$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306/aa90e09e-8113-3e33-beae-1a3b47cdc2e8.roa File: aa90e09e-8113-3e33-beae-1a3b47cdc2e8.roa (raw, json) Hash identifier: izZmHBQ2DhG9zkJ6yKvERa0qflHSFOQTZtNznczwi4Q= Subject key identifier: 68:56:A1:85:E4:26:6F:46:22:F9:E8:BD:65:21:64:48:94:F4:1A:CF Certificate issuer: /CN=4f12be01-5f55-4434-8f8a-921808f7c306 Certificate serial: 010D0C9F4328584AB0C23BAE225720F46E303540 Authority key identifier: B4:BB:F7:BC:58:DE:FC:2F:5D:68:DD:B2:64:D8:DB:59:1A:29:10:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306/aa90e09e-8113-3e33-beae-1a3b47cdc2e8.roa Signing time: Wed 30 Jul 2025 13:14:23 +0000 ROA not before: Wed 30 Jul 2025 13:14:23 +0000 ROA not after: Tue 28 Oct 2025 13:14:23 +0000 asID: 62582 IP address blocks: 199.5.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306/4f12be01-5f55-4434-8f8a-921808f7c306.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306/4f12be01-5f55-4434-8f8a-921808f7c306.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b0:c2:3b:ae:22:57:20:f4:6e:30:35:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f12be01-5f55-4434-8f8a-921808f7c306 Validity Not Before: Jul 30 13:14:23 2025 GMT Not After : Oct 28 13:14:23 2025 GMT Subject: CN=48e5ff14-2c72-4948-81e2-ac73eba1f2cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:89:c9:a6:ea:0f:df:2a:85:d9:4a:3d:8c:ba: 01:ed:c8:5b:77:7b:f1:b8:51:2a:e6:00:47:ee:75: c8:94:53:9d:86:56:f1:b1:d6:8b:04:d3:ee:59:34: b0:b5:81:4d:e0:3c:c2:30:5c:c7:12:19:e4:5b:e6: 3e:50:2f:4e:68:20:96:81:1d:64:f3:ef:fe:b0:1c: cf:49:2e:bc:03:43:69:0b:fb:15:a4:3c:bd:a8:13: 54:91:bf:99:26:81:57:d8:55:a6:ca:2c:67:79:3d: c4:60:a8:29:a9:39:4f:9b:a4:eb:ee:1d:d4:ac:2f: 2f:a5:b1:53:13:8d:14:a1:4d:af:55:a4:5e:92:9d: 3e:e1:d7:5b:65:59:19:a7:f3:ce:f0:5b:6f:8f:37: 14:10:78:2a:b5:fe:bf:32:85:a7:c3:5c:60:81:cc: 02:29:3c:10:d3:3b:17:b5:59:fd:a7:d5:fd:65:dd: 27:94:7b:c4:46:1f:82:35:6b:47:35:8b:1f:d4:1b: 08:2a:f0:fb:0c:70:b4:1e:ce:36:70:90:93:b8:20: 96:8d:17:f4:f0:f4:69:33:a9:61:74:ce:01:cc:c0: ab:ce:5c:17:86:72:38:b8:89:82:21:16:c9:02:38: 91:88:0e:e4:92:d3:32:7c:47:8f:03:7b:77:15:a3: 6a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:56:A1:85:E4:26:6F:46:22:F9:E8:BD:65:21:64:48:94:F4:1A:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306/aa90e09e-8113-3e33-beae-1a3b47cdc2e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306/4f12be01-5f55-4434-8f8a-921808f7c306.crl X509v3 Authority Key Identifier: keyid:B4:BB:F7:BC:58:DE:FC:2F:5D:68:DD:B2:64:D8:DB:59:1A:29:10:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306.cer sbgp-ipAddrBlock: critical IPv4: 199.5.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:52:6b:1f:15:35:27:ff:23:06:1b:e2:0f:f2:aa:10:0a:78: 65:a2:2e:ee:6d:da:30:f8:4b:57:94:88:d6:25:18:18:73:6f: d6:a5:9c:5b:56:e7:6d:15:1e:e0:0d:b7:5f:98:9a:3c:af:d6: 0e:a8:32:1d:9f:b2:bc:6e:a3:30:bf:f9:d5:ed:6c:13:60:85: b3:a3:84:f7:72:74:8d:e0:00:66:32:6a:17:e0:e7:95:71:06: 49:de:09:96:aa:0a:7a:1f:6d:7e:ec:8b:43:5e:a7:61:23:19: 50:7c:8c:b6:af:8e:e5:d5:01:28:9a:0b:10:ae:3c:a7:2e:9c: 6b:95:c7:d9:6f:50:c8:08:98:1a:f8:87:3a:37:03:b1:e5:cd: 12:d6:2e:5d:f3:ce:a0:43:e6:db:89:40:ca:04:f2:a4:6a:d8: 73:df:85:3e:65:82:f0:f3:86:bc:15:41:6b:c8:07:b0:66:7e: 67:ee:d5:16:e9:dc:2d:d2:5d:6d:bc:c6:b0:f3:70:87:fc:d8: e3:53:a6:d6:07:d2:37:f9:22:b9:67:e3:c2:4d:b3:f2:e1:c8: 0c:8c:5b:cd:22:64:9a:6c:0f:f5:6a:e5:34:67:3d:fc:1d:0d: 6d:81:e2:05:55:94:69:88:ea:85:c5:53:10:99:89:89:aa:5f: af:41:e8:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqwwjuuIlcg9G4wNUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxMmJlMDEtNWY1NS00NDM0LThmOGEtOTIxODA4Zjdj MzA2MB4XDTI1MDczMDEzMTQyM1oXDTI1MTAyODEzMTQyM1owLzEtMCsGA1UEAxMk NDhlNWZmMTQtMmM3Mi00OTQ4LTgxZTItYWM3M2ViYTFmMmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvInJpuoP3yqF2Uo9jLoB7chbd3vxuFEq5gBH 7nXIlFOdhlbxsdaLBNPuWTSwtYFN4DzCMFzHEhnkW+Y+UC9OaCCWgR1k8+/+sBzP SS68A0NpC/sVpDy9qBNUkb+ZJoFX2FWmyixneT3EYKgpqTlPm6Tr7h3UrC8vpbFT E40UoU2vVaRekp0+4ddbZVkZp/PO8FtvjzcUEHgqtf6/MoWnw1xggcwCKTwQ0zsX tVn9p9X9Zd0nlHvERh+CNWtHNYsf1BsIKvD7DHC0Hs42cJCTuCCWjRf08PRpM6lh dM4BzMCrzlwXhnI4uImCIRbJAjiRiA7kktMyfEePA3t3FaNq0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGhWoYXkJm9GIvnovWUhZEiU9BrPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80ZjEy YmUwMS01ZjU1LTQ0MzQtOGY4YS05MjE4MDhmN2MzMDYvYWE5MGUwOWUtODExMy0z ZTMzLWJlYWUtMWEzYjQ3Y2RjMmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNGYxMmJlMDEtNWY1NS00NDM0LThm OGEtOTIxODA4ZjdjMzA2LzRmMTJiZTAxLTVmNTUtNDQzNC04ZjhhLTkyMTgwOGY3 YzMwNi5jcmwwHwYDVR0jBBgwFoAUtLv3vFje/C9daN2yZNjbWRopEGgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80ZjEyYmUwMS01ZjU1LTQ0MzQtOGY4YS05MjE4 MDhmN2MzMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwW9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFSax8VNSf/IwYb4g/yqhAKeGWiLu5t2jD4S1eUiNYlGBhzb9alnFtW 520VHuANt1+Ymjyv1g6oMh2fsrxuozC/+dXtbBNghbOjhPdydI3gAGYyahfg55Vx BkneCZaqCnofbX7si0Nep2EjGVB8jLavjuXVASiaCxCuPKcunGuVx9lvUMgImBr4 hzo3A7HlzRLWLl3zzqBD5tuJQMoE8qRq2HPfhT5lgvDzhrwVQWvIB7Bmfmfu1Rbp 3C3SXW28xrDzcIf82ONTptYH0jf5Irln48JNs/LhyAyMW80iZJpsD/Vq5TRnPfwd DW2B4gVVlGmI6oXFUxCZiYmqX69B6NU= -----END CERTIFICATE-----Generated at Wed Aug 6 12:31:46 2025 by rpki-client