$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/0ca9fb71-4d54-3d33-9805-4e6585f71430.roa File: 0ca9fb71-4d54-3d33-9805-4e6585f71430.roa (raw, json) Hash identifier: OJPK2INklowA+53FyeOkCWBwLgOpRqCxNtQ8Vkr5yR8= Subject key identifier: DB:F4:97:F9:3B:02:DD:C7:2A:C5:6C:E4:24:BE:91:21:67:59:B6:FE Certificate issuer: /CN=d41a3f41-d9b3-4528-8251-900156f4efac Certificate serial: 010D0C9F4328584AA160D01E33E2D3C652166800 Authority key identifier: 39:E5:33:99:84:FC:E9:9C:F0:38:96:9B:D1:90:CA:AC:83:7E:E0:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/0ca9fb71-4d54-3d33-9805-4e6585f71430.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 14525 IP address blocks: 199.34.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/d41a3f41-d9b3-4528-8251-900156f4efac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/d41a3f41-d9b3-4528-8251-900156f4efac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:60:d0:1e:33:e2:d3:c6:52:16:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d41a3f41-d9b3-4528-8251-900156f4efac Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=b324e16f-5d58-4875-9682-a479af7f2d3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:db:c4:b3:c7:c7:60:1c:55:21:ce:a7:11:9e: 81:bb:44:91:75:86:34:31:59:06:d2:f0:6a:84:74: 19:44:87:d5:de:7d:49:e8:85:f9:ff:f7:a9:44:5e: 11:6c:e6:90:b3:a5:42:28:3f:f1:22:b0:91:ec:b4: 9b:31:88:f3:98:eb:37:b8:3b:fd:45:b8:16:ce:f5: 4d:1b:ae:bf:26:35:af:4f:cc:65:b2:6a:87:55:90: f0:40:73:72:d5:b9:21:83:df:72:be:a0:f7:11:f9: 51:06:49:69:41:0d:77:45:3b:93:27:34:cf:22:bd: ab:59:21:6f:35:25:e5:17:1b:4f:6c:8b:3e:4c:cd: e2:0c:12:8e:18:0d:19:67:79:d1:76:9b:79:89:2c: 23:9c:6b:fb:03:94:ab:56:21:b8:0c:59:b9:e0:9e: 37:a6:4f:3e:3f:d8:08:c0:c2:95:27:1a:a9:05:a0: 3f:3c:54:72:f5:11:74:70:82:3f:29:42:8d:13:95: c2:36:d3:5c:97:3f:62:3a:1d:2d:76:40:d4:2f:26: 02:13:e1:24:b2:c5:ed:21:72:75:e1:67:da:e0:b2: b6:77:eb:76:4c:fa:80:91:7c:01:3f:83:6b:85:f3: 89:dd:4c:9e:a3:ae:64:c3:eb:51:de:4d:c4:6c:0d: aa:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:F4:97:F9:3B:02:DD:C7:2A:C5:6C:E4:24:BE:91:21:67:59:B6:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/0ca9fb71-4d54-3d33-9805-4e6585f71430.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/d41a3f41-d9b3-4528-8251-900156f4efac.crl X509v3 Authority Key Identifier: keyid:39:E5:33:99:84:FC:E9:9C:F0:38:96:9B:D1:90:CA:AC:83:7E:E0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac.cer sbgp-ipAddrBlock: critical IPv4: 199.34.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:f6:a6:1a:b5:11:f5:02:66:d2:f2:23:71:22:6f:09:11:0d: 01:9c:da:6a:be:71:62:a1:bc:f5:42:b3:e1:cd:1c:ad:5f:50: e8:c0:82:92:11:6e:41:4c:08:f9:52:47:8a:df:03:0b:94:05: 20:c3:25:3a:4d:5e:f1:fb:cb:dd:cb:64:ee:1e:70:59:89:a0: 16:5f:87:29:ac:84:35:f5:55:bc:a9:ea:6e:6e:ab:89:b2:56: 30:cc:26:d2:85:96:8c:5c:c2:4e:9d:eb:68:f1:b9:80:1b:c8: 82:14:35:16:26:eb:98:50:14:d1:d4:ee:23:3b:d3:9a:4c:aa: 3d:69:12:32:53:95:20:42:28:0a:be:50:bf:82:7c:fe:95:2f: ff:de:68:a3:38:93:3c:3d:fa:33:0c:0a:3c:6d:5c:92:c3:d6: d7:9b:ed:16:f2:d0:4d:4c:65:80:9a:59:b2:37:32:f5:ac:98: bb:39:d9:90:02:9d:fa:07:f9:d7:10:71:f5:ee:16:34:b2:59: d3:c2:0e:39:34:54:3c:b2:64:8b:51:4b:25:42:71:2f:03:35: be:23:bd:a7:17:bd:36:c9:85:62:82:1e:cf:ed:d0:62:46:25: c3:26:e6:03:20:66:ca:40:58:aa:04:81:2e:a6:99:29:50:6b: 52:cf:aa:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYNAeM+LTxlIWaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQxYTNmNDEtZDliMy00NTI4LTgyNTEtOTAwMTU2ZjRl ZmFjMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk YjMyNGUxNmYtNWQ1OC00ODc1LTk2ODItYTQ3OWFmN2YyZDNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdvEs8fHYBxVIc6nEZ6Bu0SRdYY0MVkG0vBq hHQZRIfV3n1J6IX5//epRF4RbOaQs6VCKD/xIrCR7LSbMYjzmOs3uDv9RbgWzvVN G66/JjWvT8xlsmqHVZDwQHNy1bkhg99yvqD3EflRBklpQQ13RTuTJzTPIr2rWSFv NSXlFxtPbIs+TM3iDBKOGA0ZZ3nRdpt5iSwjnGv7A5SrViG4DFm54J43pk8+P9gI wMKVJxqpBaA/PFRy9RF0cII/KUKNE5XCNtNclz9iOh0tdkDULyYCE+EkssXtIXJ1 4Wfa4LK2d+t2TPqAkXwBP4NrhfOJ3Uyeo65kw+tR3k3EbA2qFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNv0l/k7At3HKsVs5CS+kSFnWbb+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNDFh M2Y0MS1kOWIzLTQ1MjgtODI1MS05MDAxNTZmNGVmYWMvMGNhOWZiNzEtNGQ1NC0z ZDMzLTk4MDUtNGU2NTg1ZjcxNDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDQxYTNmNDEtZDliMy00NTI4LTgy NTEtOTAwMTU2ZjRlZmFjL2Q0MWEzZjQxLWQ5YjMtNDUyOC04MjUxLTkwMDE1NmY0 ZWZhYy5jcmwwHwYDVR0jBBgwFoAUOeUzmYT86ZzwOJab0ZDKrIN+4IIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNDFhM2Y0MS1kOWIzLTQ1MjgtODI1MS05MDAx NTZmNGVmYWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxyJcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJD2phq1EfUCZtLyI3EibwkRDQGc2mq+cWKhvPVCs+HNHK1fUOjAgpIR bkFMCPlSR4rfAwuUBSDDJTpNXvH7y93LZO4ecFmJoBZfhymshDX1Vbyp6m5uq4my VjDMJtKFloxcwk6d62jxuYAbyIIUNRYm65hQFNHU7iM705pMqj1pEjJTlSBCKAq+ UL+CfP6VL//eaKM4kzw9+jMMCjxtXJLD1teb7Rby0E1MZYCaWbI3MvWsmLs52ZAC nfoH+dcQcfXuFjSyWdPCDjk0VDyyZItRSyVCcS8DNb4jvacXvTbJhWKCHs/t0GJG JcMm5gMgZspAWKoEgS6mmSlQa1LPqtk= -----END CERTIFICATE-----Generated at Sat Aug 9 05:36:21 2025 by rpki-client