$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/16e56f4d-ab70-3766-907b-22447a23eeb4.roa File: 16e56f4d-ab70-3766-907b-22447a23eeb4.roa (raw, json) Hash identifier: C5Z1Bhm57a8Ci8uwBEGKZD7hjvEypp7NV2bEcZ/7pBM= Subject key identifier: 5E:A2:ED:7F:0E:81:BF:77:95:4B:36:90:43:C9:F3:86:6A:FF:82:DE Certificate issuer: /CN=df2d2a52-5ca7-4a36-849f-a7d6b876e687 Certificate serial: 010D0C9F4328584AA160C5588FCD1B86AB89A900 Authority key identifier: A0:DF:EE:0C:A3:CA:99:A2:2F:92:AF:E5:F6:52:C1:DF:94:46:97:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/16e56f4d-ab70-3766-907b-22447a23eeb4.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 400702 IP address blocks: 199.127.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:60:c5:58:8f:cd:1b:86:ab:89:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df2d2a52-5ca7-4a36-849f-a7d6b876e687 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=c7c893ce-8a89-466a-8e37-7e1e51bde53c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c9:e5:4b:23:45:55:d0:a7:2b:31:be:0c:ed: 11:56:01:dc:07:0d:c5:28:a9:54:4b:08:7f:d7:82: f2:04:d1:58:89:a6:5e:fe:68:ca:6e:ad:da:22:5d: a1:2a:d1:76:b3:a6:9c:ef:d3:fe:a8:74:0a:c7:72: d4:2d:cd:d3:17:2c:fe:e3:f5:3e:46:0b:81:f0:a3: e6:fb:e6:0b:18:49:9b:86:11:4f:1e:2d:91:db:de: 21:3f:74:f4:5f:0e:04:5e:54:20:4a:f9:78:da:b6: 42:05:b9:42:10:76:0f:d8:25:2d:c4:c4:45:f7:d9: c1:8d:e9:96:01:b2:17:26:83:e8:b3:c5:67:6f:7a: 0a:35:19:39:de:cf:86:f4:12:25:eb:73:86:08:54: d8:e4:4d:1f:f4:7a:a7:8e:3e:45:42:32:ea:b2:64: db:36:84:ba:2b:9f:2d:a9:b5:88:9e:53:fd:e4:f6: 79:5b:7b:f1:90:e4:14:a5:96:8f:ef:fc:ef:5d:40: 82:08:65:76:94:a2:10:78:d6:82:97:90:f5:00:9a: 70:94:78:5c:c4:a6:e4:c7:c9:b1:44:79:be:0e:e4: a9:5c:fa:e9:62:74:80:b9:98:b2:5c:44:ab:bb:e6: f7:a7:2e:9d:82:f7:56:68:ab:bd:32:a4:34:44:dc: 82:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:A2:ED:7F:0E:81:BF:77:95:4B:36:90:43:C9:F3:86:6A:FF:82:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/16e56f4d-ab70-3766-907b-22447a23eeb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.crl X509v3 Authority Key Identifier: keyid:A0:DF:EE:0C:A3:CA:99:A2:2F:92:AF:E5:F6:52:C1:DF:94:46:97:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687.cer sbgp-ipAddrBlock: critical IPv4: 199.127.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:f7:56:64:ae:92:ff:96:4f:b4:b1:12:b5:52:d9:9b:2b:8b: 54:9a:8f:75:14:cb:67:6c:4c:39:7e:6a:bd:31:4c:a2:a0:1e: 27:99:b8:22:f1:c3:af:79:c7:b4:98:66:64:10:5b:3c:11:49: 78:00:bf:22:f3:a3:cd:d8:7c:81:b2:11:a6:0e:f3:c1:25:ce: 75:a9:3d:b5:c0:e5:fd:f7:f2:cb:a1:dc:6f:0e:cf:1c:65:74: 9a:65:e7:7c:65:3c:c5:9c:64:9d:ed:c6:41:09:54:6e:1e:cc: dd:c8:d8:1d:d1:f1:49:1b:5d:6e:3c:f8:d2:a1:99:fb:48:83: 4a:7b:02:d5:14:a7:d1:52:c2:76:22:ef:21:a2:f5:dd:c1:7b: 84:76:07:d0:ab:4d:4a:e8:58:11:0e:d8:b1:6c:33:93:fa:9f: f2:31:2c:ea:97:44:43:0f:ec:2e:dd:a3:e3:66:45:41:e3:39: df:c1:a8:80:7a:34:c1:e1:89:69:e9:06:3b:20:71:d5:e1:11: 79:1d:a2:68:25:52:74:fb:ae:a7:90:39:4a:34:09:5f:6c:ed: 52:2a:c7:cd:c7:51:d3:d7:c8:ec:fe:e3:d5:b1:fc:2a:c0:9c: 59:f7:c2:45:dc:84:fe:ba:fb:a1:eb:a8:65:93:f0:a2:a0:95: 77:37:5f:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYMVYj80bhquJqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYyZDJhNTItNWNhNy00YTM2LTg0OWYtYTdkNmI4NzZl Njg3MB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk YzdjODkzY2UtOGE4OS00NjZhLThlMzctN2UxZTUxYmRlNTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycnlSyNFVdCnKzG+DO0RVgHcBw3FKKlUSwh/ 14LyBNFYiaZe/mjKbq3aIl2hKtF2s6ac79P+qHQKx3LULc3TFyz+4/U+RguB8KPm ++YLGEmbhhFPHi2R294hP3T0Xw4EXlQgSvl42rZCBblCEHYP2CUtxMRF99nBjemW AbIXJoPos8Vnb3oKNRk53s+G9BIl63OGCFTY5E0f9Hqnjj5FQjLqsmTbNoS6K58t qbWInlP95PZ5W3vxkOQUpZaP7/zvXUCCCGV2lKIQeNaCl5D1AJpwlHhcxKbkx8mx RHm+DuSpXPrpYnSAuZiyXESru+b3py6dgvdWaKu9MqQ0RNyCKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF6i7X8Ogb93lUs2kEPJ84Zq/4LeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjJk MmE1Mi01Y2E3LTRhMzYtODQ5Zi1hN2Q2Yjg3NmU2ODcvMTZlNTZmNGQtYWI3MC0z NzY2LTkwN2ItMjI0NDdhMjNlZWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYyZDJhNTItNWNhNy00YTM2LTg0 OWYtYTdkNmI4NzZlNjg3L2RmMmQyYTUyLTVjYTctNGEzNi04NDlmLWE3ZDZiODc2 ZTY4Ny5jcmwwHwYDVR0jBBgwFoAUoN/uDKPKmaIvkq/l9lLB35RGlwkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjJkMmE1Mi01Y2E3LTRhMzYtODQ5Zi1hN2Q2 Yjg3NmU2ODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx3+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI73VmSukv+WT7SxErVS2Zsri1Saj3UUy2dsTDl+ar0xTKKgHieZuCLx w695x7SYZmQQWzwRSXgAvyLzo83YfIGyEaYO88ElznWpPbXA5f338suh3G8Ozxxl dJpl53xlPMWcZJ3txkEJVG4ezN3I2B3R8UkbXW48+NKhmftIg0p7AtUUp9FSwnYi 7yGi9d3Be4R2B9CrTUroWBEO2LFsM5P6n/IxLOqXREMP7C7do+NmRUHjOd/BqIB6 NMHhiWnpBjsgcdXhEXkdomglUnT7rqeQOUo0CV9s7VIqx83HUdPXyOz+49Wx/CrA nFn3wkXchP66+6HrqGWT8KKglXc3X0s= -----END CERTIFICATE-----Generated at Mon Aug 4 22:28:47 2025 by rpki-client