$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/fbcea25a-49e3-304b-9a4f-e111e76c3329.roa File: fbcea25a-49e3-304b-9a4f-e111e76c3329.roa (raw, json) Hash identifier: kRzT2YNXkY8N3D6sIF99gGo3sbcSF7bhm8It4GZNAEk= Subject key identifier: 19:95:7A:F3:6E:D9:F0:4C:A9:54:45:85:F0:26:2F:CA:B8:5A:F8:21 Certificate issuer: /CN=8d34ec60-03b0-4663-8748-fab291e36393 Certificate serial: 010D0C9F4328584A9BCB6D25D221F717DDF220A0 Authority key identifier: 3C:E1:AD:C4:6C:FF:FF:61:D2:6D:75:13:59:A5:F2:0A:4D:07:85:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/fbcea25a-49e3-304b-9a4f-e111e76c3329.roa Signing time: Wed 23 Jul 2025 01:00:52 +0000 ROA not before: Wed 23 Jul 2025 01:00:52 +0000 ROA not after: Tue 21 Oct 2025 01:00:52 +0000 asID: 395807 IP address blocks: 199.60.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9b:cb:6d:25:d2:21:f7:17:dd:f2:20:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d34ec60-03b0-4663-8748-fab291e36393 Validity Not Before: Jul 23 01:00:52 2025 GMT Not After : Oct 21 01:00:52 2025 GMT Subject: CN=d4df164e-59fe-42ec-84ef-655f7b1ae6c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:49:ab:85:f1:16:54:3e:80:28:a4:bf:34:fe: af:4b:09:5c:a8:e8:7a:9e:d8:2d:a6:52:14:14:5e: 09:38:3d:72:27:f2:4a:42:09:0f:41:5c:51:5d:4a: b0:ef:c1:3c:76:eb:f0:cf:09:8a:50:97:a2:73:cb: ea:8d:d3:88:86:4d:1b:2f:54:24:b0:d2:38:41:0e: 98:e3:9c:6a:c7:02:3c:a2:49:51:41:66:ae:6b:fb: 45:72:0e:54:de:40:ec:d4:42:27:96:5f:ce:63:2a: e2:84:5d:d1:ea:be:61:f6:0f:49:8f:e3:24:6c:b6: da:b3:93:b4:e6:2a:20:bf:15:1f:10:a0:c9:d2:53: 05:1b:be:08:8c:76:2f:f1:86:1a:fb:9d:1f:7d:3e: 0b:2b:b0:e0:b7:4b:a0:bc:4a:09:e8:8a:3e:50:25: a5:92:17:a4:09:c9:75:fb:d8:44:96:9f:aa:79:ba: 5a:97:2f:5b:c9:f6:63:db:42:c1:9a:2d:c5:0c:ad: 45:38:1a:cb:35:dd:ff:f9:1a:e1:8f:3e:73:a6:3b: fd:d8:69:65:73:b8:42:92:a8:e8:b1:e5:8b:c2:77: 08:c4:24:78:97:04:87:cc:81:5f:a4:a5:b0:4a:fa: 15:67:e6:40:20:65:dd:f8:c8:f4:7f:a8:94:96:52: 38:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:95:7A:F3:6E:D9:F0:4C:A9:54:45:85:F0:26:2F:CA:B8:5A:F8:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/fbcea25a-49e3-304b-9a4f-e111e76c3329.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.crl X509v3 Authority Key Identifier: keyid:3C:E1:AD:C4:6C:FF:FF:61:D2:6D:75:13:59:A5:F2:0A:4D:07:85:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer sbgp-ipAddrBlock: critical IPv4: 199.60.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:d0:0f:86:ea:25:d0:a4:76:16:da:e8:8b:1c:3c:1a:5b:3a: 03:2c:34:7e:f2:0d:be:86:0b:a1:cd:59:05:84:73:70:a3:f4: d7:b6:47:dd:f4:8c:33:04:e4:3f:c9:cd:7a:79:a5:83:a3:d1: d8:95:3e:ba:49:ff:39:1d:c3:0b:da:57:8c:c5:ff:04:9c:f5: e6:e3:85:03:0b:c9:8e:83:69:e0:be:21:d5:2c:b0:0f:03:90: 45:f8:51:ab:22:14:9e:b0:5d:34:48:41:79:de:9e:64:42:25: 9a:a4:4f:d1:84:ee:47:68:f1:6e:13:a7:88:bf:55:fd:21:30: 7f:b2:0e:5d:08:28:c4:07:0d:9a:de:1f:d4:d6:3e:18:3f:ce: fb:5d:ab:bd:3c:d6:03:7b:b3:a0:1c:55:60:62:25:3a:7b:39: a8:52:23:98:be:c0:d4:d5:22:b0:43:22:13:37:65:e8:ba:b8: b9:87:81:86:cd:f6:75:bf:37:03:55:d6:1b:32:53:2e:c4:5a: 46:a3:ee:82:67:b5:33:34:97:f2:fd:94:5e:3e:44:b0:4e:a3: 72:90:d2:28:a1:97:82:47:f3:92:03:9e:63:a7:99:67:87:86: 57:b1:c2:aa:e1:bc:71:ec:b7:3b:e7:0e:b3:c4:b4:be:86:a1: 55:f5:fb:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqby20l0iH3F93yIKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQzNGVjNjAtMDNiMC00NjYzLTg3NDgtZmFiMjkxZTM2 MzkzMB4XDTI1MDcyMzAxMDA1MloXDTI1MTAyMTAxMDA1MlowLzEtMCsGA1UEAxMk ZDRkZjE2NGUtNTlmZS00MmVjLTg0ZWYtNjU1ZjdiMWFlNmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykmrhfEWVD6AKKS/NP6vSwlcqOh6ntgtplIU FF4JOD1yJ/JKQgkPQVxRXUqw78E8duvwzwmKUJeic8vqjdOIhk0bL1QksNI4QQ6Y 45xqxwI8oklRQWaua/tFcg5U3kDs1EInll/OYyrihF3R6r5h9g9Jj+MkbLbas5O0 5iogvxUfEKDJ0lMFG74IjHYv8YYa+50ffT4LK7Dgt0ugvEoJ6Io+UCWlkhekCcl1 +9hElp+qebpaly9byfZj20LBmi3FDK1FOBrLNd3/+Rrhjz5zpjv92Gllc7hCkqjo seWLwncIxCR4lwSHzIFfpKWwSvoVZ+ZAIGXd+Mj0f6iUllI4OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBmVevNu2fBMqVRFhfAmL8q4WvghMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDM0 ZWM2MC0wM2IwLTQ2NjMtODc0OC1mYWIyOTFlMzYzOTMvZmJjZWEyNWEtNDllMy0z MDRiLTlhNGYtZTExMWU3NmMzMzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGQzNGVjNjAtMDNiMC00NjYzLTg3 NDgtZmFiMjkxZTM2MzkzLzhkMzRlYzYwLTAzYjAtNDY2My04NzQ4LWZhYjI5MWUz NjM5My5jcmwwHwYDVR0jBBgwFoAUPOGtxGz//2HSbXUTWaXyCk0Hhd0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDM0ZWM2MC0wM2IwLTQ2NjMtODc0OC1mYWIy OTFlMzYzOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzyVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvQD4bqJdCkdhba6IscPBpbOgMsNH7yDb6GC6HNWQWEc3Cj9Ne2R930 jDME5D/JzXp5pYOj0diVPrpJ/zkdwwvaV4zF/wSc9ebjhQMLyY6DaeC+IdUssA8D kEX4UasiFJ6wXTRIQXnenmRCJZqkT9GE7kdo8W4Tp4i/Vf0hMH+yDl0IKMQHDZre H9TWPhg/zvtdq7081gN7s6AcVWBiJTp7OahSI5i+wNTVIrBDIhM3Zei6uLmHgYbN 9nW/NwNV1hsyUy7EWkaj7oJntTM0l/L9lF4+RLBOo3KQ0iihl4JH85IDnmOnmWeH hlexwqrhvHHstzvnDrPEtL6GoVX1+/s= -----END CERTIFICATE-----Generated at Sun Aug 10 13:45:08 2025 by rpki-client