$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/2863cd8d-e932-373f-bff5-503c406d81fa.roa File: 2863cd8d-e932-373f-bff5-503c406d81fa.roa (raw, json) Hash identifier: pBxUlHx9CqB/Q63V7IgH2Z7vFXnDWQYLkmldYjJWFYI= Subject key identifier: 69:8C:D3:88:D5:07:BF:06:67:46:57:2E:CB:23:93:58:74:FB:36:01 Certificate issuer: /CN=aac59959-e898-42ad-9d0a-f1b87a7d0114 Certificate serial: 010D0C9F4328584A9BCB6AD78261E85C3EB04E80 Authority key identifier: BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/2863cd8d-e932-373f-bff5-503c406d81fa.roa Signing time: Wed 23 Jul 2025 01:00:52 +0000 ROA not before: Wed 23 Jul 2025 01:00:52 +0000 ROA not after: Tue 21 Oct 2025 01:00:52 +0000 asID: 46455 IP address blocks: 199.71.230.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9b:cb:6a:d7:82:61:e8:5c:3e:b0:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aac59959-e898-42ad-9d0a-f1b87a7d0114 Validity Not Before: Jul 23 01:00:52 2025 GMT Not After : Oct 21 01:00:52 2025 GMT Subject: CN=141392fc-92f6-47d7-80d9-9c4f1efcb032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:74:e3:77:96:5b:29:35:19:3d:d5:6f:b9:a6: 9e:86:c6:10:e9:46:ca:69:f4:06:07:ee:63:7a:81: 85:bf:0f:a0:f8:34:bd:ef:40:f2:22:1e:19:ec:64: c1:ca:43:07:5b:0d:99:17:bd:e6:b9:9e:0b:95:de: 78:17:11:d4:32:9d:3d:7c:32:12:d1:2c:4f:00:5b: 7c:06:e4:87:fe:2c:e2:07:30:91:ce:34:30:41:98: 03:0d:55:a0:f2:2c:7b:bc:4c:d7:38:4e:bf:e8:30: a3:99:c0:0a:a9:69:60:db:76:f8:9d:f2:d5:2c:9c: 3e:1f:9b:b6:dd:3d:a8:c3:62:7c:87:5b:88:01:5f: f2:d2:b3:55:7c:af:26:13:d0:0f:61:fe:03:b6:c1: 75:2e:30:1f:59:70:03:37:a3:66:f6:42:db:9e:52: a1:d7:60:19:31:91:77:19:82:ef:f1:cf:b9:c9:a0: 58:69:19:a6:5e:76:ea:32:8e:19:60:bf:62:36:c8: 0b:2a:c3:40:2c:79:58:aa:53:1a:6d:c3:99:b8:53: 32:55:12:5d:78:3c:d6:c8:96:e3:69:26:85:5d:ad: 5d:20:f5:49:de:19:b4:b2:7e:d1:6c:78:fa:fa:95: ee:a6:7e:14:25:7f:90:fb:2f:25:10:07:54:43:11: 32:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:8C:D3:88:D5:07:BF:06:67:46:57:2E:CB:23:93:58:74:FB:36:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/2863cd8d-e932-373f-bff5-503c406d81fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl X509v3 Authority Key Identifier: keyid:BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer sbgp-ipAddrBlock: critical IPv4: 199.71.230.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:da:5b:de:97:dd:2c:69:80:36:f4:71:8b:ea:df:97:17:b8: 4c:5c:63:57:fd:df:6f:67:b4:30:72:4c:6a:b7:cd:4f:7c:41: 61:d7:61:d5:ec:50:ca:34:ed:05:d8:13:1f:09:c5:74:bc:42: a2:a7:93:f2:31:15:08:b2:75:c0:b2:25:f9:99:36:c3:46:a5: 0d:04:5d:03:43:86:e3:66:15:3b:75:8d:3d:d5:cf:3a:c6:bd: 1a:2a:c8:13:9c:6c:0f:78:d0:0b:e0:6b:62:86:31:80:b2:8c: c4:78:6e:58:58:7d:65:75:4e:bd:18:48:38:5f:a8:75:06:40: 6b:ff:33:2a:fa:fd:23:c8:f5:38:f0:cd:31:2d:46:27:78:e2: 7f:26:c0:a4:b8:11:50:d0:8e:ae:f3:e4:73:a1:0d:60:91:13: 91:c5:b8:42:19:45:84:84:58:30:a0:92:8d:21:e3:f2:ef:4d: d1:e8:86:72:cf:ac:6a:2d:bc:7f:9d:2d:60:19:b5:0d:7c:7e: 16:66:c2:41:a1:0e:85:04:cb:ac:47:8f:c8:a3:1a:63:3d:78: bf:d4:0f:06:95:24:fd:d5:8d:20:bf:08:c4:d3:8e:dc:c9:31: 71:f8:79:3d:e1:b4:cb:2f:d7:fe:01:6e:84:70:3f:35:47:d5: 5c:41:2c:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqby2rXgmHoXD6wToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFjNTk5NTktZTg5OC00MmFkLTlkMGEtZjFiODdhN2Qw MTE0MB4XDTI1MDcyMzAxMDA1MloXDTI1MTAyMTAxMDA1MlowLzEtMCsGA1UEAxMk MTQxMzkyZmMtOTJmNi00N2Q3LTgwZDktOWM0ZjFlZmNiMDMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3Tjd5ZbKTUZPdVvuaaehsYQ6UbKafQGB+5j eoGFvw+g+DS970DyIh4Z7GTBykMHWw2ZF73muZ4Lld54FxHUMp09fDIS0SxPAFt8 BuSH/iziBzCRzjQwQZgDDVWg8ix7vEzXOE6/6DCjmcAKqWlg23b4nfLVLJw+H5u2 3T2ow2J8h1uIAV/y0rNVfK8mE9APYf4DtsF1LjAfWXADN6Nm9kLbnlKh12AZMZF3 GYLv8c+5yaBYaRmmXnbqMo4ZYL9iNsgLKsNALHlYqlMabcOZuFMyVRJdeDzWyJbj aSaFXa1dIPVJ3hm0sn7RbHj6+pXupn4UJX+Q+y8lEAdUQxEyRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGmM04jVB78GZ0ZXLssjk1h0+zYBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYWM1 OTk1OS1lODk4LTQyYWQtOWQwYS1mMWI4N2E3ZDAxMTQvMjg2M2NkOGQtZTkzMi0z NzNmLWJmZjUtNTAzYzQwNmQ4MWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWFjNTk5NTktZTg5OC00MmFkLTlk MGEtZjFiODdhN2QwMTE0L2FhYzU5OTU5LWU4OTgtNDJhZC05ZDBhLWYxYjg3YTdk MDExNC5jcmwwHwYDVR0jBBgwFoAUul4Dp25dfBcjybWEUNyNWEuvgL4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYWM1OTk1OS1lODk4LTQyYWQtOWQwYS1mMWI4 N2E3ZDAxMTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx0fmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLaW96X3SxpgDb0cYvq35cXuExcY1f9329ntDByTGq3zU98QWHXYdXs UMo07QXYEx8JxXS8QqKnk/IxFQiydcCyJfmZNsNGpQ0EXQNDhuNmFTt1jT3VzzrG vRoqyBOcbA940Avga2KGMYCyjMR4blhYfWV1Tr0YSDhfqHUGQGv/Myr6/SPI9Tjw zTEtRid44n8mwKS4EVDQjq7z5HOhDWCRE5HFuEIZRYSEWDCgko0h4/LvTdHohnLP rGotvH+dLWAZtQ18fhZmwkGhDoUEy6xHj8ijGmM9eL/UDwaVJP3VjSC/CMTTjtzJ MXH4eT3htMsv1/4BboRwPzVH1VxBLBU= -----END CERTIFICATE-----Generated at Wed Aug 6 09:26:20 2025 by rpki-client