$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/760253bb-67cf-3504-9a97-8d6c02166051.roa File: 760253bb-67cf-3504-9a97-8d6c02166051.roa (raw, json) Hash identifier: ZqZaFWcuruvBfbyPOvH+cDGwNDt0a52FtNh6pitTUDA= Subject key identifier: AA:34:51:C2:84:89:F7:AE:47:EA:A1:D6:BF:59:6F:CF:FF:EB:7D:5B Certificate issuer: /CN=f97b644e-a01f-43c5-83e0-146254941d5f Certificate serial: 010D0C9F4328584A82AB4CAC499618AFAE188680 Authority key identifier: 6B:87:D5:3D:AE:FB:D6:D0:9D:2C:62:29:D1:98:5C:78:E3:10:B6:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/760253bb-67cf-3504-9a97-8d6c02166051.roa Signing time: Mon 14 Jul 2025 01:00:50 +0000 ROA not before: Mon 14 Jul 2025 01:00:50 +0000 ROA not after: Sun 12 Oct 2025 01:00:50 +0000 asID: 36290 IP address blocks: 199.21.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f97b644e-a01f-43c5-83e0-146254941d5f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f97b644e-a01f-43c5-83e0-146254941d5f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:82:ab:4c:ac:49:96:18:af:ae:18:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f97b644e-a01f-43c5-83e0-146254941d5f Validity Not Before: Jul 14 01:00:50 2025 GMT Not After : Oct 12 01:00:50 2025 GMT Subject: CN=ba054c6e-b1ff-48b1-ad44-545bc82ceff7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:01:07:b2:be:17:58:a4:2a:38:35:ef:40:d4: a8:0b:46:58:39:9b:fe:fa:d3:5d:a0:99:99:3b:06: cb:ac:0d:da:d9:25:c4:7d:69:e1:c9:5e:0d:7d:3a: ee:c7:88:2e:2c:b3:87:d7:b5:53:b1:eb:cb:eb:4d: 64:e1:ad:10:dc:e2:c3:33:47:0f:75:32:7a:31:e1: ec:88:e8:c3:e4:1f:7b:7c:35:a1:de:11:55:ea:07: bc:09:a1:7c:35:ae:7c:55:36:8c:7f:a6:03:72:ae: de:dd:e0:c3:9b:d3:db:45:39:6e:f5:1c:97:f1:39: b7:42:f4:08:e7:45:2f:2f:84:6c:b3:3d:20:bc:f9: 73:44:e8:6d:65:50:55:4f:36:6a:42:65:8f:60:b0: 88:ee:72:bc:77:9d:83:df:79:9e:79:8c:91:8b:97: c6:75:28:d3:fe:07:f9:61:2b:9d:b3:ac:23:44:3e: 4a:52:0e:d2:ae:b1:76:7e:c0:3e:df:0a:fc:9e:cd: 46:2b:f5:a9:46:54:c1:1f:df:67:45:9e:8e:92:22: ce:fb:e3:88:99:24:73:8c:2f:a3:a9:97:12:b9:e7: c6:57:81:46:e4:c8:3f:66:02:9d:49:78:10:bd:cf: f1:c9:9c:b0:6a:5d:52:02:53:31:97:65:c5:6d:96: c5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:34:51:C2:84:89:F7:AE:47:EA:A1:D6:BF:59:6F:CF:FF:EB:7D:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/760253bb-67cf-3504-9a97-8d6c02166051.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f97b644e-a01f-43c5-83e0-146254941d5f.crl X509v3 Authority Key Identifier: keyid:6B:87:D5:3D:AE:FB:D6:D0:9D:2C:62:29:D1:98:5C:78:E3:10:B6:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f.cer sbgp-ipAddrBlock: critical IPv4: 199.21.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:f2:d7:1e:74:fa:3b:4c:0c:ef:9c:96:e1:10:33:9b:1a:b6: a7:a1:13:1b:a1:28:a9:4a:87:2d:8d:fa:22:66:8a:97:ab:49: 22:ae:c4:b6:a5:a9:48:65:19:39:c5:42:cc:fa:fe:3c:75:99: a1:9e:9b:92:07:b7:3d:9a:1c:e1:a5:f9:74:e0:56:71:0b:84: 00:a7:cc:81:da:df:74:91:25:4e:f0:8c:bf:e5:30:96:36:0c: cb:9e:03:7d:73:3d:12:6d:24:9a:93:b1:ce:d0:e2:c3:47:bb: 6e:29:e8:19:48:9e:d4:6a:13:36:84:fa:b2:4a:b4:2c:39:ce: 05:18:92:51:89:48:02:f0:71:48:9d:93:49:48:ac:04:71:49: 0d:ac:e3:a0:af:66:d0:f1:fe:52:7d:3c:b7:54:9c:77:2c:86: 75:ed:dd:d7:43:45:fa:8c:3f:24:2b:33:d5:12:dc:12:cd:bd: 19:ba:30:f3:e0:a3:b0:09:00:cd:a3:d6:a9:f9:90:d8:2b:fd: 83:ee:12:6c:8d:81:90:3b:53:ce:95:05:7d:15:bd:60:af:4a: 4b:a1:a4:6a:ae:96:47:80:4c:b9:ad:06:16:2a:0b:80:7c:58: 51:b9:99:b6:d1:a2:0b:65:47:56:fa:26:59:0f:88:7a:0a:a4: fd:c5:6a:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqCq0ysSZYYr64YhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk3YjY0NGUtYTAxZi00M2M1LTgzZTAtMTQ2MjU0OTQx ZDVmMB4XDTI1MDcxNDAxMDA1MFoXDTI1MTAxMjAxMDA1MFowLzEtMCsGA1UEAxMk YmEwNTRjNmUtYjFmZi00OGIxLWFkNDQtNTQ1YmM4MmNlZmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QEHsr4XWKQqODXvQNSoC0ZYOZv++tNdoJmZ OwbLrA3a2SXEfWnhyV4NfTrux4guLLOH17VTsevL601k4a0Q3OLDM0cPdTJ6MeHs iOjD5B97fDWh3hFV6ge8CaF8Na58VTaMf6YDcq7e3eDDm9PbRTlu9RyX8Tm3QvQI 50UvL4Rssz0gvPlzROhtZVBVTzZqQmWPYLCI7nK8d52D33meeYyRi5fGdSjT/gf5 YSuds6wjRD5KUg7SrrF2fsA+3wr8ns1GK/WpRlTBH99nRZ6OkiLO++OImSRzjC+j qZcSuefGV4FG5Mg/ZgKdSXgQvc/xyZywal1SAlMxl2XFbZbFzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKo0UcKEifeuR+qh1r9Zb8//631bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTdi NjQ0ZS1hMDFmLTQzYzUtODNlMC0xNDYyNTQ5NDFkNWYvNzYwMjUzYmItNjdjZi0z NTA0LTlhOTctOGQ2YzAyMTY2MDUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk3YjY0NGUtYTAxZi00M2M1LTgz ZTAtMTQ2MjU0OTQxZDVmL2Y5N2I2NDRlLWEwMWYtNDNjNS04M2UwLTE0NjI1NDk0 MWQ1Zi5jcmwwHwYDVR0jBBgwFoAUa4fVPa771tCdLGIp0ZhceOMQtukwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTdiNjQ0ZS1hMDFmLTQzYzUtODNlMC0xNDYy NTQ5NDFkNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxxWkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMry1x50+jtMDO+cluEQM5satqehExuhKKlKhy2N+iJmiperSSKuxLal qUhlGTnFQsz6/jx1maGem5IHtz2aHOGl+XTgVnELhACnzIHa33SRJU7wjL/lMJY2 DMueA31zPRJtJJqTsc7Q4sNHu24p6BlIntRqEzaE+rJKtCw5zgUYklGJSALwcUid k0lIrARxSQ2s46CvZtDx/lJ9PLdUnHcshnXt3ddDRfqMPyQrM9US3BLNvRm6MPPg o7AJAM2j1qn5kNgr/YPuEmyNgZA7U86VBX0VvWCvSkuhpGqulkeATLmtBhYqC4B8 WFG5mbbRogtlR1b6JlkPiHoKpP3FasE= -----END CERTIFICATE-----Generated at Sun Aug 10 04:15:40 2025 by rpki-client