$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/8f21fddd-8bf5-3217-a480-686fff06115a.roa File: 8f21fddd-8bf5-3217-a480-686fff06115a.roa (raw, json) Hash identifier: ZsWQTA0Q6UFG3jqBeep645GQX105IWWYZKT/6qWGq1U= Subject key identifier: 69:0C:53:B0:7C:9C:66:19:0D:65:4C:8B:49:CB:49:47:5F:C5:29:EB Certificate issuer: /CN=b84ab52d-915e-4d8a-b37b-496ea49c6798 Certificate serial: 010D0C9F4328584AA160D234B8D7B34F743D1700 Authority key identifier: DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/8f21fddd-8bf5-3217-a480-686fff06115a.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 1403 IP address blocks: 199.58.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:60:d2:34:b8:d7:b3:4f:74:3d:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b84ab52d-915e-4d8a-b37b-496ea49c6798 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=71e8d59a-b8c0-4676-9a5e-643202afa3f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a1:ac:42:04:e9:d2:d2:29:0c:69:32:b7:19: e2:7d:ac:d9:d2:b0:6a:89:4f:d6:b7:f9:24:b8:7d: 26:d0:03:5d:8b:d9:7a:8d:a9:b2:88:d0:b1:c5:7d: 18:ed:c0:bd:c1:d0:8d:65:23:02:5e:ad:77:ca:af: 4d:60:f8:29:83:d3:d3:42:b1:53:ca:b0:5d:fc:99: 6b:b1:0e:1c:60:13:80:11:7a:f9:39:e2:70:9f:5a: 54:a7:d7:6a:dc:38:84:25:54:93:89:43:f3:3a:c4: 9b:15:94:e3:ab:92:2e:a7:85:9f:0b:33:af:5f:c2: 36:dd:74:de:0b:e2:23:22:00:49:12:fe:36:ed:27: aa:a5:b6:34:88:06:f5:84:a3:42:b3:68:92:ce:6f: e5:fe:c9:d0:51:c8:68:e1:13:97:07:cf:43:4c:09: da:d0:46:15:87:35:21:22:a4:2c:c8:1d:cf:f8:8b: bf:04:43:af:89:a4:fa:62:d8:0b:b0:f2:53:92:82: a6:70:95:f9:69:2c:b5:d5:33:9a:e7:59:6f:8b:20: 6f:f4:7d:64:46:1c:16:6f:8d:33:ed:4d:f2:c8:2d: 4f:16:16:d7:37:3d:2c:02:b8:78:4e:84:0e:88:ef: 0a:8f:50:87:af:71:68:15:e2:3f:3f:6c:8e:dd:10: b1:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:0C:53:B0:7C:9C:66:19:0D:65:4C:8B:49:CB:49:47:5F:C5:29:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/8f21fddd-8bf5-3217-a480-686fff06115a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl X509v3 Authority Key Identifier: keyid:DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer sbgp-ipAddrBlock: critical IPv4: 199.58.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:d9:b2:60:3a:5f:97:9d:56:ec:9c:c7:21:0a:d9:be:d9:9a: 03:16:ee:18:6b:07:87:52:b0:e8:1e:74:c3:e1:f6:66:a2:80: 46:bc:ba:ef:88:76:25:e9:32:1a:57:1c:36:c7:dc:54:c5:6a: 98:b9:f7:96:5f:fc:d7:b4:9a:9d:97:7c:f3:64:e9:9b:ce:79: ab:b8:18:8c:d8:56:7b:0f:3e:2b:51:31:c2:12:b5:42:3d:6b: 4c:dc:92:d9:cf:ae:a9:45:7a:e3:59:4b:a3:62:25:3f:41:48: d0:40:14:92:a9:33:e5:7e:c9:36:e2:34:6c:bc:c6:9d:eb:2e: ae:1d:3c:1f:57:f4:83:b5:90:b9:56:6c:25:1c:82:70:43:06: 60:0d:bc:2a:16:ea:b1:86:e6:f9:91:ac:7a:3f:66:e7:2b:7b: 2f:17:05:8e:7e:46:24:d6:7f:0b:1b:e3:79:0d:7c:31:ed:17: 06:3c:3f:bb:b7:f1:bf:8d:8b:95:d0:81:ed:46:fc:58:36:b3: d7:9e:e6:d4:ab:75:90:9b:be:44:59:e6:b0:10:11:c0:90:c8: b0:a2:99:15:57:a2:a8:f4:9f:cf:c8:24:66:13:3e:87:6d:c3: b2:68:bd:4a:43:12:bc:cc:da:78:ff:75:c0:00:1d:56:eb:5a: 0a:bc:1e:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYNI0uNezT3Q9FwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg0YWI1MmQtOTE1ZS00ZDhhLWIzN2ItNDk2ZWE0OWM2 Nzk4MB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk NzFlOGQ1OWEtYjhjMC00Njc2LTlhNWUtNjQzMjAyYWZhM2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKGsQgTp0tIpDGkytxnifazZ0rBqiU/Wt/kk uH0m0ANdi9l6jamyiNCxxX0Y7cC9wdCNZSMCXq13yq9NYPgpg9PTQrFTyrBd/Jlr sQ4cYBOAEXr5OeJwn1pUp9dq3DiEJVSTiUPzOsSbFZTjq5Iup4WfCzOvX8I23XTe C+IjIgBJEv427SeqpbY0iAb1hKNCs2iSzm/l/snQUcho4ROXB89DTAna0EYVhzUh IqQsyB3P+Iu/BEOviaT6YtgLsPJTkoKmcJX5aSy11TOa51lviyBv9H1kRhwWb40z 7U3yyC1PFhbXNz0sArh4ToQOiO8Kj1CHr3FoFeI/P2yO3RCxawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGkMU7B8nGYZDWVMi0nLSUdfxSnrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iODRh YjUyZC05MTVlLTRkOGEtYjM3Yi00OTZlYTQ5YzY3OTgvOGYyMWZkZGQtOGJmNS0z MjE3LWE0ODAtNjg2ZmZmMDYxMTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjg0YWI1MmQtOTE1ZS00ZDhhLWIz N2ItNDk2ZWE0OWM2Nzk4L2I4NGFiNTJkLTkxNWUtNGQ4YS1iMzdiLTQ5NmVhNDlj Njc5OC5jcmwwHwYDVR0jBBgwFoAU3bUy71MQu1ndgStV6Nv35hADJHwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iODRhYjUyZC05MTVlLTRkOGEtYjM3Yi00OTZl YTQ5YzY3OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxzr4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALvZsmA6X5edVuycxyEK2b7ZmgMW7hhrB4dSsOgedMPh9maigEa8uu+I diXpMhpXHDbH3FTFapi595Zf/Ne0mp2XfPNk6ZvOeau4GIzYVnsPPitRMcIStUI9 a0zcktnPrqlFeuNZS6NiJT9BSNBAFJKpM+V+yTbiNGy8xp3rLq4dPB9X9IO1kLlW bCUcgnBDBmANvCoW6rGG5vmRrHo/Zucrey8XBY5+RiTWfwsb43kNfDHtFwY8P7u3 8b+Ni5XQge1G/Fg2s9ee5tSrdZCbvkRZ5rAQEcCQyLCimRVXoqj0n8/IJGYTPodt w7JovUpDErzM2nj/dcAAHVbrWgq8HhA= -----END CERTIFICATE-----Generated at Wed Aug 6 10:57:08 2025 by rpki-client