$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/922a7eaf-3ba3-3b30-befa-8bbedfef05e5.roa File: 922a7eaf-3ba3-3b30-befa-8bbedfef05e5.roa (raw, json) Hash identifier: 44NOfKkKt/0EzqVos/OnMHtvGx05njfqFxZcBvfUPoo= Subject key identifier: 8C:18:66:CA:D4:F1:AF:80:2E:95:AD:0C:AB:41:4C:8D:6C:96:59:DF Certificate issuer: /CN=2fd92816-1579-4d40-9111-f86331c3fd8f Certificate serial: 010D0C9F4328584A9D30E750E027651DBEB93080 Authority key identifier: B7:AA:88:F5:F2:0A:B8:14:18:D2:77:D3:A3:51:A5:EF:FE:48:97:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/922a7eaf-3ba3-3b30-befa-8bbedfef05e5.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 14977 IP address blocks: 137.89.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:e7:50:e0:27:65:1d:be:b9:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fd92816-1579-4d40-9111-f86331c3fd8f Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=db06c96e-47fa-465a-8b7f-a7d0da46b210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ce:f1:0d:17:18:c5:e9:96:af:17:d8:58:20: be:11:27:f4:43:22:6d:90:98:4d:e1:b7:18:e7:ee: 48:d4:f3:b1:26:60:56:b6:dd:f1:13:df:1a:94:7c: a2:e3:b9:06:5e:61:b4:4b:87:07:79:84:69:48:f0: b9:89:4d:12:96:73:d6:12:70:34:00:49:bb:85:ec: 63:af:dc:42:7f:d0:85:31:35:fe:0f:ba:bb:5d:3e: 11:63:5a:dc:35:61:30:56:3a:5b:5f:a1:6e:4d:4d: f5:1e:33:84:d6:12:0a:32:d1:7a:ef:f9:a4:3f:6a: c0:bf:c9:2d:a7:9f:e3:75:f3:f5:a3:93:00:0d:d2: ce:24:28:ec:0b:bd:b8:37:b4:09:8d:d6:3b:d7:04: cd:fc:59:2a:92:11:8c:0d:ae:f0:52:15:0d:ce:31: 85:55:ba:dd:f1:a5:fa:60:e2:77:81:c1:ef:8f:92: cf:fc:e6:bf:35:11:ad:b1:21:8f:a0:42:e4:99:dd: 1b:cb:5f:c7:39:51:94:44:14:7d:c4:db:8a:b6:13: f5:4c:2f:05:4a:9d:2a:7d:51:b9:76:1a:c6:12:7f: 79:69:62:5e:ca:82:d3:1e:5e:85:4d:41:83:8d:28: e9:41:27:d1:8c:aa:47:41:20:67:4f:2d:74:ab:b3: c6:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:18:66:CA:D4:F1:AF:80:2E:95:AD:0C:AB:41:4C:8D:6C:96:59:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/922a7eaf-3ba3-3b30-befa-8bbedfef05e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.crl X509v3 Authority Key Identifier: keyid:B7:AA:88:F5:F2:0A:B8:14:18:D2:77:D3:A3:51:A5:EF:FE:48:97:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer sbgp-ipAddrBlock: critical IPv4: 137.89.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:b5:70:e7:73:9d:8f:ea:39:f9:89:4f:b0:2d:53:eb:5e:95: d6:7e:eb:66:fc:09:ab:5a:c8:9f:9b:75:f0:7a:51:71:1f:6f: ff:d6:4c:90:00:05:65:dc:ed:b1:de:a1:97:27:19:3f:ec:40: ac:9c:85:84:db:ef:6c:b4:a6:d1:24:52:d6:67:64:28:0d:05: a7:0c:bd:0a:73:50:c7:20:6e:9c:d8:d7:db:53:45:31:2a:66: 0e:ab:6e:86:b2:bf:11:a0:bb:87:b8:b4:da:ee:1f:48:fb:97: 64:07:91:92:6f:e0:32:05:05:d3:7a:65:04:b0:ac:cb:0d:cf: 0a:29:39:81:3c:81:07:d4:fd:60:85:a1:40:36:10:a3:68:47: 0f:93:b0:b5:42:0f:7c:a5:0a:2c:75:01:c6:5e:65:53:95:ae: e0:fc:5b:de:49:c2:be:0f:56:38:3c:db:ce:7e:c0:31:61:61: 9f:4f:5b:33:80:f1:4f:91:4d:f1:72:fe:75:4b:82:4a:e0:3a: ae:6b:92:69:fa:af:37:fe:69:5b:ce:e9:a6:ec:3e:a8:71:98: 5c:9c:6a:ac:fa:a0:0c:38:0b:2f:f4:fe:f4:f7:aa:d7:60:ae: a7:45:48:e3:d8:81:ab:a1:0b:d8:a6:a1:63:82:82:87:10:f2: 7f:4a:05:5a -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEqdMOdQ4CdlHb65MIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZkOTI4MTYtMTU3OS00ZDQwLTkxMTEtZjg2MzMxYzNm ZDhmMB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk ZGIwNmM5NmUtNDdmYS00NjVhLThiN2YtYTdkMGRhNDZiMjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApM7xDRcYxemWrxfYWCC+ESf0QyJtkJhN4bcY 5+5I1POxJmBWtt3xE98alHyi47kGXmG0S4cHeYRpSPC5iU0SlnPWEnA0AEm7hexj r9xCf9CFMTX+D7q7XT4RY1rcNWEwVjpbX6FuTU31HjOE1hIKMtF67/mkP2rAv8kt p5/jdfP1o5MADdLOJCjsC724N7QJjdY71wTN/FkqkhGMDa7wUhUNzjGFVbrd8aX6 YOJ3gcHvj5LP/Oa/NRGtsSGPoELkmd0by1/HOVGURBR9xNuKthP1TC8FSp0qfVG5 dhrGEn95aWJeyoLTHl6FTUGDjSjpQSfRjKpHQSBnTy10q7PGgwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFIwYZsrU8a+ALpWtDKtBTI1sllnfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yZmQ5 MjgxNi0xNTc5LTRkNDAtOTExMS1mODYzMzFjM2ZkOGYvOTIyYTdlYWYtM2JhMy0z YjMwLWJlZmEtOGJiZWRmZWYwNWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMmZkOTI4MTYtMTU3OS00ZDQwLTkx MTEtZjg2MzMxYzNmZDhmLzJmZDkyODE2LTE1NzktNGQ0MC05MTExLWY4NjMzMWMz ZmQ4Zi5jcmwwHwYDVR0jBBgwFoAUt6qI9fIKuBQY0nfTo1Gl7/5Il/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yZmQ5MjgxNi0xNTc5LTRkNDAtOTExMS1mODYz MzFjM2ZkOGYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiVkwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAO7Vw53Odj+o5+YlPsC1T616V1n7rZvwJq1rIn5t18HpRcR9v/9ZMkAAF Zdztsd6hlycZP+xArJyFhNvvbLSm0SRS1mdkKA0Fpwy9CnNQxyBunNjX21NFMSpm DqtuhrK/EaC7h7i02u4fSPuXZAeRkm/gMgUF03plBLCsyw3PCik5gTyBB9T9YIWh QDYQo2hHD5OwtUIPfKUKLHUBxl5lU5Wu4Pxb3knCvg9WODzbzn7AMWFhn09bM4Dx T5FN8XL+dUuCSuA6rmuSafqvN/5pW87ppuw+qHGYXJxqrPqgDDgLL/T+9Peq12Cu p0VI49iBq6EL2KahY4KChxDyf0oFWg== -----END CERTIFICATE-----Generated at Tue Aug 5 17:20:06 2025 by rpki-client