq7KDE4b6t1fLniRMDM0asoYSx3x1zZo1BW/rcrvVPDbOmgCiVFjYw6uzqoPxl +7BVfktaqUDxyfn/hfMCSEqp6ksY2HQ= -----END CERTIFICATE-----Generated at Mon Aug 11 05:54:17 2025 by rpki-client