$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/d0fcc039-2f32-343e-aa66-e2094066ddfc.roa File: d0fcc039-2f32-343e-aa66-e2094066ddfc.roa (raw, json) Hash identifier: mZwPvg8YK3TwGX2IMMXGnhcGbGPx8OTrBLQ22Rs0DNM= Subject key identifier: F8:3F:A2:FF:72:74:F3:34:16:35:35:9B:7F:D7:EC:9C:3E:43:D0:34 Certificate issuer: /CN=3104c204-288d-4f87-83c2-99a30908dea3 Certificate serial: 010D0C9F4328584AAB2659A76BDC70C599E3E8C0 Authority key identifier: 76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/d0fcc039-2f32-343e-aa66-e2094066ddfc.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 394353 IP address blocks: 199.9.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:59:a7:6b:dc:70:c5:99:e3:e8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3104c204-288d-4f87-83c2-99a30908dea3 Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=e0c21cf9-8b13-4195-99a0-99aec97b6838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:2b:86:b8:07:de:7a:38:e9:99:5c:b4:62:b8: 49:27:75:d8:cb:fa:c7:ce:12:12:c2:df:d2:78:eb: 18:1a:17:d2:58:63:de:75:f4:f4:f6:80:77:9a:44: e3:c8:ce:4c:d0:51:8d:ad:ac:68:08:ed:63:b0:73: 29:68:67:35:2a:20:a2:6e:d3:bb:40:b8:d0:0c:3b: ab:27:e3:a7:2a:2e:e6:94:90:9b:45:22:21:a6:12: 2b:19:9d:84:41:a8:87:d1:82:e0:c4:e3:46:69:4a: c6:e9:22:80:b3:d9:88:d4:6a:60:83:50:6e:e1:95: 4f:7c:a3:ec:85:c8:49:76:8d:ec:5c:09:9d:a3:ea: 7f:5a:c7:d3:23:50:4c:a0:36:37:77:2c:78:54:11: 23:cf:5d:36:e6:be:2f:37:e5:46:8d:e7:7c:e1:af: c7:d4:e4:ec:7a:04:f7:95:10:cd:29:80:9f:53:6b: 25:ce:6f:1a:99:b0:94:10:a8:d7:b7:37:30:fd:76: 5e:18:eb:69:7f:b3:7b:82:1f:51:67:71:2d:47:cb: 10:1d:83:27:22:9b:ff:c6:15:99:5e:9f:e7:d6:56: ef:0a:fd:9d:b5:75:10:49:5f:f5:d0:a9:c2:66:4d: b3:b5:4c:e9:47:ad:2b:5d:bb:8b:8e:c0:94:e3:fb: 5d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:3F:A2:FF:72:74:F3:34:16:35:35:9B:7F:D7:EC:9C:3E:43:D0:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/d0fcc039-2f32-343e-aa66-e2094066ddfc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl X509v3 Authority Key Identifier: keyid:76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer sbgp-ipAddrBlock: critical IPv4: 199.9.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:f0:a8:17:25:f1:30:53:b2:11:c6:b1:37:f5:ee:50:76:e6: bf:53:f8:97:e6:4e:e8:b4:19:0a:7c:9c:12:da:d6:3d:f6:11: d7:2b:77:4c:4b:80:b3:a9:87:75:a3:f2:a5:25:90:11:e9:3b: 85:b2:8e:7d:24:36:d9:93:58:78:94:fc:1d:5d:9d:f0:85:f4: c5:b9:1c:f7:7a:fd:0f:73:2d:13:40:be:b1:3d:6f:5c:22:a6: ae:00:d5:a2:5e:c2:40:e6:ce:00:d8:eb:f1:25:4e:ae:b7:ec: 91:4c:fe:98:5d:ed:3c:2a:4b:d1:17:95:fb:37:96:16:8a:a6: 33:df:7a:b7:e9:61:6a:94:96:a3:37:5c:d3:aa:25:77:b1:f6: e4:90:76:f8:60:f9:fa:e9:9a:2f:09:58:70:27:b6:95:b2:dd: a5:df:ff:d1:f6:c3:08:65:bf:2a:a5:6d:5a:a4:9e:aa:38:2a: df:c0:48:33:b0:12:99:91:57:57:49:2e:4d:a1:7a:3f:43:68: c9:45:f4:a5:e8:fe:a8:5d:07:91:d3:83:dd:f1:32:85:fa:72: 90:d1:7c:a6:a4:62:bf:22:12:e9:6b:70:10:29:73:9a:be:5c: 19:8a:c0:89:9b:76:05:35:86:15:a8:07:5b:40:04:c9:e5:4e: 8a:9c:04:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJlmna9xwxZnj6MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzEwNGMyMDQtMjg4ZC00Zjg3LTgzYzItOTlhMzA5MDhk ZWEzMB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk ZTBjMjFjZjktOGIxMy00MTk1LTk5YTAtOTlhZWM5N2I2ODM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyuGuAfeejjpmVy0YrhJJ3XYy/rHzhISwt/S eOsYGhfSWGPedfT09oB3mkTjyM5M0FGNraxoCO1jsHMpaGc1KiCibtO7QLjQDDur J+OnKi7mlJCbRSIhphIrGZ2EQaiH0YLgxONGaUrG6SKAs9mI1Gpgg1Bu4ZVPfKPs hchJdo3sXAmdo+p/WsfTI1BMoDY3dyx4VBEjz1025r4vN+VGjed84a/H1OTsegT3 lRDNKYCfU2slzm8ambCUEKjXtzcw/XZeGOtpf7N7gh9RZ3EtR8sQHYMnIpv/xhWZ Xp/n1lbvCv2dtXUQSV/10KnCZk2ztUzpR60rXbuLjsCU4/tdcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPg/ov9ydPM0FjU1m3/X7Jw+Q9A0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zMTA0 YzIwNC0yODhkLTRmODctODNjMi05OWEzMDkwOGRlYTMvZDBmY2MwMzktMmYzMi0z NDNlLWFhNjYtZTIwOTQwNjZkZGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzEwNGMyMDQtMjg4ZC00Zjg3LTgz YzItOTlhMzA5MDhkZWEzLzMxMDRjMjA0LTI4OGQtNGY4Ny04M2MyLTk5YTMwOTA4 ZGVhMy5jcmwwHwYDVR0jBBgwFoAUdl35PUdKzyPwIOaHcKwrmJkvA+IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zMTA0YzIwNC0yODhkLTRmODctODNjMi05OWEz MDkwOGRlYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwkPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALTwqBcl8TBTshHGsTf17lB25r9T+JfmTui0GQp8nBLa1j32Edcrd0xL gLOph3Wj8qUlkBHpO4Wyjn0kNtmTWHiU/B1dnfCF9MW5HPd6/Q9zLRNAvrE9b1wi pq4A1aJewkDmzgDY6/ElTq637JFM/phd7TwqS9EXlfs3lhaKpjPferfpYWqUlqM3 XNOqJXex9uSQdvhg+frpmi8JWHAntpWy3aXf/9H2wwhlvyqlbVqknqo4Kt/ASDOw EpmRV1dJLk2hej9DaMlF9KXo/qhdB5HTg93xMoX6cpDRfKakYr8iEulrcBApc5q+ XBmKwImbdgU1hhWoB1tABMnlToqcBCI= -----END CERTIFICATE-----Generated at Thu Aug 7 14:33:56 2025 by rpki-client