$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/39901aa6-e826-47dc-9f16-612ab05bfcfd/f3c49877-a26e-308f-ab33-dff5ad292686.roa File: f3c49877-a26e-308f-ab33-dff5ad292686.roa (raw, json) Hash identifier: B6h5I+thXnEt0SKsi9DgShpzVJmP0yfdqLGnGUhMjVE= Subject key identifier: 14:49:55:44:84:27:BC:DB:58:76:9D:C7:4F:83:ED:BB:98:5F:43:46 Certificate issuer: /CN=39901aa6-e826-47dc-9f16-612ab05bfcfd Certificate serial: 010D0C9F4328584AA42B89684F3A72175C1010E0 Authority key identifier: 56:E6:46:1A:3B:CB:78:C8:80:E5:A6:DB:A8:91:FF:F3:38:AD:9B:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/39901aa6-e826-47dc-9f16-612ab05bfcfd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/39901aa6-e826-47dc-9f16-612ab05bfcfd/f3c49877-a26e-308f-ab33-dff5ad292686.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 54539 IP address blocks: 199.182.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/39901aa6-e826-47dc-9f16-612ab05bfcfd/39901aa6-e826-47dc-9f16-612ab05bfcfd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/39901aa6-e826-47dc-9f16-612ab05bfcfd/39901aa6-e826-47dc-9f16-612ab05bfcfd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/39901aa6-e826-47dc-9f16-612ab05bfcfd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:89:68:4f:3a:72:17:5c:10:10:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39901aa6-e826-47dc-9f16-612ab05bfcfd Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=eec64fb0-8627-48b6-b070-66a6c6875567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:68:41:44:7d:09:02:97:36:f6:64:c6:4c:99: 6b:71:87:30:b1:8b:4e:61:6f:cf:59:91:8d:75:cb: 0a:49:c7:f1:cd:01:c8:bd:f2:7d:20:f5:19:eb:4c: af:22:81:79:d0:d1:df:71:46:d7:55:29:51:8a:5a: c3:68:0b:81:e1:d1:97:c4:d6:28:97:cd:4c:1a:fe: 62:95:38:7f:d4:17:56:a1:4e:1a:ed:71:57:ec:bd: 9e:76:76:a3:5b:0d:f5:7f:1e:97:93:c9:a7:12:98: 0f:4e:c1:cd:91:9d:b7:d4:c1:6c:2c:b9:d9:51:ce: 1d:05:73:ba:be:1d:81:fb:e8:db:3a:05:be:61:a4: dc:3a:e3:9d:56:e6:17:f9:6f:28:41:1c:be:12:3b: c3:b2:ae:e1:93:53:9c:f2:da:30:11:55:2a:c6:0c: 85:f8:cc:7f:f2:45:d4:00:02:d1:3c:3f:80:b9:84: 62:e1:23:f2:93:16:aa:f1:df:fa:a1:12:70:68:1b: 24:bb:a1:b3:ef:03:83:95:a5:33:db:5f:5f:d9:6f: ff:ca:72:85:eb:f0:12:bd:d0:49:54:6f:82:6c:c4: 11:c7:28:aa:43:32:e6:80:b6:1d:93:b3:2f:69:5b: 2b:45:d4:7c:f0:16:c0:41:3a:56:f5:d4:b7:a4:2b: fc:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:49:55:44:84:27:BC:DB:58:76:9D:C7:4F:83:ED:BB:98:5F:43:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/39901aa6-e826-47dc-9f16-612ab05bfcfd/f3c49877-a26e-308f-ab33-dff5ad292686.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/39901aa6-e826-47dc-9f16-612ab05bfcfd/39901aa6-e826-47dc-9f16-612ab05bfcfd.crl X509v3 Authority Key Identifier: keyid:56:E6:46:1A:3B:CB:78:C8:80:E5:A6:DB:A8:91:FF:F3:38:AD:9B:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/39901aa6-e826-47dc-9f16-612ab05bfcfd.cer sbgp-ipAddrBlock: critical IPv4: 199.182.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:b3:c4:4e:bf:e6:0d:5c:fa:6f:aa:4c:2a:14:66:ae:f9:f2: 4d:f7:1a:92:58:df:b7:94:1d:06:dc:e9:fb:d5:89:15:e1:af: 2f:3b:a1:3e:7c:9f:e1:3e:0c:ca:96:26:ec:16:de:d1:ed:43: 1a:21:e0:2a:31:aa:47:a8:9e:f6:35:66:8a:da:85:3c:a0:d7: 6d:e8:04:86:11:b3:37:13:cf:bd:5b:96:38:59:be:51:b3:4c: 33:99:08:2b:9e:77:7e:8c:8a:b3:01:b5:bc:b4:90:d8:fb:a8: 73:e4:a2:ed:9e:ab:67:5a:06:39:c2:53:00:e6:36:6b:d1:de: f0:0f:8a:d0:b8:02:af:c7:92:f3:f2:53:fd:21:28:d9:18:83: 07:10:a7:56:08:f8:9f:41:47:a0:46:a1:95:cf:dc:60:88:27: 60:83:7d:2b:45:a7:e2:0b:c8:7c:5c:13:87:f9:bc:16:1c:9e: ea:81:8c:d7:64:22:00:9a:ec:7c:f4:86:80:a2:14:a0:91:98: cc:ee:3d:dd:cf:7d:a9:30:ed:ab:8c:86:72:57:6b:e1:b4:77: f4:8b:88:6e:74:87:78:bd:80:a1:e8:a4:2d:73:f9:61:8c:db: 87:b7:a8:a8:cc:b1:e7:cd:58:34:fe:8c:cd:5f:7d:63:6f:f4: ea:c5:a2:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqkK4loTzpyF1wQEOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk5MDFhYTYtZTgyNi00N2RjLTlmMTYtNjEyYWIwNWJm Y2ZkMB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk ZWVjNjRmYjAtODYyNy00OGI2LWIwNzAtNjZhNmM2ODc1NTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmhBRH0JApc29mTGTJlrcYcwsYtOYW/PWZGN dcsKScfxzQHIvfJ9IPUZ60yvIoF50NHfcUbXVSlRilrDaAuB4dGXxNYol81MGv5i lTh/1BdWoU4a7XFX7L2ednajWw31fx6Xk8mnEpgPTsHNkZ231MFsLLnZUc4dBXO6 vh2B++jbOgW+YaTcOuOdVuYX+W8oQRy+EjvDsq7hk1Oc8towEVUqxgyF+Mx/8kXU AALRPD+AuYRi4SPykxaq8d/6oRJwaBsku6Gz7wODlaUz219f2W//ynKF6/ASvdBJ VG+CbMQRxyiqQzLmgLYdk7MvaVsrRdR88BbAQTpW9dS3pCv80QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBRJVUSEJ7zbWHadx0+D7buYX0NGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zOTkw MWFhNi1lODI2LTQ3ZGMtOWYxNi02MTJhYjA1YmZjZmQvZjNjNDk4NzctYTI2ZS0z MDhmLWFiMzMtZGZmNWFkMjkyNjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzk5MDFhYTYtZTgyNi00N2RjLTlm MTYtNjEyYWIwNWJmY2ZkLzM5OTAxYWE2LWU4MjYtNDdkYy05ZjE2LTYxMmFiMDVi ZmNmZC5jcmwwHwYDVR0jBBgwFoAUVuZGGjvLeMiA5abbqJH/8zitm1owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zOTkwMWFhNi1lODI2LTQ3ZGMtOWYxNi02MTJh YjA1YmZjZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx7ZEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOzxE6/5g1c+m+qTCoUZq758k33GpJY37eUHQbc6fvViRXhry87oT58 n+E+DMqWJuwW3tHtQxoh4CoxqkeonvY1ZorahTyg123oBIYRszcTz71bljhZvlGz TDOZCCued36MirMBtby0kNj7qHPkou2eq2daBjnCUwDmNmvR3vAPitC4Aq/HkvPy U/0hKNkYgwcQp1YI+J9BR6BGoZXP3GCIJ2CDfStFp+ILyHxcE4f5vBYcnuqBjNdk IgCa7Hz0hoCiFKCRmMzuPd3Pfakw7auMhnJXa+G0d/SLiG50h3i9gKHopC1z+WGM 24e3qKjMsefNWDT+jM1ffWNv9OrFosg= -----END CERTIFICATE-----Generated at Sun Aug 10 13:45:36 2025 by rpki-client