$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/5d4ad354-dd38-3033-bd7d-0f275bf0baf5.roa File: 5d4ad354-dd38-3033-bd7d-0f275bf0baf5.roa (raw, json) Hash identifier: Oc9M6Idq461TCZSkI1RdfplaiFTUiMSzipM5wCWdOTc= Subject key identifier: D0:A8:86:CA:16:10:4C:18:62:2F:D8:47:48:D3:16:13:23:17:35:33 Certificate issuer: /CN=99cd086f-b993-42d9-8f47-c65df74d693b Certificate serial: 010D0C9F4328584AAB265DD617247FC9024C6F00 Authority key identifier: C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/5d4ad354-dd38-3033-bd7d-0f275bf0baf5.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 29838 IP address blocks: 162.254.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:5d:d6:17:24:7f:c9:02:4c:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99cd086f-b993-42d9-8f47-c65df74d693b Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=7f6846be-edcd-4dee-9a28-8826124c5235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:eb:b8:b6:9a:c3:62:44:05:65:89:30:71:4d: 0a:0d:10:b3:21:0b:20:29:74:2a:c3:16:62:ec:4e: 6a:dd:06:ca:3d:a0:1b:e6:67:b0:a0:e9:dc:a7:91: 6f:d8:98:0d:a0:bd:72:97:f2:7f:77:2a:30:02:f5: 80:05:ff:3c:11:f6:59:93:3c:d8:a5:c8:bd:ea:d2: e2:42:e7:69:78:f0:5c:a9:bf:2b:e0:2e:ba:ea:c0: 5f:be:bc:50:e6:cf:9b:45:35:00:c4:db:60:f9:21: a0:7f:a9:77:68:34:31:f0:5d:ee:4f:a0:6a:80:15: 4d:71:63:c7:82:5a:f3:85:f6:2c:5d:16:c5:6e:99: 27:f7:34:1e:2a:41:79:34:33:dd:91:af:d0:4f:6f: 98:b1:0c:20:59:81:7d:a4:26:82:d7:85:7f:b9:42: 80:fb:34:d5:a5:ae:9e:f3:2b:f9:e4:f8:59:32:21: ca:dc:e7:5e:15:44:17:49:e9:97:3c:ee:fe:2d:93: f0:fd:2f:f7:66:f9:c8:d9:1a:27:1a:31:0d:2c:d6: 1f:26:85:43:0f:83:35:7f:89:4c:38:7b:13:94:90: de:2b:5b:3c:e3:90:10:07:1b:5d:5b:ff:15:ec:ec: 4c:e6:7f:ae:1a:25:96:ea:f9:1e:d9:d2:61:78:44: c4:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:A8:86:CA:16:10:4C:18:62:2F:D8:47:48:D3:16:13:23:17:35:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/5d4ad354-dd38-3033-bd7d-0f275bf0baf5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl X509v3 Authority Key Identifier: keyid:C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer sbgp-ipAddrBlock: critical IPv4: 162.254.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:b5:a3:28:d0:ed:ab:75:86:ee:b1:9c:93:3b:5f:bb:0a:ee: ff:e7:29:85:27:a5:cb:36:cc:8c:f7:75:04:28:df:07:30:32: 5f:e1:97:c1:6a:1b:cc:70:0b:16:fc:dc:ef:28:97:1b:6d:5b: d0:65:f4:03:c6:8f:c9:f9:72:18:73:54:f3:e6:de:e5:6f:65: 82:2f:eb:2a:d4:71:38:54:4a:cc:06:a7:a6:e1:cd:2a:37:cc: 41:bd:d7:53:13:17:b5:fe:a2:32:51:66:89:13:78:cc:b0:fd: a0:0d:21:12:42:d6:78:06:50:47:3c:49:be:91:1a:84:61:2c: 35:e7:f4:c3:97:08:80:d3:d1:e1:52:90:85:c1:ad:60:c4:9c: 9b:4d:49:5b:c3:12:73:d1:eb:ae:be:27:20:a9:fb:2d:d9:d6: 66:49:3d:be:9a:1f:bc:3c:92:1d:7a:df:8c:ca:4a:c1:06:20: 0b:44:6b:21:bd:88:e5:ed:26:e7:4e:51:94:d4:4e:68:27:30: f3:51:36:94:61:fe:79:34:74:4c:78:df:b8:8e:78:0c:32:79: 39:23:94:05:ff:a1:1c:6f:fa:cd:83:1a:37:7b:12:78:0b:79: 27:4e:06:d7:6f:b6:fd:9d:77:00:fd:2a:f8:20:70:4a:de:b3: 43:a9:c8:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJl3WFyR/yQJMbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTljZDA4NmYtYjk5My00MmQ5LThmNDctYzY1ZGY3NGQ2 OTNiMB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk N2Y2ODQ2YmUtZWRjZC00ZGVlLTlhMjgtODgyNjEyNGM1MjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOu4tprDYkQFZYkwcU0KDRCzIQsgKXQqwxZi 7E5q3QbKPaAb5mewoOncp5Fv2JgNoL1yl/J/dyowAvWABf88EfZZkzzYpci96tLi QudpePBcqb8r4C666sBfvrxQ5s+bRTUAxNtg+SGgf6l3aDQx8F3uT6BqgBVNcWPH glrzhfYsXRbFbpkn9zQeKkF5NDPdka/QT2+YsQwgWYF9pCaC14V/uUKA+zTVpa6e 8yv55PhZMiHK3OdeFUQXSemXPO7+LZPw/S/3ZvnI2RonGjENLNYfJoVDD4M1f4lM OHsTlJDeK1s845AQBxtdW/8V7OxM5n+uGiWW6vke2dJheETE+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNCohsoWEEwYYi/YR0jTFhMjFzUzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85OWNk MDg2Zi1iOTkzLTQyZDktOGY0Ny1jNjVkZjc0ZDY5M2IvNWQ0YWQzNTQtZGQzOC0z MDMzLWJkN2QtMGYyNzViZjBiYWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTljZDA4NmYtYjk5My00MmQ5LThm NDctYzY1ZGY3NGQ2OTNiLzk5Y2QwODZmLWI5OTMtNDJkOS04ZjQ3LWM2NWRmNzRk NjkzYi5jcmwwHwYDVR0jBBgwFoAUw3xudGUvRJJydjptjDZRfGn1VfcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85OWNkMDg2Zi1iOTkzLTQyZDktOGY0Ny1jNjVk Zjc0ZDY5M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAov5VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHW1oyjQ7at1hu6xnJM7X7sK7v/nKYUnpcs2zIz3dQQo3wcwMl/hl8Fq G8xwCxb83O8olxttW9Bl9APGj8n5chhzVPPm3uVvZYIv6yrUcThUSswGp6bhzSo3 zEG911MTF7X+ojJRZokTeMyw/aANIRJC1ngGUEc8Sb6RGoRhLDXn9MOXCIDT0eFS kIXBrWDEnJtNSVvDEnPR666+JyCp+y3Z1mZJPb6aH7w8kh1634zKSsEGIAtEayG9 iOXtJudOUZTUTmgnMPNRNpRh/nk0dEx437iOeAwyeTkjlAX/oRxv+s2DGjd7EngL eSdOBtdvtv2ddwD9KvggcEres0OpyKY= -----END CERTIFICATE-----Generated at Wed Aug 6 16:10:30 2025 by rpki-client