$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/91811ff6-75ab-441e-8325-066045fb91cd/5c0358a9-c2e9-3fb5-a524-6b0d0b45bf06.roa File: 5c0358a9-c2e9-3fb5-a524-6b0d0b45bf06.roa (raw, json) Hash identifier: eZIModv4FsGik7d4qyWbZf8CO+QJYxU+RMAbd4gNd8I= Subject key identifier: 6C:F0:AC:49:BF:A3:C4:05:5F:B9:3A:36:EF:9B:89:0A:61:71:AA:73 Certificate issuer: /CN=91811ff6-75ab-441e-8325-066045fb91cd Certificate serial: 010D0C9F4328584AECC12305B971C8E1A0A845C0 Authority key identifier: 47:58:15:A4:87:0C:93:5A:7B:CD:29:0F:B6:B2:D1:E3:A9:17:89:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/91811ff6-75ab-441e-8325-066045fb91cd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/91811ff6-75ab-441e-8325-066045fb91cd/5c0358a9-c2e9-3fb5-a524-6b0d0b45bf06.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 400502 IP address blocks: 199.242.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/91811ff6-75ab-441e-8325-066045fb91cd/91811ff6-75ab-441e-8325-066045fb91cd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/91811ff6-75ab-441e-8325-066045fb91cd/91811ff6-75ab-441e-8325-066045fb91cd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/91811ff6-75ab-441e-8325-066045fb91cd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:23:05:b9:71:c8:e1:a0:a8:45:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91811ff6-75ab-441e-8325-066045fb91cd Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=4d3665be-8d92-402c-8264-3b0895ea0c0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:38:49:a1:16:1c:8f:78:35:d8:da:42:3f:28: 3a:cc:72:a1:20:bc:af:41:06:db:d9:76:46:18:a1: 2f:0e:bf:6f:e9:19:b2:da:63:d1:6e:f2:d0:84:49: 4a:06:e7:b9:6d:e3:90:1f:ca:0f:6f:57:2d:1d:6c: fa:42:7b:79:81:c2:4a:41:01:f1:ef:71:b5:3b:48: 58:b6:6a:83:cc:ef:8a:08:7c:61:49:55:29:15:95: 75:3b:e5:aa:67:f9:08:68:31:0b:8f:5c:d6:e5:ee: 27:af:f6:be:eb:2a:29:80:31:73:ad:fc:f4:5e:1b: 07:67:2f:a0:80:ef:f7:40:dc:8b:d5:66:43:b5:5b: 0a:aa:5a:5d:34:bd:cd:b5:68:08:72:d1:7a:4a:70: d3:ac:78:8a:e7:a2:29:4a:54:70:8e:4a:a7:bc:84: 1f:78:c8:c7:72:61:c3:b8:e6:72:fd:ec:10:c3:e2: 38:84:62:7f:20:8d:b3:46:cb:8c:c8:f1:36:76:06: 31:f2:aa:b8:e6:49:21:d4:10:48:ff:9d:29:bd:c9: 00:68:f1:d1:2b:a3:b9:72:fd:06:4f:8b:c2:27:0c: 7a:0b:96:e1:78:a9:d3:3b:16:dd:68:d8:dd:76:53: 6c:f4:2d:2d:57:fc:31:55:ec:15:a7:78:1d:ff:06: 05:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:F0:AC:49:BF:A3:C4:05:5F:B9:3A:36:EF:9B:89:0A:61:71:AA:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/91811ff6-75ab-441e-8325-066045fb91cd/5c0358a9-c2e9-3fb5-a524-6b0d0b45bf06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/91811ff6-75ab-441e-8325-066045fb91cd/91811ff6-75ab-441e-8325-066045fb91cd.crl X509v3 Authority Key Identifier: keyid:47:58:15:A4:87:0C:93:5A:7B:CD:29:0F:B6:B2:D1:E3:A9:17:89:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/91811ff6-75ab-441e-8325-066045fb91cd.cer sbgp-ipAddrBlock: critical IPv4: 199.242.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:fe:02:69:fd:40:bb:91:65:02:02:ab:be:2d:cc:19:56:c5: 02:e2:78:74:fc:48:7b:7a:9d:d1:2e:07:e3:75:56:bf:34:34: f8:4b:55:b7:24:1b:22:fa:18:6f:15:b3:c5:ee:30:b8:60:a0: 63:73:24:a9:40:af:ce:d9:93:72:3c:61:29:a5:f3:e1:5f:7d: aa:15:4f:68:85:ce:2a:89:de:c4:f5:70:68:30:6d:3f:ac:8b: 2e:65:41:38:eb:7e:33:9c:d7:90:a7:3c:90:90:63:41:ad:59: 92:d7:52:79:6a:92:1f:53:f3:1e:28:70:82:68:e6:ef:64:3c: 6c:bf:a4:5b:64:67:df:f9:e6:fb:d9:09:fe:07:15:19:0e:fd: 2d:36:c6:04:a0:63:30:a2:ca:40:0d:bf:e0:fa:35:d7:6a:17: 39:f6:17:68:0c:8c:bd:50:c5:0b:22:87:fe:a0:68:cf:6c:d8: 19:e0:e5:0c:c6:08:df:8e:ea:a8:6d:c3:98:21:e0:4f:dc:13: b9:d3:3b:93:5d:9e:ea:b9:7a:bc:3b:c1:71:94:f2:56:61:79: bb:16:1c:8f:4b:a0:02:d0:9a:18:7b:c0:21:21:23:15:40:bd: f7:56:bd:f9:c4:97:aa:29:64:15:16:87:9a:0e:84:e6:76:3b: fc:e9:d3:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswSMFuXHI4aCoRcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE4MTFmZjYtNzVhYi00NDFlLTgzMjUtMDY2MDQ1ZmI5 MWNkMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NGQzNjY1YmUtOGQ5Mi00MDJjLTgyNjQtM2IwODk1ZWEwYzBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijhJoRYcj3g12NpCPyg6zHKhILyvQQbb2XZG GKEvDr9v6Rmy2mPRbvLQhElKBue5beOQH8oPb1ctHWz6Qnt5gcJKQQHx73G1O0hY tmqDzO+KCHxhSVUpFZV1O+WqZ/kIaDELj1zW5e4nr/a+6yopgDFzrfz0XhsHZy+g gO/3QNyL1WZDtVsKqlpdNL3NtWgIctF6SnDTrHiK56IpSlRwjkqnvIQfeMjHcmHD uOZy/ewQw+I4hGJ/II2zRsuMyPE2dgYx8qq45kkh1BBI/50pvckAaPHRK6O5cv0G T4vCJwx6C5bheKnTOxbdaNjddlNs9C0tV/wxVewVp3gd/wYFZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGzwrEm/o8QFX7k6Nu+biQphcapzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MTgx MWZmNi03NWFiLTQ0MWUtODMyNS0wNjYwNDVmYjkxY2QvNWMwMzU4YTktYzJlOS0z ZmI1LWE1MjQtNmIwZDBiNDViZjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTE4MTFmZjYtNzVhYi00NDFlLTgz MjUtMDY2MDQ1ZmI5MWNkLzkxODExZmY2LTc1YWItNDQxZS04MzI1LTA2NjA0NWZi OTFjZC5jcmwwHwYDVR0jBBgwFoAUR1gVpIcMk1p7zSkPtrLR46kXiQEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MTgxMWZmNi03NWFiLTQ0MWUtODMyNS0wNjYw NDVmYjkxY2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/KMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAP+Amn9QLuRZQICq74tzBlWxQLieHT8SHt6ndEuB+N1Vr80NPhLVbck GyL6GG8Vs8XuMLhgoGNzJKlAr87Zk3I8YSml8+FffaoVT2iFziqJ3sT1cGgwbT+s iy5lQTjrfjOc15CnPJCQY0GtWZLXUnlqkh9T8x4ocIJo5u9kPGy/pFtkZ9/55vvZ Cf4HFRkO/S02xgSgYzCiykANv+D6NddqFzn2F2gMjL1QxQsih/6gaM9s2Bng5QzG CN+O6qhtw5gh4E/cE7nTO5Ndnuq5erw7wXGU8lZhebsWHI9LoALQmhh7wCEhIxVA vfdWvfnEl6opZBUWh5oOhOZ2O/zp0+I= -----END CERTIFICATE-----Generated at Sun Aug 24 09:13:56 2025 by rpki-client