$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/ad105cfe-de86-3cf7-aa82-01c4c3003f6e.roa File: ad105cfe-de86-3cf7-aa82-01c4c3003f6e.roa (raw, json) Hash identifier: ruM19z0lqT2sIswtxqN7X5na/ntuMkMjKdjjLA9Zx5M= Subject key identifier: CC:3D:12:3A:E1:1D:96:9C:12:02:1C:EC:F0:1A:34:22:C0:F7:7D:E2 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584A88409E13F02663EA34138B80 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/ad105cfe-de86-3cf7-aa82-01c4c3003f6e.roa Signing time: Wed 16 Jul 2025 01:00:49 +0000 ROA not before: Wed 16 Jul 2025 01:00:49 +0000 ROA not after: Tue 14 Oct 2025 01:00:49 +0000 asID: 31898 IP address blocks: 199.87.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:88:40:9e:13:f0:26:63:ea:34:13:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Jul 16 01:00:49 2025 GMT Not After : Oct 14 01:00:49 2025 GMT Subject: CN=d36342bc-3500-4785-b0d0-00e27af72b7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:64:6b:9d:62:6f:f0:08:a3:1d:5b:55:cf:54: 81:ea:99:3c:97:f2:5a:69:ed:20:00:e6:a5:a7:66: df:fd:cb:2a:39:6d:a1:19:57:3b:94:ff:9e:51:8b: fe:f7:96:30:53:39:c0:15:d8:46:39:42:c4:43:07: 89:29:12:59:10:7b:8a:a7:c0:87:57:13:78:a3:d1: a6:24:23:fd:1a:c1:48:0b:c7:cf:00:c1:c4:56:aa: 70:62:58:89:b1:81:77:da:c6:ff:da:90:c6:ca:56: f3:cf:34:62:b8:11:bc:62:61:6d:5e:36:99:ec:51: 22:a8:e0:04:e8:34:b6:c3:6b:c7:7b:d8:84:ff:9b: 10:03:8b:42:ac:be:7e:6e:23:33:c9:5a:b5:09:93: 11:49:96:bd:91:c6:9d:64:78:28:21:88:c1:f4:5b: 84:6f:20:7c:8c:c0:52:d9:92:cd:ab:00:db:43:3b: fe:15:5e:2f:df:12:1b:72:30:fe:ef:d0:49:c0:f3: 69:e1:b7:53:ae:33:f1:4d:6c:ef:a6:96:38:95:b2: f9:84:f8:d6:48:f4:48:a3:b5:1c:6d:a6:c9:d3:1e: 3c:ea:d4:77:bf:c2:bd:35:90:09:b5:5e:53:a8:eb: 07:70:a7:28:4c:16:c7:02:fd:12:78:cb:0f:70:78: 20:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:3D:12:3A:E1:1D:96:9C:12:02:1C:EC:F0:1A:34:22:C0:F7:7D:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/ad105cfe-de86-3cf7-aa82-01c4c3003f6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 199.87.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:fc:ec:64:9b:db:a1:4a:1f:dc:99:8b:36:59:87:dd:a8:97: 36:7d:30:41:1d:f5:d9:ba:c5:7c:9e:83:de:e8:92:c6:fd:70: 47:38:9f:b6:c7:a7:f5:04:72:c9:8c:a6:39:f4:74:17:18:c4: ed:04:96:0d:7b:23:1b:48:83:9b:ff:0d:a6:3b:b4:d3:07:53: 38:fd:e1:1d:27:3e:ee:ba:8f:e7:4d:6c:55:aa:a6:90:47:88: 82:fc:b0:1a:e7:9a:64:e1:da:c8:33:cf:b8:02:61:b8:c6:a1: ed:ce:e5:74:9c:6e:fa:89:fd:49:3d:85:a6:36:77:79:ce:94: 45:d5:39:5d:9c:95:d5:75:d0:5d:d0:64:bd:6c:63:a9:00:d1: 0c:a6:98:50:74:44:01:04:10:00:75:50:83:53:e2:d1:9c:aa: a1:90:c1:41:50:68:c6:1d:ee:a8:d9:ae:84:01:8b:1e:5a:a3: 8d:61:a4:78:24:06:94:b7:31:08:f2:e1:09:61:65:b4:17:d5: b7:e1:6b:de:57:5f:b8:44:e8:13:d2:d5:e6:f8:b3:10:0e:16: 09:f5:9d:b2:b9:4a:63:ef:9c:a6:f6:3b:f1:95:ac:74:c6:4d: c9:04:76:16:eb:32:ad:7b:1b:9a:61:7b:47:94:5e:1d:73:45: 40:08:d3:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqIQJ4T8CZj6jQTi4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDcxNjAxMDA0OVoXDTI1MTAxNDAxMDA0OVowLzEtMCsGA1UEAxMk ZDM2MzQyYmMtMzUwMC00Nzg1LWIwZDAtMDBlMjdhZjcyYjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGRrnWJv8AijHVtVz1SB6pk8l/Jaae0gAOal p2bf/csqOW2hGVc7lP+eUYv+95YwUznAFdhGOULEQweJKRJZEHuKp8CHVxN4o9Gm JCP9GsFIC8fPAMHEVqpwYliJsYF32sb/2pDGylbzzzRiuBG8YmFtXjaZ7FEiqOAE 6DS2w2vHe9iE/5sQA4tCrL5+biMzyVq1CZMRSZa9kcadZHgoIYjB9FuEbyB8jMBS 2ZLNqwDbQzv+FV4v3xIbcjD+79BJwPNp4bdTrjPxTWzvppY4lbL5hPjWSPRIo7Uc babJ0x486tR3v8K9NZAJtV5TqOsHcKcoTBbHAv0SeMsPcHgglQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMw9EjrhHZacEgIc7PAaNCLA933iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvYWQxMDVjZmUtZGU4Ni0z Y2Y3LWFhODItMDFjNGMzMDAzZjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1d5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ/87GSb26FKH9yZizZZh92olzZ9MEEd9dm6xXyeg97oksb9cEc4n7bH p/UEcsmMpjn0dBcYxO0Elg17IxtIg5v/DaY7tNMHUzj94R0nPu66j+dNbFWqppBH iIL8sBrnmmTh2sgzz7gCYbjGoe3O5XScbvqJ/Uk9haY2d3nOlEXVOV2cldV10F3Q ZL1sY6kA0QymmFB0RAEEEAB1UINT4tGcqqGQwUFQaMYd7qjZroQBix5ao41hpHgk BpS3MQjy4QlhZbQX1bfha95XX7hE6BPS1eb4sxAOFgn1nbK5SmPvnKb2O/GVrHTG TckEdhbrMq17G5phe0eUXh1zRUAI068= -----END CERTIFICATE-----Generated at Thu Aug 7 00:31:36 2025 by rpki-client