$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50/9f904d6f-04cf-31be-817e-18ee7663b54b.roa File: 9f904d6f-04cf-31be-817e-18ee7663b54b.roa (raw, json) Hash identifier: 8w/HOeMgGEzz8xjCmpNEgjur1t8ZY7csXdlBPlmRz8g= Subject key identifier: 9E:85:0C:20:E2:8A:52:F4:A7:43:60:5D:45:19:AD:E7:3D:E2:F7:4A Certificate issuer: /CN=e90f54fd-200a-4b2f-914b-2bc8530b5d50 Certificate serial: 010D0C9F4328584A9BCB713ECE516097383DC900 Authority key identifier: 88:6C:52:4A:DC:FA:78:E7:28:41:14:40:67:D4:3D:2D:BB:C7:F5:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50/9f904d6f-04cf-31be-817e-18ee7663b54b.roa Signing time: Wed 23 Jul 2025 01:00:52 +0000 ROA not before: Wed 23 Jul 2025 01:00:52 +0000 ROA not after: Tue 21 Oct 2025 01:00:52 +0000 asID: 13552 IP address blocks: 199.202.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50/e90f54fd-200a-4b2f-914b-2bc8530b5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50/e90f54fd-200a-4b2f-914b-2bc8530b5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9b:cb:71:3e:ce:51:60:97:38:3d:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e90f54fd-200a-4b2f-914b-2bc8530b5d50 Validity Not Before: Jul 23 01:00:52 2025 GMT Not After : Oct 21 01:00:52 2025 GMT Subject: CN=deb40f16-ee6f-4be5-9794-de255bf1b1a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:05:ad:93:26:88:6d:2d:b1:74:34:d6:63:4b: d3:fc:78:88:1f:19:31:a8:81:2c:0c:29:1e:7d:dd: de:64:86:4d:d6:87:24:a7:50:da:87:0b:a1:35:5d: d7:93:ca:b2:cc:08:96:50:8d:74:c5:1f:18:96:37: 5d:26:af:20:54:a8:b5:05:71:1b:08:11:99:a8:36: 75:e0:48:cb:9f:0f:ef:4f:f5:d0:08:81:55:67:72: 32:07:6d:dd:25:fb:1e:93:d4:1c:9d:35:ce:ee:91: 31:75:de:49:44:dc:55:fc:1c:19:12:66:b9:13:49: 09:e4:5c:44:7b:1a:19:9b:56:7a:85:18:84:54:29: 68:1b:56:7e:66:d2:0c:a2:fe:ac:b9:b3:4c:20:1f: 61:00:5a:29:8d:3e:db:43:35:61:54:3e:32:d9:87: ff:b9:d5:fd:11:e5:ae:53:e7:de:1c:b3:a7:35:27: da:c3:2f:e6:5f:8f:71:a9:0f:70:9b:63:81:51:68: 19:86:bd:f8:00:f1:05:14:db:9b:b2:de:9a:ab:7c: af:88:71:5b:51:84:1f:1d:0f:57:72:60:8e:85:c4: 0b:05:49:ed:1e:b4:0d:32:f5:03:87:52:b5:2a:0d: 16:a1:ef:4e:80:5e:48:5f:ca:f6:d1:75:c1:58:a2: f3:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:85:0C:20:E2:8A:52:F4:A7:43:60:5D:45:19:AD:E7:3D:E2:F7:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50/9f904d6f-04cf-31be-817e-18ee7663b54b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50/e90f54fd-200a-4b2f-914b-2bc8530b5d50.crl X509v3 Authority Key Identifier: keyid:88:6C:52:4A:DC:FA:78:E7:28:41:14:40:67:D4:3D:2D:BB:C7:F5:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50.cer sbgp-ipAddrBlock: critical IPv4: 199.202.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:c9:ca:bd:d8:cf:4f:24:4f:82:6b:e3:18:f0:38:36:d3:15: 52:ce:3f:a8:e2:fd:3c:98:63:8d:d4:d7:0d:80:d8:98:b0:20: 5f:14:68:b0:8d:22:de:d8:6a:69:05:77:e3:cd:6b:43:18:0a: e9:47:d3:ce:bd:5e:5d:0a:6e:5b:12:23:07:19:d2:d1:91:bf: 69:8d:af:fe:8b:b7:dc:4b:de:f1:22:ae:53:5a:7f:ba:8e:69: cb:b0:40:3f:5e:58:69:10:bb:bd:79:61:e5:e4:af:8a:79:77: ad:87:7b:17:0c:b1:62:d5:3e:06:ba:12:37:eb:dd:de:30:3e: 7c:91:d3:7f:e9:cb:c5:1a:70:5c:ab:bf:f5:88:b6:80:31:f0: 8a:31:48:f6:0d:e1:7e:ef:a1:04:44:cb:ff:a0:d4:a8:d7:62: 16:24:ba:98:bf:5d:ca:46:76:89:e1:e4:18:94:e0:65:d7:62: f2:87:02:ff:65:d1:e9:82:5f:9f:fa:2f:35:19:df:f7:ce:ef: 8b:a3:23:8f:19:50:95:5c:cb:96:e1:f1:9a:1e:48:0d:03:1c: 6b:c1:b7:3b:47:10:c4:f5:b8:0b:bb:e5:60:11:7e:de:42:7d: dd:08:49:7f:5a:2e:4d:c1:c7:35:e7:cc:99:14:bc:6b:92:aa: 4c:75:9b:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqby3E+zlFglzg9yQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTkwZjU0ZmQtMjAwYS00YjJmLTkxNGItMmJjODUzMGI1 ZDUwMB4XDTI1MDcyMzAxMDA1MloXDTI1MTAyMTAxMDA1MlowLzEtMCsGA1UEAxMk ZGViNDBmMTYtZWU2Zi00YmU1LTk3OTQtZGUyNTViZjFiMWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogWtkyaIbS2xdDTWY0vT/HiIHxkxqIEsDCke fd3eZIZN1ockp1DahwuhNV3Xk8qyzAiWUI10xR8YljddJq8gVKi1BXEbCBGZqDZ1 4EjLnw/vT/XQCIFVZ3IyB23dJfsek9QcnTXO7pExdd5JRNxV/BwZEma5E0kJ5FxE exoZm1Z6hRiEVCloG1Z+ZtIMov6subNMIB9hAFopjT7bQzVhVD4y2Yf/udX9EeWu U+feHLOnNSfawy/mX49xqQ9wm2OBUWgZhr34APEFFNubst6aq3yviHFbUYQfHQ9X cmCOhcQLBUntHrQNMvUDh1K1Kg0Woe9OgF5IX8r20XXBWKLzPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ6FDCDiilL0p0NgXUUZrec94vdKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lOTBm NTRmZC0yMDBhLTRiMmYtOTE0Yi0yYmM4NTMwYjVkNTAvOWY5MDRkNmYtMDRjZi0z MWJlLTgxN2UtMThlZTc2NjNiNTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTkwZjU0ZmQtMjAwYS00YjJmLTkx NGItMmJjODUzMGI1ZDUwL2U5MGY1NGZkLTIwMGEtNGIyZi05MTRiLTJiYzg1MzBi NWQ1MC5jcmwwHwYDVR0jBBgwFoAUiGxSStz6eOcoQRRAZ9Q9LbvH9VYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lOTBmNTRmZC0yMDBhLTRiMmYtOTE0Yi0yYmM4 NTMwYjVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx8poMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADJyr3Yz08kT4Jr4xjwODbTFVLOP6ji/TyYY43U1w2A2JiwIF8UaLCN It7YamkFd+PNa0MYCulH0869Xl0KblsSIwcZ0tGRv2mNr/6Lt9xL3vEirlNaf7qO acuwQD9eWGkQu715YeXkr4p5d62HexcMsWLVPga6Ejfr3d4wPnyR03/py8UacFyr v/WItoAx8IoxSPYN4X7voQREy/+g1KjXYhYkupi/XcpGdonh5BiU4GXXYvKHAv9l 0emCX5/6LzUZ3/fO74ujI48ZUJVcy5bh8ZoeSA0DHGvBtztHEMT1uAu75WARft5C fd0ISX9aLk3BxzXnzJkUvGuSqkx1m+o= -----END CERTIFICATE-----Generated at Mon Aug 4 18:27:02 2025 by rpki-client