$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/d398e187-3fa7-3919-8a37-a9993ff3c633.roa File: d398e187-3fa7-3919-8a37-a9993ff3c633.roa (raw, json) Hash identifier: vfe+1RPwWvM0m34QerUH2OCmC3xeTZDZyeHz+8rCikE= Subject key identifier: C9:0E:61:FB:54:53:17:DE:0D:BE:03:52:26:5B:67:AF:57:3D:86:98 Certificate issuer: /CN=a7e64b66-84df-4665-a4fb-eb3b8add365e Certificate serial: 010D0C9F4328584AAB2659F463A07F93E341F7C0 Authority key identifier: 44:3F:7C:2A:02:E3:81:66:DD:29:43:80:CF:73:20:89:BF:C3:18:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/d398e187-3fa7-3919-8a37-a9993ff3c633.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 16580 IP address blocks: 131.232.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/a7e64b66-84df-4665-a4fb-eb3b8add365e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/a7e64b66-84df-4665-a4fb-eb3b8add365e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:59:f4:63:a0:7f:93:e3:41:f7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7e64b66-84df-4665-a4fb-eb3b8add365e Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=ee4997f5-2bc0-4ea9-8118-36e4f7901ab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:fa:91:1f:09:6b:d9:b3:0e:2c:1a:cf:26:e0: be:92:e3:42:d5:e7:15:24:90:c5:f4:33:24:53:31: 9e:3e:27:a1:f2:e4:d7:f4:3d:eb:57:19:06:4e:64: a7:3d:65:55:7d:b2:2c:29:4e:59:3e:2a:f6:cd:07: a0:aa:b0:2d:b6:23:9a:4c:59:57:71:4b:f1:e7:12: 27:ec:7e:70:d1:f4:10:28:a4:f6:a4:28:85:dd:db: 4d:a0:b1:37:e6:03:cc:10:fe:a9:84:68:00:81:43: 6c:96:d7:4a:18:ab:5c:4d:be:d2:50:40:25:99:0e: 19:8c:be:95:cb:5c:a5:44:b6:33:cc:e7:52:9b:04: fd:75:fb:66:e1:2d:85:ee:d1:e9:55:60:12:aa:05: be:52:cf:e3:f5:aa:e1:82:22:e6:e3:de:72:e2:0b: 4d:1f:45:d3:d4:72:96:09:7c:b3:39:60:7a:40:24: a2:03:51:f5:bb:83:9d:24:63:6e:3c:1c:d3:3a:ac: 6c:4b:94:68:1d:35:ff:6a:fc:d0:6c:15:00:79:a6: 6b:0f:88:5c:27:7f:84:15:12:ca:96:d5:2a:05:70: bc:ed:11:e2:fe:f5:b9:b8:ed:34:d4:91:11:46:d5: 44:3c:5e:3a:97:87:00:5e:d5:62:b4:c6:1e:0e:ae: 5e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:0E:61:FB:54:53:17:DE:0D:BE:03:52:26:5B:67:AF:57:3D:86:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/d398e187-3fa7-3919-8a37-a9993ff3c633.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/a7e64b66-84df-4665-a4fb-eb3b8add365e.crl X509v3 Authority Key Identifier: keyid:44:3F:7C:2A:02:E3:81:66:DD:29:43:80:CF:73:20:89:BF:C3:18:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer sbgp-ipAddrBlock: critical IPv4: 131.232.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:e2:af:9c:08:51:b7:5d:aa:85:ab:13:ea:fd:5a:22:d3:8c: f5:89:c5:2d:3b:91:a9:8b:f5:b8:64:0c:8c:68:55:ed:7e:71: c8:e9:1f:7e:52:03:2c:b3:41:6e:f1:78:a5:cc:ae:ac:30:60: b0:92:cc:91:9d:52:87:b4:d8:2d:bb:88:7b:80:c3:db:d7:e5: ca:88:10:ab:b5:6d:e0:3e:31:f7:a5:9f:7e:22:01:ba:09:ce: 7b:30:ed:35:bd:be:53:9e:1b:ac:85:18:6a:33:10:89:66:d6: d0:bf:c5:30:66:9d:66:38:85:56:ec:bf:d2:63:a4:9a:f9:45: 25:26:a9:ae:8e:00:74:52:92:e8:e0:38:12:bd:77:e4:a6:9e: de:f5:7b:5a:ae:f3:6c:e0:ce:96:8a:f0:c6:43:e2:62:4b:6a: e7:c9:c4:1c:97:d9:2a:72:ad:a7:07:81:c1:23:14:f1:32:b6: a5:90:6a:ed:7e:39:29:1a:e3:72:89:a5:66:4d:bb:7d:2e:51: be:52:e5:49:13:fb:de:44:91:33:92:c5:8e:56:c1:4d:04:06: a3:df:db:75:36:20:d6:42:00:4e:56:09:4c:d1:97:ae:67:f0: 57:fe:1f:6e:8b:ba:52:b5:e2:82:73:6a:81:99:e0:d5:f5:7d: 90:ee:ef:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJln0Y6B/k+NB98AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTdlNjRiNjYtODRkZi00NjY1LWE0ZmItZWIzYjhhZGQz NjVlMB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk ZWU0OTk3ZjUtMmJjMC00ZWE5LTgxMTgtMzZlNGY3OTAxYWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvqRHwlr2bMOLBrPJuC+kuNC1ecVJJDF9DMk UzGePieh8uTX9D3rVxkGTmSnPWVVfbIsKU5ZPir2zQegqrAttiOaTFlXcUvx5xIn 7H5w0fQQKKT2pCiF3dtNoLE35gPMEP6phGgAgUNsltdKGKtcTb7SUEAlmQ4ZjL6V y1ylRLYzzOdSmwT9dftm4S2F7tHpVWASqgW+Us/j9arhgiLm495y4gtNH0XT1HKW CXyzOWB6QCSiA1H1u4OdJGNuPBzTOqxsS5RoHTX/avzQbBUAeaZrD4hcJ3+EFRLK ltUqBXC87RHi/vW5uO001JERRtVEPF46l4cAXtVitMYeDq5eKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMkOYftUUxfeDb4DUiZbZ69XPYaYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hN2U2 NGI2Ni04NGRmLTQ2NjUtYTRmYi1lYjNiOGFkZDM2NWUvZDM5OGUxODctM2ZhNy0z OTE5LThhMzctYTk5OTNmZjNjNjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTdlNjRiNjYtODRkZi00NjY1LWE0 ZmItZWIzYjhhZGQzNjVlL2E3ZTY0YjY2LTg0ZGYtNDY2NS1hNGZiLWViM2I4YWRk MzY1ZS5jcmwwHwYDVR0jBBgwFoAURD98KgLjgWbdKUOAz3Mgib/DGEAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hN2U2NGI2Ni04NGRmLTQ2NjUtYTRmYi1lYjNi OGFkZDM2NWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+glMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJPir5wIUbddqoWrE+r9WiLTjPWJxS07kamL9bhkDIxoVe1+ccjpH35S AyyzQW7xeKXMrqwwYLCSzJGdUoe02C27iHuAw9vX5cqIEKu1beA+Mfeln34iAboJ znsw7TW9vlOeG6yFGGozEIlm1tC/xTBmnWY4hVbsv9JjpJr5RSUmqa6OAHRSkujg OBK9d+Smnt71e1qu82zgzpaK8MZD4mJLaufJxByX2SpyracHgcEjFPEytqWQau1+ OSka43KJpWZNu30uUb5S5UkT+95EkTOSxY5WwU0EBqPf23U2INZCAE5WCUzRl65n 8Ff+H26LulK14oJzaoGZ4NX1fZDu73s= -----END CERTIFICATE-----Generated at Mon Aug 4 19:07:43 2025 by rpki-client