$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/8b8a85b0-e152-340d-9552-d571b618a288.roa File: 8b8a85b0-e152-340d-9552-d571b618a288.roa (raw, json) Hash identifier: 4Ray7lqxcRFeyMRglvQp1b2W2VqoOFzGgf55pWmmyRU= Subject key identifier: 1B:6D:06:53:3C:16:1C:1D:43:4B:47:5F:69:85:42:E9:9A:AF:CD:CB Certificate issuer: /CN=28aae7db-2f51-4656-bba0-64f1d3ee3256 Certificate serial: 010D0C9F4328584AD93665510F35FDF4A05C0E80 Authority key identifier: 8C:E0:CF:16:AC:8F:6F:CC:E4:63:27:ED:DF:DF:A1:F9:E7:6F:93:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/8b8a85b0-e152-340d-9552-d571b618a288.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 30158 IP address blocks: 199.189.200.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:65:51:0f:35:fd:f4:a0:5c:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28aae7db-2f51-4656-bba0-64f1d3ee3256 Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=a6982c7d-e504-4666-aa56-0bf6b28c1f19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e7:49:0c:c6:17:5a:29:c6:9a:85:fe:21:c7: 99:62:26:1f:ce:45:4c:3d:d8:a7:2c:4c:12:1c:86: 29:a0:02:04:05:9f:ea:76:ef:2e:12:b9:59:8a:4c: 05:ce:78:0b:04:4b:af:00:a0:18:20:4c:2b:cd:08: 78:e7:43:2e:bd:7f:68:83:0b:5f:b6:7e:96:ec:59: 7e:43:cb:d6:6a:dc:a7:32:40:b9:17:5d:99:80:94: cd:0c:05:ca:6b:8e:02:1a:ce:a8:7a:ec:44:ee:69: 10:ee:41:0a:30:d3:7b:11:97:86:13:38:43:b8:42: b1:47:19:a3:53:f9:a8:b0:62:98:b5:14:fc:e3:c6: 5d:6d:90:eb:60:fa:e9:c9:a6:36:e5:5c:b5:86:3f: b3:3d:52:ed:6f:ac:8e:15:d5:df:69:f4:45:cd:0d: 2c:f8:25:6e:60:59:3a:04:c1:04:9c:0b:fd:57:1c: 66:fe:4e:3a:79:14:65:78:9a:1c:77:6c:1b:96:97: 60:f5:7c:4f:61:3f:61:52:dd:e5:48:ee:02:ab:77: 14:82:f1:a0:49:31:7a:73:45:0d:79:81:80:80:3e: 66:84:b9:74:2b:97:2b:79:66:66:01:92:cd:cd:6b: 80:84:0e:33:d5:70:e5:85:53:44:55:d3:05:cb:50: 60:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:6D:06:53:3C:16:1C:1D:43:4B:47:5F:69:85:42:E9:9A:AF:CD:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/8b8a85b0-e152-340d-9552-d571b618a288.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.crl X509v3 Authority Key Identifier: keyid:8C:E0:CF:16:AC:8F:6F:CC:E4:63:27:ED:DF:DF:A1:F9:E7:6F:93:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer sbgp-ipAddrBlock: critical IPv4: 199.189.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:52:38:be:98:7e:dd:ca:19:b7:b2:e9:75:7a:e7:f8:b6:ae: 36:0d:d9:ae:83:92:5a:24:71:fc:e2:8d:56:82:56:95:30:4b: 71:9b:6f:cf:ed:f9:cd:37:60:71:2f:30:99:a8:af:95:d6:aa: 37:40:04:ab:04:be:78:b5:c4:f3:f1:18:d3:a5:f7:c1:cd:85: 78:6a:40:c3:74:32:a2:de:f4:6b:7b:8d:e8:ec:41:5c:a7:e4: af:de:2b:ac:a1:1e:c6:91:b2:ae:5f:cb:31:c3:76:d5:fd:fa: 29:04:ca:95:7f:46:c7:19:66:6b:d9:52:d9:7e:ab:0e:82:87: 31:4b:ad:f2:2c:e3:dc:7f:2d:78:6e:2c:d3:60:5c:e0:2c:5e: 1d:36:77:ea:d0:c5:b6:07:e4:79:c4:40:37:a8:54:03:c9:b3: ff:f2:82:18:02:7b:c9:02:b1:61:9a:66:dc:5c:f6:04:3f:51: 5b:1b:c5:fe:28:92:5b:5c:a6:8c:c1:20:c2:dd:53:20:ba:30: cd:ef:d5:89:a2:cf:af:44:a1:7c:e1:0d:7b:c1:56:d8:81:a3: 22:2d:fb:a4:f7:b3:3c:8c:e8:00:6d:ed:fa:6a:0c:32:33:94: b9:f9:bd:b4:a7:60:16:ea:1c:17:bc:df:78:83:72:7e:9b:9b: 28:b2:d3:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErZNmVRDzX99KBcDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhhYWU3ZGItMmY1MS00NjU2LWJiYTAtNjRmMWQzZWUz MjU2MB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk YTY5ODJjN2QtZTUwNC00NjY2LWFhNTYtMGJmNmIyOGMxZjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+dJDMYXWinGmoX+IceZYiYfzkVMPdinLEwS HIYpoAIEBZ/qdu8uErlZikwFzngLBEuvAKAYIEwrzQh450MuvX9ogwtftn6W7Fl+ Q8vWatynMkC5F12ZgJTNDAXKa44CGs6oeuxE7mkQ7kEKMNN7EZeGEzhDuEKxRxmj U/mosGKYtRT848ZdbZDrYPrpyaY25Vy1hj+zPVLtb6yOFdXfafRFzQ0s+CVuYFk6 BMEEnAv9Vxxm/k46eRRleJocd2wblpdg9XxPYT9hUt3lSO4Cq3cUgvGgSTF6c0UN eYGAgD5mhLl0K5creWZmAZLNzWuAhA4z1XDlhVNEVdMFy1BgkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBttBlM8FhwdQ0tHX2mFQumar83LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yOGFh ZTdkYi0yZjUxLTQ2NTYtYmJhMC02NGYxZDNlZTMyNTYvOGI4YTg1YjAtZTE1Mi0z NDBkLTk1NTItZDU3MWI2MThhMjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjhhYWU3ZGItMmY1MS00NjU2LWJi YTAtNjRmMWQzZWUzMjU2LzI4YWFlN2RiLTJmNTEtNDY1Ni1iYmEwLTY0ZjFkM2Vl MzI1Ni5jcmwwHwYDVR0jBBgwFoAUjODPFqyPb8zkYyft39+h+edvk48wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yOGFhZTdkYi0yZjUxLTQ2NTYtYmJhMC02NGYx ZDNlZTMyNTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx73IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVSOL6Yft3KGbey6XV65/i2rjYN2a6DklokcfzijVaCVpUwS3Gbb8/t +c03YHEvMJmor5XWqjdABKsEvni1xPPxGNOl98HNhXhqQMN0MqLe9Gt7jejsQVyn 5K/eK6yhHsaRsq5fyzHDdtX9+ikEypV/RscZZmvZUtl+qw6ChzFLrfIs49x/LXhu LNNgXOAsXh02d+rQxbYH5HnEQDeoVAPJs//yghgCe8kCsWGaZtxc9gQ/UVsbxf4o kltcpozBIMLdUyC6MM3v1Ymiz69EoXzhDXvBVtiBoyIt+6T3szyM6ABt7fpqDDIz lLn5vbSnYBbqHBe833iDcn6bmyiy0/k= -----END CERTIFICATE-----Generated at Sun Aug 24 07:54:00 2025 by rpki-client