$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/cfe8f972-b6e5-33c5-b7b5-cdf4177cd5f5.roa File: cfe8f972-b6e5-33c5-b7b5-cdf4177cd5f5.roa (raw, json) Hash identifier: U0VOXNnuD6EW8EKLwSm0QWODvZlG2P03ICpoPruw8o4= Subject key identifier: 9E:D6:DB:24:1A:81:83:23:EA:F0:EA:2F:A3:5F:8A:64:97:98:6B:31 Certificate issuer: /CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76 Certificate serial: 010D0C9F4328584ADECBB235753D2206EAD68B74 Authority key identifier: D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/cfe8f972-b6e5-33c5-b7b5-cdf4177cd5f5.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 14618 IP address blocks: 199.187.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:b2:35:75:3d:22:06:ea:d6:8b:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76 Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=a6c6d09b-ff15-4f32-99b2-2726da2f4741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:5d:aa:ba:74:79:1f:18:c9:dd:a4:f7:41:58: cc:3b:96:72:ec:60:8c:e8:c6:b7:c6:94:b9:90:6e: 80:bb:5f:b6:d0:e4:bb:cb:a2:f0:79:66:8d:72:d0: b9:ba:87:b8:55:ef:34:96:05:a6:af:10:40:75:28: a2:47:6e:01:68:40:61:f5:66:c3:e9:12:ec:53:12: 7c:32:d6:60:f9:0b:b8:17:dd:65:4e:22:24:5d:8e: 61:04:76:be:e4:60:5c:8d:5a:fe:42:c2:e0:09:30: 6b:62:7d:fd:8c:d8:d0:2b:cc:42:9c:bc:7c:2b:12: 94:8e:21:8c:7c:e8:69:78:b0:01:63:85:32:27:48: 23:d3:cd:cd:ca:e0:92:c0:ba:7c:b4:24:b1:44:16: 5c:d0:ba:7d:1b:bc:47:fc:02:39:a3:45:49:ab:a9: 16:d6:1e:e8:dd:23:40:b1:a6:1d:75:c3:51:90:b0: 4b:f8:c9:62:f8:c7:ce:d2:9d:86:a5:34:df:24:a1: 20:d9:ec:77:e6:c0:46:b8:d9:0a:c9:1d:a1:08:26: 1f:af:b2:3a:3e:f6:0b:ec:f0:aa:3a:f3:b5:93:17: 22:a9:27:f7:33:a2:09:15:34:de:4f:cd:fc:1f:ef: d0:78:af:ba:d5:9b:eb:38:5a:26:3e:b3:94:2f:fc: d8:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:D6:DB:24:1A:81:83:23:EA:F0:EA:2F:A3:5F:8A:64:97:98:6B:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/cfe8f972-b6e5-33c5-b7b5-cdf4177cd5f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.crl X509v3 Authority Key Identifier: keyid:D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer sbgp-ipAddrBlock: critical IPv4: 199.187.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:d4:51:23:78:bd:b6:01:79:ae:7b:70:23:40:5c:16:7a:e6: 6e:76:7d:72:2c:09:70:fc:9c:c4:fb:4a:18:ae:24:73:66:10: 0f:58:18:35:c1:40:fa:77:e4:15:05:14:2a:fa:fd:75:ab:15: b7:7e:3e:97:5f:5c:39:82:7d:cd:1f:08:99:a8:0d:41:0d:12: d0:0f:0b:ac:85:1b:8a:90:c3:2c:e3:4a:72:35:8a:aa:65:0a: 51:42:6c:b1:b5:c3:7e:a1:65:20:97:d6:aa:ec:ea:f3:1e:7a: a8:3f:75:f8:2c:4b:91:08:f4:f0:c1:02:20:31:45:95:10:9f: 08:91:9b:9e:89:ef:b8:ea:20:26:1e:6c:36:8c:3d:bd:d5:4d: 65:7e:f9:87:53:18:57:2f:17:9b:bd:42:1d:57:d7:b9:d1:55: f3:b1:d6:ac:57:df:2e:0a:e9:ef:07:6c:18:fb:3b:dc:c1:ac: b7:56:ae:c4:8d:f8:49:fa:a3:82:2f:89:20:d4:d9:cf:f6:31: 5d:63:9f:9b:de:ec:37:b0:39:c4:56:5d:82:09:8a:6f:b4:80: 36:34:17:c1:aa:80:78:70:7f:f4:ec:4f:d8:f7:f7:12:c5:49: 84:ee:01:9c:e0:4b:83:4e:29:e6:b3:30:8e:cc:de:90:da:e7: e5:df:43:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey7I1dT0iBurWi3QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNmNDM1YzAtOWQyOC00NzdhLTkwYTktMWI0ZmQ3NWNk YTc2MB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk YTZjNmQwOWItZmYxNS00ZjMyLTk5YjItMjcyNmRhMmY0NzQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnF2qunR5HxjJ3aT3QVjMO5Zy7GCM6Ma3xpS5 kG6Au1+20OS7y6LweWaNctC5uoe4Ve80lgWmrxBAdSiiR24BaEBh9WbD6RLsUxJ8 MtZg+Qu4F91lTiIkXY5hBHa+5GBcjVr+QsLgCTBrYn39jNjQK8xCnLx8KxKUjiGM fOhpeLABY4UyJ0gj083NyuCSwLp8tCSxRBZc0Lp9G7xH/AI5o0VJq6kW1h7o3SNA saYddcNRkLBL+Mli+MfO0p2GpTTfJKEg2ex35sBGuNkKyR2hCCYfr7I6PvYL7PCq OvO1kxciqSf3M6IJFTTeT838H+/QeK+61ZvrOFomPrOUL/zYfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ7W2yQagYMj6vDqL6NfimSXmGsxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xY2Y0 MzVjMC05ZDI4LTQ3N2EtOTBhOS0xYjRmZDc1Y2RhNzYvY2ZlOGY5NzItYjZlNS0z M2M1LWI3YjUtY2RmNDE3N2NkNWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMWNmNDM1YzAtOWQyOC00NzdhLTkw YTktMWI0ZmQ3NWNkYTc2LzFjZjQzNWMwLTlkMjgtNDc3YS05MGE5LTFiNGZkNzVj ZGE3Ni5jcmwwHwYDVR0jBBgwFoAU1T8UX0FTWvBBwtK/fTtQ5jUy/9QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xY2Y0MzVjMC05ZDI4LTQ3N2EtOTBhOS0xYjRm ZDc1Y2RhNzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7upMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/UUSN4vbYBea57cCNAXBZ65m52fXIsCXD8nMT7ShiuJHNmEA9YGDXB QPp35BUFFCr6/XWrFbd+PpdfXDmCfc0fCJmoDUENEtAPC6yFG4qQwyzjSnI1iqpl ClFCbLG1w36hZSCX1qrs6vMeeqg/dfgsS5EI9PDBAiAxRZUQnwiRm56J77jqICYe bDaMPb3VTWV++YdTGFcvF5u9Qh1X17nRVfOx1qxX3y4K6e8HbBj7O9zBrLdWrsSN +En6o4IviSDU2c/2MV1jn5ve7DewOcRWXYIJim+0gDY0F8GqgHhwf/TsT9j39xLF SYTuAZzgS4NOKeazMI7M3pDa5+XfQzk= -----END CERTIFICATE-----Generated at Sat Aug 23 08:09:26 2025 by rpki-client