$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/bbf45412-6bbb-3bec-929d-bf255998ed53.roa File: bbf45412-6bbb-3bec-929d-bf255998ed53.roa (raw, json) Hash identifier: THf5dAUsP8fJ2ka4YP0Vm6nlOJ5uUvGUSysMe4hY2c0= Subject key identifier: 59:47:20:23:AB:DB:BE:81:8C:03:D0:91:42:D5:27:B1:BF:0A:13:67 Certificate issuer: /CN=8ee8b7f9-2148-4099-8192-6428b14301be Certificate serial: 010D0C9F4328584AD50660038AFB89BB5EABE6C0 Authority key identifier: 84:9F:4D:F9:59:BA:A5:E1:B2:A2:D4:3F:81:F6:C8:5B:81:2D:B1:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/bbf45412-6bbb-3bec-929d-bf255998ed53.roa Signing time: Tue 12 Aug 2025 13:00:43 +0000 ROA not before: Tue 12 Aug 2025 13:00:43 +0000 ROA not after: Mon 10 Nov 2025 14:00:43 +0000 asID: 54302 IP address blocks: 199.88.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/8ee8b7f9-2148-4099-8192-6428b14301be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/8ee8b7f9-2148-4099-8192-6428b14301be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d5:06:60:03:8a:fb:89:bb:5e:ab:e6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ee8b7f9-2148-4099-8192-6428b14301be Validity Not Before: Aug 12 13:00:43 2025 GMT Not After : Nov 10 14:00:43 2025 GMT Subject: CN=2a868717-a1cb-4d98-a988-8f592129f722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:27:4c:af:67:a5:bf:89:a7:6c:a8:3a:d4:af: 6f:9c:64:6f:25:b4:ff:ae:43:e1:62:9a:d8:1c:f8: 72:bc:af:01:2b:f3:c2:34:ea:88:14:08:d0:67:1b: 2f:88:4b:b5:95:a8:59:53:a6:ca:9e:3f:c5:46:8e: 05:31:23:1e:42:a1:76:8f:f8:c9:69:bc:61:f1:bb: d7:56:d4:51:0d:18:8f:49:b8:3f:13:41:ed:4f:70: ab:ac:24:66:f5:ed:d5:a3:8a:d3:5a:6f:3b:f6:04: b1:96:eb:71:b5:ea:11:2c:93:2f:34:3e:c2:0e:5e: 5d:b9:0b:7c:72:0a:5a:a1:8f:c4:00:77:48:a3:b5: dd:77:00:c5:73:44:15:4b:4d:06:95:63:67:a7:b3: 58:a2:75:7c:dc:c0:7b:1e:4c:1d:f8:6f:37:d6:69: c5:11:11:1b:73:3e:47:7d:bb:69:37:36:7e:f2:e0: 58:22:02:6b:d4:48:11:7f:ad:d3:22:70:b1:e4:3a: 3d:95:d9:8e:af:da:9d:bf:fb:df:b1:9e:e9:2c:06: 6a:f7:74:36:95:4f:9e:e8:96:c4:b0:5d:b0:31:52: f2:c8:b2:17:3b:f4:5f:69:e2:9c:46:da:37:d8:da: 6d:85:08:a0:3d:51:ae:24:1a:34:a1:8f:24:45:08: 46:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:47:20:23:AB:DB:BE:81:8C:03:D0:91:42:D5:27:B1:BF:0A:13:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/bbf45412-6bbb-3bec-929d-bf255998ed53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/8ee8b7f9-2148-4099-8192-6428b14301be.crl X509v3 Authority Key Identifier: keyid:84:9F:4D:F9:59:BA:A5:E1:B2:A2:D4:3F:81:F6:C8:5B:81:2D:B1:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be.cer sbgp-ipAddrBlock: critical IPv4: 199.88.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:09:fe:cb:19:20:e8:51:ac:38:5c:9d:79:38:61:7e:d9:eb: 68:ca:99:4f:39:40:17:1a:4f:5d:58:10:62:36:5c:1b:26:41: ae:19:fa:e8:35:42:51:93:b7:a1:74:07:e0:c5:c9:ca:aa:5f: 1f:ff:6a:8a:05:db:16:24:ae:a8:1f:73:31:b1:b3:a0:04:25: b5:b5:c5:86:f6:5f:20:76:6e:1f:b1:ba:f0:47:94:5b:b8:56: f1:69:95:e7:f7:6b:59:fc:f6:f9:79:c6:ca:f0:cf:fc:d9:a7: 49:c8:38:d9:04:65:0d:a1:3b:2e:3a:5f:9a:e9:f2:8f:ff:56: 2f:6d:7f:4f:68:59:8e:4e:eb:c2:d5:e6:c3:07:87:47:97:b3: d4:f9:b1:83:b3:1a:55:16:86:47:fd:b6:c8:e1:6a:7b:67:84: 3a:91:5f:20:9b:bc:a2:4f:e0:e7:0e:8d:89:20:47:6f:aa:f2: 3c:aa:06:f1:05:06:c3:27:46:59:3d:b9:74:0f:30:8d:dc:36: c7:cb:7b:86:ea:3c:3b:2a:21:08:29:ed:6e:e9:2d:a9:83:de: 3d:30:26:e3:e0:c1:22:aa:0a:47:05:b9:b1:0f:7d:c4:18:21: 09:49:40:35:1e:e2:e0:d6:3a:6d:4b:aa:fa:c1:14:23:ec:d2: f5:f0:a0:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErVBmADivuJu16r5sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGVlOGI3ZjktMjE0OC00MDk5LTgxOTItNjQyOGIxNDMw MWJlMB4XDTI1MDgxMjEzMDA0M1oXDTI1MTExMDE0MDA0M1owLzEtMCsGA1UEAxMk MmE4Njg3MTctYTFjYi00ZDk4LWE5ODgtOGY1OTIxMjlmNzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyydMr2elv4mnbKg61K9vnGRvJbT/rkPhYprY HPhyvK8BK/PCNOqIFAjQZxsviEu1lahZU6bKnj/FRo4FMSMeQqF2j/jJabxh8bvX VtRRDRiPSbg/E0HtT3CrrCRm9e3Vo4rTWm879gSxlutxteoRLJMvND7CDl5duQt8 cgpaoY/EAHdIo7XddwDFc0QVS00GlWNnp7NYonV83MB7Hkwd+G831mnFEREbcz5H fbtpNzZ+8uBYIgJr1EgRf63TInCx5Do9ldmOr9qdv/vfsZ7pLAZq93Q2lU+e6JbE sF2wMVLyyLIXO/RfaeKcRto32NpthQigPVGuJBo0oY8kRQhGkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFlHICOr276BjAPQkULVJ7G/ChNnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84ZWU4 YjdmOS0yMTQ4LTQwOTktODE5Mi02NDI4YjE0MzAxYmUvYmJmNDU0MTItNmJiYi0z YmVjLTkyOWQtYmYyNTU5OThlZDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOGVlOGI3ZjktMjE0OC00MDk5LTgx OTItNjQyOGIxNDMwMWJlLzhlZThiN2Y5LTIxNDgtNDA5OS04MTkyLTY0MjhiMTQz MDFiZS5jcmwwHwYDVR0jBBgwFoAUhJ9N+Vm6peGyotQ/gfbIW4EtsV4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84ZWU4YjdmOS0yMTQ4LTQwOTktODE5Mi02NDI4 YjE0MzAxYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1gUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkJ/ssZIOhRrDhcnXk4YX7Z62jKmU85QBcaT11YEGI2XBsmQa4Z+ug1 QlGTt6F0B+DFycqqXx//aooF2xYkrqgfczGxs6AEJbW1xYb2XyB2bh+xuvBHlFu4 VvFplef3a1n89vl5xsrwz/zZp0nIONkEZQ2hOy46X5rp8o//Vi9tf09oWY5O68LV 5sMHh0eXs9T5sYOzGlUWhkf9tsjhantnhDqRXyCbvKJP4OcOjYkgR2+q8jyqBvEF BsMnRlk9uXQPMI3cNsfLe4bqPDsqIQgp7W7pLamD3j0wJuPgwSKqCkcFubEPfcQY IQlJQDUe4uDWOm1LqvrBFCPs0vXwoFg= -----END CERTIFICATE-----Generated at Sun Aug 24 06:30:12 2025 by rpki-client