$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b/863f4acb-612c-3dc9-8399-3195b4bdd44b.roa File: 863f4acb-612c-3dc9-8399-3195b4bdd44b.roa (raw, json) Hash identifier: Dk3yAtm7+sA+1DTc4B3R0VQ9QBtp62umWA2iZBrw4K8= Subject key identifier: 1C:57:F1:53:E2:5E:38:D4:BE:DE:D9:EF:0C:A9:78:46:40:8F:B2:B0 Certificate issuer: /CN=a05d07d2-1994-4f02-bebc-4bdc0aec1c5b Certificate serial: 010D0C9F4328584AADF101E5A059CA375F974180 Authority key identifier: 69:ED:05:15:B3:4E:6B:49:E1:4A:A4:CE:3F:BF:7B:8F:A3:99:A1:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b/863f4acb-612c-3dc9-8399-3195b4bdd44b.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 16509 IP address blocks: 199.250.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:01:e5:a0:59:ca:37:5f:97:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a05d07d2-1994-4f02-bebc-4bdc0aec1c5b Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=80ce761b-3d81-463b-952d-d47190f591c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f1:b1:25:7c:ad:dc:b5:60:c6:85:03:12:20: d5:f6:06:10:96:71:76:67:50:83:62:5d:2f:c5:20: 7f:bc:ce:81:25:f8:15:78:11:2c:a6:19:0b:3e:57: f0:9b:bd:7f:da:73:47:fe:e3:5f:d3:e9:cb:7c:40: 43:f1:3f:cc:cf:be:c9:9d:91:be:e3:3c:e9:e3:de: 70:c0:db:50:03:2d:2b:77:f2:c1:58:1c:ff:03:93: 40:04:76:65:ca:c0:c4:b3:e6:ab:b4:ab:58:25:b9: 62:58:50:08:16:83:b5:1e:64:f9:0d:69:64:5e:5d: b9:2b:aa:9a:87:e5:ab:0c:b6:0a:6a:0f:36:96:ac: b6:77:48:98:74:7e:cc:ca:39:16:ce:20:e2:69:fd: 77:ab:9d:48:80:03:4b:0a:fb:94:fb:b7:10:b1:b0: b4:37:b3:02:5f:16:b1:4c:9b:47:77:8e:58:ae:2c: 45:57:5c:c1:be:51:1d:bc:cd:eb:8e:0c:f8:5a:6b: 1c:c5:3a:6e:1e:40:c6:82:5c:dd:5f:fe:ac:fb:87: 96:ad:8b:e8:bc:54:4b:cd:c5:ae:99:b6:dd:ce:30: 24:70:22:80:dc:19:53:37:68:12:e1:8b:95:f5:60: 8f:ce:03:8a:ad:2a:a5:09:00:fe:ec:0c:5d:1d:87: fe:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:57:F1:53:E2:5E:38:D4:BE:DE:D9:EF:0C:A9:78:46:40:8F:B2:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b/863f4acb-612c-3dc9-8399-3195b4bdd44b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b.crl X509v3 Authority Key Identifier: keyid:69:ED:05:15:B3:4E:6B:49:E1:4A:A4:CE:3F:BF:7B:8F:A3:99:A1:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b.cer sbgp-ipAddrBlock: critical IPv4: 199.250.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:ea:74:e7:33:e9:29:fe:5c:79:77:12:9e:16:a6:e5:1e:16: 14:4a:cb:ab:79:82:30:b2:9d:86:91:c2:bf:2c:81:62:1f:4f: 3e:02:40:2f:46:dd:fc:a3:27:8e:58:f6:4a:64:26:2f:5b:42: b0:2e:ce:49:45:ca:20:54:dd:48:6c:bc:2a:64:99:01:d8:9f: 54:a5:2b:02:68:f8:26:ae:4f:e2:8d:76:9b:8f:f9:31:e5:b4: 82:fd:43:35:78:fe:56:8d:46:3d:2e:7d:4f:7a:93:d3:13:bd: 0e:73:15:f6:f5:2e:98:22:c3:bf:ce:be:c4:81:ff:2a:df:38: be:71:bf:fc:ab:53:cf:66:5b:e4:ed:da:65:ae:fd:7b:bd:77: d1:c1:8d:46:07:60:69:24:33:a2:87:0d:e3:dd:6d:a1:c3:70: 2a:7c:51:ca:dc:2d:f4:d4:e4:d3:58:2f:22:50:f6:dd:0e:55: e1:b5:03:7b:90:2e:90:de:af:36:08:d8:24:04:c6:0c:65:2c: 5e:c4:73:1a:7d:7c:d2:46:1d:ac:f4:ca:c3:5e:7a:6e:27:17: 5e:18:3a:5d:ec:2b:49:c3:9f:33:70:05:bc:53:b6:9c:cf:2e: 2f:21:37:c6:b4:29:21:9e:6b:df:b9:4c:6e:9e:3c:92:e0:3a: e9:f6:26:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8QHloFnKN1+XQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTA1ZDA3ZDItMTk5NC00ZjAyLWJlYmMtNGJkYzBhZWMx YzViMB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk ODBjZTc2MWItM2Q4MS00NjNiLTk1MmQtZDQ3MTkwZjU5MWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/GxJXyt3LVgxoUDEiDV9gYQlnF2Z1CDYl0v xSB/vM6BJfgVeBEsphkLPlfwm71/2nNH/uNf0+nLfEBD8T/Mz77JnZG+4zzp495w wNtQAy0rd/LBWBz/A5NABHZlysDEs+artKtYJbliWFAIFoO1HmT5DWlkXl25K6qa h+WrDLYKag82lqy2d0iYdH7MyjkWziDiaf13q51IgANLCvuU+7cQsbC0N7MCXxax TJtHd45YrixFV1zBvlEdvM3rjgz4WmscxTpuHkDGglzdX/6s+4eWrYvovFRLzcWu mbbdzjAkcCKA3BlTN2gS4YuV9WCPzgOKrSqlCQD+7AxdHYf+twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBxX8VPiXjjUvt7Z7wypeEZAj7KwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMDVk MDdkMi0xOTk0LTRmMDItYmViYy00YmRjMGFlYzFjNWIvODYzZjRhY2ItNjEyYy0z ZGM5LTgzOTktMzE5NWI0YmRkNDRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTA1ZDA3ZDItMTk5NC00ZjAyLWJl YmMtNGJkYzBhZWMxYzViL2EwNWQwN2QyLTE5OTQtNGYwMi1iZWJjLTRiZGMwYWVj MWM1Yi5jcmwwHwYDVR0jBBgwFoAUae0FFbNOa0nhSqTOP797j6OZoekwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hMDVkMDdkMi0xOTk0LTRmMDItYmViYy00YmRj MGFlYzFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/oQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHqdOcz6Sn+XHl3Ep4WpuUeFhRKy6t5gjCynYaRwr8sgWIfTz4CQC9G 3fyjJ45Y9kpkJi9bQrAuzklFyiBU3UhsvCpkmQHYn1SlKwJo+CauT+KNdpuP+THl tIL9QzV4/laNRj0ufU96k9MTvQ5zFfb1Lpgiw7/OvsSB/yrfOL5xv/yrU89mW+Tt 2mWu/Xu9d9HBjUYHYGkkM6KHDePdbaHDcCp8UcrcLfTU5NNYLyJQ9t0OVeG1A3uQ LpDerzYI2CQExgxlLF7Ecxp9fNJGHaz0ysNeem4nF14YOl3sK0nDnzNwBbxTtpzP Li8hN8a0KSGea9+5TG6ePJLgOun2Jsc= -----END CERTIFICATE-----Generated at Mon Aug 4 15:28:43 2025 by rpki-client