$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/bc60d7b4-d6be-35cb-80fc-16177325cc06.roa File: bc60d7b4-d6be-35cb-80fc-16177325cc06.roa (raw, json) Hash identifier: r9ve9v34VpraQWhE8tp3I3CaMwKND3bOVAg/47dVJw4= Subject key identifier: 20:EC:8A:F2:AD:8A:0F:4F:A9:67:D0:3B:2E:1C:59:AC:BB:92:85:46 Certificate issuer: /CN=09c51633-340e-4eac-820c-a36b33746085 Certificate serial: 010D0C9F4328584AECC132363C2743A3E93A7900 Authority key identifier: 58:DB:44:5B:64:54:08:69:7A:39:63:68:B1:69:F1:A2:F8:8A:C1:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/bc60d7b4-d6be-35cb-80fc-16177325cc06.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 13928 IP address blocks: 199.21.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/09c51633-340e-4eac-820c-a36b33746085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/09c51633-340e-4eac-820c-a36b33746085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:32:36:3c:27:43:a3:e9:3a:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09c51633-340e-4eac-820c-a36b33746085 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=632b2ff4-c406-42ca-af6d-e2919c4cfede Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ff:50:b0:85:49:21:56:49:dc:1b:40:94:6d: 7f:ed:32:3b:03:ac:d9:7e:b6:5e:b4:06:49:1e:9d: e1:f7:a6:d1:f8:b3:af:08:09:94:59:5f:ad:0a:e5: 66:e7:b3:61:46:a1:32:ab:ec:40:15:df:e0:cf:2a: 04:89:16:d1:94:ac:71:fe:97:99:74:d2:ce:1f:d5: 64:c4:9b:4f:7a:2a:dd:e4:b9:a4:c1:27:21:a9:1d: 70:aa:55:b9:d0:b5:cd:e1:7d:95:55:55:4f:b4:1e: 7f:01:58:5d:e2:4e:52:bf:21:b8:5e:80:f8:09:b3: 7b:0f:7a:c4:f6:af:76:a4:17:a4:7a:5b:68:ea:cb: f0:bf:2f:1c:44:3b:17:a4:a5:94:80:2b:ce:57:24: 23:e0:35:db:e1:15:21:ce:59:d2:6d:97:0e:26:c6: 12:25:08:c3:53:fe:29:86:5a:ea:29:16:f8:7b:81: f5:2c:f1:af:3d:28:2f:b4:56:6e:a3:e9:35:56:0c: 69:0d:36:92:41:80:7a:13:28:ad:e5:7c:04:6c:cd: 5a:b0:51:94:15:5d:89:19:28:5e:80:09:5e:9b:a0: 24:03:60:9f:fc:5c:85:cb:95:4f:f1:d1:9e:a7:e0: a2:9a:6f:86:5d:25:e3:60:9e:8b:7c:1e:15:ab:b6: 76:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:EC:8A:F2:AD:8A:0F:4F:A9:67:D0:3B:2E:1C:59:AC:BB:92:85:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/bc60d7b4-d6be-35cb-80fc-16177325cc06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/09c51633-340e-4eac-820c-a36b33746085.crl X509v3 Authority Key Identifier: keyid:58:DB:44:5B:64:54:08:69:7A:39:63:68:B1:69:F1:A2:F8:8A:C1:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085.cer sbgp-ipAddrBlock: critical IPv4: 199.21.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:2b:ad:ec:2f:a6:c0:aa:ef:8c:c2:e0:39:5f:29:f2:a5:39: 7c:84:fe:47:ea:33:9f:48:2d:dc:5e:aa:e4:97:45:49:39:ea: e1:4c:4d:76:51:e5:3d:f3:06:9b:1b:58:fd:d3:5e:3e:05:4f: a4:b7:90:97:df:0b:01:77:44:70:cc:84:37:aa:af:08:2b:25: 18:ba:66:db:09:6b:3c:2f:ca:cd:dc:26:3e:ce:b2:e0:9a:cb: a0:8a:d5:90:8d:6c:54:88:b7:96:e7:c1:fb:b1:43:c2:fd:d0: bf:aa:5c:30:c8:8c:69:b5:10:23:28:35:e9:3c:bb:0e:e1:97: b9:fa:d8:95:77:dd:b8:29:a2:cd:ad:5a:f4:7e:db:01:5a:82: 2f:6a:39:c7:6d:27:5c:df:28:10:66:de:dc:63:51:a1:a9:26: e8:dd:2b:6d:fa:42:a2:7a:13:b1:39:e6:43:53:ab:bd:24:71: ac:2f:78:ae:2c:0e:97:21:20:00:18:66:52:1b:37:b9:69:23: 05:2d:56:c3:a8:ce:d5:d2:74:60:16:76:93:df:7f:31:b6:05: 06:0b:d5:5b:1d:6d:dd:23:0c:bd:5c:21:ce:34:d9:41:fe:bc: d6:1e:8b:6b:03:2d:9f:c2:68:f9:cf:85:0b:4c:07:9f:53:45: 5b:fc:64:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswTI2PCdDo+k6eQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDljNTE2MzMtMzQwZS00ZWFjLTgyMGMtYTM2YjMzNzQ2 MDg1MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NjMyYjJmZjQtYzQwNi00MmNhLWFmNmQtZTI5MTljNGNmZWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsP9QsIVJIVZJ3BtAlG1/7TI7A6zZfrZetAZJ Hp3h96bR+LOvCAmUWV+tCuVm57NhRqEyq+xAFd/gzyoEiRbRlKxx/peZdNLOH9Vk xJtPeird5LmkwSchqR1wqlW50LXN4X2VVVVPtB5/AVhd4k5SvyG4XoD4CbN7D3rE 9q92pBekelto6svwvy8cRDsXpKWUgCvOVyQj4DXb4RUhzlnSbZcOJsYSJQjDU/4p hlrqKRb4e4H1LPGvPSgvtFZuo+k1VgxpDTaSQYB6Eyit5XwEbM1asFGUFV2JGShe gAlem6AkA2Cf/FyFy5VP8dGep+Cimm+GXSXjYJ6LfB4Vq7Z2lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCDsivKtig9PqWfQOy4cWay7koVGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wOWM1 MTYzMy0zNDBlLTRlYWMtODIwYy1hMzZiMzM3NDYwODUvYmM2MGQ3YjQtZDZiZS0z NWNiLTgwZmMtMTYxNzczMjVjYzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMDljNTE2MzMtMzQwZS00ZWFjLTgy MGMtYTM2YjMzNzQ2MDg1LzA5YzUxNjMzLTM0MGUtNGVhYy04MjBjLWEzNmIzMzc0 NjA4NS5jcmwwHwYDVR0jBBgwFoAUWNtEW2RUCGl6OWNosWnxoviKwTQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wOWM1MTYzMy0zNDBlLTRlYWMtODIwYy1hMzZi MzM3NDYwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxxWCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0rrewvpsCq74zC4DlfKfKlOXyE/kfqM59ILdxequSXRUk56uFMTXZR 5T3zBpsbWP3TXj4FT6S3kJffCwF3RHDMhDeqrwgrJRi6ZtsJazwvys3cJj7OsuCa y6CK1ZCNbFSIt5bnwfuxQ8L90L+qXDDIjGm1ECMoNek8uw7hl7n62JV33bgpos2t WvR+2wFagi9qOcdtJ1zfKBBm3txjUaGpJujdK236QqJ6E7E55kNTq70kcawveK4s DpchIAAYZlIbN7lpIwUtVsOoztXSdGAWdpPffzG2BQYL1Vsdbd0jDL1cIc402UH+ vNYei2sDLZ/CaPnPhQtMB59TRVv8ZF0= -----END CERTIFICATE-----Generated at Sun Aug 24 06:02:25 2025 by rpki-client