$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/d8bf669e-bc79-3c6f-a8c4-f416f2d4c466.roa File: d8bf669e-bc79-3c6f-a8c4-f416f2d4c466.roa (raw, json) Hash identifier: DRQ7g+l8vgXKm1GOD67fydL4DQdB0Pj1bLIk/oMBcg4= Subject key identifier: 90:1B:B2:3D:93:06:A3:61:CF:10:C6:F4:D8:6B:4E:7B:9B:1C:2E:20 Certificate issuer: /CN=0538ef3c-e342-4e27-a075-8167bc73c054 Certificate serial: 010D0C9F4328584ABBE62F70629B1531B5A93E00 Authority key identifier: 3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/d8bf669e-bc79-3c6f-a8c4-f416f2d4c466.roa Signing time: Sun 03 Aug 2025 13:00:40 +0000 ROA not before: Sun 03 Aug 2025 13:00:40 +0000 ROA not after: Sat 01 Nov 2025 13:00:40 +0000 asID: 11260 IP address blocks: 149.19.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bb:e6:2f:70:62:9b:15:31:b5:a9:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0538ef3c-e342-4e27-a075-8167bc73c054 Validity Not Before: Aug 3 13:00:40 2025 GMT Not After : Nov 1 13:00:40 2025 GMT Subject: CN=dfef9a93-c5d1-49ff-9ac8-a36fffe3b2cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f9:51:92:b7:56:a6:ee:cc:b9:67:de:19:67: b9:3e:59:11:20:bf:73:38:d8:ff:58:61:9d:a4:d6: 48:fc:90:3a:40:7f:e9:03:ac:a5:20:0e:f2:42:5f: d0:ac:b4:e3:13:64:38:7c:32:42:03:fa:b8:e2:b2: 01:68:48:58:a7:ef:91:74:f8:3b:05:f2:cf:18:3c: 7c:ea:ef:32:6f:8b:ed:83:1d:85:32:d5:0a:9b:bc: 1b:ce:1b:41:59:82:1a:26:93:57:27:21:f8:33:87: c7:d3:ba:cf:28:2a:fd:d8:d3:0a:c7:03:18:46:08: 88:b7:20:15:64:cb:99:38:0d:22:79:24:58:2d:39: cd:64:7d:e5:4f:03:b7:a2:64:ab:59:56:f1:6e:cf: 91:bf:e1:fe:2f:c2:85:e7:50:ce:1b:08:87:5d:2c: e5:88:07:0e:95:3e:2b:f2:03:72:75:85:6c:e2:c5: e0:2d:d7:e3:03:64:fa:e8:9a:5e:9f:19:ad:37:3d: c7:73:5e:02:e2:8c:02:e9:22:cb:51:aa:b1:df:e6: c3:93:c6:dd:df:54:25:40:13:dd:95:04:cb:d6:fa: d1:6c:9a:0c:0a:b6:85:15:99:a3:d2:e9:d4:ec:67: 47:de:6d:60:db:0d:b6:89:26:9c:ba:f5:5f:1f:9b: ef:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:1B:B2:3D:93:06:A3:61:CF:10:C6:F4:D8:6B:4E:7B:9B:1C:2E:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/d8bf669e-bc79-3c6f-a8c4-f416f2d4c466.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl X509v3 Authority Key Identifier: keyid:3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer sbgp-ipAddrBlock: critical IPv4: 149.19.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:af:12:6e:4d:e7:55:1a:ca:7c:a5:28:7d:8e:c2:f6:e5:5d: 15:b6:a6:ad:90:0b:f3:38:fc:87:ac:a2:17:6e:e5:74:8d:17: 99:57:dd:96:a1:b2:d3:8b:e6:95:b3:a1:36:8e:bf:4a:3e:56: 6b:e6:44:c9:76:52:c2:fd:f5:c6:cb:48:6e:c3:05:92:e7:fc: a0:32:80:e2:38:b4:dc:11:58:ee:0d:b3:b8:bf:b0:87:03:6d: 00:55:1a:24:0d:b9:10:87:3f:dc:98:49:b7:28:e6:ae:2d:2a: 92:6d:82:a8:2d:5f:9c:f5:ad:9c:04:84:5a:06:92:35:94:9c: 72:95:b9:0b:e5:7d:83:ed:e8:5e:5e:11:bc:6a:0f:48:47:b3: e0:27:76:76:64:11:b9:e9:7e:45:9b:de:72:4e:0b:c8:c2:e2: 3b:87:f3:2e:ed:fd:96:e2:b0:a7:4c:fa:5e:03:5f:ff:f0:da: e5:19:ca:4d:31:7d:b1:ac:7c:ce:ce:b9:4c:d0:49:34:fc:cc: 69:ee:c4:d8:fd:f0:73:d9:e6:14:f0:34:57:5e:73:8a:30:82: f0:41:28:6a:0a:e6:e6:52:1d:e6:a1:bd:0b:5b:04:b0:1c:68: af:c6:f4:32:d6:d4:ed:da:f2:85:e2:fa:6e:50:27:02:67:3d: b5:05:3d:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq75i9wYpsVMbWpPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOGVmM2MtZTM0Mi00ZTI3LWEwNzUtODE2N2JjNzNj MDU0MB4XDTI1MDgwMzEzMDA0MFoXDTI1MTEwMTEzMDA0MFowLzEtMCsGA1UEAxMk ZGZlZjlhOTMtYzVkMS00OWZmLTlhYzgtYTM2ZmZmZTNiMmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/lRkrdWpu7MuWfeGWe5PlkRIL9zONj/WGGd pNZI/JA6QH/pA6ylIA7yQl/QrLTjE2Q4fDJCA/q44rIBaEhYp++RdPg7BfLPGDx8 6u8yb4vtgx2FMtUKm7wbzhtBWYIaJpNXJyH4M4fH07rPKCr92NMKxwMYRgiItyAV ZMuZOA0ieSRYLTnNZH3lTwO3omSrWVbxbs+Rv+H+L8KF51DOGwiHXSzliAcOlT4r 8gNydYVs4sXgLdfjA2T66JpenxmtNz3Hc14C4owC6SLLUaqx3+bDk8bd31QlQBPd lQTL1vrRbJoMCraFFZmj0unU7GdH3m1g2w22iSacuvVfH5vv+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJAbsj2TBqNhzxDG9NhrTnubHC4gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4 ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3YmM3M2MwNTQvZDhiZjY2OWUtYmM3OS0z YzZmLWE4YzQtZjQxNmYyZDRjNDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDUzOGVmM2MtZTM0Mi00ZTI3LWEw NzUtODE2N2JjNzNjMDU0LzA1MzhlZjNjLWUzNDItNGUyNy1hMDc1LTgxNjdiYzcz YzA1NC5jcmwwHwYDVR0jBBgwFoAUPawtOE5IBuFdK6OE1h3WEIXOM4IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3 YmM3M2MwNTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlRNgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMqvEm5N51UaynylKH2OwvblXRW2pq2QC/M4/Iesohdu5XSNF5lX3Zah stOL5pWzoTaOv0o+VmvmRMl2UsL99cbLSG7DBZLn/KAygOI4tNwRWO4Ns7i/sIcD bQBVGiQNuRCHP9yYSbco5q4tKpJtgqgtX5z1rZwEhFoGkjWUnHKVuQvlfYPt6F5e EbxqD0hHs+AndnZkEbnpfkWb3nJOC8jC4juH8y7t/ZbisKdM+l4DX//w2uUZyk0x fbGsfM7OuUzQSTT8zGnuxNj98HPZ5hTwNFdec4owgvBBKGoK5uZSHeahvQtbBLAc aK/G9DLW1O3a8oXi+m5QJwJnPbUFPYQ= -----END CERTIFICATE-----Generated at Mon Aug 4 21:49:39 2025 by rpki-client