$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/b438ae95-00c7-3707-b6bf-9d6fb741a6d6.roa File: b438ae95-00c7-3707-b6bf-9d6fb741a6d6.roa (raw, json) Hash identifier: Oejz2GpDJg07O8fgGSjbnlYaVsLAtbj8VDSPGldCfaQ= Subject key identifier: FD:86:CA:8E:86:37:F7:6D:C3:10:52:D9:13:35:6A:41:67:BA:11:58 Certificate issuer: /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Certificate serial: 010D0C9F4328584AA160C704D1380C4E0384D600 Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/b438ae95-00c7-3707-b6bf-9d6fb741a6d6.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 398395 IP address blocks: 199.253.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:60:c7:04:d1:38:0c:4e:03:84:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=b1940378-6793-4076-8788-d0e848c3cb6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:9a:f7:c0:f7:e4:cc:8f:78:29:51:c6:f0:23: 08:29:c7:db:e9:ed:84:eb:a6:9f:eb:84:20:15:a6: ca:9e:04:5e:2c:bd:e1:2b:b7:ae:c5:48:ff:bd:c5: c3:10:bf:29:ad:8d:d9:e0:92:70:db:a8:83:39:5b: 04:d9:a1:03:18:c0:3f:5d:30:07:f7:78:2a:03:ed: d2:62:42:ab:40:3e:32:a9:fd:76:43:ee:1e:f5:7e: fd:6f:dd:3b:24:30:22:5a:d1:57:87:c0:d1:65:3f: 4f:01:ff:80:23:b8:d3:56:51:d5:1d:82:7b:30:b2: 54:96:af:3b:ac:f3:5c:e5:48:92:0d:3e:ae:6e:3e: a9:0b:26:b8:fe:a9:f8:d8:70:84:26:6c:42:b9:36: ac:7d:05:c4:24:ad:d3:a3:d7:a7:e6:43:43:eb:31: cb:6d:b0:d5:11:ef:4b:2f:c2:0a:53:7f:8a:94:4b: fd:9d:23:3d:ad:e5:fa:1c:fa:65:2c:a9:ab:95:9b: ac:e5:11:f8:95:67:65:98:01:42:21:24:4d:18:59: 26:54:59:b8:7f:70:b9:37:9a:ed:f5:fe:f9:db:5b: f0:a3:a5:0f:90:e8:97:00:76:a6:9a:e2:db:44:b4: 85:8a:48:34:b2:c9:9b:d4:5c:67:ea:6f:15:bd:66: 5f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:86:CA:8E:86:37:F7:6D:C3:10:52:D9:13:35:6A:41:67:BA:11:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/b438ae95-00c7-3707-b6bf-9d6fb741a6d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl X509v3 Authority Key Identifier: keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer sbgp-ipAddrBlock: critical IPv4: 199.253.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d4:3e:5e:02:08:6e:a1:bb:1c:c3:73:47:5e:1b:77:c1:b6:c1: 5b:21:cf:3c:bf:08:91:79:26:e4:ca:e8:08:f1:77:9c:c5:9e: 19:e5:dc:c6:68:8c:c6:e4:fa:ad:fa:b7:aa:e0:e6:28:4a:2c: 2c:0a:d8:e5:e4:6e:0c:12:46:3b:06:05:fb:8a:12:86:db:89: a6:55:70:8a:10:66:33:ee:21:b8:46:9b:a9:cc:6a:a7:12:72: 87:4b:14:86:a6:c0:ee:14:00:5b:93:b4:20:95:58:02:8d:8c: 31:5c:8e:2f:40:72:dc:97:07:5b:70:be:54:f5:9f:8a:11:75: 65:10:84:6f:6e:25:fd:49:ab:38:0c:96:0e:a8:47:b6:59:67: 72:32:eb:c2:18:f3:8f:ad:a0:0e:e4:57:a8:55:09:7e:6c:22: 16:f3:51:1d:4c:56:ba:fd:75:e8:db:3e:8b:2a:e5:a1:24:49: 57:3c:38:08:11:e7:e3:a0:c4:62:c0:ce:b5:e9:57:e8:4d:33: 6d:9b:ce:b4:37:b1:db:5e:fb:97:db:75:c7:7c:39:7b:c2:dd: 04:0f:f2:8d:b9:57:8e:c0:04:cb:0a:df:34:52:3b:67:4c:18: ba:c0:2d:35:0a:f5:10:29:b9:95:1a:03:d0:3b:72:c9:15:c8: eb:4a:88:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYMcE0TgMTgOE1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMxOWEyNDYtZDlmYS00ODFhLWE0ZDctMDEwYWY4YzEz MmIzMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk YjE5NDAzNzgtNjc5My00MDc2LTg3ODgtZDBlODQ4YzNjYjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZr3wPfkzI94KVHG8CMIKcfb6e2E66af64Qg FabKngReLL3hK7euxUj/vcXDEL8prY3Z4JJw26iDOVsE2aEDGMA/XTAH93gqA+3S YkKrQD4yqf12Q+4e9X79b907JDAiWtFXh8DRZT9PAf+AI7jTVlHVHYJ7MLJUlq87 rPNc5UiSDT6ubj6pCya4/qn42HCEJmxCuTasfQXEJK3To9en5kND6zHLbbDVEe9L L8IKU3+KlEv9nSM9reX6HPplLKmrlZus5RH4lWdlmAFCISRNGFkmVFm4f3C5N5rt 9f7521vwo6UPkOiXAHammuLbRLSFikg0ssmb1Fxn6m8VvWZf8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP2Gyo6GN/dtwxBS2RM1akFnuhFYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YzE5 YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBhZjhjMTMyYjMvYjQzOGFlOTUtMDBjNy0z NzA3LWI2YmYtOWQ2ZmI3NDFhNmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWMxOWEyNDYtZDlmYS00ODFhLWE0 ZDctMDEwYWY4YzEzMmIzLzVjMTlhMjQ2LWQ5ZmEtNDgxYS1hNGQ3LTAxMGFmOGMx MzJiMy5jcmwwHwYDVR0jBBgwFoAUGBmr0BGL/MK+/l1zc0BDuuWTrnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YzE5YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBh ZjhjMTMyYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/0dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANQ+XgIIbqG7HMNzR14bd8G2wVshzzy/CJF5JuTK6Ajxd5zFnhnl3MZo jMbk+q36t6rg5ihKLCwK2OXkbgwSRjsGBfuKEobbiaZVcIoQZjPuIbhGm6nMaqcS codLFIamwO4UAFuTtCCVWAKNjDFcji9ActyXB1twvlT1n4oRdWUQhG9uJf1JqzgM lg6oR7ZZZ3Iy68IY84+toA7kV6hVCX5sIhbzUR1MVrr9dejbPosq5aEkSVc8OAgR 5+OgxGLAzrXpV+hNM22bzrQ3sdte+5fbdcd8OXvC3QQP8o25V47ABMsK3zRSO2dM GLrALTUK9RApuZUaA9A7cskVyOtKiOg= -----END CERTIFICATE-----Generated at Wed Aug 6 00:52:35 2025 by rpki-client