$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/b08fdd2d-93d3-3967-9389-1c862db30c2b.roa File: b08fdd2d-93d3-3967-9389-1c862db30c2b.roa (raw, json) Hash identifier: P0pOMDviQA+sdt8Lf1ZjP2jFWJWA/rXeOyZ3baNuA/Y= Subject key identifier: D9:6E:9E:2D:DD:89:BE:BA:EC:64:CF:13:95:10:35:84:45:FF:F9:26 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584A9900C0588551385D7B8BAA00 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/b08fdd2d-93d3-3967-9389-1c862db30c2b.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 397422 IP address blocks: 199.91.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:c0:58:85:51:38:5d:7b:8b:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=47ea597b-55bc-4693-bd13-c9adc8e2dd33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:aa:8b:5b:4c:43:03:1f:29:30:19:49:7f:0c: 21:1e:15:5d:0b:20:93:42:11:12:70:7c:1e:99:df: 5a:4e:b0:7e:17:93:61:48:80:df:f1:a6:2c:b5:fe: 41:8a:47:2a:6d:7e:2b:d4:7b:7f:03:14:61:2f:58: d0:e3:d7:ab:4c:b6:21:73:0f:9d:93:63:3b:1a:fc: ac:1e:32:78:ba:8e:d2:a6:d1:ab:dd:e3:a4:60:85: 00:b7:0a:c0:67:15:37:bb:ea:9c:60:d5:37:eb:cc: 1c:ea:23:b4:df:33:d0:2b:0f:8c:0f:29:14:8a:e6: 84:1e:68:12:26:ac:f4:98:bb:77:49:90:27:bc:eb: ac:0c:55:6d:32:03:91:58:37:03:8b:19:87:14:4d: ed:62:7e:66:7b:ec:35:09:d4:4e:4d:72:cc:b7:42: 85:35:74:3a:cc:6d:e9:bd:13:c2:f2:d6:ce:b6:ef: 1a:a1:39:93:e1:ca:5c:c4:3d:21:b3:bf:97:b0:68: 41:56:09:3f:dc:d4:e4:ac:0f:ce:05:e8:89:df:32: 0d:bc:b6:a3:d3:7e:1e:a4:1b:61:08:a2:be:b6:66: 20:c6:6c:4d:b1:25:1c:c0:ca:96:ed:93:9b:67:f3: e3:43:f1:00:34:1b:09:c1:4e:bd:3d:dd:08:8d:ea: d1:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:6E:9E:2D:DD:89:BE:BA:EC:64:CF:13:95:10:35:84:45:FF:F9:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/b08fdd2d-93d3-3967-9389-1c862db30c2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 199.91.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:eb:d0:a3:07:8b:65:81:fa:08:f0:16:e1:87:e0:d6:aa:aa: 7b:66:fc:5a:59:36:48:d3:78:43:34:96:32:90:e4:ea:22:fc: 8b:f7:93:8d:28:62:da:91:e7:23:19:31:e2:12:d2:b5:c0:02: 16:1b:64:75:d1:e1:15:69:28:e4:97:e3:c1:1c:c1:9e:e3:03: 9b:3c:18:28:57:c2:71:10:41:d2:41:4a:09:45:3b:d0:e4:20: ea:46:97:d1:ab:ac:63:7c:3a:f6:36:1f:6b:60:af:cf:bc:57: e2:3e:f7:a0:80:c4:70:81:93:8a:bc:83:71:c2:26:1e:33:4a: cd:08:fd:8c:2d:e7:b9:e4:89:06:87:95:ea:de:31:28:85:3c: e5:5b:4b:ed:eb:a3:dd:5f:e0:37:a1:08:f2:31:51:03:bf:46: 3f:b5:8b:a5:bb:71:34:3c:df:a5:c1:35:77:e7:46:67:3a:7c: 58:dd:3f:5e:fe:0b:7d:09:f3:85:eb:f4:3e:07:23:c3:11:ce: 5c:cc:54:97:cc:cb:af:24:82:9e:44:3a:db:08:39:c0:6b:2f: 3e:1a:17:10:9f:52:6b:0a:f6:2b:29:c6:4d:28:8e:34:c1:8e: 40:21:98:d9:60:4a:91:30:a2:c8:80:d8:f7:14:af:78:d2:ae: 3d:9e:14:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZAMBYhVE4XXuLqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk NDdlYTU5N2ItNTViYy00NjkzLWJkMTMtYzlhZGM4ZTJkZDMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqqLW0xDAx8pMBlJfwwhHhVdCyCTQhEScHwe md9aTrB+F5NhSIDf8aYstf5BikcqbX4r1Ht/AxRhL1jQ49erTLYhcw+dk2M7Gvys HjJ4uo7SptGr3eOkYIUAtwrAZxU3u+qcYNU368wc6iO03zPQKw+MDykUiuaEHmgS Jqz0mLt3SZAnvOusDFVtMgORWDcDixmHFE3tYn5me+w1CdROTXLMt0KFNXQ6zG3p vRPC8tbOtu8aoTmT4cpcxD0hs7+XsGhBVgk/3NTkrA/OBeiJ3zINvLaj034epBth CKK+tmYgxmxNsSUcwMqW7ZObZ/PjQ/EANBsJwU69Pd0IjerRUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNluni3dib667GTPE5UQNYRF//kmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvYjA4ZmRkMmQtOTNkMy0z OTY3LTkzODktMWM4NjJkYjMwYzJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1vhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7r0KMHi2WB+gjwFuGH4Naqqntm/FpZNkjTeEM0ljKQ5Ooi/Iv3k40o YtqR5yMZMeIS0rXAAhYbZHXR4RVpKOSX48EcwZ7jA5s8GChXwnEQQdJBSglFO9Dk IOpGl9GrrGN8OvY2H2tgr8+8V+I+96CAxHCBk4q8g3HCJh4zSs0I/Ywt57nkiQaH lereMSiFPOVbS+3ro91f4DehCPIxUQO/Rj+1i6W7cTQ836XBNXfnRmc6fFjdP17+ C30J84Xr9D4HI8MRzlzMVJfMy68kgp5EOtsIOcBrLz4aFxCfUmsK9ispxk0ojjTB jkAhmNlgSpEwosiA2PcUr3jSrj2eFAY= -----END CERTIFICATE-----Generated at Tue Aug 5 08:19:03 2025 by rpki-client