$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/2863cd8d-e932-373f-bff5-503c406d81fa.roa File: 2863cd8d-e932-373f-bff5-503c406d81fa.roa (raw, json) Hash identifier: 1b/LQZEUkLbygdQJESTHL2Yh3JZ5EQUy0lpphW7Zyr8= Subject key identifier: 3B:00:09:70:7F:EA:A1:D4:B1:E5:CB:8E:4E:87:D6:08:29:79:53:5B Certificate issuer: /CN=aac59959-e898-42ad-9d0a-f1b87a7d0114 Certificate serial: 010D0C9F4328584B7C875C9D6988850BA5A44500 Authority key identifier: BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/2863cd8d-e932-373f-bff5-503c406d81fa.roa Signing time: Sat 11 Oct 2025 13:00:38 +0000 ROA not before: Sat 11 Oct 2025 13:00:38 +0000 ROA not after: Fri 09 Jan 2026 14:00:38 +0000 asID: 46455 IP address blocks: 199.71.230.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7c:87:5c:9d:69:88:85:0b:a5:a4:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aac59959-e898-42ad-9d0a-f1b87a7d0114 Validity Not Before: Oct 11 13:00:38 2025 GMT Not After : Jan 9 14:00:38 2026 GMT Subject: CN=9b674174-e64f-42c9-a04e-6d31d193b67b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f0:6c:91:57:40:5b:9c:df:ac:05:13:37:a8: ac:92:34:2f:72:ae:00:11:73:4f:a4:05:53:21:81: 45:77:56:7e:4b:d3:37:f9:f7:d4:83:c6:a0:21:ce: 6e:12:a5:ab:fc:a5:4d:35:eb:3e:3e:57:a6:b3:06: c3:fc:bd:b7:c2:15:00:c6:63:93:2f:fe:99:27:58: 02:27:d3:74:17:bc:a1:bc:db:d1:fc:44:e8:83:70: 7b:e3:2f:17:d2:a5:a4:80:41:d7:4b:b1:86:ff:08: 96:d7:3f:37:76:f7:2d:b6:ed:a2:2a:22:5c:0e:2d: 43:fe:d5:88:7f:5e:c6:4d:2a:45:84:27:1a:0a:bb: 1f:8d:f0:72:15:a2:6e:1b:9f:e4:f9:ad:3b:89:97: 80:72:2d:72:57:db:7a:9b:d1:3f:cd:1a:bd:f7:55: 05:7d:18:ff:23:60:44:80:2f:3c:b6:78:b7:b0:73: a4:34:3a:7c:7a:2f:cf:56:8d:73:0a:7a:9b:0f:7c: e5:9c:1e:0a:c7:28:be:c8:38:08:35:1c:e2:bb:ed: e3:57:5a:a1:05:50:00:c5:0a:81:b1:51:62:ec:cf: a7:cd:4a:0b:2c:b3:d2:5a:ba:ec:9c:46:27:59:de: 1c:80:1a:50:91:fb:48:e9:f4:aa:cc:a9:f5:19:c7: 7f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:00:09:70:7F:EA:A1:D4:B1:E5:CB:8E:4E:87:D6:08:29:79:53:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/2863cd8d-e932-373f-bff5-503c406d81fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl X509v3 Authority Key Identifier: keyid:BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer sbgp-ipAddrBlock: critical IPv4: 199.71.230.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:95:8e:5f:e3:2f:44:11:76:82:31:78:d4:15:ab:9b:f6:d9: 10:7a:e7:4e:a5:b5:b6:1b:99:c1:97:6a:95:55:78:6d:7f:bf: d3:9d:08:b7:93:26:c3:96:b1:61:e3:03:0a:79:a7:16:5c:8d: f5:2d:4d:58:6d:18:a3:69:f6:3e:45:6a:8e:f0:b2:88:fc:c4: af:f6:83:46:50:ca:f1:a0:92:f7:1e:66:e6:11:ce:bd:62:7a: ea:a3:c2:83:9f:95:3a:cd:9e:5c:5f:b4:eb:b5:87:e5:37:38: ac:f7:01:3a:89:63:db:2d:bd:0a:c2:db:75:57:f4:9b:2e:6a: 18:4f:23:10:56:3c:1b:f8:08:64:dc:47:d5:9b:33:02:46:4b: 2d:0a:fc:d6:f6:00:9c:fa:55:a8:37:cf:40:1d:94:d7:c1:4b: f1:74:e2:ad:b6:9d:6d:1d:40:1b:f7:4e:9c:c6:f5:cf:db:54: e9:d6:dc:50:55:27:7f:f9:ae:ac:c9:ac:1b:87:6a:98:f0:30: 00:06:4d:c3:ad:6c:76:c6:22:b7:e6:fd:a9:6c:dd:17:04:22: 1a:5c:28:55:99:9a:57:be:19:86:ef:de:25:6a:ab:1f:d4:9b: 98:b1:ef:6e:16:ef:10:1f:97:38:e0:b7:fa:2f:d9:ff:92:33: d7:60:5b:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt8h1ydaYiFC6WkRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFjNTk5NTktZTg5OC00MmFkLTlkMGEtZjFiODdhN2Qw MTE0MB4XDTI1MTAxMTEzMDAzOFoXDTI2MDEwOTE0MDAzOFowLzEtMCsGA1UEAxMk OWI2NzQxNzQtZTY0Zi00MmM5LWEwNGUtNmQzMWQxOTNiNjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/BskVdAW5zfrAUTN6iskjQvcq4AEXNPpAVT IYFFd1Z+S9M3+ffUg8agIc5uEqWr/KVNNes+PlemswbD/L23whUAxmOTL/6ZJ1gC J9N0F7yhvNvR/ETog3B74y8X0qWkgEHXS7GG/wiW1z83dvcttu2iKiJcDi1D/tWI f17GTSpFhCcaCrsfjfByFaJuG5/k+a07iZeAci1yV9t6m9E/zRq991UFfRj/I2BE gC88tni3sHOkNDp8ei/PVo1zCnqbD3zlnB4Kxyi+yDgINRziu+3jV1qhBVAAxQqB sVFi7M+nzUoLLLPSWrrsnEYnWd4cgBpQkftI6fSqzKn1Gcd/ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDsACXB/6qHUseXLjk6H1ggpeVNbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYWM1 OTk1OS1lODk4LTQyYWQtOWQwYS1mMWI4N2E3ZDAxMTQvMjg2M2NkOGQtZTkzMi0z NzNmLWJmZjUtNTAzYzQwNmQ4MWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWFjNTk5NTktZTg5OC00MmFkLTlk MGEtZjFiODdhN2QwMTE0L2FhYzU5OTU5LWU4OTgtNDJhZC05ZDBhLWYxYjg3YTdk MDExNC5jcmwwHwYDVR0jBBgwFoAUul4Dp25dfBcjybWEUNyNWEuvgL4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYWM1OTk1OS1lODk4LTQyYWQtOWQwYS1mMWI4 N2E3ZDAxMTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx0fmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSVjl/jL0QRdoIxeNQVq5v22RB6506ltbYbmcGXapVVeG1/v9OdCLeT JsOWsWHjAwp5pxZcjfUtTVhtGKNp9j5Fao7wsoj8xK/2g0ZQyvGgkvceZuYRzr1i euqjwoOflTrNnlxftOu1h+U3OKz3ATqJY9stvQrC23VX9JsuahhPIxBWPBv4CGTc R9WbMwJGSy0K/Nb2AJz6Vag3z0AdlNfBS/F04q22nW0dQBv3TpzG9c/bVOnW3FBV J3/5rqzJrBuHapjwMAAGTcOtbHbGIrfm/als3RcEIhpcKFWZmle+GYbv3iVqqx/U m5ix724W7xAflzjgt/ov2f+SM9dgWwI= -----END CERTIFICATE-----Generated at Tue Oct 21 00:12:30 2025 by rpki-client