$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/fc2d25ca-0dfa-3092-aef3-a1e8c3cc11a6.roa File: fc2d25ca-0dfa-3092-aef3-a1e8c3cc11a6.roa (raw, json) Hash identifier: lTu6ePQL1vadcvCokAPUqkzVOWnys24JNLafTqIGCPw= Subject key identifier: BC:AD:C9:6F:F0:D3:54:52:A4:3D:8D:CA:39:A4:17:CD:7A:FB:39:FC Certificate issuer: /CN=989afb89-021f-486a-9386-ea5ad2a85eb3 Certificate serial: 010D0C9F4328584AB3D45003BAEFDF5DE2BEC100 Authority key identifier: C8:B3:AD:AE:75:39:83:2D:10:4E:01:6B:67:FF:1F:8B:DD:56:66:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/fc2d25ca-0dfa-3092-aef3-a1e8c3cc11a6.roa Signing time: Thu 31 Jul 2025 15:38:14 +0000 ROA not before: Thu 31 Jul 2025 15:38:14 +0000 ROA not after: Wed 29 Oct 2025 15:38:14 +0000 asID: 3359 IP address blocks: 199.185.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b3:d4:50:03:ba:ef:df:5d:e2:be:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989afb89-021f-486a-9386-ea5ad2a85eb3 Validity Not Before: Jul 31 15:38:14 2025 GMT Not After : Oct 29 15:38:14 2025 GMT Subject: CN=e409c7a0-2a21-4ffa-8c66-760d6c1986a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:00:20:42:dc:99:2e:e3:f6:40:08:07:75:a9: 9f:e1:76:98:3c:96:8a:c2:69:a2:5d:12:39:6b:f3: 58:9b:25:1d:4f:a7:90:86:d6:0e:e7:79:7e:f3:a8: 8e:82:a8:72:ee:f1:a3:8b:1f:54:6d:0a:cd:18:39: 37:7c:e6:e6:69:03:a1:8b:00:ed:39:fa:f6:8c:49: a7:b3:d2:9a:bc:8d:7b:c6:0b:3b:06:06:12:6c:ea: 01:2c:0e:11:3d:4e:2d:ad:44:2a:78:23:8d:7f:5b: ae:e8:e3:f3:6e:e0:e1:24:b4:b7:ff:8b:0a:1e:cf: 4d:b7:a6:63:b8:27:12:a6:5d:8b:82:f1:8a:42:0b: 5f:f7:b2:11:2c:23:59:b8:6c:f6:f9:43:2d:71:fa: 4a:83:b3:0a:01:59:ab:bb:8f:c2:e0:38:3a:2a:4e: af:10:49:3d:d1:9b:ec:20:27:99:ea:55:78:d0:54: fc:fc:af:17:3e:37:5d:a1:32:9e:84:22:ab:34:be: 01:0c:76:7e:96:b7:ea:63:52:ee:60:38:c1:bf:89: bd:4d:d3:d8:8d:1c:5e:68:94:f4:54:f9:f3:47:ce: b5:9f:f0:0b:2a:fa:2a:ad:82:33:9d:32:6f:7f:6b: 9a:28:f2:4e:38:c9:ac:fd:4d:51:96:a3:29:74:5a: 37:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:AD:C9:6F:F0:D3:54:52:A4:3D:8D:CA:39:A4:17:CD:7A:FB:39:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/fc2d25ca-0dfa-3092-aef3-a1e8c3cc11a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.crl X509v3 Authority Key Identifier: keyid:C8:B3:AD:AE:75:39:83:2D:10:4E:01:6B:67:FF:1F:8B:DD:56:66:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer sbgp-ipAddrBlock: critical IPv4: 199.185.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:bc:08:9c:21:ae:26:e8:d0:1e:bb:1d:a2:57:3d:97:bd:1e: 2b:a6:38:9c:29:d1:61:f9:fb:8e:3d:37:15:ed:c6:7f:ca:25: 9b:5d:18:0f:7e:55:99:ce:54:2a:a5:35:d5:f3:c1:b9:fe:dd: f6:ca:f1:e1:6f:c1:2a:19:cf:55:e4:94:b8:ef:fd:40:fb:5a: c1:5c:3f:79:69:6e:1f:1b:6a:df:c5:2b:cd:e0:3a:9e:47:5b: 22:75:3b:db:69:a5:bf:f1:e4:c8:66:cc:63:dc:c3:7b:d6:36: 8d:63:5e:d4:68:e3:51:ca:78:80:fb:d3:72:56:62:88:62:35: c0:91:98:8a:59:3b:1f:b3:cc:d8:cd:66:37:75:a7:db:f9:df: 8b:0c:96:e6:53:49:d6:4d:5f:6d:48:71:a0:c6:f8:0a:cd:fb: 61:84:a6:36:65:5f:7b:2f:2e:5b:16:fa:48:4d:23:d2:a1:94: 27:ef:4c:0f:42:e5:1a:db:fc:bd:24:10:5b:42:0b:1c:1d:3e: 08:96:46:e0:28:7a:4f:8a:b2:10:77:42:0b:34:66:8e:ff:f6: db:ba:d3:7b:c8:9f:f9:39:4a:c0:46:19:09:de:06:b4:2e:62: d1:69:4c:a0:db:a4:8a:80:c9:70:4a:0d:c6:15:3e:fd:52:9d: 53:f2:fb:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqz1FADuu/fXeK+wQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg5YWZiODktMDIxZi00ODZhLTkzODYtZWE1YWQyYTg1 ZWIzMB4XDTI1MDczMTE1MzgxNFoXDTI1MTAyOTE1MzgxNFowLzEtMCsGA1UEAxMk ZTQwOWM3YTAtMmEyMS00ZmZhLThjNjYtNzYwZDZjMTk4NmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQAgQtyZLuP2QAgHdamf4XaYPJaKwmmiXRI5 a/NYmyUdT6eQhtYO53l+86iOgqhy7vGjix9UbQrNGDk3fObmaQOhiwDtOfr2jEmn s9KavI17xgs7BgYSbOoBLA4RPU4trUQqeCONf1uu6OPzbuDhJLS3/4sKHs9Nt6Zj uCcSpl2LgvGKQgtf97IRLCNZuGz2+UMtcfpKg7MKAVmru4/C4Dg6Kk6vEEk90Zvs ICeZ6lV40FT8/K8XPjddoTKehCKrNL4BDHZ+lrfqY1LuYDjBv4m9TdPYjRxeaJT0 VPnzR861n/ALKvoqrYIznTJvf2uaKPJOOMms/U1RlqMpdFo3KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLytyW/w01RSpD2NyjmkF816+zn8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85ODlh ZmI4OS0wMjFmLTQ4NmEtOTM4Ni1lYTVhZDJhODVlYjMvZmMyZDI1Y2EtMGRmYS0z MDkyLWFlZjMtYTFlOGMzY2MxMWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOTg5YWZiODktMDIxZi00ODZhLTkz ODYtZWE1YWQyYTg1ZWIzLzk4OWFmYjg5LTAyMWYtNDg2YS05Mzg2LWVhNWFkMmE4 NWViMy5jcmwwHwYDVR0jBBgwFoAUyLOtrnU5gy0QTgFrZ/8fi91WZlIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85ODlhZmI4OS0wMjFmLTQ4NmEtOTM4Ni1lYTVh ZDJhODVlYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx7kCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAa8CJwhribo0B67HaJXPZe9HiumOJwp0WH5+449NxXtxn/KJZtdGA9+ VZnOVCqlNdXzwbn+3fbK8eFvwSoZz1XklLjv/UD7WsFcP3lpbh8bat/FK83gOp5H WyJ1O9tppb/x5MhmzGPcw3vWNo1jXtRo41HKeID703JWYohiNcCRmIpZOx+zzNjN Zjd1p9v534sMluZTSdZNX21IcaDG+ArN+2GEpjZlX3svLlsW+khNI9KhlCfvTA9C 5Rrb/L0kEFtCCxwdPgiWRuAoek+KshB3Qgs0Zo7/9tu603vIn/k5SsBGGQneBrQu YtFpTKDbpIqAyXBKDcYVPv1SnVPy+2s= -----END CERTIFICATE-----Generated at Thu Aug 14 06:35:47 2025 by rpki-client