$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/d76cf084-a2b1-3413-8b31-b784dc8faa6f.roa File: d76cf084-a2b1-3413-8b31-b784dc8faa6f.roa (raw, json) Hash identifier: toB/oUty6sTOcztcjZfrDrqKAvPMLc1nU0kdbFSH5bM= Subject key identifier: 48:96:D1:D7:52:37:72:F5:BD:6C:25:1C:EB:74:CB:C5:C4:2A:41:83 Certificate issuer: /CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Certificate serial: 010D0C9F4328584AA160E2BB4EC4353AD45F4600 Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/d76cf084-a2b1-3413-8b31-b784dc8faa6f.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 46687 IP address blocks: 199.122.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:60:e2:bb:4e:c4:35:3a:d4:5f:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=f86d917f-cfec-4963-93c4-c1c9298c5d87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a9:48:d4:ea:e8:0d:ac:bc:ef:47:8c:22:d9: d6:bf:b2:90:16:16:e3:a7:d8:3b:0c:58:b9:b1:69: fb:ed:9f:87:f4:43:5f:ab:b2:77:ee:04:20:2d:7f: b0:f2:bd:8e:01:f3:1a:03:05:b2:dc:ce:03:9d:2c: 56:15:e7:7c:2c:af:1e:a7:d6:e6:ab:10:3b:29:54: 06:03:63:d9:9b:ca:a8:82:7c:f3:f0:e8:dd:7c:92: d3:73:7d:8d:ab:c9:d4:03:70:02:55:5b:4f:a1:98: 11:f6:3b:ed:da:dd:73:98:cc:ff:5d:a0:ee:48:e3: 0f:82:2e:ea:15:39:97:7f:12:e7:e0:0e:dd:2b:3a: 19:4e:45:2b:33:00:fd:9b:bf:20:72:1e:76:59:d4: 3f:00:8e:cc:e7:29:b3:6a:1c:f0:83:1e:d3:fd:c1: 14:59:b3:6b:6b:be:cc:36:66:89:b2:db:a5:e2:1a: a2:c0:55:55:c7:49:bf:16:92:82:d1:09:8c:90:6a: c7:fd:41:c0:73:96:50:a0:96:54:ce:2c:b8:7c:df: 15:6c:8b:c6:e0:63:73:64:8b:5d:62:a4:2d:f4:06: 86:a0:7f:01:7a:e9:56:e1:bf:e5:78:ca:3e:e9:52: e1:d6:16:f2:45:f2:af:5d:a2:17:5c:72:43:49:88: f4:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:96:D1:D7:52:37:72:F5:BD:6C:25:1C:EB:74:CB:C5:C4:2A:41:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/d76cf084-a2b1-3413-8b31-b784dc8faa6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl X509v3 Authority Key Identifier: keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer sbgp-ipAddrBlock: critical IPv4: 199.122.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:b2:36:d0:48:12:86:e4:6a:95:b3:96:34:a4:6f:b6:9a:cb: 4d:9e:30:f6:e4:15:37:3f:ab:28:47:09:72:a9:14:cb:a3:ba: 48:31:d2:dc:00:52:5c:e1:e2:8d:f7:d2:9d:1f:32:7f:2e:7b: c9:3e:9d:c2:01:c3:ac:c2:54:57:59:5c:a1:f7:a1:c0:d0:c0: b9:15:2d:b8:08:42:53:fb:5e:1c:01:f4:b3:bc:15:d0:c7:18: e9:0d:0d:2e:ca:d3:f0:92:f0:ee:09:3e:26:cc:ca:7f:54:d2: e6:17:67:7d:b6:45:4b:af:8a:4c:cc:9f:b8:96:0b:f0:70:27: ed:84:6f:3c:08:e4:1d:4c:51:38:bc:95:0c:ba:5f:a2:7a:aa: f7:7d:03:29:8b:ab:b2:1f:0e:1d:0d:c8:d7:8d:34:4f:e9:be: 4e:59:4e:ee:00:13:39:58:25:ab:7b:cd:ce:0e:00:2c:df:03: 48:3c:8f:00:0f:8a:e5:d3:72:61:7f:4e:29:4c:e4:f3:f8:27: 44:f0:52:a6:dd:37:d3:4f:71:53:33:4a:65:73:80:32:6e:08: 41:77:cd:03:ae:c7:fb:01:79:70:c5:af:4f:34:3e:7d:0e:50: 3c:7e:dc:42:fb:e8:24:e1:8f:b3:48:94:d6:df:7b:4c:5d:e2: 46:2b:76:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYOK7TsQ1OtRfRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzMWE0YTAtN2I3Ny00ZjU2LThmODktMDE1MjViNTA2 MTI5MB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk Zjg2ZDkxN2YtY2ZlYy00OTYzLTkzYzQtYzFjOTI5OGM1ZDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6lI1OroDay870eMItnWv7KQFhbjp9g7DFi5 sWn77Z+H9ENfq7J37gQgLX+w8r2OAfMaAwWy3M4DnSxWFed8LK8ep9bmqxA7KVQG A2PZm8qognzz8OjdfJLTc32Nq8nUA3ACVVtPoZgR9jvt2t1zmMz/XaDuSOMPgi7q FTmXfxLn4A7dKzoZTkUrMwD9m78gch52WdQ/AI7M5ymzahzwgx7T/cEUWbNra77M NmaJstul4hqiwFVVx0m/FpKC0QmMkGrH/UHAc5ZQoJZUziy4fN8VbIvG4GNzZItd YqQt9AaGoH8BeulW4b/leMo+6VLh1hbyRfKvXaIXXHJDSYj0rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEiW0ddSN3L1vWwlHOt0y8XEKkGDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTMx YTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUyNWI1MDYxMjkvZDc2Y2YwODQtYTJiMS0z NDEzLThiMzEtYjc4NGRjOGZhYTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEzMWE0YTAtN2I3Ny00ZjU2LThm ODktMDE1MjViNTA2MTI5L2FhMzFhNGEwLTdiNzctNGY1Ni04Zjg5LTAxNTI1YjUw NjEyOS5jcmwwHwYDVR0jBBgwFoAUWIlNWT2gnXPWliBuheubsbqbZj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTMxYTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUy NWI1MDYxMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx3poMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACeyNtBIEobkapWzljSkb7aay02eMPbkFTc/qyhHCXKpFMujukgx0twA Ulzh4o330p0fMn8ue8k+ncIBw6zCVFdZXKH3ocDQwLkVLbgIQlP7XhwB9LO8FdDH GOkNDS7K0/CS8O4JPibMyn9U0uYXZ322RUuvikzMn7iWC/BwJ+2EbzwI5B1MUTi8 lQy6X6J6qvd9AymLq7IfDh0NyNeNNE/pvk5ZTu4AEzlYJat7zc4OACzfA0g8jwAP iuXTcmF/TilM5PP4J0TwUqbdN9NPcVMzSmVzgDJuCEF3zQOux/sBeXDFr080Pn0O UDx+3EL76CThj7NIlNbfe0xd4kYrdsE= -----END CERTIFICATE-----Generated at Sat Aug 9 22:38:29 2025 by rpki-client