$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/3544a471-27ca-3d8b-9f8a-6fa2f613447c.roa File: 3544a471-27ca-3d8b-9f8a-6fa2f613447c.roa (raw, json) Hash identifier: HvL6m4WPeVbJJ67GexCe2gGMQAdIWs01qKruk3GOKmg= Subject key identifier: AF:86:93:40:29:E8:37:75:D8:53:73:59:3D:BE:71:7E:74:FD:D5:D2 Certificate issuer: /CN=252aff2f-9807-45d4-ba31-1a3198784cae Certificate serial: 010D0C9F4328584AAE4DCCA43EAA84A07D41D1C0 Authority key identifier: 65:21:3A:3B:45:2D:F3:33:92:5D:D7:16:83:0C:31:30:7A:F8:98:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/3544a471-27ca-3d8b-9f8a-6fa2f613447c.roa Signing time: Tue 29 Jul 2025 16:08:10 +0000 ROA not before: Tue 29 Jul 2025 16:08:10 +0000 ROA not after: Mon 27 Oct 2025 16:08:10 +0000 asID: 393468 IP address blocks: 199.185.120.0/23 maxlen: 23 199.185.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ae:4d:cc:a4:3e:aa:84:a0:7d:41:d1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=252aff2f-9807-45d4-ba31-1a3198784cae Validity Not Before: Jul 29 16:08:10 2025 GMT Not After : Oct 27 16:08:10 2025 GMT Subject: CN=a0093ec2-bda9-4e85-92e1-f83899fd434f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:18:e7:23:b9:c0:c5:4b:1f:d9:07:77:bf:61: bd:7b:43:18:3f:73:98:d7:7f:11:23:4a:8f:ba:4c: f5:f1:1c:45:96:b7:6f:55:29:a9:71:09:87:d1:77: e0:6c:90:fb:6f:fe:cd:c5:ee:88:e1:65:3f:b4:61: a8:f1:52:2a:a7:d1:c4:33:a8:16:cf:1a:bf:c2:0d: b7:c3:cb:6a:69:01:a4:71:cb:28:74:7c:12:02:89: 1d:cc:2e:6d:ed:e6:c4:0a:f0:d8:98:cb:f7:1f:62: 15:48:6c:14:2f:c1:4c:6d:a2:fc:a5:60:fe:01:9d: 8d:fd:29:0c:20:c7:3e:57:16:89:4b:7c:20:b0:ff: 5c:ba:2b:94:c2:d1:34:fb:79:81:d9:e2:f0:84:17: 0a:f3:39:6d:e2:70:c5:c7:8d:fe:e0:26:2b:51:fd: 4a:4e:fc:99:50:14:62:be:11:0f:4a:b2:8c:bb:75: 86:65:1e:05:ce:66:3e:ad:a5:22:76:d0:2f:d4:84: 72:a3:dc:a1:32:d8:00:8e:13:4d:26:69:0f:22:2e: 37:e6:67:3d:a2:0b:26:6a:21:ac:14:31:86:ad:1f: 5e:b3:16:b0:01:62:e5:eb:c9:ec:1c:a6:d5:f0:df: a9:9c:b5:56:7b:30:ea:48:17:a9:28:7a:4b:ca:b4: 68:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:86:93:40:29:E8:37:75:D8:53:73:59:3D:BE:71:7E:74:FD:D5:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/3544a471-27ca-3d8b-9f8a-6fa2f613447c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.crl X509v3 Authority Key Identifier: keyid:65:21:3A:3B:45:2D:F3:33:92:5D:D7:16:83:0C:31:30:7A:F8:98:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae.cer sbgp-ipAddrBlock: critical IPv4: 199.185.120.0-199.185.122.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:62:9f:78:7e:95:29:44:f6:a9:bc:45:63:ab:b5:ad:a3:f2: 11:58:bd:1b:af:c6:16:4c:e8:f3:56:17:a5:4f:fe:de:7e:f9: fb:35:bb:90:c0:4c:62:85:98:d0:7e:61:23:41:81:45:fa:2e: 4e:6c:94:10:56:a5:a1:69:99:ba:20:c1:4c:df:90:c8:8b:36: e7:78:8e:33:7c:bb:8a:bf:cf:37:b9:15:80:f7:1a:b2:a0:c7: 1a:d1:56:6d:46:75:e6:e1:74:02:82:fc:ab:34:8d:d0:aa:b7: 20:29:91:43:5c:5d:c8:79:22:d1:33:76:75:3e:c7:a1:56:c1: 1f:78:e4:9d:8a:b3:f8:de:07:83:2f:16:10:e3:9d:55:dc:60: 50:21:35:5d:b0:d0:6b:58:5c:24:79:b3:a5:93:c8:79:1b:c8: 3f:e7:e4:77:fd:27:8c:6c:3f:af:55:0e:a8:78:5f:01:15:34: 6a:06:5e:9d:ff:48:dc:44:bc:b9:cb:b5:5a:76:fe:92:a6:c0: 41:d7:76:82:c0:b3:07:7c:e9:64:c0:f0:0b:d8:77:99:1a:6d: 85:9b:15:73:fc:63:83:e2:9e:26:b1:5d:a3:68:72:3a:6d:52: 69:a4:91:a5:c7:83:7f:47:47:e9:33:e6:e4:59:01:b1:84:46: 3d:5d:dc:30 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEquTcykPqqEoH1B0cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUyYWZmMmYtOTgwNy00NWQ0LWJhMzEtMWEzMTk4Nzg0 Y2FlMB4XDTI1MDcyOTE2MDgxMFoXDTI1MTAyNzE2MDgxMFowLzEtMCsGA1UEAxMk YTAwOTNlYzItYmRhOS00ZTg1LTkyZTEtZjgzODk5ZmQ0MzRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghjnI7nAxUsf2Qd3v2G9e0MYP3OY138RI0qP ukz18RxFlrdvVSmpcQmH0XfgbJD7b/7Nxe6I4WU/tGGo8VIqp9HEM6gWzxq/wg23 w8tqaQGkccsodHwSAokdzC5t7ebECvDYmMv3H2IVSGwUL8FMbaL8pWD+AZ2N/SkM IMc+VxaJS3wgsP9cuiuUwtE0+3mB2eLwhBcK8zlt4nDFx43+4CYrUf1KTvyZUBRi vhEPSrKMu3WGZR4FzmY+raUidtAv1IRyo9yhMtgAjhNNJmkPIi435mc9ogsmaiGs FDGGrR9esxawAWLl68nsHKbV8N+pnLVWezDqSBepKHpLyrRoTQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFK+Gk0Ap6Dd12FNzWT2+cX50/dXSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yNTJh ZmYyZi05ODA3LTQ1ZDQtYmEzMS0xYTMxOTg3ODRjYWUvMzU0NGE0NzEtMjdjYS0z ZDhiLTlmOGEtNmZhMmY2MTM0NDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjUyYWZmMmYtOTgwNy00NWQ0LWJh MzEtMWEzMTk4Nzg0Y2FlLzI1MmFmZjJmLTk4MDctNDVkNC1iYTMxLTFhMzE5ODc4 NGNhZS5jcmwwHwYDVR0jBBgwFoAUZSE6O0Ut8zOSXdcWgwwxMHr4mMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yNTJhZmYyZi05ODA3LTQ1ZDQtYmEzMS0xYTMx OTg3ODRjYWUuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAPHuXgD BADHuXowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAWmKfeH6VKUT2qbxFY6u1raPyEVi9G6/GFkzo81YXpU/+ 3n75+zW7kMBMYoWY0H5hI0GBRfouTmyUEFaloWmZuiDBTN+QyIs253iOM3y7ir/P N7kVgPcasqDHGtFWbUZ15uF0AoL8qzSN0Kq3ICmRQ1xdyHki0TN2dT7HoVbBH3jk nYqz+N4Hgy8WEOOdVdxgUCE1XbDQa1hcJHmzpZPIeRvIP+fkd/0njGw/r1UOqHhf ARU0agZenf9I3ES8ucu1Wnb+kqbAQdd2gsCzB3zpZMDwC9h3mRpthZsVc/xjg+Ke JrFdo2hyOm1SaaSRpceDf0dH6TPm5FkBsYRGPV3cMA== -----END CERTIFICATE-----Generated at Mon Aug 11 07:23:28 2025 by rpki-client