$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/85bac01b-d449-38e4-b9c4-3ebbabdf928b.roa File: 85bac01b-d449-38e4-b9c4-3ebbabdf928b.roa (raw, json) Hash identifier: CNoAmrpACTWmLDE1mKYMfy5XOf89tNlio6PlrPgOZAg= Subject key identifier: 54:20:84:2F:8F:76:22:C4:F7:0C:18:C8:06:DC:FA:B2:D8:72:F4:0F Certificate issuer: /CN=d409bef0-b6e9-492d-adf9-0bd8a5610c35 Certificate serial: 010D0C9F4328584AA85BBA503233BB4510AF6AE8 Authority key identifier: 3B:89:AF:36:6D:D2:02:F7:FC:DA:FA:4D:86:6E:9E:74:D2:2A:8B:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/85bac01b-d449-38e4-b9c4-3ebbabdf928b.roa Signing time: Sun 27 Jul 2025 13:01:04 +0000 ROA not before: Sun 27 Jul 2025 13:01:04 +0000 ROA not after: Sat 25 Oct 2025 13:01:04 +0000 asID: 16509 IP address blocks: 199.27.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/d409bef0-b6e9-492d-adf9-0bd8a5610c35.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/d409bef0-b6e9-492d-adf9-0bd8a5610c35.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a8:5b:ba:50:32:33:bb:45:10:af:6a:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d409bef0-b6e9-492d-adf9-0bd8a5610c35 Validity Not Before: Jul 27 13:01:04 2025 GMT Not After : Oct 25 13:01:04 2025 GMT Subject: CN=31f161fc-1a74-404d-bf9a-e6acbf99779c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:60:a3:9a:2b:ce:6c:c3:1c:1a:28:c9:fa:33: 49:d5:a5:fd:cc:b6:af:4e:62:ae:71:9c:6a:de:8b: 10:9c:ca:c6:2c:84:a0:f1:4c:a7:da:1d:27:98:ff: 13:70:cf:04:66:63:bd:13:56:b1:8e:c0:fa:0f:52: 97:27:ab:45:fe:d6:7c:00:9b:3f:f2:99:16:bb:a8: 4a:53:93:e0:15:91:bf:b1:53:24:91:52:a1:45:20: 3c:1b:11:04:1b:e9:e8:69:1e:df:ba:de:cb:0c:fd: 8f:af:08:00:b2:e8:fd:a8:02:84:20:8f:d8:73:7f: d1:7b:d4:19:da:c1:c0:75:27:e2:b0:75:3f:66:e4: 88:f4:75:92:38:4f:fd:f0:a9:7a:6c:96:e5:24:5a: 2e:4d:ef:60:1a:0b:c3:f5:eb:dc:22:35:80:df:85: 4b:07:a7:7f:4f:85:0d:db:3d:fd:53:72:ae:1f:3d: e7:52:62:37:ca:60:f5:b2:79:d3:ca:44:62:5a:3f: 5f:1f:cc:30:74:3f:36:55:0d:02:c6:47:5b:e5:35: a1:62:2a:8b:fd:05:54:dc:63:a4:a4:92:59:eb:cf: a1:05:c6:b4:d4:f3:06:f0:5b:73:2f:4c:ed:54:ef: 7c:fa:4d:c6:c7:30:ff:e3:c8:9f:1b:d6:ef:da:b4: 5d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:20:84:2F:8F:76:22:C4:F7:0C:18:C8:06:DC:FA:B2:D8:72:F4:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/85bac01b-d449-38e4-b9c4-3ebbabdf928b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/d409bef0-b6e9-492d-adf9-0bd8a5610c35.crl X509v3 Authority Key Identifier: keyid:3B:89:AF:36:6D:D2:02:F7:FC:DA:FA:4D:86:6E:9E:74:D2:2A:8B:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35.cer sbgp-ipAddrBlock: critical IPv4: 199.27.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:07:a6:a0:47:b4:60:18:eb:e0:73:1c:ad:f7:56:fa:e8:52: 54:c1:f7:f1:dc:2b:46:a6:41:2a:60:4f:94:03:58:f1:2d:d3: 99:19:23:d3:7c:7c:14:cf:f4:c6:ac:3e:74:89:88:a1:6b:90: 05:18:1a:37:60:02:79:49:21:34:f8:dd:2d:77:82:e1:5c:08: 64:a7:fa:f7:f8:44:a8:0f:44:38:45:a0:2d:a0:28:3a:63:28: 37:3b:ac:81:aa:c0:b2:e4:6f:30:f9:fe:62:6d:de:f7:28:fd: 39:6a:c6:23:7f:bf:a4:c0:5a:74:13:c6:e5:0d:3c:2b:cb:f4: 98:50:e3:ac:40:2a:e3:05:f7:36:14:89:1a:0c:10:3d:c7:06: 8f:cb:79:c5:26:bf:58:c9:a2:e8:46:65:ba:9d:02:cb:57:c2: ef:1b:7d:4c:58:45:f3:dd:85:44:41:2d:75:c4:26:5d:24:24: 70:34:0f:ea:99:95:5b:dd:21:76:0f:e2:32:61:ef:e1:1f:2d: 90:41:bb:66:ec:a3:a3:c5:fb:a3:6a:aa:65:33:f6:85:a6:e7: 12:64:b6:47:46:55:9d:16:de:60:a9:cc:15:0b:71:d9:51:a3: 96:25:36:f3:49:06:b0:4d:0b:df:ed:7b:c2:ff:a3:f7:48:d3: 9b:2e:df:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqoW7pQMjO7RRCvaugwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwOWJlZjAtYjZlOS00OTJkLWFkZjktMGJkOGE1NjEw YzM1MB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk MzFmMTYxZmMtMWE3NC00MDRkLWJmOWEtZTZhY2JmOTk3NzljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2CjmivObMMcGijJ+jNJ1aX9zLavTmKucZxq 3osQnMrGLISg8Uyn2h0nmP8TcM8EZmO9E1axjsD6D1KXJ6tF/tZ8AJs/8pkWu6hK U5PgFZG/sVMkkVKhRSA8GxEEG+noaR7fut7LDP2PrwgAsuj9qAKEII/Yc3/Re9QZ 2sHAdSfisHU/ZuSI9HWSOE/98Kl6bJblJFouTe9gGgvD9evcIjWA34VLB6d/T4UN 2z39U3KuHz3nUmI3ymD1snnTykRiWj9fH8wwdD82VQ0Cxkdb5TWhYiqL/QVU3GOk pJJZ68+hBca01PMG8FtzL0ztVO98+k3GxzD/48ifG9bv2rRdxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQghC+PdiLE9wwYyAbc+rLYcvQPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kNDA5 YmVmMC1iNmU5LTQ5MmQtYWRmOS0wYmQ4YTU2MTBjMzUvODViYWMwMWItZDQ0OS0z OGU0LWI5YzQtM2ViYmFiZGY5MjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZDQwOWJlZjAtYjZlOS00OTJkLWFk ZjktMGJkOGE1NjEwYzM1L2Q0MDliZWYwLWI2ZTktNDkyZC1hZGY5LTBiZDhhNTYx MGMzNS5jcmwwHwYDVR0jBBgwFoAUO4mvNm3SAvf82vpNhm6edNIqi8QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9kNDA5YmVmMC1iNmU5LTQ5MmQtYWRmOS0wYmQ4 YTU2MTBjMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxxtFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKUHpqBHtGAY6+BzHK33VvroUlTB9/HcK0amQSpgT5QDWPEt05kZI9N8 fBTP9MasPnSJiKFrkAUYGjdgAnlJITT43S13guFcCGSn+vf4RKgPRDhFoC2gKDpj KDc7rIGqwLLkbzD5/mJt3vco/TlqxiN/v6TAWnQTxuUNPCvL9JhQ46xAKuMF9zYU iRoMED3HBo/LecUmv1jJouhGZbqdAstXwu8bfUxYRfPdhURBLXXEJl0kJHA0D+qZ lVvdIXYP4jJh7+EfLZBBu2bso6PF+6NqqmUz9oWm5xJktkdGVZ0W3mCpzBULcdlR o5YlNvNJBrBNC9/te8L/o/dI05su370= -----END CERTIFICATE-----Generated at Mon Aug 4 14:44:27 2025 by rpki-client