$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/69935949-26cb-3a1a-85e7-7b6948013483.roa File: 69935949-26cb-3a1a-85e7-7b6948013483.roa (raw, json) Hash identifier: h3Y/lxxZldqlXR45AL3p+HkrGpFZZmh+VFEy3/gBVQE= Subject key identifier: 88:98:CE:53:21:5B:54:47:A3:AF:E5:77:6F:83:A7:95:4C:DA:A0:81 Certificate issuer: /CN=8c1e504b-f881-4524-a98f-2a623e4a476d Certificate serial: 010D0C9F4328584A9D30E9723B8AF34A2FBFF180 Authority key identifier: B9:04:42:C3:CF:95:42:60:87:CD:AE:2A:D4:82:C7:4E:DC:18:18:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/69935949-26cb-3a1a-85e7-7b6948013483.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 396952 IP address blocks: 199.36.252.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:e9:72:3b:8a:f3:4a:2f:bf:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c1e504b-f881-4524-a98f-2a623e4a476d Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=0526872b-c267-471c-b6a3-ff9fc3bff89d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:90:c7:ba:5c:48:3a:4b:97:53:8f:16:fe:75: 5f:16:38:19:86:84:86:8a:e4:c9:84:7f:f8:82:c1: db:23:76:a5:6d:32:da:90:99:1b:30:bc:55:60:c3: 74:fa:45:4e:58:7a:46:72:58:d5:64:13:14:cf:45: 43:04:e6:c2:8e:f6:ec:93:7a:33:d2:93:7e:a7:16: 20:1c:a3:e8:35:7f:58:bd:d6:52:6d:2c:7a:a8:fc: 3d:ae:d3:3e:f6:97:b9:b1:98:af:b9:9e:c6:64:c2: 55:22:48:4a:33:69:a6:89:0d:33:a4:32:da:15:8f: 3c:b9:ab:39:a3:3c:ec:0b:68:e3:2b:7d:4d:77:bc: 6f:bc:41:19:f4:f3:e9:f6:1e:0f:16:4c:39:6e:8e: bf:9c:60:18:73:62:04:8b:dd:ed:d6:1f:5b:c4:2d: ed:a1:7f:6c:08:b6:68:10:91:09:c0:9f:47:56:ee: 93:b5:a3:bf:9d:ca:99:fe:a5:24:68:7a:82:cc:1c: 08:d6:0d:2e:5b:20:d0:50:48:f9:36:03:54:ed:70: 47:28:46:df:1e:d0:cc:83:db:46:17:56:83:8c:16: fc:14:09:8b:b0:82:50:90:a9:31:bd:c5:7f:28:4b: 42:cd:62:ca:37:17:35:de:a6:a5:a3:3c:bc:95:be: 8c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:98:CE:53:21:5B:54:47:A3:AF:E5:77:6F:83:A7:95:4C:DA:A0:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/69935949-26cb-3a1a-85e7-7b6948013483.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.crl X509v3 Authority Key Identifier: keyid:B9:04:42:C3:CF:95:42:60:87:CD:AE:2A:D4:82:C7:4E:DC:18:18:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer sbgp-ipAddrBlock: critical IPv4: 199.36.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:3f:a2:35:c9:0d:46:cb:c2:0f:04:d1:76:ff:da:c1:55:74: 35:47:e3:2d:42:74:6c:ea:40:91:82:ac:ab:5b:12:a9:39:95: 20:40:3d:c5:21:22:66:9b:d9:8b:33:88:fb:48:6e:ac:96:e8: 81:b1:82:ff:08:0e:85:ff:1f:11:fb:7b:38:46:b9:fe:0b:99: 87:03:d3:74:e9:65:39:13:f2:79:d7:9b:a2:27:c1:72:06:be: e7:cc:dd:80:1b:66:75:b1:92:e5:4b:2b:16:bc:42:53:47:cc: 12:ff:70:7a:f8:68:cc:01:2d:15:74:82:ff:03:48:90:70:4e: d1:8c:13:37:15:00:19:45:f4:27:1e:2c:c0:38:21:65:44:dd: a1:cf:5e:fd:bb:ca:fa:40:c3:77:68:19:7c:8d:10:15:83:a2: 29:57:df:5e:7d:eb:37:10:5e:00:00:a2:33:15:1d:c1:e9:be: e5:ee:b9:e9:35:10:8c:c3:93:92:f3:15:0c:33:f5:e8:fc:f9: 53:ad:3d:13:eb:a1:7f:68:56:c3:8e:6f:71:7c:de:5c:17:6c: 21:e2:cf:5f:f0:26:17:1a:78:ef:03:d7:81:fa:23:f1:e8:28: e2:73:df:3e:9e:da:5b:bf:fc:98:23:84:09:9c:f3:c7:c7:0c: b6:56:35:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdMOlyO4rzSi+/8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGMxZTUwNGItZjg4MS00NTI0LWE5OGYtMmE2MjNlNGE0 NzZkMB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk MDUyNjg3MmItYzI2Ny00NzFjLWI2YTMtZmY5ZmMzYmZmODlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5DHulxIOkuXU48W/nVfFjgZhoSGiuTJhH/4 gsHbI3albTLakJkbMLxVYMN0+kVOWHpGcljVZBMUz0VDBObCjvbsk3oz0pN+pxYg HKPoNX9YvdZSbSx6qPw9rtM+9pe5sZivuZ7GZMJVIkhKM2mmiQ0zpDLaFY88uas5 ozzsC2jjK31Nd7xvvEEZ9PPp9h4PFkw5bo6/nGAYc2IEi93t1h9bxC3toX9sCLZo EJEJwJ9HVu6TtaO/ncqZ/qUkaHqCzBwI1g0uWyDQUEj5NgNU7XBHKEbfHtDMg9tG F1aDjBb8FAmLsIJQkKkxvcV/KEtCzWLKNxc13qalozy8lb6MqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIiYzlMhW1RHo6/ld2+Dp5VM2qCBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YzFl NTA0Yi1mODgxLTQ1MjQtYTk4Zi0yYTYyM2U0YTQ3NmQvNjk5MzU5NDktMjZjYi0z YTFhLTg1ZTctN2I2OTQ4MDEzNDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGMxZTUwNGItZjg4MS00NTI0LWE5 OGYtMmE2MjNlNGE0NzZkLzhjMWU1MDRiLWY4ODEtNDUyNC1hOThmLTJhNjIzZTRh NDc2ZC5jcmwwHwYDVR0jBBgwFoAUuQRCw8+VQmCHza4q1ILHTtwYGN0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YzFlNTA0Yi1mODgxLTQ1MjQtYTk4Zi0yYTYy M2U0YTQ3NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxyT8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJE/ojXJDUbLwg8E0Xb/2sFVdDVH4y1CdGzqQJGCrKtbEqk5lSBAPcUh Imab2YsziPtIbqyW6IGxgv8IDoX/HxH7ezhGuf4LmYcD03TpZTkT8nnXm6InwXIG vufM3YAbZnWxkuVLKxa8QlNHzBL/cHr4aMwBLRV0gv8DSJBwTtGMEzcVABlF9Cce LMA4IWVE3aHPXv27yvpAw3doGXyNEBWDoilX31596zcQXgAAojMVHcHpvuXuuek1 EIzDk5LzFQwz9ej8+VOtPRProX9oVsOOb3F83lwXbCHiz1/wJhcaeO8D14H6I/Ho KOJz3z6e2lu//JgjhAmc88fHDLZWNSk= -----END CERTIFICATE-----Generated at Wed Aug 6 12:38:30 2025 by rpki-client