$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/b90f3189-2f92-330b-88a6-55af6118e67a.roa File: b90f3189-2f92-330b-88a6-55af6118e67a.roa (raw, json) Hash identifier: d2yIGT3pDl9RNfaof5/NzVVTvKU7i0wpxCTw5oPL3Kw= Subject key identifier: 0B:DE:20:17:F8:7E:7B:F2:42:7D:68:CE:1E:23:44:AD:89:E8:F4:73 Certificate issuer: /CN=a9d449fa-f08e-4170-95fc-cd3217049f27 Certificate serial: 010D0C9F4328584A89A61DABCB883E92A56B3F80 Authority key identifier: 12:FB:7D:7C:B7:41:01:23:16:58:6A:79:5A:13:90:EF:23:19:34:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/b90f3189-2f92-330b-88a6-55af6118e67a.roa Signing time: Wed 16 Jul 2025 13:01:03 +0000 ROA not before: Wed 16 Jul 2025 13:01:03 +0000 ROA not after: Tue 14 Oct 2025 13:01:03 +0000 asID: 19605 IP address blocks: 205.233.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/a9d449fa-f08e-4170-95fc-cd3217049f27.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/a9d449fa-f08e-4170-95fc-cd3217049f27.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:89:a6:1d:ab:cb:88:3e:92:a5:6b:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9d449fa-f08e-4170-95fc-cd3217049f27 Validity Not Before: Jul 16 13:01:03 2025 GMT Not After : Oct 14 13:01:03 2025 GMT Subject: CN=db9dd64b-dbbc-45fc-b40f-3c3bfe55911a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d6:88:38:e1:af:95:70:7a:bf:26:de:e2:65: ed:a1:a2:12:8d:18:62:49:ff:df:be:a9:0e:16:22: 5a:dd:60:fb:be:58:ae:ea:f9:5e:37:39:ed:70:06: 6f:ea:ae:b4:9e:8c:f5:55:cf:70:32:c6:dd:c9:11: 09:ca:f0:96:3e:6c:2b:c2:38:69:8f:e3:2e:19:71: 3f:04:74:66:f3:bd:be:b8:17:2d:0e:46:ad:52:34: 0c:6e:28:a8:3e:2b:ae:5f:30:81:2f:b4:10:36:30: 24:f3:e7:ed:eb:dc:4d:b5:d5:1a:0b:f0:2c:1e:63: f1:84:93:a8:41:6b:5e:6b:33:80:f1:2f:e0:ee:19: ba:1d:5c:80:8c:1e:94:de:11:9f:4a:60:ff:e7:fe: 53:8f:9e:59:aa:84:0a:fe:b0:6a:78:a1:fc:50:ae: 48:19:90:66:6c:0b:43:87:09:b2:26:61:4c:47:76: ac:01:e4:30:eb:91:94:f7:45:1b:db:c2:a7:94:f5: 05:a5:ab:cf:45:53:9a:d6:57:bc:32:15:64:99:07: 6a:7f:ef:b8:f7:5b:6d:c7:fc:71:36:f0:02:f5:4c: da:b0:a6:0d:8c:31:b7:d7:06:6a:49:36:4e:1b:40: 27:4b:8b:ec:6e:2b:c5:31:8f:96:4d:36:84:31:91: 29:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:DE:20:17:F8:7E:7B:F2:42:7D:68:CE:1E:23:44:AD:89:E8:F4:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/b90f3189-2f92-330b-88a6-55af6118e67a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/a9d449fa-f08e-4170-95fc-cd3217049f27.crl X509v3 Authority Key Identifier: keyid:12:FB:7D:7C:B7:41:01:23:16:58:6A:79:5A:13:90:EF:23:19:34:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27.cer sbgp-ipAddrBlock: critical IPv4: 205.233.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:fb:24:d6:77:96:ec:4b:8d:bd:b9:89:ae:95:b5:37:58:a5: b9:a1:70:65:c4:e1:e5:73:2f:06:01:2f:3f:9b:bd:4d:5b:4a: 25:83:6e:bb:1d:fb:a6:34:2b:a4:5c:b9:31:88:49:3a:8c:ea: a4:c2:50:50:96:94:43:94:70:75:ce:74:a4:7f:92:56:88:4f: ff:d7:41:f0:39:7a:11:5e:ba:d2:ad:4f:13:74:74:c0:22:c6: f5:ec:3e:b7:65:a9:c1:9c:da:7b:eb:69:09:2b:c2:18:a9:27: 08:f7:70:80:3c:f1:3e:af:c9:dc:6a:97:1e:eb:49:f0:50:9a: 81:37:53:ee:d6:e1:81:c3:66:4c:cf:44:e7:95:d2:45:23:2f: 4e:49:5f:5f:b3:8f:40:39:31:5c:13:7e:b6:23:0b:fa:ca:11: 0e:ac:c1:d2:2f:b8:7d:ab:43:95:09:1e:f0:62:f8:9f:1a:8d: 75:9f:33:47:21:75:e6:c6:f3:f8:30:5a:81:2d:6a:85:4a:9d: 57:05:1b:ab:7a:fc:f2:46:55:0a:6a:5c:b0:21:20:1b:0d:0f: 08:f4:9f:cc:de:1e:72:dd:15:18:5c:ce:91:e1:49:88:1c:7d: f0:85:34:d2:5c:aa:6b:9d:4f:08:b4:29:a4:e0:67:e0:f1:b3: ad:80:f4:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqJph2ry4g+kqVrP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTlkNDQ5ZmEtZjA4ZS00MTcwLTk1ZmMtY2QzMjE3MDQ5 ZjI3MB4XDTI1MDcxNjEzMDEwM1oXDTI1MTAxNDEzMDEwM1owLzEtMCsGA1UEAxMk ZGI5ZGQ2NGItZGJiYy00NWZjLWI0MGYtM2MzYmZlNTU5MTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidaIOOGvlXB6vybe4mXtoaISjRhiSf/fvqkO FiJa3WD7vliu6vleNzntcAZv6q60noz1Vc9wMsbdyREJyvCWPmwrwjhpj+MuGXE/ BHRm872+uBctDkatUjQMbiioPiuuXzCBL7QQNjAk8+ft69xNtdUaC/AsHmPxhJOo QWteazOA8S/g7hm6HVyAjB6U3hGfSmD/5/5Tj55ZqoQK/rBqeKH8UK5IGZBmbAtD hwmyJmFMR3asAeQw65GU90Ub28KnlPUFpavPRVOa1le8MhVkmQdqf++491ttx/xx NvAC9UzasKYNjDG31wZqSTZOG0AnS4vsbivFMY+WTTaEMZEpLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAveIBf4fnvyQn1ozh4jRK2J6PRzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hOWQ0 NDlmYS1mMDhlLTQxNzAtOTVmYy1jZDMyMTcwNDlmMjcvYjkwZjMxODktMmY5Mi0z MzBiLTg4YTYtNTVhZjYxMThlNjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYTlkNDQ5ZmEtZjA4ZS00MTcwLTk1 ZmMtY2QzMjE3MDQ5ZjI3L2E5ZDQ0OWZhLWYwOGUtNDE3MC05NWZjLWNkMzIxNzA0 OWYyNy5jcmwwHwYDVR0jBBgwFoAUEvt9fLdBASMWWGp5WhOQ7yMZNI0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9hOWQ0NDlmYS1mMDhlLTQxNzAtOTVmYy1jZDMy MTcwNDlmMjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzeksMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABT7JNZ3luxLjb25ia6VtTdYpbmhcGXE4eVzLwYBLz+bvU1bSiWDbrsd +6Y0K6RcuTGISTqM6qTCUFCWlEOUcHXOdKR/klaIT//XQfA5ehFeutKtTxN0dMAi xvXsPrdlqcGc2nvraQkrwhipJwj3cIA88T6vydxqlx7rSfBQmoE3U+7W4YHDZkzP ROeV0kUjL05JX1+zj0A5MVwTfrYjC/rKEQ6swdIvuH2rQ5UJHvBi+J8ajXWfM0ch debG8/gwWoEtaoVKnVcFG6t6/PJGVQpqXLAhIBsNDwj0n8zeHnLdFRhczpHhSYgc ffCFNNJcqmudTwi0KaTgZ+Dxs62A9CQ= -----END CERTIFICATE-----Generated at Mon Aug 4 14:52:45 2025 by rpki-client