$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/aa5922ce-6574-311d-bc01-e66125efb577.roa File: aa5922ce-6574-311d-bc01-e66125efb577.roa (raw, json) Hash identifier: 8RkhqG/9OETmbaofxNMvqxa1/toR0tQ3tAvYn4vpE38= Subject key identifier: 47:EB:58:1F:9A:48:D0:B4:01:36:96:AE:F8:20:21:3D:8B:49:65:BC Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584B6A61F081A7B20B9CE588B480 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/aa5922ce-6574-311d-bc01-e66125efb577.roa Signing time: Sun 05 Oct 2025 01:00:32 +0000 ROA not before: Sun 05 Oct 2025 01:00:32 +0000 ROA not after: Sat 03 Jan 2026 02:00:32 +0000 asID: 31898 IP address blocks: 199.87.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6a:61:f0:81:a7:b2:0b:9c:e5:88:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Oct 5 01:00:32 2025 GMT Not After : Jan 3 02:00:32 2026 GMT Subject: CN=4799bc41-78f5-4c08-aebf-ab38883424c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ae:69:0c:16:3f:24:ef:60:6f:42:22:4a:d8: f2:e8:e8:4e:86:37:83:b1:85:17:b5:c7:fd:07:1d: 48:fc:e0:e5:a7:b2:29:e2:53:38:e4:fe:7f:70:b3: 66:2b:6a:e1:aa:b4:15:0e:d0:3e:66:ea:c9:da:40: b3:da:ca:f1:ed:4c:52:c5:5c:df:b5:18:2f:37:fc: 6b:ea:c2:68:95:6a:d8:54:57:27:d0:0b:dc:3c:8b: ea:ba:9a:aa:50:cf:2c:00:ae:2b:8d:41:2a:c3:6e: 37:2e:47:ff:5f:02:d0:2d:e7:23:61:86:55:ce:c6: 34:d7:85:16:4e:5c:84:59:c5:8b:d1:c2:0c:e8:9d: 3a:53:c8:ce:2f:ae:55:06:48:15:49:8d:8e:1f:0b: 34:48:bc:37:9d:df:35:db:b8:57:b8:9b:c6:a6:6f: fb:6b:cd:8f:17:e5:ab:d6:b9:76:af:0d:76:b5:f8: 7d:a1:c7:60:55:4f:2a:a3:4a:69:c7:27:a2:d9:24: 64:36:f7:e8:6f:c5:0f:51:1c:22:dd:ce:3a:a0:5a: 80:fe:85:1c:5a:ad:c3:02:a2:18:0d:78:41:53:f9: 7a:1f:39:a2:b5:ce:78:af:4c:f4:b4:33:5a:34:5e: cc:10:07:3d:b1:5f:ea:7d:ac:f4:dc:06:97:90:29: e8:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:EB:58:1F:9A:48:D0:B4:01:36:96:AE:F8:20:21:3D:8B:49:65:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/aa5922ce-6574-311d-bc01-e66125efb577.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 199.87.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:51:6f:21:fb:48:4d:7a:78:88:e7:e4:72:f7:6e:46:37:45: 18:f7:ed:34:8a:0e:ec:b0:6c:a6:57:86:09:8b:ce:3a:14:60: e6:34:cc:08:3d:33:bd:a9:c2:e0:69:7a:1b:4e:99:e3:29:d1: 14:52:08:62:d6:87:28:17:aa:c2:cb:67:75:a8:c8:38:ca:d1: 34:eb:1d:e4:d5:9d:8d:5d:61:6e:d2:cb:39:ea:df:2d:19:54: e2:3b:88:45:e6:58:51:36:e6:d0:f3:e0:3e:35:cb:c0:5f:ad: 2f:c2:83:f5:60:33:b9:42:71:73:cc:42:b4:50:c2:bd:eb:8d: 37:26:1c:13:0e:4e:61:c3:39:0a:25:c5:af:d6:99:19:85:44: 4d:2f:1a:85:e6:11:cb:c4:07:d9:df:1c:13:41:98:23:a0:1d: b4:13:c9:96:45:fe:fc:84:eb:9d:c0:fb:fe:15:ef:dc:b3:a1: 9c:d0:eb:60:30:14:b3:33:ae:e8:97:7b:1c:91:b1:1f:eb:44: d9:0e:24:ce:86:b4:4b:8f:b7:ab:81:2c:df:56:a0:1b:a7:da: 50:b2:1a:fa:fe:e0:33:79:13:c5:84:59:a7:4b:65:ce:93:53: 62:b1:61:89:8c:b1:41:9d:90:65:3e:79:0a:3d:2c:4c:9b:75: 87:b2:a5:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtqYfCBp7ILnOWItIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MTAwNTAxMDAzMloXDTI2MDEwMzAyMDAzMlowLzEtMCsGA1UEAxMk NDc5OWJjNDEtNzhmNS00YzA4LWFlYmYtYWIzODg4MzQyNGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiK5pDBY/JO9gb0IiStjy6OhOhjeDsYUXtcf9 Bx1I/ODlp7Ip4lM45P5/cLNmK2rhqrQVDtA+ZurJ2kCz2srx7UxSxVzftRgvN/xr 6sJolWrYVFcn0AvcPIvqupqqUM8sAK4rjUEqw243Lkf/XwLQLecjYYZVzsY014UW TlyEWcWL0cIM6J06U8jOL65VBkgVSY2OHws0SLw3nd8127hXuJvGpm/7a82PF+Wr 1rl2rw12tfh9ocdgVU8qo0ppxyei2SRkNvfob8UPURwi3c46oFqA/oUcWq3DAqIY DXhBU/l6Hzmitc54r0z0tDNaNF7MEAc9sV/qfaz03AaXkCnohwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEfrWB+aSNC0ATaWrvggIT2LSWW8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvYWE1OTIyY2UtNjU3NC0z MTFkLWJjMDEtZTY2MTI1ZWZiNTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1d4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAlRbyH7SE16eIjn5HL3bkY3RRj37TSKDuywbKZXhgmLzjoUYOY0zAg9 M72pwuBpehtOmeMp0RRSCGLWhygXqsLLZ3WoyDjK0TTrHeTVnY1dYW7Syznq3y0Z VOI7iEXmWFE25tDz4D41y8BfrS/Cg/VgM7lCcXPMQrRQwr3rjTcmHBMOTmHDOQol xa/WmRmFRE0vGoXmEcvEB9nfHBNBmCOgHbQTyZZF/vyE653A+/4V79yzoZzQ62Aw FLMzruiXexyRsR/rRNkOJM6GtEuPt6uBLN9WoBun2lCyGvr+4DN5E8WEWadLZc6T U2KxYYmMsUGdkGU+eQo9LEybdYeypf4= -----END CERTIFICATE-----Generated at Wed Nov 5 13:43:42 2025 by rpki-client