$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dd758471-203f-4eb9-b2e3-2061f2a9397b/f1434ab5-8f1c-3c32-8262-e4107fca632c.roa File: f1434ab5-8f1c-3c32-8262-e4107fca632c.roa (raw, json) Hash identifier: B6yGHB8LdrCz/3d6g2achU66oh67Dze9IrjU8ZPT8nE= Subject key identifier: 31:A7:A1:CF:D2:9A:CD:55:7E:3E:FB:46:21:52:AF:55:D6:67:7C:1C Certificate issuer: /CN=dd758471-203f-4eb9-b2e3-2061f2a9397b Certificate serial: 010D0C9F4328584AAE417F0954155F1C52C46700 Authority key identifier: 4E:54:E4:17:CE:24:A0:CF:49:4A:32:72:1B:9C:86:4B:8B:20:7E:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dd758471-203f-4eb9-b2e3-2061f2a9397b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dd758471-203f-4eb9-b2e3-2061f2a9397b/f1434ab5-8f1c-3c32-8262-e4107fca632c.roa Signing time: Tue 29 Jul 2025 15:43:23 +0000 ROA not before: Tue 29 Jul 2025 15:43:23 +0000 ROA not after: Mon 27 Oct 2025 15:43:23 +0000 asID: 399937 IP address blocks: 158.222.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dd758471-203f-4eb9-b2e3-2061f2a9397b/dd758471-203f-4eb9-b2e3-2061f2a9397b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dd758471-203f-4eb9-b2e3-2061f2a9397b/dd758471-203f-4eb9-b2e3-2061f2a9397b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dd758471-203f-4eb9-b2e3-2061f2a9397b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ae:41:7f:09:54:15:5f:1c:52:c4:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd758471-203f-4eb9-b2e3-2061f2a9397b Validity Not Before: Jul 29 15:43:23 2025 GMT Not After : Oct 27 15:43:23 2025 GMT Subject: CN=da5731e9-9e31-44ea-a3af-083579eeebd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:68:3a:84:26:91:0c:35:c9:63:03:42:11:2f: 69:42:c0:57:94:87:4f:4b:8a:9d:6a:a0:52:45:34: c6:da:92:f8:83:4f:c9:a9:22:21:43:3b:ae:20:23: 2f:92:d8:89:36:66:ae:e8:51:78:a5:55:4e:0c:ac: a9:30:67:c3:92:1a:86:50:55:7f:74:46:43:3a:c1: f1:22:6d:1c:17:7b:34:d3:45:e9:d9:99:06:f4:d3: 28:fd:2b:fa:fd:73:c9:5d:db:05:7c:bd:15:46:a8: 8e:fb:79:3b:8f:c9:f9:e3:94:25:f0:e3:49:ce:b0: 82:07:7a:c4:09:16:d9:e3:bd:65:2c:bd:3e:d0:b7: 28:63:cb:54:3c:3d:6e:0c:52:c8:53:d3:ce:2a:c0: 06:ca:86:22:50:be:14:93:18:12:21:8c:b4:e5:a4: 46:91:04:46:f0:3f:07:a5:6d:a0:fa:2b:f7:e3:7d: 6e:a1:c3:ed:6c:37:94:e8:70:6b:1c:dd:de:ad:0c: b2:4a:1f:d0:4b:f0:0e:e5:dc:d1:6f:d8:29:67:8d: 02:57:a8:6b:b5:5e:7f:bc:08:31:63:9d:11:47:6e: dc:b2:93:71:f7:66:44:4c:c0:12:4a:2f:5c:50:84: fd:92:fa:3c:6b:97:40:48:2d:a1:06:6a:5b:9a:18: 7f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:A7:A1:CF:D2:9A:CD:55:7E:3E:FB:46:21:52:AF:55:D6:67:7C:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dd758471-203f-4eb9-b2e3-2061f2a9397b/f1434ab5-8f1c-3c32-8262-e4107fca632c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dd758471-203f-4eb9-b2e3-2061f2a9397b/dd758471-203f-4eb9-b2e3-2061f2a9397b.crl X509v3 Authority Key Identifier: keyid:4E:54:E4:17:CE:24:A0:CF:49:4A:32:72:1B:9C:86:4B:8B:20:7E:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dd758471-203f-4eb9-b2e3-2061f2a9397b.cer sbgp-ipAddrBlock: critical IPv4: 158.222.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:25:c6:75:66:05:b7:e5:64:77:8d:fc:95:f2:65:0b:03:85: 12:80:6b:b1:1d:58:dd:3b:4b:d3:dc:ed:db:ec:84:18:a8:16: fc:e7:ad:c7:35:ad:02:dd:6a:83:28:fe:f5:00:88:6e:2d:00: b4:6d:e5:49:66:48:bd:b0:ab:8a:1e:c1:d4:85:ca:92:dd:70: 99:1a:1b:dc:29:f2:3e:06:b1:47:8e:b6:b0:d5:a0:9b:05:e4: b3:b0:d9:91:22:19:fc:17:ad:da:a6:76:12:74:55:62:43:7a: d9:59:6f:4b:ac:7f:a4:9e:5d:d6:2c:be:03:4a:06:7a:8a:87: a3:33:ab:ea:8c:04:cf:56:ab:76:06:aa:f9:6d:56:6d:11:0f: e3:5f:33:d4:bd:c6:1e:c0:33:5a:8a:84:80:46:c1:9f:28:9c: 67:b3:6e:dd:5d:98:f1:1a:2d:c4:ef:a9:e2:9f:bd:7f:8f:5c: c6:ad:fb:f5:aa:4d:3a:6f:e5:ec:2f:42:bd:43:30:2d:df:3a: 2b:0a:53:42:02:54:fb:ad:b6:3b:53:93:9e:4f:57:f2:b1:48: 6f:bf:b4:89:8a:9c:68:bf:04:cf:09:de:96:b5:d9:ba:61:dd: 31:ef:0e:99:7d:48:fe:50:d9:c3:e3:34:4c:02:3a:7f:82:03: 21:db:6f:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEquQX8JVBVfHFLEZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQ3NTg0NzEtMjAzZi00ZWI5LWIyZTMtMjA2MWYyYTkz OTdiMB4XDTI1MDcyOTE1NDMyM1oXDTI1MTAyNzE1NDMyM1owLzEtMCsGA1UEAxMk ZGE1NzMxZTktOWUzMS00NGVhLWEzYWYtMDgzNTc5ZWVlYmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2g6hCaRDDXJYwNCES9pQsBXlIdPS4qdaqBS RTTG2pL4g0/JqSIhQzuuICMvktiJNmau6FF4pVVODKypMGfDkhqGUFV/dEZDOsHx Im0cF3s000Xp2ZkG9NMo/Sv6/XPJXdsFfL0VRqiO+3k7j8n545Ql8ONJzrCCB3rE CRbZ471lLL0+0LcoY8tUPD1uDFLIU9POKsAGyoYiUL4UkxgSIYy05aRGkQRG8D8H pW2g+iv3431uocPtbDeU6HBrHN3erQyySh/QS/AO5dzRb9gpZ40CV6hrtV5/vAgx Y50RR27cspNx92ZETMASSi9cUIT9kvo8a5dASC2hBmpbmhh/qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDGnoc/Sms1Vfj77RiFSr1XWZ3wcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kZDc1 ODQ3MS0yMDNmLTRlYjktYjJlMy0yMDYxZjJhOTM5N2IvZjE0MzRhYjUtOGYxYy0z YzMyLTgyNjItZTQxMDdmY2E2MzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZGQ3NTg0NzEtMjAzZi00ZWI5LWIy ZTMtMjA2MWYyYTkzOTdiL2RkNzU4NDcxLTIwM2YtNGViOS1iMmUzLTIwNjFmMmE5 Mzk3Yi5jcmwwHwYDVR0jBBgwFoAUTlTkF84koM9JSjJyG5yGS4sgfpMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kZDc1ODQ3MS0yMDNmLTRlYjktYjJlMy0yMDYx ZjJhOTM5N2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnt4xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGwlxnVmBbflZHeN/JXyZQsDhRKAa7EdWN07S9Pc7dvshBioFvznrcc1 rQLdaoMo/vUAiG4tALRt5UlmSL2wq4oewdSFypLdcJkaG9wp8j4GsUeOtrDVoJsF 5LOw2ZEiGfwXrdqmdhJ0VWJDetlZb0usf6SeXdYsvgNKBnqKh6Mzq+qMBM9Wq3YG qvltVm0RD+NfM9S9xh7AM1qKhIBGwZ8onGezbt1dmPEaLcTvqeKfvX+PXMat+/Wq TTpv5ewvQr1DMC3fOisKU0ICVPuttjtTk55PV/KxSG+/tImKnGi/BM8J3pa12bph 3THvDpl9SP5Q2cPjNEwCOn+CAyHbb2c= -----END CERTIFICATE-----Generated at Mon Aug 11 01:45:22 2025 by rpki-client