$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/cd00af14-086a-320d-acc3-d521035dec44.roa File: cd00af14-086a-320d-acc3-d521035dec44.roa (raw, json) Hash identifier: nuDIYCT1Ni/+B6UcXvDqx+m4vfWlaT/bIzfFplGrO1E= Subject key identifier: CD:04:4F:4E:B7:28:04:84:5B:A1:AC:5C:66:FE:95:64:DA:39:C9:CA Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F4328584AA590F6B8460E6D9ABD078680 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/cd00af14-086a-320d-acc3-d521035dec44.roa Signing time: Sat 26 Jul 2025 13:01:04 +0000 ROA not before: Sat 26 Jul 2025 13:01:04 +0000 ROA not after: Fri 24 Oct 2025 13:01:04 +0000 asID: 36352 IP address blocks: 192.119.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a5:90:f6:b8:46:0e:6d:9a:bd:07:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Jul 26 13:01:04 2025 GMT Not After : Oct 24 13:01:04 2025 GMT Subject: CN=77ffac83-bf7e-4ca7-ad02-f91cf1fc30b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:33:10:82:e5:5b:1c:de:38:c7:fa:f2:6f:82: 35:34:96:4b:e0:db:1b:88:e8:25:ee:bc:78:93:49: 8e:ba:53:c5:86:87:85:e3:59:7b:99:02:1f:7e:8b: cf:08:76:f1:12:78:f4:34:0f:a4:06:0a:39:59:28: b3:48:d0:fc:61:44:e4:b3:a9:68:30:3b:7a:41:ce: df:36:3a:82:36:c0:18:1e:bc:50:38:e4:fd:b9:2c: 52:32:0b:c8:0c:ff:76:ae:6f:1c:90:b5:98:74:1b: e5:ec:20:87:a5:12:1c:b1:92:16:e4:c5:b5:9a:36: dc:23:0d:7a:db:f2:5e:19:7f:a0:f0:a9:f8:95:bf: 28:5e:20:7a:e4:3a:f0:97:74:1a:cd:25:eb:8c:58: 1c:61:1b:5a:19:f9:df:e1:de:e7:0f:4a:56:00:b1: 63:0f:61:4d:93:48:b3:70:01:aa:48:28:4f:e4:25: 4a:91:fd:dc:57:ae:f8:90:c4:73:af:6f:af:61:ba: 3a:df:5f:ea:0c:d5:a8:fb:81:83:98:45:fc:86:ae: 8b:92:bb:49:c9:b0:eb:17:6c:c9:9e:7d:c4:39:c1: 03:c7:00:31:50:51:11:96:1a:fd:05:dd:20:70:11: b3:69:19:0d:49:ef:b2:45:95:b7:71:85:d4:03:0b: 13:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:04:4F:4E:B7:28:04:84:5B:A1:AC:5C:66:FE:95:64:DA:39:C9:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/cd00af14-086a-320d-acc3-d521035dec44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 192.119.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:6d:b3:59:7c:08:68:20:f7:d2:da:e1:32:68:96:03:db:b0: 40:e9:65:c0:a4:cd:ea:ba:af:d2:0d:9e:68:fc:e6:bd:a1:e6: 4a:1e:03:7d:1b:ac:1a:2c:49:05:a3:56:a7:d9:8f:5f:97:ec: 83:fc:99:ca:c9:c1:60:f8:03:22:fa:98:d3:a1:14:89:8f:df: 1c:01:3b:31:23:fe:ac:95:ca:77:66:c0:a2:f1:12:98:eb:97: 3f:46:67:97:85:4c:4c:14:af:39:27:92:85:e3:c5:d1:d9:e5: 50:ad:43:f7:0c:ae:77:c1:8f:a2:b6:e8:95:25:7c:fc:b8:06: 1f:de:42:6f:cc:79:0c:e2:b9:19:b6:ac:fb:49:33:99:12:76: 31:8e:57:44:ac:9f:97:6b:3b:f5:f9:3c:ae:e7:81:19:0c:80: b5:ed:9a:18:82:36:25:97:d5:07:75:3b:0e:70:d7:68:46:34: 3d:82:0f:81:c5:c2:21:b0:47:c3:d6:e3:93:78:e9:e6:27:5b: de:d0:18:ba:b1:1a:60:23:57:08:4b:4b:6a:cb:c5:1f:e2:a5: 28:10:21:b3:99:d3:2f:2a:d9:2d:4d:2a:78:2e:1b:8e:6d:1b: 87:cf:d9:95:2e:83:fe:cf:df:b6:51:4c:29:16:0d:86:37:79: 1d:14:ee:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqlkPa4Rg5tmr0HhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI1MDcyNjEzMDEwNFoXDTI1MTAyNDEzMDEwNFowLzEtMCsGA1UEAxMk NzdmZmFjODMtYmY3ZS00Y2E3LWFkMDItZjkxY2YxZmMzMGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTMQguVbHN44x/ryb4I1NJZL4NsbiOgl7rx4 k0mOulPFhoeF41l7mQIffovPCHbxEnj0NA+kBgo5WSizSND8YUTks6loMDt6Qc7f NjqCNsAYHrxQOOT9uSxSMgvIDP92rm8ckLWYdBvl7CCHpRIcsZIW5MW1mjbcIw16 2/JeGX+g8Kn4lb8oXiB65Drwl3QazSXrjFgcYRtaGfnf4d7nD0pWALFjD2FNk0iz cAGqSChP5CVKkf3cV674kMRzr2+vYbo631/qDNWo+4GDmEX8hq6LkrtJybDrF2zJ nn3EOcEDxwAxUFERlhr9Bd0gcBGzaRkNSe+yRZW3cYXUAwsT+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM0ET063KASEW6GsXGb+lWTaOcnKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvY2QwMGFmMTQtMDg2YS0z MjBkLWFjYzMtZDUyMTAzNWRlYzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwHeMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNts1l8CGgg99La4TJolgPbsEDpZcCkzeq6r9INnmj85r2h5koeA30b rBosSQWjVqfZj1+X7IP8mcrJwWD4AyL6mNOhFImP3xwBOzEj/qyVyndmwKLxEpjr lz9GZ5eFTEwUrzknkoXjxdHZ5VCtQ/cMrnfBj6K26JUlfPy4Bh/eQm/MeQziuRm2 rPtJM5kSdjGOV0Ssn5drO/X5PK7ngRkMgLXtmhiCNiWX1Qd1Ow5w12hGND2CD4HF wiGwR8PW45N46eYnW97QGLqxGmAjVwhLS2rLxR/ipSgQIbOZ0y8q2S1NKnguG45t G4fP2ZUug/7P37ZRTCkWDYY3eR0U7pY= -----END CERTIFICATE-----Generated at Wed Aug 6 12:41:59 2025 by rpki-client