$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/3efa69b9-398a-37d0-8e4a-c8c81a9e5641.roa File: 3efa69b9-398a-37d0-8e4a-c8c81a9e5641.roa (raw, json) Hash identifier: gzEIPTxNHoIY5vets3Qm2px38TtQcKSA0eBOUsyRj2M= Subject key identifier: 03:0B:83:EE:76:28:01:AD:3B:08:64:F3:DE:F5:38:A8:24:74:2D:2F Certificate issuer: /CN=d41a3f41-d9b3-4528-8251-900156f4efac Certificate serial: 010D0C9F4328584A9FFBA56CC56E4BE753D1CCC0 Authority key identifier: 39:E5:33:99:84:FC:E9:9C:F0:38:96:9B:D1:90:CA:AC:83:7E:E0:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/3efa69b9-398a-37d0-8e4a-c8c81a9e5641.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 395077 IP address blocks: 199.34.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/d41a3f41-d9b3-4528-8251-900156f4efac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/d41a3f41-d9b3-4528-8251-900156f4efac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:a5:6c:c5:6e:4b:e7:53:d1:cc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d41a3f41-d9b3-4528-8251-900156f4efac Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=28a678ed-08b7-4100-bcf2-d2fba7ddd240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:3e:e6:29:bc:bc:1c:a9:51:84:5d:cf:34:c5: 56:43:5b:eb:24:af:63:20:5f:29:9c:bf:b7:27:a4: e4:36:2b:05:92:aa:c2:71:33:f0:64:d7:03:28:a8: 48:2b:ee:61:24:60:fe:f6:85:8d:60:7c:3d:4e:eb: dc:5e:a9:db:3f:2f:2b:15:df:0d:05:93:62:7d:57: 98:09:e2:8c:b5:8b:35:50:f5:6c:cf:c8:c2:d9:d6: 7b:58:9c:08:10:33:db:c2:60:2b:d5:ce:45:c7:42: 89:5e:21:e4:ad:30:31:e2:84:b6:e2:03:b0:52:32: d4:82:71:2b:28:77:a1:b1:8e:ff:c9:3b:9b:b6:a5: e8:26:7c:70:d8:f5:f3:2a:0f:82:22:5e:d0:90:c2: 7d:51:a0:ca:85:a1:5b:b7:15:31:b5:5b:f3:c9:bd: 5e:8f:26:b8:ef:2d:df:84:7c:f7:de:de:3a:b6:e8: 6f:4f:91:d2:6b:a6:fc:11:24:3b:86:d0:02:da:2d: 01:96:fb:0e:37:80:cb:05:a7:1a:54:c1:58:27:8a: ea:a9:e2:64:1b:71:27:93:22:b0:a2:2e:b7:e5:3e: 76:0c:62:ad:78:de:5c:3c:91:d6:14:5d:ea:ec:ce: 13:81:b6:cd:ca:da:52:df:62:a0:0e:b7:ab:75:34: fa:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:0B:83:EE:76:28:01:AD:3B:08:64:F3:DE:F5:38:A8:24:74:2D:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/3efa69b9-398a-37d0-8e4a-c8c81a9e5641.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/d41a3f41-d9b3-4528-8251-900156f4efac.crl X509v3 Authority Key Identifier: keyid:39:E5:33:99:84:FC:E9:9C:F0:38:96:9B:D1:90:CA:AC:83:7E:E0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac.cer sbgp-ipAddrBlock: critical IPv4: 199.34.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:30:0d:38:b3:c1:c9:83:66:df:a7:5e:f5:5d:aa:48:5c:33: 0e:0a:45:f4:22:86:84:ec:a5:09:76:54:bb:22:0a:af:c9:56: f2:b9:59:6c:22:7a:ef:a9:3b:99:1d:2c:e9:1d:c8:8c:1d:a7: b3:2f:c2:ea:11:72:b0:41:79:78:2a:d2:e5:e3:c5:5b:76:2e: de:f7:79:51:4b:6e:63:53:e8:19:b5:a7:72:2e:7e:dc:aa:20: 67:86:56:b5:b0:52:0c:aa:6c:ad:f4:22:6e:42:46:0f:42:4b: b3:d7:9b:73:f0:0d:cc:d0:97:50:09:d1:53:19:45:ad:31:2b: e3:2e:21:5f:fe:42:11:f3:c8:34:75:2e:b1:50:d4:da:59:56: 29:84:7f:22:a6:b3:4b:2b:fa:82:f8:ce:00:f1:68:89:91:a1: 77:7c:40:85:11:ca:30:5a:cc:43:14:0d:f6:81:c3:06:cf:20: a2:01:68:bd:63:33:59:f3:5b:4e:24:58:cc:d4:88:6d:40:ef: 97:af:29:90:54:ee:8e:80:ae:36:41:ea:43:bf:40:ee:73:78: bb:f4:32:68:60:00:d9:da:b8:5a:2b:88:27:33:f9:8f:76:df: 2d:b0:e1:34:1a:ce:39:51:31:e7:91:c4:5f:c6:84:1d:6f:75: be:c9:ef:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf+6VsxW5L51PRzMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQxYTNmNDEtZDliMy00NTI4LTgyNTEtOTAwMTU2ZjRl ZmFjMB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk MjhhNjc4ZWQtMDhiNy00MTAwLWJjZjItZDJmYmE3ZGRkMjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkD7mKby8HKlRhF3PNMVWQ1vrJK9jIF8pnL+3 J6TkNisFkqrCcTPwZNcDKKhIK+5hJGD+9oWNYHw9TuvcXqnbPy8rFd8NBZNifVeY CeKMtYs1UPVsz8jC2dZ7WJwIEDPbwmAr1c5Fx0KJXiHkrTAx4oS24gOwUjLUgnEr KHehsY7/yTubtqXoJnxw2PXzKg+CIl7QkMJ9UaDKhaFbtxUxtVvzyb1ejya47y3f hHz33t46tuhvT5HSa6b8ESQ7htAC2i0BlvsON4DLBacaVMFYJ4rqqeJkG3EnkyKw oi635T52DGKteN5cPJHWFF3q7M4TgbbNytpS32KgDrerdTT6RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAMLg+52KAGtOwhk8971OKgkdC0vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNDFh M2Y0MS1kOWIzLTQ1MjgtODI1MS05MDAxNTZmNGVmYWMvM2VmYTY5YjktMzk4YS0z N2QwLThlNGEtYzhjODFhOWU1NjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDQxYTNmNDEtZDliMy00NTI4LTgy NTEtOTAwMTU2ZjRlZmFjL2Q0MWEzZjQxLWQ5YjMtNDUyOC04MjUxLTkwMDE1NmY0 ZWZhYy5jcmwwHwYDVR0jBBgwFoAUOeUzmYT86ZzwOJab0ZDKrIN+4IIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNDFhM2Y0MS1kOWIzLTQ1MjgtODI1MS05MDAx NTZmNGVmYWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxyJcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABkwDTizwcmDZt+nXvVdqkhcMw4KRfQihoTspQl2VLsiCq/JVvK5WWwi eu+pO5kdLOkdyIwdp7MvwuoRcrBBeXgq0uXjxVt2Lt73eVFLbmNT6Bm1p3Iuftyq IGeGVrWwUgyqbK30Im5CRg9CS7PXm3PwDczQl1AJ0VMZRa0xK+MuIV/+QhHzyDR1 LrFQ1NpZVimEfyKms0sr+oL4zgDxaImRoXd8QIURyjBazEMUDfaBwwbPIKIBaL1j M1nzW04kWMzUiG1A75evKZBU7o6ArjZB6kO/QO5zeLv0MmhgANnauForiCcz+Y92 3y2w4TQazjlRMeeRxF/GhB1vdb7J72g= -----END CERTIFICATE-----Generated at Sat Aug 9 14:19:36 2025 by rpki-client