$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/2de33dc8-1d34-3bc2-85f2-695cccabe49e.roa File: 2de33dc8-1d34-3bc2-85f2-695cccabe49e.roa (raw, json) Hash identifier: h58y0ld77iwWQ/BWwSZHIHIHrAilWUXBz1BHbpwl1yM= Subject key identifier: 84:01:7D:0C:B2:2E:17:FD:59:38:FC:47:0C:63:C4:F2:D6:B1:2A:25 Certificate issuer: /CN=fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47 Certificate serial: 010D0C9F4328584AA85B9A0CC546CC7F1EE7D7C0 Authority key identifier: 3C:6C:69:39:64:64:92:8F:20:CE:38:CA:26:66:1B:C8:69:F6:52:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/2de33dc8-1d34-3bc2-85f2-695cccabe49e.roa Signing time: Sun 27 Jul 2025 13:01:04 +0000 ROA not before: Sun 27 Jul 2025 13:01:04 +0000 ROA not after: Sat 25 Oct 2025 13:01:04 +0000 asID: 14618 IP address blocks: 157.239.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a8:5b:9a:0c:c5:46:cc:7f:1e:e7:d7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47 Validity Not Before: Jul 27 13:01:04 2025 GMT Not After : Oct 25 13:01:04 2025 GMT Subject: CN=7d8cebd2-7541-4c74-9dee-67a47e503f84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:49:d0:ac:4e:cd:e4:10:39:a4:e0:05:d1:bc: dd:87:64:44:2d:83:cf:4b:8f:e7:b0:21:df:8a:e4: 7b:71:50:46:b0:09:16:6c:bf:ca:bd:e4:c5:c5:3f: f3:95:bc:2e:a1:34:c2:1a:fa:59:ab:f5:ed:13:6a: a3:d8:67:aa:bb:81:59:44:22:d7:4d:c0:88:2a:bd: 1e:28:ed:fa:02:7e:92:b0:68:e9:4e:10:76:6e:1f: 19:24:73:8b:9d:58:26:f4:61:b6:c5:f4:86:b4:eb: 09:86:ca:41:e5:78:4f:6f:e3:2b:35:ed:f9:e9:a6: f5:a2:89:77:b9:c8:48:5e:70:75:e2:84:14:8b:9a: f0:9d:08:81:0e:a8:c6:c3:25:1e:34:71:10:8b:9d: d5:43:ab:ae:3a:b6:3d:74:82:43:88:54:41:d2:45: 40:3d:5c:87:24:e5:0b:13:ac:89:12:da:ef:71:5d: 4b:a6:95:2e:d2:e1:b1:81:65:44:53:dc:d7:f2:7b: 34:08:ce:b0:33:42:b1:c7:d1:f6:e0:52:3a:f2:53: b6:21:7d:57:a5:48:9b:e3:cb:a2:64:cb:92:4d:d0: 67:37:d2:f4:f8:e8:a8:48:de:07:00:07:04:11:47: f6:3b:28:a1:fd:bb:0b:3f:01:a8:a5:65:2c:c6:c7: 56:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:01:7D:0C:B2:2E:17:FD:59:38:FC:47:0C:63:C4:F2:D6:B1:2A:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/2de33dc8-1d34-3bc2-85f2-695cccabe49e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.crl X509v3 Authority Key Identifier: keyid:3C:6C:69:39:64:64:92:8F:20:CE:38:CA:26:66:1B:C8:69:F6:52:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer sbgp-ipAddrBlock: critical IPv4: 157.239.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:c3:77:7c:db:a1:72:75:36:41:fc:13:fe:73:98:c9:a4:2b: 98:8d:6d:7a:da:22:5c:fe:c0:3c:f7:08:e2:13:0a:5b:e7:9f: a6:57:60:72:0a:14:14:29:e6:79:99:9e:ce:b8:6a:20:e3:73: a4:02:bb:11:d2:50:2b:ce:2e:56:ff:f1:a6:9c:4e:ae:86:87: 55:a6:44:ce:21:ac:1e:98:65:ff:8e:bf:90:7c:14:1e:58:a4: 3f:d6:c0:04:e9:41:e5:79:af:86:aa:53:f3:b9:a2:6e:1c:35: 33:c8:51:a3:cc:a4:eb:a3:1b:4d:20:a0:e7:a3:b6:7b:fd:f0: a4:f6:fc:45:cc:e4:a2:73:af:55:2d:d7:e9:88:d5:de:db:1a: 3b:83:ec:92:db:85:3d:31:b5:44:d7:4f:d3:40:76:cb:ca:32: 7b:58:f0:42:24:5d:06:ea:73:1d:95:16:6b:3b:d8:53:b6:55: ef:de:f5:9d:59:d1:58:2f:08:dd:d7:11:d1:60:42:88:23:66: e2:1f:43:e7:b8:05:0a:6e:1f:22:e3:ca:b2:1e:de:a4:8f:68: f9:fc:c0:13:5c:16:c6:1e:db:24:86:80:d5:38:e8:c3:4a:f7: e7:30:5f:76:17:e5:d0:19:c0:c5:69:09:46:5e:51:16:ee:de: 44:42:2f:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqoW5oMxUbMfx7n18AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRkNGI1YWQtYmJjYS00ZmU5LTg1YjQtOGYyZTVjY2Ex ZDQ3MB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk N2Q4Y2ViZDItNzU0MS00Yzc0LTlkZWUtNjdhNDdlNTAzZjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyknQrE7N5BA5pOAF0bzdh2RELYPPS4/nsCHf iuR7cVBGsAkWbL/KveTFxT/zlbwuoTTCGvpZq/XtE2qj2Gequ4FZRCLXTcCIKr0e KO36An6SsGjpThB2bh8ZJHOLnVgm9GG2xfSGtOsJhspB5XhPb+MrNe356ab1ool3 uchIXnB14oQUi5rwnQiBDqjGwyUeNHEQi53VQ6uuOrY9dIJDiFRB0kVAPVyHJOUL E6yJEtrvcV1LppUu0uGxgWVEU9zX8ns0CM6wM0Kxx9H24FI68lO2IX1XpUib48ui ZMuSTdBnN9L0+OioSN4HAAcEEUf2Oyih/bsLPwGopWUsxsdWPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIQBfQyyLhf9WTj8RwxjxPLWsSolMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mZGQ0 YjVhZC1iYmNhLTRmZTktODViNC04ZjJlNWNjYTFkNDcvMmRlMzNkYzgtMWQzNC0z YmMyLTg1ZjItNjk1Y2NjYWJlNDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZmRkNGI1YWQtYmJjYS00ZmU5LTg1 YjQtOGYyZTVjY2ExZDQ3L2ZkZDRiNWFkLWJiY2EtNGZlOS04NWI0LThmMmU1Y2Nh MWQ0Ny5jcmwwHwYDVR0jBBgwFoAUPGxpOWRkko8gzjjKJmYbyGn2UjwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9mZGQ0YjVhZC1iYmNhLTRmZTktODViNC04ZjJl NWNjYTFkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAne8fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3Dd3zboXJ1NkH8E/5zmMmkK5iNbXraIlz+wDz3COITClvnn6ZXYHIK FBQp5nmZns64aiDjc6QCuxHSUCvOLlb/8aacTq6Gh1WmRM4hrB6YZf+Ov5B8FB5Y pD/WwATpQeV5r4aqU/O5om4cNTPIUaPMpOujG00goOejtnv98KT2/EXM5KJzr1Ut 1+mI1d7bGjuD7JLbhT0xtUTXT9NAdsvKMntY8EIkXQbqcx2VFms72FO2Ve/e9Z1Z 0VgvCN3XEdFgQogjZuIfQ+e4BQpuHyLjyrIe3qSPaPn8wBNcFsYe2ySGgNU46MNK 9+cwX3YX5dAZwMVpCUZeURbu3kRCL8E= -----END CERTIFICATE-----Generated at Wed Aug 6 14:10:19 2025 by rpki-client