$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/06c9128a-9285-3afb-94e5-19a96b0f2a6f.roa File: 06c9128a-9285-3afb-94e5-19a96b0f2a6f.roa (raw, json) Hash identifier: Zhyc+R8FouPpJuyQh+bcO+Axbz1Y+cMSygh8ympTyCI= Subject key identifier: 58:82:22:35:61:F0:A9:75:42:5C:A2:AB:D8:B4:4A:17:00:78:4D:00 Certificate issuer: /CN=28aae7db-2f51-4656-bba0-64f1d3ee3256 Certificate serial: 010D0C9F4328584AD93665251BE91D5F180BC80C Authority key identifier: 8C:E0:CF:16:AC:8F:6F:CC:E4:63:27:ED:DF:DF:A1:F9:E7:6F:93:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/06c9128a-9285-3afb-94e5-19a96b0f2a6f.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 30158 IP address blocks: 199.189.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:65:25:1b:e9:1d:5f:18:0b:c8:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28aae7db-2f51-4656-bba0-64f1d3ee3256 Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=af3ea99f-baa5-4213-8305-3290ded08a3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a4:af:02:6f:f9:3c:ae:c5:18:41:0c:f1:70: e8:9b:38:58:8e:ed:6a:1b:72:79:d3:f5:8d:49:b7: ea:d1:bb:f0:91:cd:62:cf:b8:09:cb:eb:4d:19:93: d7:f9:e4:ba:8d:54:b6:b9:c0:55:90:66:30:f7:01: b8:51:59:e3:29:78:50:da:9e:0e:42:c7:8c:9c:e2: 60:f3:35:33:96:f5:8c:45:4c:cf:8a:a6:4c:05:cf: c5:70:cc:e7:90:3e:ff:df:f6:ea:39:48:72:5d:94: f5:d6:4a:e6:e5:23:d3:68:a8:a4:04:4c:58:b6:e5: 39:ce:b3:01:17:34:c6:41:f1:71:88:65:c7:ab:f4: 2f:8f:50:ca:f5:92:28:7c:5b:eb:66:b0:bc:06:e4: ed:0c:6a:45:c2:e3:d5:4f:4b:a0:9c:55:c2:7b:13: e3:b8:c4:9d:3b:02:2a:af:59:47:0b:df:0d:07:f3: 69:46:77:50:49:64:51:a5:f1:2c:e8:aa:58:0a:59: 65:22:e0:f5:c6:d6:48:2c:86:ad:c2:fd:4e:e7:79: e0:bb:14:f3:2a:fc:32:17:8c:64:52:1e:ba:e1:60: 6c:96:7e:0d:0d:c0:23:3a:97:25:5e:e4:10:71:ed: 43:fe:f5:a2:b9:1a:f3:57:66:15:c2:5a:a4:79:09: 58:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:82:22:35:61:F0:A9:75:42:5C:A2:AB:D8:B4:4A:17:00:78:4D:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/06c9128a-9285-3afb-94e5-19a96b0f2a6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.crl X509v3 Authority Key Identifier: keyid:8C:E0:CF:16:AC:8F:6F:CC:E4:63:27:ED:DF:DF:A1:F9:E7:6F:93:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer sbgp-ipAddrBlock: critical IPv4: 199.189.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:1b:07:08:e7:91:34:f9:a4:24:e6:61:33:da:b0:f6:bb:6d: 26:4e:49:8e:76:bb:92:b4:9c:31:97:1e:a9:f0:fa:32:b0:af: e9:fc:cf:39:ed:48:44:7f:9e:ad:dd:4b:ab:e3:0d:46:06:5b: 15:62:73:99:61:ad:bd:65:53:e1:d5:2a:f3:c9:c0:c6:ae:b4: 5d:26:0e:d4:e2:c6:f8:54:0a:c8:05:fe:14:0c:32:b0:ee:04: 2a:56:de:6f:54:49:f0:68:54:18:09:26:39:22:37:72:7c:21: 60:2b:c0:fd:c3:35:18:c0:68:de:1e:9f:45:49:d1:41:5f:9a: 76:ec:5f:0d:f2:ba:22:b0:2c:b4:29:92:8d:6f:b3:8a:70:7c: c4:de:d2:8c:6c:51:db:b1:c9:2a:83:e3:e7:4a:b2:e7:da:e7: 6b:39:ad:42:84:b9:3a:47:a3:7c:99:21:d8:a7:ce:04:ec:bf: 0b:06:1d:78:f8:fd:a8:6a:26:65:3e:d2:08:a7:c2:0f:b0:aa: cd:41:54:1b:f5:28:30:00:6c:f9:96:f2:6a:b2:d3:bb:a3:34: 10:52:14:c7:0d:f9:b7:50:2f:d8:7a:fc:2d:a0:c6:43:0e:c0: 9b:a9:6c:4b:54:1d:3c:a4:82:56:d7:21:91:1a:7a:b5:4c:7f: 69:a4:12:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErZNmUlG+kdXxgLyAwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhhYWU3ZGItMmY1MS00NjU2LWJiYTAtNjRmMWQzZWUz MjU2MB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk YWYzZWE5OWYtYmFhNS00MjEzLTgzMDUtMzI5MGRlZDA4YTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaSvAm/5PK7FGEEM8XDomzhYju1qG3J50/WN Sbfq0bvwkc1iz7gJy+tNGZPX+eS6jVS2ucBVkGYw9wG4UVnjKXhQ2p4OQseMnOJg 8zUzlvWMRUzPiqZMBc/FcMznkD7/3/bqOUhyXZT11krm5SPTaKikBExYtuU5zrMB FzTGQfFxiGXHq/Qvj1DK9ZIofFvrZrC8BuTtDGpFwuPVT0ugnFXCexPjuMSdOwIq r1lHC98NB/NpRndQSWRRpfEs6KpYClllIuD1xtZILIatwv1O53nguxTzKvwyF4xk Uh664WBsln4NDcAjOpclXuQQce1D/vWiuRrzV2YVwlqkeQlYrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFiCIjVh8Kl1Qlyiq9i0ShcAeE0AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yOGFh ZTdkYi0yZjUxLTQ2NTYtYmJhMC02NGYxZDNlZTMyNTYvMDZjOTEyOGEtOTI4NS0z YWZiLTk0ZTUtMTlhOTZiMGYyYTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjhhYWU3ZGItMmY1MS00NjU2LWJi YTAtNjRmMWQzZWUzMjU2LzI4YWFlN2RiLTJmNTEtNDY1Ni1iYmEwLTY0ZjFkM2Vl MzI1Ni5jcmwwHwYDVR0jBBgwFoAUjODPFqyPb8zkYyft39+h+edvk48wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yOGFhZTdkYi0yZjUxLTQ2NTYtYmJhMC02NGYx ZDNlZTMyNTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx73KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEbBwjnkTT5pCTmYTPasPa7bSZOSY52u5K0nDGXHqnw+jKwr+n8zznt SER/nq3dS6vjDUYGWxVic5lhrb1lU+HVKvPJwMautF0mDtTixvhUCsgF/hQMMrDu BCpW3m9USfBoVBgJJjkiN3J8IWArwP3DNRjAaN4en0VJ0UFfmnbsXw3yuiKwLLQp ko1vs4pwfMTe0oxsUduxySqD4+dKsufa52s5rUKEuTpHo3yZIdinzgTsvwsGHXj4 /ahqJmU+0ginwg+wqs1BVBv1KDAAbPmW8mqy07ujNBBSFMcN+bdQL9h6/C2gxkMO wJupbEtUHTykglbXIZEaerVMf2mkEq0= -----END CERTIFICATE-----Generated at Sun Aug 24 07:52:10 2025 by rpki-client