$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/ab708923-0613-3a2c-b170-cadae0fe2f49.roa File: ab708923-0613-3a2c-b170-cadae0fe2f49.roa (raw, json) Hash identifier: n+HjzHUiEnK85Z/NOYu771jGEC8FkD9N6Cqo2f71UAk= Subject key identifier: BA:E1:2C:99:DB:A7:02:BE:35:94:F8:8A:B6:60:F8:55:E7:97:7C:03 Certificate issuer: /CN=91c894d6-b991-4966-bec4-7c58dac779b5 Certificate serial: 010D0C9F4328584AAB264F7B29FE9798ED4E61C0 Authority key identifier: 13:B2:2C:28:79:5A:A5:CA:BB:C0:79:BF:76:C3:D6:8B:67:23:7B:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/ab708923-0613-3a2c-b170-cadae0fe2f49.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 16509 IP address blocks: 199.87.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/91c894d6-b991-4966-bec4-7c58dac779b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/91c894d6-b991-4966-bec4-7c58dac779b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:4f:7b:29:fe:97:98:ed:4e:61:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91c894d6-b991-4966-bec4-7c58dac779b5 Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=724adb1f-e322-4053-a015-034836b07344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:53:b4:26:c6:d8:16:f8:85:b9:20:43:8e:cb: c2:0e:d7:7a:4d:3d:4e:db:d4:b9:68:7c:22:60:0f: 96:0f:7c:21:46:3b:d4:f9:1e:b4:49:d3:eb:a3:9a: a9:5d:00:87:50:8c:82:e1:95:9d:a3:f5:e0:d5:a4: 94:38:1e:dc:75:11:ac:60:7a:16:4c:fd:81:b5:90: ad:2f:57:91:94:de:ac:ca:04:33:ed:ad:41:f9:61: 4b:e9:73:7b:a3:b5:36:01:7d:80:a7:4c:87:48:cf: 79:ab:00:c8:26:1b:9f:3f:ce:07:0d:17:c3:b4:b5: d9:89:10:29:06:be:c3:ce:71:88:5d:7d:41:17:4e: b4:ae:35:37:d8:76:80:8b:1e:b7:7a:ca:11:ba:d8: 7d:12:39:e0:a3:d0:21:9d:bb:14:6e:17:7f:5d:34: e3:33:38:3e:a9:8e:29:4e:06:ae:4a:14:9c:2a:72: 82:e3:48:b6:9f:3c:61:ea:c3:fe:8c:8d:d1:cf:e0: 17:e9:ca:23:f5:ce:bd:ff:a7:22:c5:e4:2b:e7:49: 03:e3:11:34:58:7e:df:72:de:6c:c1:47:ea:11:8c: b2:46:51:1f:d8:2a:21:5e:11:33:98:93:d9:01:80: 7a:a6:5c:07:f1:77:68:1b:4a:55:cc:c7:c7:c8:c8: 80:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:E1:2C:99:DB:A7:02:BE:35:94:F8:8A:B6:60:F8:55:E7:97:7C:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/ab708923-0613-3a2c-b170-cadae0fe2f49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/91c894d6-b991-4966-bec4-7c58dac779b5.crl X509v3 Authority Key Identifier: keyid:13:B2:2C:28:79:5A:A5:CA:BB:C0:79:BF:76:C3:D6:8B:67:23:7B:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5.cer sbgp-ipAddrBlock: critical IPv4: 199.87.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:8e:1d:01:4b:c7:82:ba:bd:b9:e6:f8:71:92:28:2a:67:ff: 00:df:b6:14:69:f5:ff:4a:7b:3a:f8:2f:d7:36:6a:f8:41:04: 8b:2c:7f:a5:fe:25:20:ad:46:34:28:dd:36:d5:8e:dc:79:e8: 3d:ab:d1:ea:49:31:79:7a:7f:60:c6:cc:de:e5:bf:54:fb:be: e9:a1:52:11:ad:82:2e:7b:87:98:f9:9c:8b:1b:e9:5b:e7:5b: 0f:c6:fd:42:3d:4b:83:83:e7:1d:78:6c:aa:b8:9d:a1:32:d9: f7:75:22:a1:d0:ed:70:8d:6c:b3:64:7f:9f:21:32:4f:f6:3c: ea:ef:82:d5:0e:7d:36:6d:18:3b:a1:63:d7:64:f4:da:8a:48: 60:7b:43:b2:15:21:6c:ab:07:43:01:b8:62:08:5e:4c:fa:43: f6:72:d1:26:e8:e0:89:79:6a:f1:07:e4:ae:34:61:87:f0:54: bc:1e:c4:4b:be:bd:b0:a4:73:70:71:3d:26:3c:45:59:bc:8d: f4:7d:80:f4:0b:96:77:de:95:ed:71:48:bc:41:08:9b:57:c7: af:fe:a2:ee:4c:b5:45:64:f9:f5:5b:cc:84:75:6c:c5:4b:8d: 83:c0:55:49:90:f6:18:d9:59:cb:19:75:16:45:b4:d9:d5:46: fb:6a:76:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJk97Kf6XmO1OYcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTFjODk0ZDYtYjk5MS00OTY2LWJlYzQtN2M1OGRhYzc3 OWI1MB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk NzI0YWRiMWYtZTMyMi00MDUzLWEwMTUtMDM0ODM2YjA3MzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulO0JsbYFviFuSBDjsvCDtd6TT1O29S5aHwi YA+WD3whRjvU+R60SdPro5qpXQCHUIyC4ZWdo/Xg1aSUOB7cdRGsYHoWTP2BtZCt L1eRlN6sygQz7a1B+WFL6XN7o7U2AX2Ap0yHSM95qwDIJhufP84HDRfDtLXZiRAp Br7DznGIXX1BF060rjU32HaAix63esoRuth9Ejngo9AhnbsUbhd/XTTjMzg+qY4p TgauShScKnKC40i2nzxh6sP+jI3Rz+AX6coj9c69/6cixeQr50kD4xE0WH7fct5s wUfqEYyyRlEf2CohXhEzmJPZAYB6plwH8XdoG0pVzMfHyMiAhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLrhLJnbpwK+NZT4irZg+FXnl3wDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MWM4 OTRkNi1iOTkxLTQ5NjYtYmVjNC03YzU4ZGFjNzc5YjUvYWI3MDg5MjMtMDYxMy0z YTJjLWIxNzAtY2FkYWUwZmUyZjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTFjODk0ZDYtYjk5MS00OTY2LWJl YzQtN2M1OGRhYzc3OWI1LzkxYzg5NGQ2LWI5OTEtNDk2Ni1iZWM0LTdjNThkYWM3 NzliNS5jcmwwHwYDVR0jBBgwFoAUE7IsKHlapcq7wHm/dsPWi2cje8IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MWM4OTRkNi1iOTkxLTQ5NjYtYmVjNC03YzU4 ZGFjNzc5YjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx1eQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKOHQFLx4K6vbnm+HGSKCpn/wDfthRp9f9Kezr4L9c2avhBBIssf6X+ JSCtRjQo3TbVjtx56D2r0epJMXl6f2DGzN7lv1T7vumhUhGtgi57h5j5nIsb6Vvn Ww/G/UI9S4OD5x14bKq4naEy2fd1IqHQ7XCNbLNkf58hMk/2POrvgtUOfTZtGDuh Y9dk9NqKSGB7Q7IVIWyrB0MBuGIIXkz6Q/Zy0Sbo4Il5avEH5K40YYfwVLwexEu+ vbCkc3BxPSY8RVm8jfR9gPQLlnfele1xSLxBCJtXx6/+ou5MtUVk+fVbzIR1bMVL jYPAVUmQ9hjZWcsZdRZFtNnVRvtqdj8= -----END CERTIFICATE-----Generated at Mon Aug 4 14:53:40 2025 by rpki-client