$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/aa5922ce-6574-311d-bc01-e66125efb577.roa File: aa5922ce-6574-311d-bc01-e66125efb577.roa (raw, json) Hash identifier: CSiM1UopWJi4IefgOox4igcT/ljU8BjKP6Gfa4tAnG4= Subject key identifier: 13:64:25:C8:39:AE:F8:B0:00:62:3A:0C:0A:F7:D8:99:41:A7:CC:72 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584A89A6209E65F1896CA68E6AE0 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/aa5922ce-6574-311d-bc01-e66125efb577.roa Signing time: Wed 16 Jul 2025 13:01:03 +0000 ROA not before: Wed 16 Jul 2025 13:01:03 +0000 ROA not after: Tue 14 Oct 2025 13:01:03 +0000 asID: 31898 IP address blocks: 199.87.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:89:a6:20:9e:65:f1:89:6c:a6:8e:6a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Jul 16 13:01:03 2025 GMT Not After : Oct 14 13:01:03 2025 GMT Subject: CN=bacdeddb-0e7b-4db4-b751-6880ee510160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c7:46:c2:2c:8b:ad:0f:ec:a4:b0:02:bb:fb: 13:b4:05:7a:ed:51:62:ea:a4:f7:0d:b7:46:ba:d4: 36:5f:dc:ea:d7:91:a7:9e:22:98:42:69:67:3e:c7: e0:9a:1b:f3:26:61:40:3f:b5:6b:96:6f:05:5f:d5: 5b:e1:ef:56:fd:ca:bf:37:21:f4:bb:64:9d:46:11: 3d:2a:e3:83:be:f0:4e:fe:35:f6:ba:9c:6a:73:0c: 5b:b5:b0:f6:ee:ef:e5:17:30:fc:a9:b5:28:37:47: be:22:50:bb:f6:94:57:c8:72:43:37:21:f7:ff:19: 18:c4:ca:56:a3:d6:fb:f0:6f:80:87:17:4b:82:78: 94:47:35:d7:2e:19:91:a1:c3:48:2f:67:c8:3d:4e: 30:bd:5e:5f:9f:34:0a:0f:1d:61:f7:2f:ce:23:0b: 2c:4f:9f:0b:1b:be:1d:4e:00:1f:d0:bd:6d:47:20: 70:90:52:56:5c:e6:72:32:a1:7e:99:00:6a:ba:d8: 91:5b:da:88:e8:57:68:ef:55:65:a5:d4:87:64:6a: 6f:24:b6:e7:77:b5:9e:59:3d:f4:c6:c9:76:e8:65: cb:db:76:56:aa:52:05:ac:d4:8b:9c:6a:42:98:5d: eb:e2:29:f5:11:66:2b:30:35:6c:7c:df:c4:2e:f5: b2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:64:25:C8:39:AE:F8:B0:00:62:3A:0C:0A:F7:D8:99:41:A7:CC:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/aa5922ce-6574-311d-bc01-e66125efb577.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 199.87.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cc:49:14:23:3b:53:4a:ef:48:57:4d:6b:f0:1f:53:61:82:2c: e4:69:81:7e:5c:b3:79:00:1b:b8:79:42:3c:01:93:6e:8f:7b: 3f:b0:12:4f:06:45:64:2e:b2:54:61:48:11:88:b9:ee:82:0d: a6:5e:c6:cb:d3:46:c6:3f:42:ce:e7:ea:d0:fd:a3:0b:36:65: 17:20:41:1a:93:86:d1:8e:80:81:30:66:fd:f8:6d:01:3f:4c: a9:d5:e6:a2:de:ea:63:e4:51:c1:ab:e1:fb:34:a0:48:ae:b5: 16:4a:9d:c8:e2:56:72:8b:b9:ff:aa:bf:24:97:3b:02:1f:e3: f9:38:90:79:7c:cb:e7:96:e5:ca:e4:80:40:7f:9b:df:b4:52: d0:0a:77:56:12:e0:e5:93:35:37:3b:f9:b9:94:58:65:e0:09: a6:69:28:6e:50:27:b0:a1:9d:8e:d5:02:4f:be:bb:d7:91:e8: dd:d4:eb:1f:36:94:7b:d6:61:b1:3a:b8:bf:37:cc:cb:71:b1: 8d:a4:b6:5e:6c:f7:2d:29:c4:ee:64:20:72:2b:5d:1a:a8:31: d0:f1:fb:63:cf:5e:9d:87:9f:91:d2:1b:f1:73:8f:c7:c3:82: 13:8b:0a:1f:c4:3d:5f:fc:38:71:8c:50:74:5d:cf:a8:5f:6f: a7:3b:9b:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqJpiCeZfGJbKaOauAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDcxNjEzMDEwM1oXDTI1MTAxNDEzMDEwM1owLzEtMCsGA1UEAxMk YmFjZGVkZGItMGU3Yi00ZGI0LWI3NTEtNjg4MGVlNTEwMTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsdGwiyLrQ/spLACu/sTtAV67VFi6qT3DbdG utQ2X9zq15GnniKYQmlnPsfgmhvzJmFAP7Vrlm8FX9Vb4e9W/cq/NyH0u2SdRhE9 KuODvvBO/jX2upxqcwxbtbD27u/lFzD8qbUoN0e+IlC79pRXyHJDNyH3/xkYxMpW o9b78G+AhxdLgniURzXXLhmRocNIL2fIPU4wvV5fnzQKDx1h9y/OIwssT58LG74d TgAf0L1tRyBwkFJWXOZyMqF+mQBqutiRW9qI6Fdo71VlpdSHZGpvJLbnd7WeWT30 xsl26GXL23ZWqlIFrNSLnGpCmF3r4in1EWYrMDVsfN/ELvWyuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNkJcg5rviwAGI6DAr32JlBp8xyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvYWE1OTIyY2UtNjU3NC0z MTFkLWJjMDEtZTY2MTI1ZWZiNTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1d4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMxJFCM7U0rvSFdNa/AfU2GCLORpgX5cs3kAG7h5QjwBk26Pez+wEk8G RWQuslRhSBGIue6CDaZexsvTRsY/Qs7n6tD9ows2ZRcgQRqThtGOgIEwZv34bQE/ TKnV5qLe6mPkUcGr4fs0oEiutRZKncjiVnKLuf+qvySXOwIf4/k4kHl8y+eW5crk gEB/m9+0UtAKd1YS4OWTNTc7+bmUWGXgCaZpKG5QJ7ChnY7VAk++u9eR6N3U6x82 lHvWYbE6uL83zMtxsY2ktl5s9y0pxO5kIHIrXRqoMdDx+2PPXp2Hn5HSG/Fzj8fD ghOLCh/EPV/8OHGMUHRdz6hfb6c7mzg= -----END CERTIFICATE-----Generated at Thu Aug 7 00:46:03 2025 by rpki-client