$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/594dbf2b-3f20-3d3f-afb2-ae4dbb600345.roa File: 594dbf2b-3f20-3d3f-afb2-ae4dbb600345.roa (raw, json) Hash identifier: Whif6gE8xc3NPTyvMa9h87JE4nZcXFK9IJpjc0hH+sI= Subject key identifier: FC:15:46:B5:D9:B6:1A:16:DF:82:1E:57:23:DC:5B:73:9F:25:08:67 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD0D6632A1CCA41D7E2452D80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/594dbf2b-3f20-3d3f-afb2-ae4dbb600345.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 13335 IP address blocks: 199.27.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:63:2a:1c:ca:41:d7:e2:45:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=8a28989e-9d97-4523-8328-557fc13605d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:90:38:4a:e2:1e:6f:95:05:d5:e9:3f:94:3e: cc:c4:c0:f5:33:38:72:02:04:61:b9:4b:97:47:08: 1e:1f:a8:3a:ee:fa:95:12:55:bb:fa:6b:6f:2a:a9: d2:56:47:f0:84:09:7c:f6:36:5a:48:d6:b8:33:a2: 8f:65:6c:9d:9f:f3:22:b4:37:4b:2a:b4:97:31:37: fa:e8:d5:47:82:a7:4e:73:db:1e:16:b5:22:de:2e: e0:ba:3c:52:a1:7c:92:c1:64:88:47:0f:f8:85:7c: 01:47:98:7c:ea:42:1c:9a:99:16:1a:5b:a7:71:bd: e4:ea:a2:7c:78:33:52:7d:13:fc:13:1b:78:da:c3: c6:04:ed:11:85:c6:45:6f:7b:fb:c5:cf:e7:df:05: 2b:bb:ae:21:9f:ef:03:8c:44:70:32:a1:d3:d8:40: 55:e0:89:78:99:7b:ae:dc:c8:c4:e6:b8:cd:2f:c1: e0:e5:45:b5:02:53:9d:b7:07:cc:2e:29:85:de:a1: 65:bd:c8:87:ad:ed:13:18:92:5a:c2:9a:1a:c3:ed: 97:a0:5d:34:07:a4:df:70:63:03:e8:13:8c:19:fa: a4:e8:d2:1d:e9:db:5e:c3:d7:74:c3:c5:ae:ec:93: 84:89:78:e7:0e:7a:cd:cb:71:c7:36:28:99:49:52: 5c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:15:46:B5:D9:B6:1A:16:DF:82:1E:57:23:DC:5B:73:9F:25:08:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/594dbf2b-3f20-3d3f-afb2-ae4dbb600345.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 199.27.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:5a:5e:75:6b:d2:9d:1c:64:f3:89:0f:01:fd:c3:17:48:c0: 2c:f5:34:8d:91:05:9d:bd:d3:10:6e:46:05:6b:3a:b2:8c:74: 3b:1b:b3:5d:6f:b4:5d:ef:3d:0d:d4:e7:4d:4c:8d:c5:eb:27: 25:91:a2:66:e4:91:22:6d:f1:ec:9a:3f:70:53:6a:ae:5d:3d: 48:77:25:f2:ad:5d:93:6b:3f:49:a3:8e:31:ab:54:ef:d9:37: 13:4f:49:6c:44:38:f4:61:f7:89:34:0d:7b:19:5a:e4:c7:67: 30:50:d1:1f:c2:92:cc:0f:34:3e:b3:9a:47:3d:42:04:c5:97: d3:da:1c:86:81:b1:74:cc:14:17:a7:65:1e:ae:b9:9e:6b:21: 62:95:c6:0e:1c:05:dd:4d:a7:19:0c:df:0c:1a:c7:8d:a6:a8: ce:e0:04:fb:eb:38:9c:c9:ee:14:f6:11:d5:08:1f:2d:a4:b5: a7:d1:7c:19:d4:d3:2e:c1:63:93:b1:b9:20:7d:70:3f:34:92: c3:82:41:6b:82:78:31:15:dd:86:22:ec:d7:2a:58:d1:af:78: 31:a1:10:ce:17:07:5f:f3:be:1d:00:f9:17:38:9a:ba:5b:8d: 87:bd:59:5c:5d:2a:bb:6b:93:39:53:ef:7f:2f:fb:3d:29:f0: 16:5c:97:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1mMqHMpB1+JFLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk OGEyODk4OWUtOWQ5Ny00NTIzLTgzMjgtNTU3ZmMxMzYwNWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZA4SuIeb5UF1ek/lD7MxMD1MzhyAgRhuUuX RwgeH6g67vqVElW7+mtvKqnSVkfwhAl89jZaSNa4M6KPZWydn/MitDdLKrSXMTf6 6NVHgqdOc9seFrUi3i7gujxSoXySwWSIRw/4hXwBR5h86kIcmpkWGluncb3k6qJ8 eDNSfRP8Ext42sPGBO0RhcZFb3v7xc/n3wUru64hn+8DjERwMqHT2EBV4Il4mXuu 3MjE5rjNL8Hg5UW1AlOdtwfMLimF3qFlvciHre0TGJJawpoaw+2XoF00B6TfcGMD 6BOMGfqk6NId6dtew9d0w8Wu7JOEiXjnDnrNy3HHNiiZSVJcdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPwVRrXZthoW34IeVyPcW3OfJQhnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNTk0ZGJmMmItM2YyMC0z ZDNmLWFmYjItYWU0ZGJiNjAwMzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxxuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALpaXnVr0p0cZPOJDwH9wxdIwCz1NI2RBZ290xBuRgVrOrKMdDsbs11v tF3vPQ3U501MjcXrJyWRombkkSJt8eyaP3BTaq5dPUh3JfKtXZNrP0mjjjGrVO/Z NxNPSWxEOPRh94k0DXsZWuTHZzBQ0R/CkswPND6zmkc9QgTFl9PaHIaBsXTMFBen ZR6uuZ5rIWKVxg4cBd1NpxkM3wwax42mqM7gBPvrOJzJ7hT2EdUIHy2ktafRfBnU 0y7BY5OxuSB9cD80ksOCQWuCeDEV3YYi7NcqWNGveDGhEM4XB1/zvh0A+Rc4mrpb jYe9WVxdKrtrkzlT738v+z0p8BZcl5g= -----END CERTIFICATE-----Generated at Sat Aug 23 14:58:42 2025 by rpki-client