$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f/9a9235ac-9ad1-3a83-b931-e086a9800ba2.roa File: 9a9235ac-9ad1-3a83-b931-e086a9800ba2.roa (raw, json) Hash identifier: VkxWY8d/CsYPo52gsqVax1dscV9yTJtsiTBCuqyHgTU= Subject key identifier: F9:D0:48:2E:A3:93:25:72:F1:57:AF:DC:AF:8E:F8:71:A7:2E:CD:85 Certificate issuer: /CN=a9694c21-178c-4e7b-9e78-08bc978c5e6f Certificate serial: 010D0C9F4328584A6C55DA795559F5DC3395B280 Authority key identifier: 84:39:81:4F:67:A4:F0:69:AB:6B:59:7D:A3:EA:1C:66:EE:44:88:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f/9a9235ac-9ad1-3a83-b931-e086a9800ba2.roa Signing time: Sun 06 Jul 2025 01:00:49 +0000 ROA not before: Sun 06 Jul 2025 01:00:49 +0000 ROA not after: Sat 04 Oct 2025 01:00:49 +0000 asID: 32815 IP address blocks: 199.247.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f/a9694c21-178c-4e7b-9e78-08bc978c5e6f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f/a9694c21-178c-4e7b-9e78-08bc978c5e6f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6c:55:da:79:55:59:f5:dc:33:95:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9694c21-178c-4e7b-9e78-08bc978c5e6f Validity Not Before: Jul 6 01:00:49 2025 GMT Not After : Oct 4 01:00:49 2025 GMT Subject: CN=feddb262-0d26-4298-9c41-82a37194a4c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:a1:6c:ed:09:1e:24:4b:83:a8:d5:ff:f2:d0: 88:7b:96:35:a7:c2:1d:d7:f3:83:d1:45:86:8c:df: 53:8f:78:35:83:54:74:f8:f4:6a:38:e0:8e:01:11: 20:a9:e6:85:96:09:b6:7a:c9:67:23:17:36:78:13: 9f:b4:d6:93:22:02:a7:2b:05:9f:ba:20:a2:fa:60: 23:62:52:79:ab:f7:ce:a8:58:26:a0:e6:19:d5:ed: 49:06:f4:97:7f:58:4a:e1:64:c6:61:77:a7:08:1a: 43:39:43:4f:0a:ea:46:1a:d3:80:2d:73:a0:32:67: d8:d8:77:b5:21:83:84:87:6f:e7:ea:b8:a3:c0:34: cd:eb:51:cd:aa:03:aa:db:30:7e:09:5f:00:67:02: 8b:e2:6c:04:45:38:98:6d:99:ab:04:44:c0:65:08: 7c:90:1a:c4:5a:f9:27:20:e0:ff:6b:a7:b3:45:c9: 02:4e:e6:d3:7f:fa:a1:9d:41:69:d4:68:76:b0:54: b4:f2:c4:94:50:ab:c2:06:e8:68:8f:0d:83:99:83: df:2a:a1:51:4c:75:f4:32:82:a1:f9:2a:93:0c:47: 6f:fd:ef:bf:e8:16:0c:75:44:88:1a:02:ef:a5:5b: d0:b1:bb:ca:65:08:83:e2:12:83:e2:07:3f:6f:b2: ab:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:D0:48:2E:A3:93:25:72:F1:57:AF:DC:AF:8E:F8:71:A7:2E:CD:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f/9a9235ac-9ad1-3a83-b931-e086a9800ba2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f/a9694c21-178c-4e7b-9e78-08bc978c5e6f.crl X509v3 Authority Key Identifier: keyid:84:39:81:4F:67:A4:F0:69:AB:6B:59:7D:A3:EA:1C:66:EE:44:88:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f.cer sbgp-ipAddrBlock: critical IPv4: 199.247.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:6c:e7:29:72:8b:a7:90:67:01:56:a0:04:f2:64:24:72:d0: e8:c7:a7:47:6e:3d:d4:0c:05:61:d0:e3:78:76:5e:90:fb:ac: bc:20:1e:ff:95:49:34:cf:e1:aa:8c:44:5b:ad:40:df:b5:0b: 0c:f0:88:25:28:b3:3e:86:8e:70:59:a0:c7:62:c9:c2:12:df: 99:dd:9b:02:88:05:01:b2:f5:69:26:3e:57:1d:26:07:8e:bb: d3:9c:8e:29:34:fe:42:4e:0a:45:47:96:ad:00:ce:4c:a3:e0: 06:51:94:9c:f2:f3:12:83:66:59:6b:53:51:ef:cf:ae:9a:4a: fb:3f:99:d7:ea:d8:6a:15:42:86:2f:03:3e:a7:cb:83:e0:b8: 83:b3:e5:ec:79:87:80:c7:ce:c7:95:b7:d3:61:89:ec:c7:f3: 00:a4:a6:ac:19:49:05:a5:47:44:57:76:d8:3e:b1:72:e4:9d: fd:6f:26:7e:6c:dd:50:32:d1:3f:9c:20:e1:ff:11:ee:ec:51: fd:00:be:a7:af:1f:6f:51:10:80:30:9c:3c:1d:3f:21:b8:12: 39:ac:2d:13:a2:6a:de:cb:af:5f:ad:09:0a:36:8b:8e:bc:7e: 38:0d:d3:95:ad:a8:ab:da:e7:8c:fd:ff:05:f6:01:d2:ed:39: ab:2d:47:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpsVdp5VVn13DOVsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTk2OTRjMjEtMTc4Yy00ZTdiLTllNzgtMDhiYzk3OGM1 ZTZmMB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk ZmVkZGIyNjItMGQyNi00Mjk4LTljNDEtODJhMzcxOTRhNGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqFs7QkeJEuDqNX/8tCIe5Y1p8Id1/OD0UWG jN9Tj3g1g1R0+PRqOOCOAREgqeaFlgm2eslnIxc2eBOftNaTIgKnKwWfuiCi+mAj YlJ5q/fOqFgmoOYZ1e1JBvSXf1hK4WTGYXenCBpDOUNPCupGGtOALXOgMmfY2He1 IYOEh2/n6rijwDTN61HNqgOq2zB+CV8AZwKL4mwERTiYbZmrBETAZQh8kBrEWvkn IOD/a6ezRckCTubTf/qhnUFp1Gh2sFS08sSUUKvCBuhojw2DmYPfKqFRTHX0MoKh +SqTDEdv/e+/6BYMdUSIGgLvpVvQsbvKZQiD4hKD4gc/b7KrqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPnQSC6jkyVy8Vev3K+O+HGnLs2FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hOTY5 NGMyMS0xNzhjLTRlN2ItOWU3OC0wOGJjOTc4YzVlNmYvOWE5MjM1YWMtOWFkMS0z YTgzLWI5MzEtZTA4NmE5ODAwYmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYTk2OTRjMjEtMTc4Yy00ZTdiLTll NzgtMDhiYzk3OGM1ZTZmL2E5Njk0YzIxLTE3OGMtNGU3Yi05ZTc4LTA4YmM5Nzhj NWU2Zi5jcmwwHwYDVR0jBBgwFoAUhDmBT2ek8Gmra1l9o+ocZu5EiB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hOTY5NGMyMS0xNzhjLTRlN2ItOWU3OC0wOGJj OTc4YzVlNmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEx/eAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFs5ylyi6eQZwFWoATyZCRy0OjHp0duPdQMBWHQ43h2XpD7rLwgHv+V STTP4aqMRFutQN+1CwzwiCUosz6GjnBZoMdiycIS35ndmwKIBQGy9WkmPlcdJgeO u9Ocjik0/kJOCkVHlq0Azkyj4AZRlJzy8xKDZllrU1Hvz66aSvs/mdfq2GoVQoYv Az6ny4PguIOz5ex5h4DHzseVt9NhiezH8wCkpqwZSQWlR0RXdtg+sXLknf1vJn5s 3VAy0T+cIOH/Ee7sUf0AvqevH29REIAwnDwdPyG4EjmsLROiat7Lr1+tCQo2i468 fjgN05WtqKva54z9/wX2AdLtOastR/o= -----END CERTIFICATE-----Generated at Thu Aug 7 14:39:02 2025 by rpki-client