$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85befeae-24b8-4c74-a4dc-19e1382944ad/7400a854-9ce1-369f-9bd1-4b942cd0108f.roa File: 7400a854-9ce1-369f-9bd1-4b942cd0108f.roa (raw, json) Hash identifier: gWFcE1GGGoMffahbu4nUq3hTri7dDqGwbuR4QNA4k9M= Subject key identifier: 63:27:85:9A:C9:32:42:BE:6A:C5:FF:85:5C:1E:46:99:4C:78:C1:0A Certificate issuer: /CN=85befeae-24b8-4c74-a4dc-19e1382944ad Certificate serial: 010D0C9F4328584A7E7B5AC244FD4BAAB55DDF00 Authority key identifier: C3:35:6D:AD:1A:B7:F1:7C:16:8C:31:2B:65:0F:D5:E5:9F:C1:BD:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85befeae-24b8-4c74-a4dc-19e1382944ad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85befeae-24b8-4c74-a4dc-19e1382944ad/7400a854-9ce1-369f-9bd1-4b942cd0108f.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 16509 IP address blocks: 156.154.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85befeae-24b8-4c74-a4dc-19e1382944ad/85befeae-24b8-4c74-a4dc-19e1382944ad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85befeae-24b8-4c74-a4dc-19e1382944ad/85befeae-24b8-4c74-a4dc-19e1382944ad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85befeae-24b8-4c74-a4dc-19e1382944ad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:5a:c2:44:fd:4b:aa:b5:5d:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85befeae-24b8-4c74-a4dc-19e1382944ad Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=2996c045-68be-466f-9997-79e49641e5f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b1:c7:03:3d:4d:9e:49:66:7f:a1:06:84:3c: c7:f2:15:4a:52:78:4b:f5:57:e7:af:d2:46:3c:7e: 1a:3c:a1:88:93:6e:b7:84:97:ac:a7:e2:11:ac:4a: b0:f6:0d:81:51:70:a9:ab:66:63:dd:9f:5b:e9:fb: de:02:d5:0a:f4:7e:fa:89:60:17:60:4e:29:cc:dd: b0:83:f8:2f:27:d6:24:70:9f:02:43:38:d1:37:7e: ce:fb:7d:83:ad:ce:d4:c9:75:68:b3:f9:36:60:8d: a6:b4:7b:a0:3c:4c:1c:6d:56:a7:3d:9e:d7:3e:8a: ef:87:bb:9c:43:ef:29:e6:4e:4c:ac:ba:4e:88:5f: 2d:6d:54:f8:59:da:0d:50:72:a2:ce:84:fd:42:22: 77:53:cb:a7:14:c8:10:e0:d8:2e:2c:00:6c:96:57: 7a:73:4e:3d:d0:db:55:c1:f3:49:34:11:90:33:07: f8:67:58:39:12:b9:24:58:c9:f7:c9:c1:aa:29:f2: 64:98:8b:ac:52:69:2f:66:aa:08:36:a6:29:b3:c6: 30:b7:90:09:3b:1e:88:cc:03:05:1a:51:0c:b8:68: 83:b6:68:82:32:cf:68:37:0b:d4:73:8c:56:8e:54: 65:20:20:e4:5e:c3:f3:23:4b:28:65:26:b8:45:88: 44:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:27:85:9A:C9:32:42:BE:6A:C5:FF:85:5C:1E:46:99:4C:78:C1:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85befeae-24b8-4c74-a4dc-19e1382944ad/7400a854-9ce1-369f-9bd1-4b942cd0108f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85befeae-24b8-4c74-a4dc-19e1382944ad/85befeae-24b8-4c74-a4dc-19e1382944ad.crl X509v3 Authority Key Identifier: keyid:C3:35:6D:AD:1A:B7:F1:7C:16:8C:31:2B:65:0F:D5:E5:9F:C1:BD:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85befeae-24b8-4c74-a4dc-19e1382944ad.cer sbgp-ipAddrBlock: critical IPv4: 156.154.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:e7:30:53:ba:24:6e:13:bb:e5:3f:69:57:b1:86:44:e4:c4: 0b:62:bb:3e:aa:5f:a7:ca:96:af:7f:ee:c5:87:4d:c1:fc:69: d2:32:2a:5d:34:a7:de:ae:2a:95:77:5d:01:a4:ab:ef:cc:74: 00:00:09:de:5c:d6:5b:ff:14:8e:84:bc:2f:44:24:87:3b:dc: 4c:7c:45:ed:ca:86:88:ff:2f:ea:58:9e:16:24:a9:2e:eb:d8: 6b:9f:aa:1b:df:af:0b:06:e0:ff:11:f9:32:8d:db:ec:4c:76: 8c:cb:26:e4:a0:14:c5:61:63:d1:99:3e:40:7e:0e:d2:68:f6: e6:89:a4:f5:c8:a8:85:62:8f:a8:01:b3:34:08:cf:3e:d1:ea: 26:5a:b3:7b:9b:f4:d4:cf:31:bd:c5:0d:08:06:b5:ee:14:9e: 5c:0a:ef:de:2f:dc:4b:0b:17:4a:10:a3:04:68:f3:6f:d6:13: bc:e9:e2:ee:48:70:0f:92:cb:92:75:8d:eb:91:f9:1f:54:2e: 20:ba:8e:c0:29:ba:32:ea:f9:84:38:be:52:97:57:db:5d:ff: bd:d1:e4:43:18:9a:eb:b4:a3:b9:4a:1e:76:3b:72:cc:08:b2: ed:03:86:ea:07:dc:dc:66:c6:cf:21:34:95:1d:ea:19:e3:47: 62:54:fa:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e1rCRP1LqrVd3wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODViZWZlYWUtMjRiOC00Yzc0LWE0ZGMtMTllMTM4Mjk0 NGFkMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk Mjk5NmMwNDUtNjhiZS00NjZmLTk5OTctNzllNDk2NDFlNWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrHHAz1Nnklmf6EGhDzH8hVKUnhL9Vfnr9JG PH4aPKGIk263hJesp+IRrEqw9g2BUXCpq2Zj3Z9b6fveAtUK9H76iWAXYE4pzN2w g/gvJ9YkcJ8CQzjRN37O+32Drc7UyXVos/k2YI2mtHugPEwcbVanPZ7XPorvh7uc Q+8p5k5MrLpOiF8tbVT4WdoNUHKizoT9QiJ3U8unFMgQ4NguLABslld6c0490NtV wfNJNBGQMwf4Z1g5ErkkWMn3ycGqKfJkmIusUmkvZqoINqYps8Ywt5AJOx6IzAMF GlEMuGiDtmiCMs9oNwvUc4xWjlRlICDkXsPzI0soZSa4RYhESwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGMnhZrJMkK+asX/hVweRplMeMEKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NWJl ZmVhZS0yNGI4LTRjNzQtYTRkYy0xOWUxMzgyOTQ0YWQvNzQwMGE4NTQtOWNlMS0z NjlmLTliZDEtNGI5NDJjZDAxMDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODViZWZlYWUtMjRiOC00Yzc0LWE0 ZGMtMTllMTM4Mjk0NGFkLzg1YmVmZWFlLTI0YjgtNGM3NC1hNGRjLTE5ZTEzODI5 NDRhZC5jcmwwHwYDVR0jBBgwFoAUwzVtrRq38XwWjDErZQ/V5Z/BvSAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NWJlZmVhZS0yNGI4LTRjNzQtYTRkYy0xOWUx MzgyOTQ0YWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJoTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEznMFO6JG4Tu+U/aVexhkTkxAtiuz6qX6fKlq9/7sWHTcH8adIyKl00 p96uKpV3XQGkq+/MdAAACd5c1lv/FI6EvC9EJIc73Ex8Re3Khoj/L+pYnhYkqS7r 2GufqhvfrwsG4P8R+TKN2+xMdozLJuSgFMVhY9GZPkB+DtJo9uaJpPXIqIVij6gB szQIzz7R6iZas3ub9NTPMb3FDQgGte4UnlwK794v3EsLF0oQowRo82/WE7zp4u5I cA+Sy5J1jeuR+R9ULiC6jsApujLq+YQ4vlKXV9td/73R5EMYmuu0o7lKHnY7cswI su0DhuoH3Nxmxs8hNJUd6hnjR2JU+mU= -----END CERTIFICATE-----Generated at Wed Aug 6 06:05:59 2025 by rpki-client