$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/e9c12cb6-83c6-36c7-9163-89ab2f55a7fa.roa File: e9c12cb6-83c6-36c7-9163-89ab2f55a7fa.roa (raw, json) Hash identifier: g2khZLS6t4UoQ4i70vzlTyZTf4gXyK+jXCpsXTQ4gnQ= Subject key identifier: 67:3E:2F:76:FD:79:BD:AE:2A:97:F5:04:56:9F:0E:44:F3:A1:78:05 Certificate issuer: /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Certificate serial: 010D0C9F4328584AB650EABD54D151CB06AEC000 Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/e9c12cb6-83c6-36c7-9163-89ab2f55a7fa.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 12129 IP address blocks: 199.231.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:50:ea:bd:54:d1:51:cb:06:ae:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=15e68147-d75a-4fdd-95f5-f320d99c6e87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:7d:f0:3d:c0:d5:f3:c7:30:f9:50:b8:a6:cc: 92:2b:57:b8:d8:29:38:6c:20:54:f2:80:66:2f:2a: 0f:25:99:12:b4:28:d9:42:e9:78:c0:87:cc:09:6a: 22:a8:db:8f:73:8a:6c:bd:ff:57:a8:bd:45:f4:fd: 03:45:77:6f:a3:8d:83:35:1a:f9:8c:07:ea:1d:8e: e9:80:f6:1e:6f:56:eb:9c:4c:80:01:b6:41:a5:84: b2:87:53:2a:14:b2:5d:8c:ff:ed:98:e2:f9:84:ee: f6:83:01:71:05:b3:70:5d:d0:f3:d0:ad:c8:46:8a: 00:db:2c:ba:16:bc:8b:1f:25:04:42:9a:d7:e5:84: c8:3f:1a:7d:03:06:7f:9a:c0:87:2e:10:3b:af:52: 3b:f5:d5:d3:cf:83:5a:71:b1:b9:12:aa:a5:9b:6d: d6:2f:a3:49:7e:f1:7e:6e:ae:6e:35:8d:39:a7:f8: 4d:de:26:cd:2c:61:32:15:3a:c3:91:a5:65:3a:4e: e6:cf:8e:44:8f:4e:8c:4b:7d:b0:7c:8d:a4:5a:be: c4:1f:6e:48:88:5d:22:16:9b:95:54:e8:04:c2:1f: a6:26:53:6b:25:bf:56:0f:59:75:a9:e4:c8:1c:5d: bb:ce:74:85:1b:b4:d9:ce:f1:78:6c:6a:dd:04:81: 3b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:3E:2F:76:FD:79:BD:AE:2A:97:F5:04:56:9F:0E:44:F3:A1:78:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/e9c12cb6-83c6-36c7-9163-89ab2f55a7fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl X509v3 Authority Key Identifier: keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer sbgp-ipAddrBlock: critical IPv4: 199.231.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:45:7b:57:ae:bd:69:91:82:74:1a:50:33:96:b3:67:67:2b: 9d:c4:dd:bc:49:1e:eb:0a:75:47:25:e2:e8:d0:90:f0:82:7d: 5b:ca:3d:db:e3:27:2b:c7:db:ed:63:e8:fb:23:79:c1:25:84: a8:83:0c:52:1b:8b:56:50:1a:f8:fb:5b:3b:28:0b:f9:dd:58: 26:8c:36:38:42:f5:64:7e:05:0f:be:b1:a3:6e:a3:93:ad:80: e8:68:47:c9:f7:73:92:73:84:e5:c3:e5:bc:95:26:60:3a:69: 67:04:e6:59:5b:c9:6e:fb:ad:f4:b3:32:91:15:56:91:dc:fa: 62:e2:06:d8:0d:ee:c2:9b:8d:32:34:35:86:c3:98:ea:a2:c0: d1:b3:3f:e2:e7:36:43:80:5d:45:7b:23:33:5d:ec:36:dc:77: 46:67:75:2d:ab:a5:bd:40:12:e5:c9:20:cb:bf:9d:3d:90:84: 3c:78:c2:43:a6:4a:90:5d:e0:5c:91:ca:a9:2d:05:61:08:fd: e6:fb:e4:a7:ce:0f:1c:1e:53:ef:0d:5f:51:06:47:50:6a:bf: e6:20:98:44:fe:c1:9c:28:34:8a:4f:a4:2a:81:17:3a:42:0f: fe:5e:77:f1:3d:9b:3d:8f:da:6c:ea:bc:1e:6f:69:53:34:a5: 92:7a:aa:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq2UOq9VNFRywauwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyNjk3NmUtZmJmYi00YWQ4LWEyOGEtYTI1ZjViMDY3 MWRlMB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk MTVlNjgxNDctZDc1YS00ZmRkLTk1ZjUtZjMyMGQ5OWM2ZTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkH3wPcDV88cw+VC4psySK1e42Ck4bCBU8oBm LyoPJZkStCjZQul4wIfMCWoiqNuPc4psvf9XqL1F9P0DRXdvo42DNRr5jAfqHY7p gPYeb1brnEyAAbZBpYSyh1MqFLJdjP/tmOL5hO72gwFxBbNwXdDz0K3IRooA2yy6 FryLHyUEQprX5YTIPxp9AwZ/msCHLhA7r1I79dXTz4NacbG5Eqqlm23WL6NJfvF+ bq5uNY05p/hN3ibNLGEyFTrDkaVlOk7mz45Ej06MS32wfI2kWr7EH25IiF0iFpuV VOgEwh+mJlNrJb9WD1l1qeTIHF27znSFG7TZzvF4bGrdBIE7gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGc+L3b9eb2uKpf1BFafDkTzoXgFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2 OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIwNjcxZGUvZTljMTJjYjYtODNjNi0z NmM3LTkxNjMtODlhYjJmNTVhN2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyNjk3NmUtZmJmYi00YWQ4LWEy OGEtYTI1ZjViMDY3MWRlL2M0MjY5NzZlLWZiZmItNGFkOC1hMjhhLWEyNWY1YjA2 NzFkZS5jcmwwHwYDVR0jBBgwFoAUUDCuGBTUosBlcB/1dCB21IYNZG8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVm NWIwNjcxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx+c0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9Fe1euvWmRgnQaUDOWs2dnK53E3bxJHusKdUcl4ujQkPCCfVvKPdvj JyvH2+1j6PsjecElhKiDDFIbi1ZQGvj7WzsoC/ndWCaMNjhC9WR+BQ++saNuo5Ot gOhoR8n3c5JzhOXD5byVJmA6aWcE5llbyW77rfSzMpEVVpHc+mLiBtgN7sKbjTI0 NYbDmOqiwNGzP+LnNkOAXUV7IzNd7Dbcd0ZndS2rpb1AEuXJIMu/nT2QhDx4wkOm SpBd4FyRyqktBWEI/eb75KfODxweU+8NX1EGR1Bqv+YgmET+wZwoNIpPpCqBFzpC D/5ed/E9mz2P2mzqvB5vaVM0pZJ6qgY= -----END CERTIFICATE-----Generated at Mon Aug 4 14:50:12 2025 by rpki-client