$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd/89ce6886-5a3c-3e1b-a8e7-211977089ac7.roa File: 89ce6886-5a3c-3e1b-a8e7-211977089ac7.roa (raw, json) Hash identifier: AQuxdr3O7lUPBT4JaLtLUqCBST4rfIb5TZwQCJFQ+so= Subject key identifier: 0A:C2:19:E8:23:16:E9:8A:0D:D2:DD:AA:FB:A4:61:6C:10:29:FB:44 Certificate issuer: /CN=7b430551-8bf9-4310-8a7f-b2233e29affd Certificate serial: 010D0C9F4328584A9FFBA7CD8B054CA579C604D0 Authority key identifier: 6E:BE:D9:86:8F:66:C6:07:35:6F:A7:B3:E7:50:17:8D:D8:22:7C:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd/89ce6886-5a3c-3e1b-a8e7-211977089ac7.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 17456 IP address blocks: 199.127.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd/7b430551-8bf9-4310-8a7f-b2233e29affd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd/7b430551-8bf9-4310-8a7f-b2233e29affd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:a7:cd:8b:05:4c:a5:79:c6:04:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b430551-8bf9-4310-8a7f-b2233e29affd Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=bfc2b635-e4af-4e2d-82cd-1be7604b8de1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c2:01:45:8a:9e:6a:ac:e0:11:4f:5a:eb:4e: ac:ad:64:59:5a:21:5f:de:d8:74:57:56:f5:dd:98: 21:fc:47:c6:63:36:2f:98:c1:9b:c8:ed:8d:43:b3: 3e:17:a2:83:5a:4d:e3:cc:3c:20:2e:ed:65:d4:8a: d2:b1:03:57:6b:4e:b8:36:be:f3:a0:c6:e6:59:bb: a2:71:66:7e:ac:ec:bf:0a:3b:b2:c9:c2:02:78:d0: 13:a5:46:a0:b5:99:5a:c7:96:10:e6:3d:e5:92:e5: 4b:dd:f7:47:c5:f8:76:82:44:e6:72:34:ca:98:18: 85:a3:62:7b:c2:55:1d:80:77:90:61:b1:18:67:dc: 84:3b:27:ad:f2:f3:de:1e:17:ff:28:c4:bf:28:e2: ba:9d:e3:8b:e2:49:c9:a8:df:59:78:02:ff:44:6c: 4d:73:64:13:1f:e8:c1:76:ee:4a:06:66:b0:9c:1c: 5e:29:30:51:d5:66:17:a0:fc:48:53:4d:65:9d:c4: 1c:1f:42:60:70:d6:71:71:6f:5a:50:c6:b9:a1:3b: 93:28:fc:b6:9a:1b:9a:b4:c8:70:55:3c:3a:aa:8e: 4e:64:c1:95:cf:4e:6c:14:30:f1:55:e9:1e:33:15: 3e:d6:15:32:26:89:62:59:3a:af:d2:7b:de:86:ad: e1:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:C2:19:E8:23:16:E9:8A:0D:D2:DD:AA:FB:A4:61:6C:10:29:FB:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd/89ce6886-5a3c-3e1b-a8e7-211977089ac7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd/7b430551-8bf9-4310-8a7f-b2233e29affd.crl X509v3 Authority Key Identifier: keyid:6E:BE:D9:86:8F:66:C6:07:35:6F:A7:B3:E7:50:17:8D:D8:22:7C:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd.cer sbgp-ipAddrBlock: critical IPv4: 199.127.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:cb:f8:05:bd:e7:5e:a2:1d:d8:74:26:85:a1:bb:bc:dd:22: 5b:79:cc:81:83:72:db:1d:8f:49:73:52:76:83:70:27:3a:d5: 05:f1:27:0f:f4:dc:97:fa:9e:90:f8:fe:45:d7:d6:af:b0:eb: 39:d6:cd:fc:67:4e:4f:61:17:a0:8e:87:85:02:8f:0d:39:2d: 69:5a:6c:69:85:d6:94:dc:40:b0:92:6b:65:ec:c2:66:d3:d4: d5:42:27:68:97:83:cb:37:71:80:0b:86:bd:09:e8:b6:0f:65: ed:bc:d3:2a:9e:ca:9c:ed:15:a8:1c:6b:34:65:77:29:d8:6f: 2e:ba:5d:8f:30:44:ea:d1:67:0c:d2:3c:e7:51:b0:bd:c0:d0: 25:24:b5:7b:b4:76:49:cb:13:07:27:71:62:3c:52:18:a2:f5: 4d:e5:12:5c:8c:eb:c9:47:fd:7f:5e:b7:f2:2d:07:e5:7b:fa: d0:f0:94:cc:d5:e4:9c:69:e7:a8:8a:2a:16:97:3d:e2:1d:fc: a4:fa:fb:cc:38:13:fb:74:c3:6f:a5:be:67:99:f5:14:de:2b: ed:b9:9a:e7:49:5d:0c:6d:ce:35:13:fe:5e:a4:f1:7d:8f:34: 9d:18:5e:d7:96:dd:df:69:a0:11:7f:ba:42:7f:b0:af:0c:0c: 3b:1d:8f:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf+6fNiwVMpXnGBNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2I0MzA1NTEtOGJmOS00MzEwLThhN2YtYjIyMzNlMjlh ZmZkMB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk YmZjMmI2MzUtZTRhZi00ZTJkLTgyY2QtMWJlNzYwNGI4ZGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8IBRYqeaqzgEU9a606srWRZWiFf3th0V1b1 3Zgh/EfGYzYvmMGbyO2NQ7M+F6KDWk3jzDwgLu1l1IrSsQNXa064Nr7zoMbmWbui cWZ+rOy/CjuyycICeNATpUagtZlax5YQ5j3lkuVL3fdHxfh2gkTmcjTKmBiFo2J7 wlUdgHeQYbEYZ9yEOyet8vPeHhf/KMS/KOK6neOL4knJqN9ZeAL/RGxNc2QTH+jB du5KBmawnBxeKTBR1WYXoPxIU01lncQcH0JgcNZxcW9aUMa5oTuTKPy2mhuatMhw VTw6qo5OZMGVz05sFDDxVekeMxU+1hUyJoliWTqv0nvehq3haQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFArCGegjFumKDdLdqvukYWwQKftEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83YjQz MDU1MS04YmY5LTQzMTAtOGE3Zi1iMjIzM2UyOWFmZmQvODljZTY4ODYtNWEzYy0z ZTFiLWE4ZTctMjExOTc3MDg5YWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2I0MzA1NTEtOGJmOS00MzEwLThh N2YtYjIyMzNlMjlhZmZkLzdiNDMwNTUxLThiZjktNDMxMC04YTdmLWIyMjMzZTI5 YWZmZC5jcmwwHwYDVR0jBBgwFoAUbr7Zho9mxgc1b6ez51AXjdgifCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83YjQzMDU1MS04YmY5LTQzMTAtOGE3Zi1iMjIz M2UyOWFmZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx3/sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfL+AW9516iHdh0JoWhu7zdIlt5zIGDctsdj0lzUnaDcCc61QXxJw/0 3Jf6npD4/kXX1q+w6znWzfxnTk9hF6COh4UCjw05LWlabGmF1pTcQLCSa2XswmbT 1NVCJ2iXg8s3cYALhr0J6LYPZe280yqeypztFagcazRldynYby66XY8wROrRZwzS POdRsL3A0CUktXu0dknLEwcncWI8Uhii9U3lElyM68lH/X9et/ItB+V7+tDwlMzV 5Jxp56iKKhaXPeId/KT6+8w4E/t0w2+lvmeZ9RTeK+25mudJXQxtzjUT/l6k8X2P NJ0YXteW3d9poBF/ukJ/sK8MDDsdj/4= -----END CERTIFICATE-----Generated at Mon Aug 4 15:28:09 2025 by rpki-client