$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c/ec2f98dc-c02e-3d0c-bc8a-fec5650c7eef.roa File: ec2f98dc-c02e-3d0c-bc8a-fec5650c7eef.roa (raw, json) Hash identifier: Dr6M39gCwHQePtOZ/fXxvG/8wM2Mm3G+JYG19v91msU= Subject key identifier: 63:11:2C:55:CA:96:0B:81:99:EF:DE:A6:39:0B:72:4F:3A:AB:3C:AD Certificate issuer: /CN=4454f19d-c14e-499f-8d66-357970248d2c Certificate serial: 010D0C9F4328584A9B51198271ED5180805E63F0 Authority key identifier: B9:0C:5E:AF:85:13:1F:12:3D:E7:CF:D6:CA:F2:5D:54:16:9C:6E:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c/ec2f98dc-c02e-3d0c-bc8a-fec5650c7eef.roa Signing time: Tue 22 Jul 2025 20:54:28 +0000 ROA not before: Tue 22 Jul 2025 20:54:28 +0000 ROA not after: Mon 20 Oct 2025 20:54:28 +0000 asID: 7843 IP address blocks: 199.192.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c/4454f19d-c14e-499f-8d66-357970248d2c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c/4454f19d-c14e-499f-8d66-357970248d2c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9b:51:19:82:71:ed:51:80:80:5e:63:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4454f19d-c14e-499f-8d66-357970248d2c Validity Not Before: Jul 22 20:54:28 2025 GMT Not After : Oct 20 20:54:28 2025 GMT Subject: CN=282d73e0-f4d9-4c5a-a79c-5d3e9f05706f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:68:54:f5:4b:e4:4a:82:da:a3:79:61:11:f4: c7:b4:15:5e:b6:08:a3:2f:5c:8d:8d:06:eb:c1:c4: a4:ac:00:7b:9a:3d:d8:a8:b6:3d:92:0a:77:5e:e8: 1b:30:f6:43:f8:aa:06:44:52:ae:2a:29:65:f0:f1: e1:fe:31:ac:8f:b1:71:8d:ee:49:66:ef:35:b4:0c: bb:ca:36:90:80:cd:79:62:5d:95:94:0d:fc:41:bf: 0c:fa:24:ad:e3:29:e3:65:a4:04:30:10:aa:dd:88: cd:ec:c7:a6:2e:53:81:3e:63:ea:f5:ed:92:ef:22: 66:ee:48:43:dd:42:83:45:98:3e:66:87:c4:83:ea: 47:fb:32:2f:93:07:b6:ee:d2:b5:f9:0e:8b:b8:14: 38:4e:e1:cb:1d:7a:12:a3:71:55:25:dd:bd:84:3f: aa:08:20:9c:e6:c6:db:fa:20:09:cf:a9:b6:04:63: bb:33:1d:0e:65:85:87:2f:e6:fa:89:03:d0:af:e8: 41:9a:0c:43:f3:76:33:ac:b9:92:d9:c0:22:76:37: 65:d5:41:31:fd:c6:2b:93:12:58:ad:03:62:64:7d: 7d:f8:b2:26:d9:b1:de:c7:01:8e:a1:c5:26:de:ab: 5a:94:9d:db:e1:b2:bf:86:15:46:52:b3:48:49:93: 1d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:11:2C:55:CA:96:0B:81:99:EF:DE:A6:39:0B:72:4F:3A:AB:3C:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c/ec2f98dc-c02e-3d0c-bc8a-fec5650c7eef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c/4454f19d-c14e-499f-8d66-357970248d2c.crl X509v3 Authority Key Identifier: keyid:B9:0C:5E:AF:85:13:1F:12:3D:E7:CF:D6:CA:F2:5D:54:16:9C:6E:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c.cer sbgp-ipAddrBlock: critical IPv4: 199.192.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:75:26:f0:63:1d:c2:b1:c6:25:74:da:43:e2:94:ac:0b:81: 3d:35:84:4f:27:0c:f1:53:94:db:86:ce:a6:3b:c5:00:ac:d5: 90:0d:8b:18:9e:44:f4:39:14:01:c7:62:d8:5b:1f:2d:f3:07: 28:f5:c0:22:93:59:2d:b8:c0:73:d7:70:85:67:70:00:78:70: 86:d4:8e:d1:91:f5:06:1e:b8:10:00:bc:a4:28:4c:47:df:ac: c4:f2:fb:16:cd:8f:89:1e:c9:09:35:b5:58:38:56:e3:24:97: 9b:19:fc:0f:4d:75:a7:fa:83:a6:08:02:d7:ce:e4:23:12:cd: c5:1d:1d:87:c7:58:15:fe:e9:81:86:27:7b:84:ca:df:ad:dd: dc:94:bc:11:87:55:37:f4:33:ba:52:8d:cb:d7:a6:15:c9:51: c1:36:94:e6:92:01:f6:fd:f0:48:45:99:d7:88:34:47:16:8b: 0c:41:f9:c9:66:f4:d5:9a:e2:47:df:f3:43:46:db:56:38:bc: 9a:d7:71:75:f2:1e:e5:d8:96:7a:ef:08:f2:63:ab:00:23:c6: 1f:11:43:b5:85:9a:7b:5b:a4:a0:e1:08:09:ab:04:85:92:78: 90:b5:4c:e9:f0:0e:25:dc:fe:5f:7b:9b:19:de:a4:d3:90:91: 88:61:e8:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqbURmCce1RgIBeY/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDQ1NGYxOWQtYzE0ZS00OTlmLThkNjYtMzU3OTcwMjQ4 ZDJjMB4XDTI1MDcyMjIwNTQyOFoXDTI1MTAyMDIwNTQyOFowLzEtMCsGA1UEAxMk MjgyZDczZTAtZjRkOS00YzVhLWE3OWMtNWQzZTlmMDU3MDZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGhU9UvkSoLao3lhEfTHtBVetgijL1yNjQbr wcSkrAB7mj3YqLY9kgp3XugbMPZD+KoGRFKuKill8PHh/jGsj7Fxje5JZu81tAy7 yjaQgM15Yl2VlA38Qb8M+iSt4ynjZaQEMBCq3YjN7MemLlOBPmPq9e2S7yJm7khD 3UKDRZg+ZofEg+pH+zIvkwe27tK1+Q6LuBQ4TuHLHXoSo3FVJd29hD+qCCCc5sbb +iAJz6m2BGO7Mx0OZYWHL+b6iQPQr+hBmgxD83YzrLmS2cAidjdl1UEx/cYrkxJY rQNiZH19+LIm2bHexwGOocUm3qtalJ3b4bK/hhVGUrNISZMdnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGMRLFXKlguBme/epjkLck86qzytMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80NDU0 ZjE5ZC1jMTRlLTQ5OWYtOGQ2Ni0zNTc5NzAyNDhkMmMvZWMyZjk4ZGMtYzAyZS0z ZDBjLWJjOGEtZmVjNTY1MGM3ZWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDQ1NGYxOWQtYzE0ZS00OTlmLThk NjYtMzU3OTcwMjQ4ZDJjLzQ0NTRmMTlkLWMxNGUtNDk5Zi04ZDY2LTM1Nzk3MDI0 OGQyYy5jcmwwHwYDVR0jBBgwFoAUuQxer4UTHxI958/WyvJdVBacbi0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80NDU0ZjE5ZC1jMTRlLTQ5OWYtOGQ2Ni0zNTc5 NzAyNDhkMmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx8CwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGt1JvBjHcKxxiV02kPilKwLgT01hE8nDPFTlNuGzqY7xQCs1ZANixie RPQ5FAHHYthbHy3zByj1wCKTWS24wHPXcIVncAB4cIbUjtGR9QYeuBAAvKQoTEff rMTy+xbNj4keyQk1tVg4VuMkl5sZ/A9Ndaf6g6YIAtfO5CMSzcUdHYfHWBX+6YGG J3uEyt+t3dyUvBGHVTf0M7pSjcvXphXJUcE2lOaSAfb98EhFmdeINEcWiwxB+clm 9NWa4kff80NG21Y4vJrXcXXyHuXYlnrvCPJjqwAjxh8RQ7WFmntbpKDhCAmrBIWS eJC1TOnwDiXc/l97mxnepNOQkYhh6IQ= -----END CERTIFICATE-----Generated at Mon Aug 4 14:48:25 2025 by rpki-client