$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/3988e5ad-c1f3-3a29-b196-70b296a3f87a.roa File: 3988e5ad-c1f3-3a29-b196-70b296a3f87a.roa (raw, json) Hash identifier: 2wDufuR0MoQa1QNXl0SiFAlyqD9fu9d+8NULCqzkoOI= Subject key identifier: 02:47:E2:8C:0C:7C:13:4F:91:EF:11:ED:D8:1E:7F:BD:A6:3C:F5:0B Certificate issuer: /CN=064b1cb7-5fb2-4a39-b431-c1397f63a818 Certificate serial: 010D0C9F4328584AA6F62CF41E545A2803732440 Authority key identifier: D5:3E:2F:10:B5:BB:70:A1:20:B9:95:87:59:A4:9C:EA:98:D4:D4:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/3988e5ad-c1f3-3a29-b196-70b296a3f87a.roa Signing time: Sun 27 Jul 2025 01:00:49 +0000 ROA not before: Sun 27 Jul 2025 01:00:49 +0000 ROA not after: Sat 25 Oct 2025 01:00:49 +0000 asID: 16509 IP address blocks: 199.30.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a6:f6:2c:f4:1e:54:5a:28:03:73:24:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=064b1cb7-5fb2-4a39-b431-c1397f63a818 Validity Not Before: Jul 27 01:00:49 2025 GMT Not After : Oct 25 01:00:49 2025 GMT Subject: CN=47eefa1b-28b6-4fd2-96fc-3941e94b8571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:37:24:35:ba:af:60:c7:c7:61:17:53:22:ec: 80:79:bd:18:c7:0a:de:02:32:1f:8d:8e:a7:00:66: 29:37:7c:d0:23:9a:1a:1c:91:23:45:0b:35:99:dd: 8a:20:c6:af:a8:2f:ab:2e:21:53:77:28:27:f0:99: 34:46:44:42:98:5d:a6:c4:2d:dc:9a:da:d3:39:75: 86:10:ee:e6:31:06:84:ee:bc:b0:d4:26:b2:f7:71: 92:82:fd:f6:ec:4c:55:e5:1e:a2:bb:be:e5:90:22: db:80:1f:a0:60:4f:11:93:7f:20:8c:c5:a8:a6:67: 1e:f7:c3:48:71:d7:4d:12:57:db:2b:a9:08:93:7e: be:c7:72:36:a1:cc:18:3b:e6:da:c7:03:61:5d:7e: 54:1b:65:b6:e6:3b:50:19:3f:2f:c3:0c:66:27:cd: 9e:d8:bf:9c:9f:d1:44:85:d9:0a:d8:99:89:d0:71: a0:d0:96:93:d8:6c:6f:fb:42:a4:20:7e:70:92:4a: b2:6a:62:6f:92:cf:fe:b8:a9:8d:b7:0a:34:aa:8b: d9:af:cf:f3:04:db:15:58:17:d1:83:70:d5:40:71: 13:e4:d8:c1:bc:e1:86:4b:a6:50:3f:2d:6e:e7:e4: 46:b3:bb:c9:e4:87:f1:2c:21:b5:e8:8b:7c:80:51: fc:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:47:E2:8C:0C:7C:13:4F:91:EF:11:ED:D8:1E:7F:BD:A6:3C:F5:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/3988e5ad-c1f3-3a29-b196-70b296a3f87a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.crl X509v3 Authority Key Identifier: keyid:D5:3E:2F:10:B5:BB:70:A1:20:B9:95:87:59:A4:9C:EA:98:D4:D4:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer sbgp-ipAddrBlock: critical IPv4: 199.30.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:48:57:ba:45:e6:2d:b7:3e:17:02:b2:8e:30:ff:08:72:bc: de:ac:07:13:8d:e9:f2:c9:f9:83:60:ae:47:8e:06:d8:da:f4: 58:37:22:d0:84:7b:b7:36:e1:c5:c2:cc:3a:72:24:3e:7a:c5: 3c:63:71:63:1d:a2:af:d0:f9:1e:bd:f1:ca:a2:44:92:97:f1: 66:75:1c:b8:87:2d:02:3a:08:61:0e:04:62:df:9a:71:32:d0: 4b:09:87:74:34:ee:cb:aa:f6:1a:b7:7d:4c:75:72:cc:ec:44: 39:5e:12:0d:7f:85:e6:66:da:c4:04:00:c2:f5:e9:5e:46:f5: fd:a3:3f:10:2a:bd:a4:2f:0c:b9:ed:f0:f1:49:08:d6:d8:ea: e0:80:39:9b:ca:b7:06:fd:be:b1:c1:ba:17:51:77:39:81:51: f0:c2:7d:b3:3b:1c:54:35:70:bd:13:55:6c:9b:b8:0b:bc:2a: 7c:ca:a5:6b:53:6c:2c:d8:19:8f:5a:ce:2f:50:a8:50:4a:54: 44:60:0f:40:5e:35:8d:b9:66:61:9e:69:97:73:cb:79:29:fe: 5a:a1:03:f7:78:8c:e5:82:fa:5c:cc:80:bb:74:ae:7e:3e:61: 57:74:28:4d:29:e6:43:f5:cf:3d:b4:56:c9:ff:54:c1:4f:ac: 42:05:6e:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqm9iz0HlRaKANzJEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDY0YjFjYjctNWZiMi00YTM5LWI0MzEtYzEzOTdmNjNh ODE4MB4XDTI1MDcyNzAxMDA0OVoXDTI1MTAyNTAxMDA0OVowLzEtMCsGA1UEAxMk NDdlZWZhMWItMjhiNi00ZmQyLTk2ZmMtMzk0MWU5NGI4NTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5jckNbqvYMfHYRdTIuyAeb0YxwreAjIfjY6n AGYpN3zQI5oaHJEjRQs1md2KIMavqC+rLiFTdygn8Jk0RkRCmF2mxC3cmtrTOXWG EO7mMQaE7ryw1Cay93GSgv327ExV5R6iu77lkCLbgB+gYE8Rk38gjMWopmce98NI cddNElfbK6kIk36+x3I2ocwYO+baxwNhXX5UG2W25jtQGT8vwwxmJ82e2L+cn9FE hdkK2JmJ0HGg0JaT2Gxv+0KkIH5wkkqyamJvks/+uKmNtwo0qovZr8/zBNsVWBfR g3DVQHET5NjBvOGGS6ZQPy1u5+RGs7vJ5IfxLCG16It8gFH8GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAJH4owMfBNPke8R7dgef72mPPULMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNjRi MWNiNy01ZmIyLTRhMzktYjQzMS1jMTM5N2Y2M2E4MTgvMzk4OGU1YWQtYzFmMy0z YTI5LWIxOTYtNzBiMjk2YTNmODdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDY0YjFjYjctNWZiMi00YTM5LWI0 MzEtYzEzOTdmNjNhODE4LzA2NGIxY2I3LTVmYjItNGEzOS1iNDMxLWMxMzk3ZjYz YTgxOC5jcmwwHwYDVR0jBBgwFoAU1T4vELW7cKEguZWHWaSc6pjU1OswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNjRiMWNiNy01ZmIyLTRhMzktYjQzMS1jMTM5 N2Y2M2E4MTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxx6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdIV7pF5i23PhcCso4w/whyvN6sBxON6fLJ+YNgrkeOBtja9Fg3ItCE e7c24cXCzDpyJD56xTxjcWMdoq/Q+R698cqiRJKX8WZ1HLiHLQI6CGEOBGLfmnEy 0EsJh3Q07suq9hq3fUx1cszsRDleEg1/heZm2sQEAML16V5G9f2jPxAqvaQvDLnt 8PFJCNbY6uCAOZvKtwb9vrHBuhdRdzmBUfDCfbM7HFQ1cL0TVWybuAu8KnzKpWtT bCzYGY9azi9QqFBKVERgD0BeNY25ZmGeaZdzy3kp/lqhA/d4jOWC+lzMgLt0rn4+ YVd0KE0p5kP1zz20Vsn/VMFPrEIFbpg= -----END CERTIFICATE-----Generated at Wed Aug 6 00:34:25 2025 by rpki-client