$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/0c1763e9-8b59-3c02-953f-942c97723a9b.roa File: 0c1763e9-8b59-3c02-953f-942c97723a9b.roa (raw, json) Hash identifier: 3EXkJgkN7BcyZ4quxw/3wq2GezVqITkgiIWiGzBiptI= Subject key identifier: 70:35:A6:5E:12:23:EE:17:22:29:1E:B6:A6:14:F7:3F:D0:9A:97:8A Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584A9900C06727732F19ED60DE80 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/0c1763e9-8b59-3c02-953f-942c97723a9b.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 397422 IP address blocks: 199.91.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:c0:67:27:73:2f:19:ed:60:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=baaae9e6-ead4-4744-8e64-5315879fc10d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:78:8c:a6:9d:5b:ec:69:56:6c:8c:6d:a5:db: 3c:10:0f:b4:a2:da:85:95:8f:26:df:2e:03:4f:d2: 0d:29:2e:12:d4:24:a5:b9:91:fd:29:f2:fc:b7:3d: 15:a4:88:b5:56:6f:f3:54:d3:b3:15:eb:ec:79:c8: ae:22:e0:e1:6e:43:28:f2:56:f4:77:b9:a4:78:0a: 49:64:8c:36:04:ca:d5:0c:00:b9:e4:cd:11:6b:61: d7:a3:7d:30:27:15:a9:b2:df:70:23:9e:b0:98:8e: 2f:4c:b7:a8:ea:f3:bd:09:ba:23:c0:0b:24:68:ce: e2:b1:71:21:58:9c:61:03:6e:48:2f:03:34:4b:22: 46:b2:cb:09:a8:e8:ea:93:61:e1:fd:e2:84:e5:2b: 25:18:9e:92:5f:e4:3e:9a:f1:d2:4d:84:06:0d:c4: 8a:2d:f3:2d:c6:76:dc:9b:ed:63:73:fe:ff:b6:15: 2c:f9:b5:0b:33:cd:01:b6:c7:80:60:b0:43:77:14: 3f:3a:61:87:b5:68:29:d2:19:85:2a:48:35:d8:2e: 86:63:55:29:b6:dc:ad:5c:60:87:80:90:7b:59:b9: 9d:78:e5:33:64:c9:43:ac:db:7d:c2:64:e2:c8:bb: 2b:74:b9:d0:ff:8c:ae:c0:9f:fd:f5:c0:82:77:f7: 05:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:35:A6:5E:12:23:EE:17:22:29:1E:B6:A6:14:F7:3F:D0:9A:97:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/0c1763e9-8b59-3c02-953f-942c97723a9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 199.91.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:a4:cf:49:56:15:c4:e9:c0:ac:c7:6e:60:9c:19:83:2b:a3: 22:ea:65:94:05:b8:6a:55:53:da:cd:8d:7b:40:05:e5:ba:6d: 85:55:fa:1f:4c:b2:71:e3:68:b2:55:08:6a:35:d3:58:ba:8a: 83:56:30:3f:3a:5c:4d:10:50:40:3a:a8:38:3b:d1:00:b5:72: d1:a6:66:7b:db:12:fb:fd:24:05:dd:a5:78:9e:0a:18:50:81: 9c:42:2a:55:6c:bc:5e:10:17:da:54:1f:50:66:ac:c2:0d:5b: 87:d0:90:ff:28:99:f6:47:97:00:a5:70:e4:b7:d9:87:ce:74: 22:97:02:db:20:75:f9:87:2e:d1:86:07:fc:f8:5f:b3:79:0c: 5b:c8:a1:a8:48:bb:97:9d:d0:8e:d3:cb:0a:86:7a:7a:fd:15: 52:17:3e:6d:56:9c:da:4e:64:7a:f3:07:d8:9e:2c:a3:63:80: 29:bb:b0:71:f9:11:7b:c2:31:f1:82:67:f1:6b:56:d9:b1:22: 10:51:a3:4b:de:28:5e:97:b7:b6:ab:fd:59:3d:bc:6b:0e:ca: d5:be:93:5d:bd:15:05:e7:e4:5c:80:44:14:7e:f8:97:dd:72: 9b:66:8e:68:2c:94:fe:78:70:1a:23:a5:25:9e:e8:da:04:77: 50:c9:a1:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZAMBnJ3MvGe1g3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk YmFhYWU5ZTYtZWFkNC00NzQ0LThlNjQtNTMxNTg3OWZjMTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApniMpp1b7GlWbIxtpds8EA+0otqFlY8m3y4D T9INKS4S1CSluZH9KfL8tz0VpIi1Vm/zVNOzFevseciuIuDhbkMo8lb0d7mkeApJ ZIw2BMrVDAC55M0Ra2HXo30wJxWpst9wI56wmI4vTLeo6vO9CbojwAskaM7isXEh WJxhA25ILwM0SyJGsssJqOjqk2Hh/eKE5SslGJ6SX+Q+mvHSTYQGDcSKLfMtxnbc m+1jc/7/thUs+bULM80BtseAYLBDdxQ/OmGHtWgp0hmFKkg12C6GY1UpttytXGCH gJB7WbmdeOUzZMlDrNt9wmTiyLsrdLnQ/4yuwJ/99cCCd/cFNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHA1pl4SI+4XIiketqYU9z/QmpeKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvMGMxNzYzZTktOGI1OS0z YzAyLTk1M2YtOTQyYzk3NzIzYTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1vkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGekz0lWFcTpwKzHbmCcGYMroyLqZZQFuGpVU9rNjXtABeW6bYVV+h9M snHjaLJVCGo101i6ioNWMD86XE0QUEA6qDg70QC1ctGmZnvbEvv9JAXdpXieChhQ gZxCKlVsvF4QF9pUH1BmrMINW4fQkP8omfZHlwClcOS32YfOdCKXAtsgdfmHLtGG B/z4X7N5DFvIoahIu5ed0I7TywqGenr9FVIXPm1WnNpOZHrzB9ieLKNjgCm7sHH5 EXvCMfGCZ/FrVtmxIhBRo0veKF6Xt7ar/Vk9vGsOytW+k129FQXn5FyARBR++Jfd cptmjmgslP54cBojpSWe6NoEd1DJoao= -----END CERTIFICATE-----Generated at Mon Aug 4 21:47:14 2025 by rpki-client