$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/a0319291-6260-33b7-94e3-177209ea6dc7.roa File: a0319291-6260-33b7-94e3-177209ea6dc7.roa (raw, json) Hash identifier: ALNIuZXHOE9odvKWx31WkDd4G7grKbWBcoxl6sud3R0= Subject key identifier: 7A:8F:2A:4A:58:D8:07:ED:1C:FF:E9:EC:65:F7:81:D9:F5:07:30:94 Certificate issuer: /CN=4e87d83f-b50c-4a65-9d9a-c28458fc1979 Certificate serial: 010D0C9F4328584AF5212A10E6CBAFE98F3E6EC0 Authority key identifier: 1A:08:01:51:82:F8:E8:30:43:E7:6A:B3:45:CD:54:72:A4:B4:CD:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/a0319291-6260-33b7-94e3-177209ea6dc7.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 394449 IP address blocks: 199.68.53.0/24 maxlen: 24 2604:3dc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4e87d83f-b50c-4a65-9d9a-c28458fc1979.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4e87d83f-b50c-4a65-9d9a-c28458fc1979.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:2a:10:e6:cb:af:e9:8f:3e:6e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e87d83f-b50c-4a65-9d9a-c28458fc1979 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=c2485737-bc22-48cd-8a30-b187b80e3622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fe:cb:64:6c:6b:77:9d:a8:a4:25:60:e1:3b: c8:c0:ce:4b:08:b4:49:3a:77:0f:3f:3a:6c:05:70: 2f:51:b5:fd:af:75:e8:88:6e:84:bc:a6:cf:e1:9a: b1:e4:9f:1f:bf:95:7e:73:f3:f6:a1:62:fd:cd:00: 7b:eb:67:24:da:37:37:5f:71:61:1d:b2:98:70:f9: f4:6d:0c:5d:51:01:8c:51:99:c7:04:09:d4:cf:8d: ff:75:e5:63:d2:e3:ee:d1:37:1d:2b:eb:09:18:18: 71:0c:95:58:c4:e1:3f:64:0b:52:b5:b0:ce:26:7c: 99:da:ec:10:02:12:31:02:3c:82:66:05:20:69:2e: 27:8b:e3:5b:87:37:1c:ed:cb:4d:25:22:b3:40:95: f3:f4:66:0e:ce:e5:91:04:65:8e:67:62:f4:7f:7e: 9a:07:cb:da:91:34:e7:70:2a:0b:e6:e0:1f:44:ff: 89:20:b6:35:ca:b5:00:e3:23:11:a9:fc:e0:16:1c: 58:78:af:14:14:71:16:ed:a9:63:75:85:93:49:5b: cb:de:6a:f4:95:2e:2a:4b:86:52:a9:03:8a:bc:88: 9e:6a:cb:75:a0:83:65:a1:39:89:a0:ff:f7:bb:5f: cb:e4:f7:44:27:6e:29:08:d7:74:a2:60:8f:d6:bc: 8e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:8F:2A:4A:58:D8:07:ED:1C:FF:E9:EC:65:F7:81:D9:F5:07:30:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/a0319291-6260-33b7-94e3-177209ea6dc7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4e87d83f-b50c-4a65-9d9a-c28458fc1979.crl X509v3 Authority Key Identifier: keyid:1A:08:01:51:82:F8:E8:30:43:E7:6A:B3:45:CD:54:72:A4:B4:CD:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979.cer sbgp-ipAddrBlock: critical IPv4: 199.68.53.0/24 IPv6: 2604:3dc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:37:f5:71:60:3d:8a:52:98:32:06:b2:a1:f6:cd:66:36:1a: ff:53:85:f3:8c:6e:d5:a7:4c:89:a2:d4:11:ed:f7:e9:1e:38: 61:b9:bc:9d:fc:ff:d4:53:f2:9c:98:25:15:bb:5c:ff:fa:c5: e3:09:ce:ce:e6:cf:16:b9:37:27:de:3c:8d:eb:6f:d3:46:f8: c2:83:69:4b:8f:2a:ca:8d:d6:b9:7a:5a:b7:7d:e6:fa:cd:b4: 07:04:2c:ce:b3:ab:06:be:3b:8c:a2:80:35:d3:49:f6:c8:88: 72:e9:43:1b:e1:3d:e2:c8:66:e1:ff:7d:3c:8f:1f:93:65:af: 3d:1a:35:48:4f:32:45:d6:49:be:05:3f:f5:ba:38:cb:a6:a6: 17:23:53:62:1a:3f:d3:ec:9a:c6:11:ef:72:d9:bc:ec:4f:65: 98:6e:44:3c:15:8a:b2:48:92:23:63:cc:45:8e:d1:ec:49:a4: ce:81:26:d2:05:4e:2c:9f:78:1a:0d:00:6f:d3:99:bb:1f:c8: 19:5d:d8:8c:cf:02:d5:ea:38:b8:3d:5d:a8:d2:0c:05:91:2a: 96:2e:f5:ea:18:2b:c4:ae:7d:2d:37:5b:39:b0:3e:3c:55:9d: 70:48:ae:b7:39:26:71:1b:c2:7d:7a:ab:db:66:b9:5f:a5:a7: 72:4d:e3:5d -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEr1ISoQ5suv6Y8+bsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU4N2Q4M2YtYjUwYy00YTY1LTlkOWEtYzI4NDU4ZmMx OTc5MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk YzI0ODU3MzctYmMyMi00OGNkLThhMzAtYjE4N2I4MGUzNjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtv7LZGxrd52opCVg4TvIwM5LCLRJOncPPzps BXAvUbX9r3XoiG6EvKbP4Zqx5J8fv5V+c/P2oWL9zQB762ck2jc3X3FhHbKYcPn0 bQxdUQGMUZnHBAnUz43/deVj0uPu0TcdK+sJGBhxDJVYxOE/ZAtStbDOJnyZ2uwQ AhIxAjyCZgUgaS4ni+Nbhzcc7ctNJSKzQJXz9GYOzuWRBGWOZ2L0f36aB8vakTTn cCoL5uAfRP+JILY1yrUA4yMRqfzgFhxYeK8UFHEW7aljdYWTSVvL3mr0lS4qS4ZS qQOKvIieast1oINloTmJoP/3u1/L5PdEJ24pCNd0omCP1ryOOQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFHqPKkpY2AftHP/p7GX3gdn1BzCUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTg3 ZDgzZi1iNTBjLTRhNjUtOWQ5YS1jMjg0NThmYzE5NzkvYTAzMTkyOTEtNjI2MC0z M2I3LTk0ZTMtMTc3MjA5ZWE2ZGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGU4N2Q4M2YtYjUwYy00YTY1LTlk OWEtYzI4NDU4ZmMxOTc5LzRlODdkODNmLWI1MGMtNGE2NS05ZDlhLWMyODQ1OGZj MTk3OS5jcmwwHwYDVR0jBBgwFoAUGggBUYL46DBD52qzRc1UcqS0zfwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTg3ZDgzZi1iNTBjLTRhNjUtOWQ5YS1jMjg0 NThmYzE5NzkuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAx0Q1MA0E AgACMAcDBQAmBD3AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAEI39XFgPYpSmDIGsqH2zWY2Gv9ThfOMbtWn TImi1BHt9+keOGG5vJ38/9RT8pyYJRW7XP/6xeMJzs7mzxa5NyfePI3rb9NG+MKD aUuPKsqN1rl6Wrd95vrNtAcELM6zqwa+O4yigDXTSfbIiHLpQxvhPeLIZuH/fTyP H5Nlrz0aNUhPMkXWSb4FP/W6OMumphcjU2IaP9PsmsYR73LZvOxPZZhuRDwVirJI kiNjzEWO0exJpM6BJtIFTiyfeBoNAG/TmbsfyBld2IzPAtXqOLg9XajSDAWRKpYu 9eoYK8SufS03WzmwPjxVnXBIrrc5JnEbwn16q9tmuV+lp3JN410= -----END CERTIFICATE-----Generated at Sun Aug 24 04:51:24 2025 by rpki-client