$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/6c7b7e75-549d-32a6-b3e9-18cad91a1484.roa File: 6c7b7e75-549d-32a6-b3e9-18cad91a1484.roa (raw, json) Hash identifier: b044Hen6mS7yFpCox1xP0mmKnHdzDpYUAxd55OxxwWg= Subject key identifier: 92:73:90:2F:2E:27:02:D6:6A:5D:87:42:8C:D3:BC:9A:A9:58:20:5F Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f Certificate serial: 010D0C9F4328584AB91B968E08EEEA0E0272A710 Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/6c7b7e75-549d-32a6-b3e9-18cad91a1484.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 29802 IP address blocks: 200.229.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:96:8e:08:ee:ea:0e:02:72:a7:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=d7fb61f4-0d2a-4d42-8911-4207d7af4458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a0:71:4c:a1:cc:89:97:3d:84:1f:e0:02:87: a9:f7:f4:7b:89:17:d2:61:00:02:e8:f3:05:fe:dd: c1:d1:c0:a0:65:a0:98:9b:a2:01:42:c8:ef:c2:14: e0:4b:72:df:03:10:ff:77:8c:83:0b:6d:8d:92:17: d8:5b:31:da:e0:6a:b9:3c:99:70:06:79:f7:9a:d2: 2d:22:cf:b4:d0:56:67:8e:4c:f5:a3:08:94:c0:30: 36:c0:81:14:8d:9a:6b:68:14:9a:4f:e7:6f:4c:15: 96:dc:df:64:51:36:af:b3:80:0b:85:5f:ec:97:c4: 99:df:f4:32:e6:95:ba:94:53:83:77:2f:c5:89:31: 61:16:29:61:4d:39:59:f1:93:d2:44:19:e7:e8:96: 49:f9:aa:b4:17:e8:8b:b0:88:2a:42:60:56:dd:a8: 3c:d3:35:3c:9e:a3:59:be:8c:92:21:54:b1:27:ab: 9b:a5:b1:8e:a4:4d:79:5d:de:c9:3c:43:04:dd:58: 5d:58:fa:4f:93:23:e1:29:19:90:4b:12:33:0a:2a: 55:2c:4f:06:23:8a:41:b3:02:a5:83:f5:e6:ed:d5: 45:b5:08:6e:49:a5:a1:c2:52:8d:5a:67:7a:ff:a0: 8c:0e:37:48:93:b5:dc:0e:2d:5b:73:09:1f:3b:dd: 09:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:73:90:2F:2E:27:02:D6:6A:5D:87:42:8C:D3:BC:9A:A9:58:20:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/6c7b7e75-549d-32a6-b3e9-18cad91a1484.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl X509v3 Authority Key Identifier: keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer sbgp-ipAddrBlock: critical IPv4: 200.229.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:65:4d:97:46:26:62:f0:06:3b:4b:e8:83:d2:cd:53:4c:b0: 9b:97:ef:25:df:e8:fb:bd:7d:94:6b:f5:5c:81:c0:3a:19:fa: 52:86:4f:b4:d5:ef:2b:4f:27:73:88:e1:e0:8f:9a:b0:cd:a2: b0:9b:79:f1:48:0b:a7:4d:3e:e2:9d:01:ae:ad:f8:4e:19:0e: 5f:82:50:24:cf:46:a4:da:03:99:cc:6b:69:39:8a:5d:49:f0: 57:ef:c7:7d:a7:60:04:3e:22:8e:5e:a2:57:e0:7f:2b:bf:4a: e3:77:6d:ca:8d:0d:ae:25:b5:8f:86:c1:1a:75:b5:b2:15:ae: ea:db:98:97:ee:f0:eb:e4:f2:2f:0d:19:82:d6:10:25:ef:7a: 19:5f:04:67:07:9e:96:e7:59:2b:62:16:07:c5:cb:ab:55:38: bf:74:3c:de:fa:c1:5a:42:52:4c:45:2d:b0:9f:ee:0d:f9:bc: 18:f2:eb:9d:26:00:67:00:0d:78:1f:3e:c0:f4:39:49:93:c3: d3:2d:d7:f3:51:0e:9e:ff:33:1d:c5:51:25:82:0e:7c:7e:56: bd:79:96:f4:ce:35:3f:e8:fb:58:96:00:65:fb:38:30:db:9c: fe:09:77:31:ff:cd:29:da:29:ec:d1:f9:89:5a:27:4e:72:7a: 6b:40:b0:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5G5aOCO7qDgJypxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2 ZjNmMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk ZDdmYjYxZjQtMGQyYS00ZDQyLTg5MTEtNDIwN2Q3YWY0NDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqBxTKHMiZc9hB/gAoep9/R7iRfSYQAC6PMF /t3B0cCgZaCYm6IBQsjvwhTgS3LfAxD/d4yDC22NkhfYWzHa4Gq5PJlwBnn3mtIt Is+00FZnjkz1owiUwDA2wIEUjZpraBSaT+dvTBWW3N9kUTavs4ALhV/sl8SZ3/Qy 5pW6lFODdy/FiTFhFilhTTlZ8ZPSRBnn6JZJ+aq0F+iLsIgqQmBW3ag80zU8nqNZ voySIVSxJ6ubpbGOpE15Xd7JPEME3VhdWPpPkyPhKRmQSxIzCipVLE8GI4pBswKl g/Xm7dVFtQhuSaWhwlKNWmd6/6CMDjdIk7XcDi1bcwkfO90JtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJJzkC8uJwLWal2HQozTvJqpWCBfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvNmM3YjdlNzUtNTQ5ZC0z MmE2LWIzZTktMThjYWQ5MWExNDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyOUXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5lTZdGJmLwBjtL6IPSzVNMsJuX7yXf6Pu9fZRr9VyBwDoZ+lKGT7TV 7ytPJ3OI4eCPmrDNorCbefFIC6dNPuKdAa6t+E4ZDl+CUCTPRqTaA5nMa2k5il1J 8Ffvx32nYAQ+Io5eolfgfyu/SuN3bcqNDa4ltY+GwRp1tbIVrurbmJfu8Ovk8i8N GYLWECXvehlfBGcHnpbnWStiFgfFy6tVOL90PN76wVpCUkxFLbCf7g35vBjy650m AGcADXgfPsD0OUmTw9Mt1/NRDp7/Mx3FUSWCDnx+Vr15lvTONT/o+1iWAGX7ODDb nP4JdzH/zSnaKezR+YlaJ05yemtAsHI= -----END CERTIFICATE-----Generated at Mon Aug 4 16:12:00 2025 by rpki-client