$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/b0f3dd68-3412-3d59-9ac4-f5398f42bcd8.roa File: b0f3dd68-3412-3d59-9ac4-f5398f42bcd8.roa (raw, json) Hash identifier: +bnGQv+0IuBagKlBc++njQ9nUig52G/aF+P8r1kMz+0= Subject key identifier: FF:03:5C:DD:BB:6A:D3:E6:50:FD:D1:71:2C:28:F8:E3:67:8C:87:B9 Certificate issuer: /CN=db2617c0-03f4-4ad7-9d11-36b2c6496b7d Certificate serial: 010D0C9F4328584AC87650D69BCA9843C34F6DC0 Authority key identifier: 6F:8C:BC:63:FE:23:D7:C4:A8:06:09:3A:B5:B6:A1:6A:A3:94:58:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/b0f3dd68-3412-3d59-9ac4-f5398f42bcd8.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 53991 IP address blocks: 199.83.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:50:d6:9b:ca:98:43:c3:4f:6d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db2617c0-03f4-4ad7-9d11-36b2c6496b7d Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=78e6f5a1-b370-44b3-b484-b4bc503baa10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:5d:e8:e4:95:9b:3c:82:de:1f:f2:ee:01:0d: d4:f8:82:b2:a7:c2:4f:61:34:16:0a:6c:cb:57:a4: 2b:d0:31:52:d1:c3:ef:27:04:7f:42:58:ca:9a:40: 09:ee:a7:60:7d:29:bf:a1:f9:c0:03:8d:e8:6e:a7: 9f:77:44:3a:80:01:ac:3e:0e:87:69:63:fa:a8:c0: 8e:03:0e:ee:7c:61:de:6c:db:3a:58:df:17:dd:ee: 99:7d:bd:eb:75:ac:ef:dd:fb:0f:a4:81:76:8e:d8: c7:1a:ee:f9:2a:f2:ac:0f:be:00:0b:45:5f:65:ca: 43:31:13:dd:b3:ad:92:0c:39:72:93:c2:19:14:4d: ca:dd:23:65:91:ef:5b:6e:17:f9:8d:40:c2:f0:97: a8:54:2d:5f:3d:69:fc:89:9a:4f:46:12:5e:fe:33: 50:e5:69:36:7b:48:6f:02:c1:83:db:a6:30:34:c7: 96:b9:31:5b:5d:35:75:3b:be:99:b1:7d:98:a4:46: 57:34:dc:29:a3:c0:a1:78:df:ab:05:1e:d0:3b:7b: 5a:dc:f4:e2:29:5f:c9:c1:ee:68:df:c4:7c:24:28: 27:cf:90:e0:c6:77:55:da:e5:ea:35:01:f5:16:74: 33:56:85:c6:bc:8e:0d:7b:19:5f:b3:ed:d4:30:93: d7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:03:5C:DD:BB:6A:D3:E6:50:FD:D1:71:2C:28:F8:E3:67:8C:87:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/b0f3dd68-3412-3d59-9ac4-f5398f42bcd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.crl X509v3 Authority Key Identifier: keyid:6F:8C:BC:63:FE:23:D7:C4:A8:06:09:3A:B5:B6:A1:6A:A3:94:58:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer sbgp-ipAddrBlock: critical IPv4: 199.83.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:23:c4:70:8e:99:21:c7:60:82:7c:d3:c4:b3:ab:8b:8a:c2: dc:8f:88:97:d0:95:89:56:28:7b:ac:ab:82:c2:1f:91:44:1b: 9b:5f:ef:61:b3:e8:49:c7:44:79:54:47:59:a8:ec:b0:6f:58: 3c:98:31:81:47:33:29:11:e9:f5:e4:51:09:99:25:c6:d7:c2: e9:ea:f4:93:73:d0:c2:8d:71:70:69:c0:8d:dd:b1:1b:62:cf: 31:26:58:3e:07:62:f5:4d:66:9e:ad:15:b9:34:fe:96:e1:ea: b8:ef:6b:ea:b4:cb:a1:49:7f:98:64:88:b8:ff:f5:83:b5:b5: 17:b6:64:06:a4:ad:08:ec:78:32:48:bf:fe:5b:b9:b4:7e:56: 92:ee:57:6e:8f:07:31:58:3c:e1:a7:1c:93:d1:7b:01:30:1b: 3d:d5:bb:81:88:8c:23:51:81:67:37:f2:4d:04:df:4d:38:9a: ea:6f:8a:04:ce:39:1f:5b:30:e3:0a:9a:f6:ad:8c:72:b4:73: 3d:9d:17:d0:dd:cf:9a:24:95:86:aa:07:82:d3:c1:fd:6f:e7: 5c:97:36:2d:d3:09:71:79:c5:3c:b2:74:ed:6f:34:2b:24:4f: a4:64:3d:35:b1:33:f0:97:90:76:21:54:ef:d7:3b:92:28:37: dc:68:f9:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdlDWm8qYQ8NPbcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGIyNjE3YzAtMDNmNC00YWQ3LTlkMTEtMzZiMmM2NDk2 YjdkMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk NzhlNmY1YTEtYjM3MC00NGIzLWI0ODQtYjRiYzUwM2JhYTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkl3o5JWbPILeH/LuAQ3U+IKyp8JPYTQWCmzL V6Qr0DFS0cPvJwR/QljKmkAJ7qdgfSm/ofnAA43obqefd0Q6gAGsPg6HaWP6qMCO Aw7ufGHebNs6WN8X3e6Zfb3rdazv3fsPpIF2jtjHGu75KvKsD74AC0VfZcpDMRPd s62SDDlyk8IZFE3K3SNlke9bbhf5jUDC8JeoVC1fPWn8iZpPRhJe/jNQ5Wk2e0hv AsGD26YwNMeWuTFbXTV1O76ZsX2YpEZXNNwpo8CheN+rBR7QO3ta3PTiKV/Jwe5o 38R8JCgnz5DgxndV2uXqNQH1FnQzVoXGvI4Nexlfs+3UMJPXGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP8DXN27atPmUP3RcSwo+ONnjIe5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYjI2 MTdjMC0wM2Y0LTRhZDctOWQxMS0zNmIyYzY0OTZiN2QvYjBmM2RkNjgtMzQxMi0z ZDU5LTlhYzQtZjUzOThmNDJiY2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGIyNjE3YzAtMDNmNC00YWQ3LTlk MTEtMzZiMmM2NDk2YjdkL2RiMjYxN2MwLTAzZjQtNGFkNy05ZDExLTM2YjJjNjQ5 NmI3ZC5jcmwwHwYDVR0jBBgwFoAUb4y8Y/4j18SoBgk6tbahaqOUWLswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYjI2MTdjMC0wM2Y0LTRhZDctOWQxMS0zNmIy YzY0OTZiN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx1P0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQjxHCOmSHHYIJ808Szq4uKwtyPiJfQlYlWKHusq4LCH5FEG5tf72Gz 6EnHRHlUR1mo7LBvWDyYMYFHMykR6fXkUQmZJcbXwunq9JNz0MKNcXBpwI3dsRti zzEmWD4HYvVNZp6tFbk0/pbh6rjva+q0y6FJf5hkiLj/9YO1tRe2ZAakrQjseDJI v/5bubR+VpLuV26PBzFYPOGnHJPRewEwGz3Vu4GIjCNRgWc38k0E3004mupvigTO OR9bMOMKmvatjHK0cz2dF9Ddz5oklYaqB4LTwf1v51yXNi3TCXF5xTyydO1vNCsk T6RkPTWxM/CXkHYhVO/XO5IoN9xo+as= -----END CERTIFICATE-----Generated at Sat Aug 23 21:14:38 2025 by rpki-client