$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/3a488832-42d4-3bc4-a61f-b7bd8e0ab3ea.roa File: 3a488832-42d4-3bc4-a61f-b7bd8e0ab3ea.roa (raw, json) Hash identifier: 391W9ElyCYEdQlf2ih/nxI4ceq5hl94p8DDxuM6RFQw= Subject key identifier: 9B:BC:A7:F8:F0:7D:3C:41:14:A5:14:53:C3:3F:A1:BF:CF:68:6B:80 Certificate issuer: /CN=259fe7c8-f7fa-4637-a746-873dbeadbf3c Certificate serial: 010D0C9F4328584AA6F62741E15DE0771270E3C0 Authority key identifier: 74:52:69:C2:2F:FC:3B:AB:B9:E6:7E:15:F6:B1:FD:A3:E9:5B:E6:EA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/3a488832-42d4-3bc4-a61f-b7bd8e0ab3ea.roa Signing time: Sun 27 Jul 2025 01:00:49 +0000 ROA not before: Sun 27 Jul 2025 01:00:49 +0000 ROA not after: Sat 25 Oct 2025 01:00:49 +0000 asID: 36549 IP address blocks: 162.249.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/259fe7c8-f7fa-4637-a746-873dbeadbf3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/259fe7c8-f7fa-4637-a746-873dbeadbf3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a6:f6:27:41:e1:5d:e0:77:12:70:e3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=259fe7c8-f7fa-4637-a746-873dbeadbf3c Validity Not Before: Jul 27 01:00:49 2025 GMT Not After : Oct 25 01:00:49 2025 GMT Subject: CN=441b8a5e-cc1d-494a-ac70-05bf28264d65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:69:d0:f5:f9:29:6c:9c:00:f4:d8:7c:65:56: d9:05:82:e1:62:17:6e:79:96:e6:72:f2:fb:17:0a: d7:4a:28:ed:66:6d:75:73:56:d9:ab:d8:08:be:61: ce:e2:fa:46:0f:73:08:6c:18:7b:57:a1:24:c2:29: 30:a2:8c:27:19:33:9a:c6:07:0f:dc:d8:8d:f5:8f: 84:2b:b7:42:6f:97:c9:4e:94:43:38:91:99:74:7e: 7b:e4:81:b7:6c:f2:40:56:1a:80:66:ed:fb:57:27: 8b:37:9a:f3:3c:51:27:62:2d:91:e1:fa:9f:65:94: 76:e6:13:75:93:ef:fa:12:28:2e:eb:e7:6f:b6:be: d2:5c:3b:ed:99:d3:d5:ab:63:e6:b0:93:96:c5:28: 1d:8d:e2:41:5a:27:51:63:34:f5:72:ca:2f:4f:f8: 54:db:2d:06:a3:f6:e5:30:e1:2f:a3:4d:1e:07:20: df:4b:77:bb:24:2c:39:8a:ac:b5:20:0d:f0:92:bf: 0f:eb:d0:32:5d:d1:19:2d:11:a7:e6:93:b0:25:38: 0f:27:da:bd:1b:57:27:97:20:51:33:b2:11:89:16: db:14:58:f0:ad:2f:55:49:f8:5f:12:9b:0e:58:93: f3:6e:ac:02:57:40:08:76:96:40:c2:67:86:30:5b: d2:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:BC:A7:F8:F0:7D:3C:41:14:A5:14:53:C3:3F:A1:BF:CF:68:6B:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/3a488832-42d4-3bc4-a61f-b7bd8e0ab3ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/259fe7c8-f7fa-4637-a746-873dbeadbf3c.crl X509v3 Authority Key Identifier: keyid:74:52:69:C2:2F:FC:3B:AB:B9:E6:7E:15:F6:B1:FD:A3:E9:5B:E6:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c.cer sbgp-ipAddrBlock: critical IPv4: 162.249.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:09:d8:7d:82:99:26:56:17:de:91:9c:45:eb:86:ef:12:4d: 3c:78:64:94:bb:29:0f:67:22:a7:79:dc:fa:2a:45:00:0d:76: 29:7f:62:44:81:c8:71:32:4e:2e:de:17:93:eb:e1:32:2a:65: 52:e7:9e:a9:ff:27:9f:3d:9c:8c:8e:a4:df:1a:ea:28:66:c3: ac:94:f0:0a:1d:19:b0:3a:d0:cd:1f:58:a4:08:04:74:a8:2a: 66:6a:53:78:69:a1:aa:cd:50:47:9d:b9:28:84:77:b6:f1:e1: 19:51:db:6a:8d:36:9f:f2:ba:9c:76:db:44:11:97:fe:28:3a: c7:66:be:80:5d:9f:8e:ef:7d:75:cc:53:b2:4f:3b:0a:b6:47: c4:50:d9:6d:9b:53:aa:37:a0:1e:b4:20:8d:13:6d:d2:6d:3e: 94:c1:96:45:d8:3e:ff:45:c5:38:cf:48:70:c3:65:6e:42:34: 45:52:69:f3:6d:6c:ce:48:03:c9:50:33:17:3c:2e:d4:e8:fa: e5:98:2b:09:8c:71:bb:56:3b:4a:1f:b6:9a:94:aa:be:84:eb: ef:5f:39:89:61:e9:27:b4:6c:fa:67:9b:73:76:99:4f:c6:aa: 0c:3d:a4:54:a0:de:ff:54:1e:24:e0:bd:1b:f3:00:45:67:22: a0:00:4e:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqm9idB4V3gdxJw48AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjU5ZmU3YzgtZjdmYS00NjM3LWE3NDYtODczZGJlYWRi ZjNjMB4XDTI1MDcyNzAxMDA0OVoXDTI1MTAyNTAxMDA0OVowLzEtMCsGA1UEAxMk NDQxYjhhNWUtY2MxZC00OTRhLWFjNzAtMDViZjI4MjY0ZDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGnQ9fkpbJwA9Nh8ZVbZBYLhYhdueZbmcvL7 FwrXSijtZm11c1bZq9gIvmHO4vpGD3MIbBh7V6EkwikwoownGTOaxgcP3NiN9Y+E K7dCb5fJTpRDOJGZdH575IG3bPJAVhqAZu37VyeLN5rzPFEnYi2R4fqfZZR25hN1 k+/6Eigu6+dvtr7SXDvtmdPVq2PmsJOWxSgdjeJBWidRYzT1csovT/hU2y0Go/bl MOEvo00eByDfS3e7JCw5iqy1IA3wkr8P69AyXdEZLRGn5pOwJTgPJ9q9G1cnlyBR M7IRiRbbFFjwrS9VSfhfEpsOWJPzbqwCV0AIdpZAwmeGMFvSeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJu8p/jwfTxBFKUUU8M/ob/PaGuAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yNTlm ZTdjOC1mN2ZhLTQ2MzctYTc0Ni04NzNkYmVhZGJmM2MvM2E0ODg4MzItNDJkNC0z YmM0LWE2MWYtYjdiZDhlMGFiM2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjU5ZmU3YzgtZjdmYS00NjM3LWE3 NDYtODczZGJlYWRiZjNjLzI1OWZlN2M4LWY3ZmEtNDYzNy1hNzQ2LTg3M2RiZWFk YmYzYy5jcmwwHwYDVR0jBBgwFoAUdFJpwi/8O6u55n4V9rH9o+lb5uowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yNTlmZTdjOC1mN2ZhLTQ2MzctYTc0Ni04NzNk YmVhZGJmM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDovmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8J2H2CmSZWF96RnEXrhu8STTx4ZJS7KQ9nIqd53PoqRQANdil/YkSB yHEyTi7eF5Pr4TIqZVLnnqn/J589nIyOpN8a6ihmw6yU8AodGbA60M0fWKQIBHSo KmZqU3hpoarNUEeduSiEd7bx4RlR22qNNp/yupx220QRl/4oOsdmvoBdn47vfXXM U7JPOwq2R8RQ2W2bU6o3oB60II0TbdJtPpTBlkXYPv9FxTjPSHDDZW5CNEVSafNt bM5IA8lQMxc8LtTo+uWYKwmMcbtWO0oftpqUqr6E6+9fOYlh6Se0bPpnm3N2mU/G qgw9pFSg3v9UHiTgvRvzAEVnIqAATrY= -----END CERTIFICATE-----Generated at Wed Aug 6 12:32:38 2025 by rpki-client