$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a2a7cbf6-8905-3efe-a97a-54c8980dcfa9.roa File: a2a7cbf6-8905-3efe-a97a-54c8980dcfa9.roa (raw, json) Hash identifier: W3aWRm2qRiD0uzAWUi/qAxRssFWbKGPMW7sXJrT92wc= Subject key identifier: 20:F2:99:59:2A:32:EF:9C:B1:4C:F0:D3:0A:05:AA:BE:99:2E:6A:04 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584A88409E26DEDA87338AD08560 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a2a7cbf6-8905-3efe-a97a-54c8980dcfa9.roa Signing time: Wed 16 Jul 2025 01:00:49 +0000 ROA not before: Wed 16 Jul 2025 01:00:49 +0000 ROA not after: Tue 14 Oct 2025 01:00:49 +0000 asID: 31898 IP address blocks: 199.36.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:88:40:9e:26:de:da:87:33:8a:d0:85:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Jul 16 01:00:49 2025 GMT Not After : Oct 14 01:00:49 2025 GMT Subject: CN=1d38ddc2-cd50-49e8-8aa3-1d30ce2ebe00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:de:71:49:76:ec:91:93:6e:11:91:c7:4f:ba: 9c:da:c2:94:15:e0:88:1c:6d:cb:fe:7a:4f:be:6f: 6e:2d:80:d1:1c:f0:bd:73:a4:e0:41:c8:15:05:1a: 1a:34:ae:31:9d:4f:4e:c0:49:9d:1c:bd:3c:4e:b5: 63:43:3d:89:f7:d3:68:92:cc:dc:24:f0:ff:e6:0d: d8:69:cd:15:17:49:cd:3c:75:76:7d:f7:73:cb:12: c1:1f:86:a7:b4:82:29:a7:c1:17:14:a3:94:fb:1a: 83:f3:db:68:bd:08:85:97:81:f4:b4:5a:b0:df:a2: eb:fa:ec:69:3d:7c:a9:84:41:4b:e5:5e:f5:61:7c: 92:64:ed:e3:67:85:8f:eb:ff:ce:6c:4b:5d:40:7a: 97:3f:1e:d6:02:ff:c7:4d:35:e8:83:3a:73:46:d7: 13:c7:06:83:5f:72:31:bf:86:b0:3a:6a:ae:f2:0d: 3d:12:34:b5:fd:fb:9a:f5:43:52:33:03:20:09:c3: 1b:48:b8:21:cd:7d:de:f9:ac:e7:81:f5:56:c4:e8: f3:e2:b0:14:4b:38:05:51:1d:eb:ef:43:04:92:e8: b3:d0:c1:7d:09:63:02:ce:13:41:b2:5e:27:10:1d: 72:f0:af:8e:bf:d9:ef:3e:ed:77:87:6a:f1:e3:78: 7a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:F2:99:59:2A:32:EF:9C:B1:4C:F0:D3:0A:05:AA:BE:99:2E:6A:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a2a7cbf6-8905-3efe-a97a-54c8980dcfa9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 199.36.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:fd:fe:8f:c9:74:5b:bd:03:4b:83:62:9e:3f:b6:47:4a:f0: 1e:4d:0e:dd:20:48:4a:4c:9f:52:19:3b:7d:07:4f:c6:23:5d: d2:23:61:12:83:96:41:8e:71:5c:05:bc:e2:c3:e3:13:c8:b0: d6:96:84:19:24:43:97:52:fa:5f:28:20:9a:88:48:d8:54:10: 03:65:b0:a2:ae:bf:b0:b4:f0:d6:72:5f:e2:1c:8e:d4:cd:fd: 12:65:b4:50:8d:92:4a:9d:15:b5:cf:80:db:2f:69:88:03:76: c8:6a:2a:4b:28:f4:4c:7d:ea:e6:f7:0d:b2:cb:a2:ac:41:cd: 48:54:b3:41:df:f7:c4:7e:b9:44:77:a4:ab:0e:67:ce:0a:e0: 39:b6:c4:48:13:3e:71:26:6f:cd:10:c9:cb:1f:34:d2:5c:7d: 6e:dd:75:90:11:94:70:ed:8b:87:c8:e6:81:9b:84:9f:47:0c: 96:54:b3:f9:76:b6:28:b6:b9:c3:25:39:72:6f:00:96:cf:ff: c3:f4:bb:cc:1f:a7:be:96:79:59:a3:cc:23:a4:02:13:e6:a6: 65:44:f4:23:03:5b:5f:21:ca:e3:22:7c:f7:27:87:90:d6:ef: 58:c2:c1:10:f4:45:53:05:61:a9:89:d9:fe:7d:00:7a:8a:87: a2:13:8a:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqIQJ4m3tqHM4rQhWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDcxNjAxMDA0OVoXDTI1MTAxNDAxMDA0OVowLzEtMCsGA1UEAxMk MWQzOGRkYzItY2Q1MC00OWU4LThhYTMtMWQzMGNlMmViZTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoN5xSXbskZNuEZHHT7qc2sKUFeCIHG3L/npP vm9uLYDRHPC9c6TgQcgVBRoaNK4xnU9OwEmdHL08TrVjQz2J99NokszcJPD/5g3Y ac0VF0nNPHV2ffdzyxLBH4antIIpp8EXFKOU+xqD89tovQiFl4H0tFqw36Lr+uxp PXyphEFL5V71YXySZO3jZ4WP6//ObEtdQHqXPx7WAv/HTTXogzpzRtcTxwaDX3Ix v4awOmqu8g09EjS1/fua9UNSMwMgCcMbSLghzX3e+azngfVWxOjz4rAUSzgFUR3r 70MEkuiz0MF9CWMCzhNBsl4nEB1y8K+Ov9nvPu13h2rx43h6dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCDymVkqMu+csUzw0woFqr6ZLmoEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvYTJhN2NiZjYtODkwNS0z ZWZlLWE5N2EtNTRjODk4MGRjZmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyT5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACH9/o/JdFu9A0uDYp4/tkdK8B5NDt0gSEpMn1IZO30HT8YjXdIjYRKD lkGOcVwFvOLD4xPIsNaWhBkkQ5dS+l8oIJqISNhUEANlsKKuv7C08NZyX+IcjtTN /RJltFCNkkqdFbXPgNsvaYgDdshqKkso9Ex96ub3DbLLoqxBzUhUs0Hf98R+uUR3 pKsOZ84K4Dm2xEgTPnEmb80QycsfNNJcfW7ddZARlHDti4fI5oGbhJ9HDJZUs/l2 tii2ucMlOXJvAJbP/8P0u8wfp76WeVmjzCOkAhPmpmVE9CMDW18hyuMifPcnh5DW 71jCwRD0RVMFYamJ2f59AHqKh6ITig0= -----END CERTIFICATE-----Generated at Thu Aug 7 07:30:28 2025 by rpki-client