$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/07af84c8-ee29-3120-8019-a82a12b3b51b.roa File: 07af84c8-ee29-3120-8019-a82a12b3b51b.roa (raw, json) Hash identifier: z/4GePMXK9SE1LLs1A4h1e1wtCl4Ojji9IdfO6/4QpQ= Subject key identifier: 65:DF:BF:DE:7A:E9:10:BF:EB:FE:90:9B:73:89:79:51:A0:E1:39:26 Certificate issuer: /CN=00423c2c-0dc2-4b33-b865-92ccbfdb07dd Certificate serial: 010D0C9F4328584ABD4BB18656E9CE83636F4900 Authority key identifier: F3:C0:69:D2:47:79:65:94:E1:58:B5:2D:72:D5:DA:AA:39:6C:97:3E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/07af84c8-ee29-3120-8019-a82a12b3b51b.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 16527 IP address blocks: 162.245.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:b1:86:56:e9:ce:83:63:6f:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00423c2c-0dc2-4b33-b865-92ccbfdb07dd Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=dfbad6c8-c771-45c3-b013-d2bf98844842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b8:6a:3f:51:89:e2:be:be:f5:a3:7c:b7:a5: 2e:d9:ca:88:8a:60:72:e0:5f:56:4d:af:fe:96:2a: 51:ab:71:48:b4:a3:b7:22:35:7f:ee:3b:9c:83:7c: 8f:54:b9:74:59:8b:4a:c6:c7:d7:58:bf:5f:8d:93: 17:39:2a:3f:47:31:8d:74:d0:b8:5e:58:9f:02:39: 48:4f:bd:14:66:82:4b:9b:c2:f2:81:82:f2:66:c6: 89:01:10:eb:b5:d4:1d:2f:a9:7e:19:d1:1f:fa:5b: d8:62:14:e4:49:81:28:c6:b9:55:74:17:a5:be:1c: d6:bb:bb:cb:74:9e:2e:c2:b9:39:64:0d:9e:94:c9: 34:ee:d0:81:d6:6e:db:fe:81:3d:a8:b7:58:d3:de: 51:85:1d:32:19:a6:8c:e5:30:49:ff:5c:06:22:76: d1:5e:ea:2a:9f:5c:14:ba:7b:6b:3b:2e:91:7a:92: 3d:58:8c:59:c5:dd:32:a9:dd:2b:08:46:09:54:17: 1c:c6:8b:ae:97:bf:1f:e5:18:f5:54:23:3d:6d:a9: f6:24:75:24:69:74:c0:9e:1a:60:53:f7:0b:c4:0d: 34:f0:fa:f5:4d:0f:ea:7a:7d:1f:bf:14:46:b8:54: 41:02:dd:1a:7e:d5:c8:5b:20:8d:43:31:b9:c5:3c: 21:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:DF:BF:DE:7A:E9:10:BF:EB:FE:90:9B:73:89:79:51:A0:E1:39:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/07af84c8-ee29-3120-8019-a82a12b3b51b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.crl X509v3 Authority Key Identifier: keyid:F3:C0:69:D2:47:79:65:94:E1:58:B5:2D:72:D5:DA:AA:39:6C:97:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.cer sbgp-ipAddrBlock: critical IPv4: 162.245.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:57:3b:44:b7:36:1a:6a:89:7a:2b:31:29:f5:f7:da:b1:0a: a9:bd:3b:39:47:7f:5b:09:82:7a:a6:78:3e:20:c0:02:0c:c2: 43:07:25:ef:67:88:c1:84:1c:4f:7b:99:68:c5:1b:53:0e:f9: e4:c8:04:e3:b8:be:8e:4c:6c:13:17:cb:e3:57:3f:bf:03:3f: 19:64:83:cc:90:f7:dc:4d:2d:2f:7d:db:42:7d:4d:ad:61:9b: c5:50:7a:ba:6a:e2:88:25:be:82:5c:74:77:de:72:fe:d0:46: 41:98:03:c3:aa:34:4b:51:f1:f7:ec:8c:12:0c:f5:d3:27:92: 53:f1:a7:de:f1:0b:79:56:eb:d5:ad:1b:1b:9f:19:36:bd:e6: d7:b8:6d:02:98:a7:75:5e:25:57:5f:48:2f:ae:15:ce:b7:da: 53:5e:9d:d0:26:fb:e1:5d:83:86:30:2f:28:6e:07:8e:2c:37: 82:c4:87:df:73:7a:4a:88:95:34:00:14:32:55:a1:d2:e1:72: 88:d1:0c:7a:d1:1e:4c:94:14:cc:bf:c3:5b:b9:01:4b:05:31: fa:c7:78:9c:05:6b:25:60:a9:ea:a8:88:fd:5d:fa:63:f1:1c: 55:fb:0a:b6:d4:97:b8:0d:c8:55:83:16:b9:fc:2f:00:db:4a: b4:af:74:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq9S7GGVunOg2NvSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA0MjNjMmMtMGRjMi00YjMzLWI4NjUtOTJjY2JmZGIw N2RkMB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk ZGZiYWQ2YzgtYzc3MS00NWMzLWIwMTMtZDJiZjk4ODQ0ODQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LhqP1GJ4r6+9aN8t6Uu2cqIimBy4F9WTa/+ lipRq3FItKO3IjV/7jucg3yPVLl0WYtKxsfXWL9fjZMXOSo/RzGNdNC4XlifAjlI T70UZoJLm8LygYLyZsaJARDrtdQdL6l+GdEf+lvYYhTkSYEoxrlVdBelvhzWu7vL dJ4uwrk5ZA2elMk07tCB1m7b/oE9qLdY095RhR0yGaaM5TBJ/1wGInbRXuoqn1wU untrOy6RepI9WIxZxd0yqd0rCEYJVBccxouul78f5Rj1VCM9ban2JHUkaXTAnhpg U/cLxA008Pr1TQ/qen0fvxRGuFRBAt0aftXIWyCNQzG5xTwhCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGXfv9566RC/6/6Qm3OJeVGg4TkmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wMDQy M2MyYy0wZGMyLTRiMzMtYjg2NS05MmNjYmZkYjA3ZGQvMDdhZjg0YzgtZWUyOS0z MTIwLTgwMTktYTgyYTEyYjNiNTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDA0MjNjMmMtMGRjMi00YjMzLWI4 NjUtOTJjY2JmZGIwN2RkLzAwNDIzYzJjLTBkYzItNGIzMy1iODY1LTkyY2NiZmRi MDdkZC5jcmwwHwYDVR0jBBgwFoAU88Bp0kd5ZZThWLUtctXaqjlslz4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wMDQyM2MyYy0wZGMyLTRiMzMtYjg2NS05MmNj YmZkYjA3ZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCovXIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRXO0S3NhpqiXorMSn199qxCqm9OzlHf1sJgnqmeD4gwAIMwkMHJe9n iMGEHE97mWjFG1MO+eTIBOO4vo5MbBMXy+NXP78DPxlkg8yQ99xNLS9920J9Ta1h m8VQerpq4oglvoJcdHfecv7QRkGYA8OqNEtR8ffsjBIM9dMnklPxp97xC3lW69Wt GxufGTa95te4bQKYp3VeJVdfSC+uFc632lNendAm++Fdg4YwLyhuB44sN4LEh99z ekqIlTQAFDJVodLhcojRDHrRHkyUFMy/w1u5AUsFMfrHeJwFayVgqeqoiP1d+mPx HFX7CrbUl7gNyFWDFrn8LwDbSrSvdKo= -----END CERTIFICATE-----Generated at Mon Aug 4 14:01:46 2025 by rpki-client