$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b10e56b6-546d-3be0-b675-d61e616393d8.roa File: b10e56b6-546d-3be0-b675-d61e616393d8.roa (raw, json) Hash identifier: Zu5FSYqvaCL2b0Mdm7jBkMgRqeTelwjqMl1YFyJD1uc= Subject key identifier: DC:E3:AB:F9:85:27:91:94:1E:B0:91:4E:8D:9A:D0:AE:68:F0:F8:19 Certificate issuer: /CN=b985122e-f2ff-4349-8e7b-d604ee2577f1 Certificate serial: 010D0C9F4328584ADD667766A56D596891934940 Authority key identifier: 32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b10e56b6-546d-3be0-b675-d61e616393d8.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 11052 IP address blocks: 199.249.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:77:66:a5:6d:59:68:91:93:49:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b985122e-f2ff-4349-8e7b-d604ee2577f1 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=4bf92af9-ed38-468e-bbba-90d87e934474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:60:24:02:6a:8a:7c:4f:0c:16:81:ce:b3:4e: 9e:74:78:ea:a2:f8:cd:5b:7b:1c:85:09:82:58:90: c8:aa:47:ba:36:83:41:b9:d8:57:5e:31:bd:19:dd: 36:d4:4c:73:db:00:9d:fa:0a:6a:96:96:a7:72:d4: d6:95:96:53:7c:33:60:c9:bb:0d:5e:ba:14:8f:08: bd:d3:4f:27:7b:b3:2d:80:f1:fe:1a:08:a4:5d:91: f6:44:b2:95:70:97:07:0e:62:8f:86:63:45:78:d5: 39:41:20:c0:c8:5b:4a:be:31:ea:f3:65:4c:44:20: 5d:30:b5:58:b8:31:51:ec:df:b9:98:75:de:6f:9f: 37:a3:33:28:81:ce:a6:4f:f7:a8:1b:92:0c:5c:6a: 8f:4e:20:40:8b:08:d8:65:6e:5d:91:7b:3a:c2:31: 8b:73:a0:93:e7:cf:82:0a:2f:d5:e3:cb:c8:17:ed: ca:53:68:1a:2b:45:da:24:64:ea:91:20:48:c3:dc: cc:79:d4:5a:e0:7e:fc:e6:f2:68:a2:4f:a2:93:ce: 1b:0a:e1:eb:fa:18:a7:12:1a:8c:63:c5:7f:21:22: ef:8f:3b:a2:f8:77:66:76:67:2f:1a:fc:c6:5c:81: 44:c9:17:27:6e:23:dc:e7:7d:07:dc:03:17:79:73: 02:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:E3:AB:F9:85:27:91:94:1E:B0:91:4E:8D:9A:D0:AE:68:F0:F8:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b10e56b6-546d-3be0-b675-d61e616393d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl X509v3 Authority Key Identifier: keyid:32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer sbgp-ipAddrBlock: critical IPv4: 199.249.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:dd:b8:ac:93:d8:1c:67:fe:25:ec:8c:2f:b0:2a:7a:44:0e: 8c:1b:36:e0:bc:b3:4e:66:95:f0:8e:fb:d0:da:5a:fe:e2:6a: d5:db:e4:65:af:cd:26:c4:26:35:6f:6c:ad:5e:f6:d4:c8:f5: 5b:ee:17:9b:fe:fa:aa:2d:f0:65:46:9e:a3:59:15:70:a2:d0: 1f:fd:4d:e4:e7:75:e9:12:ac:20:89:bf:d4:59:03:39:7c:1a: dc:35:f9:cf:b3:04:66:14:c1:db:93:6b:66:22:86:c0:87:44: 84:6e:37:b2:c4:ef:69:a3:45:fd:93:5f:72:28:3e:82:c7:74: 65:ce:e9:54:b0:58:69:69:5a:b2:79:a9:98:ab:5c:b4:94:a8: 2c:f4:47:bd:ab:e6:c3:fb:7a:a0:60:08:c4:62:71:ae:60:02: 6e:ea:ef:0a:64:34:6c:47:2b:3a:22:6e:52:49:f4:10:a3:65: b1:63:6d:a1:df:ef:38:b5:8a:81:21:ce:71:67:27:77:32:ed: ce:70:c1:fe:b2:29:b6:59:a4:fd:59:e1:67:aa:6d:4c:d4:26: d9:a8:da:9d:75:08:73:b6:9b:52:ff:c5:ea:2d:7a:3e:08:0c: da:77:86:6e:44:be:34:73:09:ea:6b:47:d9:a1:49:a4:29:af: 74:6d:a5:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZndmpW1ZaJGTSUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk4NTEyMmUtZjJmZi00MzQ5LThlN2ItZDYwNGVlMjU3 N2YxMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk NGJmOTJhZjktZWQzOC00NjhlLWJiYmEtOTBkODdlOTM0NDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2AkAmqKfE8MFoHOs06edHjqovjNW3schQmC WJDIqke6NoNBudhXXjG9Gd021Exz2wCd+gpqlpanctTWlZZTfDNgybsNXroUjwi9 008ne7MtgPH+GgikXZH2RLKVcJcHDmKPhmNFeNU5QSDAyFtKvjHq82VMRCBdMLVY uDFR7N+5mHXeb583ozMogc6mT/eoG5IMXGqPTiBAiwjYZW5dkXs6wjGLc6CT58+C Ci/V48vIF+3KU2gaK0XaJGTqkSBIw9zMedRa4H785vJook+ik84bCuHr+hinEhqM Y8V/ISLvjzui+HdmdmcvGvzGXIFEyRcnbiPc530H3AMXeXMChQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNzjq/mFJ5GUHrCRTo2a0K5o8PgZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iOTg1 MTIyZS1mMmZmLTQzNDktOGU3Yi1kNjA0ZWUyNTc3ZjEvYjEwZTU2YjYtNTQ2ZC0z YmUwLWI2NzUtZDYxZTYxNjM5M2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjk4NTEyMmUtZjJmZi00MzQ5LThl N2ItZDYwNGVlMjU3N2YxL2I5ODUxMjJlLWYyZmYtNDM0OS04ZTdiLWQ2MDRlZTI1 NzdmMS5jcmwwHwYDVR0jBBgwFoAUMkPnPPcbBd82CkZOMRZRS4dhJtswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iOTg1MTIyZS1mMmZmLTQzNDktOGU3Yi1kNjA0 ZWUyNTc3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/nwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGnduKyT2Bxn/iXsjC+wKnpEDowbNuC8s05mlfCO+9DaWv7iatXb5GWv zSbEJjVvbK1e9tTI9VvuF5v++qot8GVGnqNZFXCi0B/9TeTndekSrCCJv9RZAzl8 Gtw1+c+zBGYUwduTa2YihsCHRIRuN7LE72mjRf2TX3IoPoLHdGXO6VSwWGlpWrJ5 qZirXLSUqCz0R72r5sP7eqBgCMRica5gAm7q7wpkNGxHKzoiblJJ9BCjZbFjbaHf 7zi1ioEhznFnJ3cy7c5wwf6yKbZZpP1Z4WeqbUzUJtmo2p11CHO2m1L/xeotej4I DNp3hm5EvjRzCeprR9mhSaQpr3RtpQo= -----END CERTIFICATE-----Generated at Sun Aug 24 01:16:01 2025 by rpki-client