$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/09023f97-e944-3d62-a33e-406827f9d76d.roa File: 09023f97-e944-3d62-a33e-406827f9d76d.roa (raw, json) Hash identifier: 6B3QqjWpEUNgpAkji5i2KIpjmOWYFPwrAURT+slqCs8= Subject key identifier: 61:61:68:77:A3:01:F9:DA:AD:6D:1A:37:4B:0C:58:51:21:C9:32:4E Certificate issuer: /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b Certificate serial: 010D0C9F4328584AB650D1845BDCD8B4AC10A560 Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/09023f97-e944-3d62-a33e-406827f9d76d.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 16904 IP address blocks: 199.96.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:50:d1:84:5b:dc:d8:b4:ac:10:a5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=fbfd43c2-ceb6-419a-9405-c5e190dfe70c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:03:32:3d:c0:65:52:f1:56:f9:ef:a2:a1:d1: 3c:0e:bd:6f:37:02:c3:ec:a2:2d:91:6d:b8:af:d0: be:f2:3c:53:3d:7b:bd:d4:ae:3e:18:c1:f2:79:c6: 33:d2:8d:bb:13:d0:b7:7b:0a:38:16:e3:cd:19:5c: 1a:50:1c:1a:85:b7:87:92:2e:ce:f0:5d:fe:f9:f0: 72:6c:88:08:73:d7:cb:a0:af:e8:4c:33:77:b8:fd: cd:1d:1a:12:80:30:e9:48:07:69:0e:15:e2:22:f7: 24:3e:d0:d8:35:8b:67:85:93:97:db:9b:ff:48:36: 71:00:dc:85:5c:0b:15:de:c1:db:a6:16:37:67:3d: 92:e5:33:ee:c4:03:3f:46:ee:a7:da:ec:89:5c:67: 5a:dc:28:7e:ed:e8:d1:ee:9b:2f:ae:c1:0b:73:f6: ca:d3:a1:16:23:32:1f:3d:0f:66:d4:b6:f5:1b:bc: a9:83:56:d5:1c:0d:98:c2:56:56:07:73:f3:96:85: 9c:81:f5:30:8b:2a:22:dc:38:b4:5e:1c:a3:ec:d1: 52:6e:bd:a7:ae:60:e0:f3:69:e9:f7:d2:bf:ac:c3: c2:76:14:df:f3:7b:a8:cf:09:98:6d:88:5c:76:ec: ef:db:47:f4:82:f2:9f:92:8c:32:ce:ae:f5:94:eb: 01:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:61:68:77:A3:01:F9:DA:AD:6D:1A:37:4B:0C:58:51:21:C9:32:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/09023f97-e944-3d62-a33e-406827f9d76d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl X509v3 Authority Key Identifier: keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer sbgp-ipAddrBlock: critical IPv4: 199.96.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:d2:e7:6e:b7:d0:b8:2b:71:88:66:95:f4:13:4f:58:5b:aa: f4:20:a3:cf:0f:5f:c9:8b:0f:66:b0:a1:d5:cf:42:e5:39:e9: 2e:8a:66:69:7a:4a:72:49:50:6b:d6:eb:21:68:cb:38:cf:f5: 61:c8:66:d6:a9:e4:dc:3b:fb:d2:5a:38:42:01:9a:a0:e6:c4: 2b:55:e5:de:cc:23:7c:cc:7f:a7:f9:bf:7b:03:59:c7:45:9e: 32:05:e7:97:37:17:78:30:92:d8:73:d1:89:aa:24:bf:65:d5: 35:1d:de:38:3e:09:08:fa:df:24:c3:2c:83:dc:b9:87:ad:cc: 23:5a:b3:aa:6c:24:68:31:d6:61:9a:d5:bc:57:93:5d:ae:3a: 53:18:75:ae:9e:80:5d:0f:2e:f7:a5:cc:59:8d:82:53:6e:5a: 3e:46:18:80:8e:9e:d7:12:9e:b1:33:93:f9:46:c1:6d:05:92: 6f:82:e4:f3:ca:d2:07:48:23:1c:55:e7:64:5b:4b:6a:71:ab: f0:21:f6:eb:11:36:0f:c5:c4:a2:2b:0c:9a:11:8f:05:7a:3b: f7:51:3f:5d:e2:ed:7e:28:90:07:08:0f:4d:78:c2:1a:9f:36: 9d:ab:e3:38:ae:ff:ec:0c:91:d8:f3:f9:7a:7c:8c:18:f2:cc: a6:ab:cf:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq2UNGEW9zYtKwQpWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA0NWMyNWEtMDVlMy00MGJhLWEyZGMtNWM1YmRhYjAx MzFiMB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk ZmJmZDQzYzItY2ViNi00MTlhLTk0MDUtYzVlMTkwZGZlNzBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwMyPcBlUvFW+e+iodE8Dr1vNwLD7KItkW24 r9C+8jxTPXu91K4+GMHyecYz0o27E9C3ewo4FuPNGVwaUBwahbeHki7O8F3++fBy bIgIc9fLoK/oTDN3uP3NHRoSgDDpSAdpDhXiIvckPtDYNYtnhZOX25v/SDZxANyF XAsV3sHbphY3Zz2S5TPuxAM/Ru6n2uyJXGda3Ch+7ejR7psvrsELc/bK06EWIzIf PQ9m1Lb1G7ypg1bVHA2YwlZWB3PzloWcgfUwiyoi3Di0Xhyj7NFSbr2nrmDg82np 99K/rMPCdhTf83uozwmYbYhcduzv20f0gvKfkowyzq71lOsBnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGFhaHejAfnarW0aN0sMWFEhyTJOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDQ1 YzI1YS0wNWUzLTQwYmEtYTJkYy01YzViZGFiMDEzMWIvMDkwMjNmOTctZTk0NC0z ZDYyLWEzM2UtNDA2ODI3ZjlkNzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA0NWMyNWEtMDVlMy00MGJhLWEy ZGMtNWM1YmRhYjAxMzFiLzAwNDVjMjVhLTA1ZTMtNDBiYS1hMmRjLTVjNWJkYWIw MTMxYi5jcmwwHwYDVR0jBBgwFoAUbbgrxbTjT35CXDlBEzNufGgjfl8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDQ1YzI1YS0wNWUzLTQwYmEtYTJkYy01YzVi ZGFiMDEzMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx2DsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACnS52630LgrcYhmlfQTT1hbqvQgo88PX8mLD2awodXPQuU56S6KZml6 SnJJUGvW6yFoyzjP9WHIZtap5Nw7+9JaOEIBmqDmxCtV5d7MI3zMf6f5v3sDWcdF njIF55c3F3gwkthz0YmqJL9l1TUd3jg+CQj63yTDLIPcuYetzCNas6psJGgx1mGa 1bxXk12uOlMYda6egF0PLvelzFmNglNuWj5GGICOntcSnrEzk/lGwW0Fkm+C5PPK 0gdIIxxV52RbS2pxq/Ah9usRNg/FxKIrDJoRjwV6O/dRP13i7X4okAcID014whqf Np2r4ziu/+wMkdjz+Xp8jBjyzKarz6I= -----END CERTIFICATE-----Generated at Mon Aug 4 22:13:56 2025 by rpki-client