$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/5fa31f17-55ad-3ffe-818c-0d807111b1e4.roa File: 5fa31f17-55ad-3ffe-818c-0d807111b1e4.roa (raw, json) Hash identifier: 4I5VR3Bq4dr61XlWkfVEZp1UHvKhOd9C6wOu6RJMRJQ= Subject key identifier: 73:0A:C5:CA:1D:17:EF:71:5A:D5:E7:FC:16:1D:07:E1:60:94:03:90 Certificate issuer: /CN=69df89b1-6446-4f76-b802-330eeb5819c6 Certificate serial: 010D0C9F4328584AF52148FE4FD0A0712774A580 Authority key identifier: 3D:58:6B:3F:CD:66:47:01:3A:08:98:AC:85:EF:91:BE:74:EA:AB:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/5fa31f17-55ad-3ffe-818c-0d807111b1e4.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 1706 IP address blocks: 199.104.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/69df89b1-6446-4f76-b802-330eeb5819c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/69df89b1-6446-4f76-b802-330eeb5819c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:48:fe:4f:d0:a0:71:27:74:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69df89b1-6446-4f76-b802-330eeb5819c6 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=a0f5f8aa-f119-45af-9825-8622eec0f68f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:0c:73:e9:0b:a7:80:13:e5:a8:a9:a9:d9:b9: 34:c2:02:ed:4e:f5:39:f7:ea:85:72:d4:63:81:ab: 8c:e8:cb:87:4a:b5:6e:55:f1:ed:85:f8:2b:9e:a3: bd:29:e4:96:90:ca:7c:d9:bf:3e:2e:50:97:96:e7: 18:ff:84:e6:a9:81:55:76:75:60:81:a8:3f:61:a0: aa:ce:2d:eb:b5:eb:83:8a:c4:58:f3:b7:c6:e8:c7: 70:b1:98:3f:ba:be:db:ae:2c:8d:84:35:e4:a2:61: f6:4e:db:cb:96:1d:df:a5:9e:95:bc:64:ce:b1:a8: 0f:ea:b0:f3:b9:49:7a:97:cb:9f:96:69:6a:47:42: 43:23:dc:1f:f0:77:5d:4c:d1:c4:0e:1b:8d:12:02: 34:18:c4:f3:1d:ac:dd:b0:31:62:42:94:10:58:99: 18:17:c4:c2:f4:de:be:1e:8c:6f:28:29:02:0b:b7: ee:ed:e6:4a:8b:a7:6a:91:19:40:55:94:fb:52:24: 9f:de:c5:8f:09:5e:a4:33:7e:17:0d:df:0c:7b:9e: c6:53:cf:ce:f2:f1:d8:57:15:4e:37:29:3b:be:83: 2e:57:bc:7f:f5:9c:77:8d:49:f1:59:65:0f:9b:66: 9a:96:d1:a7:18:76:9d:62:c3:56:64:60:56:ca:2c: 82:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:0A:C5:CA:1D:17:EF:71:5A:D5:E7:FC:16:1D:07:E1:60:94:03:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/5fa31f17-55ad-3ffe-818c-0d807111b1e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/69df89b1-6446-4f76-b802-330eeb5819c6.crl X509v3 Authority Key Identifier: keyid:3D:58:6B:3F:CD:66:47:01:3A:08:98:AC:85:EF:91:BE:74:EA:AB:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6.cer sbgp-ipAddrBlock: critical IPv4: 199.104.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:a9:53:3f:3f:ec:f8:d3:21:f7:35:87:15:a2:24:bc:5f:e7: c4:5e:cb:05:4e:e7:da:b3:55:f9:15:b6:6c:44:23:84:ef:c7: d8:fe:6b:3c:e8:f3:b4:b4:83:76:b0:ea:b8:37:91:e3:88:57: df:77:db:a0:f6:04:b5:b2:f5:06:4b:b1:41:fd:ed:22:50:83: 54:7d:71:f3:70:36:1f:42:e7:77:03:91:40:99:9b:f8:8b:7d: 13:64:35:4c:ba:98:3c:e5:68:61:1e:09:39:81:19:00:eb:39: 2d:9d:da:a8:b1:20:45:1d:49:ac:a7:90:ad:d5:0b:26:04:7f: 1d:a3:78:09:71:fa:31:a7:ea:33:55:9a:bd:d5:ba:87:8b:dd: cc:c7:25:df:dd:3d:44:7d:ae:8f:98:ea:c6:d2:b4:c6:5f:0e: 32:6e:54:ec:f9:de:7c:5c:18:95:60:1d:38:77:5e:a7:41:e6: 72:06:62:98:92:2e:35:38:9d:ae:fa:74:24:4f:b2:fe:f8:41: 31:fa:d2:4c:36:ac:eb:19:d5:29:bc:08:8f:28:ac:1e:4b:7e: 01:f1:a3:dc:aa:c6:90:d9:4d:56:cc:47:24:3b:8d:c5:28:66: c2:57:78:15:48:4e:d1:30:d7:3a:4b:be:87:4c:c5:77:af:05: 8a:e9:fb:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IUj+T9CgcSd0pYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlkZjg5YjEtNjQ0Ni00Zjc2LWI4MDItMzMwZWViNTgx OWM2MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk YTBmNWY4YWEtZjExOS00NWFmLTk4MjUtODYyMmVlYzBmNjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Qxz6QungBPlqKmp2bk0wgLtTvU59+qFctRj gauM6MuHSrVuVfHthfgrnqO9KeSWkMp82b8+LlCXlucY/4TmqYFVdnVggag/YaCq zi3rteuDisRY87fG6MdwsZg/ur7briyNhDXkomH2TtvLlh3fpZ6VvGTOsagP6rDz uUl6l8uflmlqR0JDI9wf8HddTNHEDhuNEgI0GMTzHazdsDFiQpQQWJkYF8TC9N6+ HoxvKCkCC7fu7eZKi6dqkRlAVZT7UiSf3sWPCV6kM34XDd8Me57GU8/O8vHYVxVO Nyk7voMuV7x/9Zx3jUnxWWUPm2aaltGnGHadYsNWZGBWyiyC/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHMKxcodF+9xWtXn/BYdB+FglAOQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82OWRm ODliMS02NDQ2LTRmNzYtYjgwMi0zMzBlZWI1ODE5YzYvNWZhMzFmMTctNTVhZC0z ZmZlLTgxOGMtMGQ4MDcxMTFiMWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNjlkZjg5YjEtNjQ0Ni00Zjc2LWI4 MDItMzMwZWViNTgxOWM2LzY5ZGY4OWIxLTY0NDYtNGY3Ni1iODAyLTMzMGVlYjU4 MTljNi5jcmwwHwYDVR0jBBgwFoAUPVhrP81mRwE6CJishe+RvnTqq4wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS82OWRmODliMS02NDQ2LTRmNzYtYjgwMi0zMzBl ZWI1ODE5YzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEx2jgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqpUz8/7PjTIfc1hxWiJLxf58ReywVO59qzVfkVtmxEI4Tvx9j+azzo 87S0g3aw6rg3keOIV99326D2BLWy9QZLsUH97SJQg1R9cfNwNh9C53cDkUCZm/iL fRNkNUy6mDzlaGEeCTmBGQDrOS2d2qixIEUdSaynkK3VCyYEfx2jeAlx+jGn6jNV mr3VuoeL3czHJd/dPUR9ro+Y6sbStMZfDjJuVOz53nxcGJVgHTh3XqdB5nIGYpiS LjU4na76dCRPsv74QTH60kw2rOsZ1Sm8CI8orB5LfgHxo9yqxpDZTVbMRyQ7jcUo ZsJXeBVITtEw1zpLvodMxXevBYrp+2A= -----END CERTIFICATE-----Generated at Sun Aug 24 04:41:21 2025 by rpki-client