$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/aa18b1ec-61e7-3c3e-aa0f-d3263857d4e9.roa File: aa18b1ec-61e7-3c3e-aa0f-d3263857d4e9.roa (raw, json) Hash identifier: VIYKemLuZRbSMpTVDoURhCGjMDRE6mrgjwszb08yuyI= Subject key identifier: 48:78:B1:78:7A:30:58:DF:9C:93:87:D6:12:3F:7C:9D:FD:36:2F:6A Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F4328584AB650DF502A395BC27DBF8F00 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/aa18b1ec-61e7-3c3e-aa0f-d3263857d4e9.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 22612 IP address blocks: 199.201.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:50:df:50:2a:39:5b:c2:7d:bf:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=2f9369aa-878c-4723-962f-ed5af966504e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:e6:c8:e7:b6:c7:78:d5:2d:49:ae:9e:29:80: e5:42:4e:d9:36:ee:6b:1b:b7:91:18:0a:ef:8f:e3: 63:62:a6:a2:d3:98:a5:c6:a5:5f:cd:e2:09:8b:d4: 67:05:04:34:8e:cf:99:d1:d6:59:4c:79:96:c7:86: d9:46:f7:f8:3f:35:96:9a:c5:ee:69:12:9d:26:8a: 7c:05:af:d6:c3:6c:cd:49:d0:78:28:a5:0a:ba:25: ff:18:c9:fe:da:40:a3:ae:78:99:48:ca:aa:57:a0: cc:10:4f:ac:65:af:fc:56:b3:53:1d:ea:6e:f2:66: 12:1e:0a:36:31:52:77:e9:97:19:5e:3b:eb:27:65: 24:80:2b:60:07:f5:c4:49:95:3b:78:75:ec:c1:b9: c8:d1:04:1b:4d:45:9a:8b:ed:f8:2f:08:6d:a3:9e: 9b:74:31:60:6c:97:e5:c8:10:bd:8f:5f:29:04:f0: e3:3c:c5:84:63:2b:6b:5b:d1:58:13:b0:da:0e:c2: 36:c4:7d:de:dd:f3:3c:8c:aa:0a:3f:3d:d4:50:19: 3d:30:fc:e8:24:94:ea:28:ae:c2:0d:e9:a7:63:7f: 8a:66:bd:6f:5e:80:d7:a1:f3:fd:ea:d5:cf:0f:24: fa:b1:de:4e:4a:8e:6a:a1:39:46:5a:52:cb:22:19: 38:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:78:B1:78:7A:30:58:DF:9C:93:87:D6:12:3F:7C:9D:FD:36:2F:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/aa18b1ec-61e7-3c3e-aa0f-d3263857d4e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv4: 199.201.110.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:09:3d:32:80:1f:c7:d4:12:5e:ff:bb:2d:73:9d:ce:11:6f: 76:bb:05:b1:d5:80:02:20:c9:ce:f5:ae:4d:02:43:f0:2f:e7: 08:e8:30:79:52:0a:e0:71:1d:f2:6c:6d:bb:5e:c4:2c:96:fa: f6:78:0d:0e:ba:bd:6c:5b:96:ff:aa:c2:e5:86:67:9f:e8:c4: 68:26:a9:c6:44:3c:1e:07:c9:c9:b9:25:55:8c:56:97:33:6d: 6f:6d:37:a0:b4:49:d4:87:ee:eb:bc:c3:88:f3:d5:b2:f0:6c: 6f:92:6a:eb:bd:f8:7e:9d:ad:55:e2:c4:be:89:d2:87:42:11: f2:7c:86:82:db:e8:1d:32:bc:4d:f0:7d:9d:88:d9:3a:58:82: fd:91:7b:b4:94:13:49:0f:a4:44:b3:6e:7c:e4:b8:8e:47:1a: cd:8e:b0:02:59:e3:a6:74:fa:93:d4:b0:d9:bd:2d:3e:83:35: 7b:e7:a2:23:e1:ee:49:f3:7a:6e:0e:cf:f8:ce:4d:14:9f:22: 5c:60:25:ed:06:60:a0:c9:23:1e:1b:99:db:4d:36:40:95:c8: b1:4a:95:2b:1c:d7:42:2c:00:e6:55:ad:f7:5b:a5:fe:b5:98: b9:15:07:62:9d:62:7b:31:cb:28:6e:12:09:ab:dc:c0:c9:13: b0:d2:7e:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq2UN9QKjlbwn2/jwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk MmY5MzY5YWEtODc4Yy00NzIzLTk2MmYtZWQ1YWY5NjY1MDRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjebI57bHeNUtSa6eKYDlQk7ZNu5rG7eRGArv j+NjYqai05ilxqVfzeIJi9RnBQQ0js+Z0dZZTHmWx4bZRvf4PzWWmsXuaRKdJop8 Ba/Ww2zNSdB4KKUKuiX/GMn+2kCjrniZSMqqV6DMEE+sZa/8VrNTHepu8mYSHgo2 MVJ36ZcZXjvrJ2UkgCtgB/XESZU7eHXswbnI0QQbTUWai+34Lwhto56bdDFgbJfl yBC9j18pBPDjPMWEYytrW9FYE7DaDsI2xH3e3fM8jKoKPz3UUBk9MPzoJJTqKK7C DemnY3+KZr1vXoDXofP96tXPDyT6sd5OSo5qoTlGWlLLIhk4RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEh4sXh6MFjfnJOH1hI/fJ39Ni9qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvYWExOGIxZWMtNjFlNy0z YzNlLWFhMGYtZDMyNjM4NTdkNGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx8luMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJIJPTKAH8fUEl7/uy1znc4Rb3a7BbHVgAIgyc71rk0CQ/Av5wjoMHlS CuBxHfJsbbtexCyW+vZ4DQ66vWxblv+qwuWGZ5/oxGgmqcZEPB4Hycm5JVWMVpcz bW9tN6C0SdSH7uu8w4jz1bLwbG+Sauu9+H6drVXixL6J0odCEfJ8hoLb6B0yvE3w fZ2I2TpYgv2Re7SUE0kPpESzbnzkuI5HGs2OsAJZ46Z0+pPUsNm9LT6DNXvnoiPh 7knzem4Oz/jOTRSfIlxgJe0GYKDJIx4bmdtNNkCVyLFKlSsc10IsAOZVrfdbpf61 mLkVB2KdYnsxyyhuEgmr3MDJE7DSfpg= -----END CERTIFICATE-----Generated at Tue Aug 5 16:43:58 2025 by rpki-client