$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/de1bc31c-8942-32b8-94cf-739ae5317afb.roa File: de1bc31c-8942-32b8-94cf-739ae5317afb.roa (raw, json) Hash identifier: nu2LEASgGmLXRdrBcpt0Z1cnZXeaUGQwnZsF+C4/VDE= Subject key identifier: 54:2D:8D:E5:0A:10:DF:10:38:07:F8:7B:5E:6F:03:77:9A:7A:5F:AC Certificate issuer: /CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76 Certificate serial: 010D0C9F4328584ADECBAA5453A8E8485D30DB80 Authority key identifier: D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/de1bc31c-8942-32b8-94cf-739ae5317afb.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 14618 IP address blocks: 199.187.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:aa:54:53:a8:e8:48:5d:30:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76 Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=bb5d55f4-66c3-468a-bfd1-acf9e442fe68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ab:d1:ad:dc:5c:c1:8b:1f:03:3d:06:ff:82: e6:c3:7a:bd:8d:20:fe:ad:2a:7e:b7:c6:83:7a:a8: 7b:66:ab:24:1d:23:6d:7b:90:12:7b:71:c2:ff:4e: 79:da:a7:52:42:66:cd:b1:84:ff:a4:41:c8:38:31: a8:ac:8e:89:49:0f:b1:13:0c:c5:df:07:72:32:ed: 28:66:16:2e:09:68:81:d4:cc:e0:c2:a2:de:26:77: 30:36:15:fb:18:63:01:4a:06:2d:51:ce:ad:53:d0: a7:64:a0:e6:6f:29:31:77:f8:45:63:6e:58:aa:8c: e6:6e:91:3a:93:d5:49:c4:32:73:87:32:de:1a:c6: 53:05:ea:4c:72:d6:56:35:a5:7a:32:0a:1a:45:d5: 13:e3:81:f4:5d:65:23:41:74:fa:93:a2:69:0d:31: 86:76:59:27:ab:ef:fc:6f:4a:f3:95:7b:2b:b3:65: 6f:4e:97:1e:e5:04:0c:77:f7:00:92:33:fa:fd:b3: cd:35:fa:bc:e4:f6:8b:bf:88:8f:50:4d:aa:9d:35: b1:59:1b:a6:f4:c1:58:60:91:2b:63:66:ec:78:5b: 94:86:65:c8:8b:6a:8c:e6:29:9b:f1:4f:42:1d:04: 94:3b:3a:ae:4e:88:ee:2b:2c:55:f6:d2:40:45:c0: b3:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:2D:8D:E5:0A:10:DF:10:38:07:F8:7B:5E:6F:03:77:9A:7A:5F:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/de1bc31c-8942-32b8-94cf-739ae5317afb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.crl X509v3 Authority Key Identifier: keyid:D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer sbgp-ipAddrBlock: critical IPv4: 199.187.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption eb:97:cd:f4:51:77:03:d7:66:96:2d:93:34:df:97:6c:87:43: de:34:bd:a3:a6:0e:e1:65:14:38:76:54:5f:7c:6d:39:9f:de: 9b:4e:7e:e1:ca:06:13:60:51:8d:3a:79:1b:3d:7a:bf:11:bd: 59:2e:a3:91:45:5e:31:9a:88:93:c2:94:5e:cd:d9:a0:ea:db: 10:eb:69:d0:bd:9e:48:01:dc:dc:03:74:4b:3e:ae:b6:f1:80: 71:7e:92:fe:39:f8:25:bf:3f:16:d5:fb:f6:26:72:c1:33:4d: 23:1c:16:b1:cf:dd:8e:26:35:04:2f:44:3b:c6:1a:bf:8e:40: 3a:fa:62:9d:0a:67:03:33:4d:39:6b:b0:a3:0c:9e:c7:2f:06: 5c:ed:d2:04:37:92:93:49:e4:2e:21:d1:b1:c9:f1:0b:4a:91: f4:6b:ae:96:d0:9f:6a:cb:b5:b0:f9:46:3d:f2:ec:fd:44:bc: 98:00:e3:a0:fa:47:f0:3f:9d:dd:5e:39:6b:ce:7b:6e:ce:dd: 29:18:a0:3c:01:85:9b:4a:d9:e7:91:c6:11:e3:8c:f3:cc:3c: 84:56:52:4f:bc:01:a6:95:6e:04:7f:eb:87:eb:b7:4b:3f:7f: 7f:36:45:61:8c:8a:6e:67:5c:9e:2c:fe:21:77:b3:9e:97:e6: 67:3a:cc:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey6pUU6joSF0w24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNmNDM1YzAtOWQyOC00NzdhLTkwYTktMWI0ZmQ3NWNk YTc2MB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk YmI1ZDU1ZjQtNjZjMy00NjhhLWJmZDEtYWNmOWU0NDJmZTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqvRrdxcwYsfAz0G/4Lmw3q9jSD+rSp+t8aD eqh7ZqskHSNte5ASe3HC/0552qdSQmbNsYT/pEHIODGorI6JSQ+xEwzF3wdyMu0o ZhYuCWiB1MzgwqLeJncwNhX7GGMBSgYtUc6tU9CnZKDmbykxd/hFY25YqozmbpE6 k9VJxDJzhzLeGsZTBepMctZWNaV6MgoaRdUT44H0XWUjQXT6k6JpDTGGdlknq+/8 b0rzlXsrs2VvTpce5QQMd/cAkjP6/bPNNfq85PaLv4iPUE2qnTWxWRum9MFYYJEr Y2bseFuUhmXIi2qM5imb8U9CHQSUOzquTojuKyxV9tJARcCz9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQtjeUKEN8QOAf4e15vA3eael+sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xY2Y0 MzVjMC05ZDI4LTQ3N2EtOTBhOS0xYjRmZDc1Y2RhNzYvZGUxYmMzMWMtODk0Mi0z MmI4LTk0Y2YtNzM5YWU1MzE3YWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMWNmNDM1YzAtOWQyOC00NzdhLTkw YTktMWI0ZmQ3NWNkYTc2LzFjZjQzNWMwLTlkMjgtNDc3YS05MGE5LTFiNGZkNzVj ZGE3Ni5jcmwwHwYDVR0jBBgwFoAU1T8UX0FTWvBBwtK/fTtQ5jUy/9QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xY2Y0MzVjMC05ZDI4LTQ3N2EtOTBhOS0xYjRm ZDc1Y2RhNzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7urMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOuXzfRRdwPXZpYtkzTfl2yHQ940vaOmDuFlFDh2VF98bTmf3ptOfuHK BhNgUY06eRs9er8RvVkuo5FFXjGaiJPClF7N2aDq2xDradC9nkgB3NwDdEs+rrbx gHF+kv45+CW/PxbV+/YmcsEzTSMcFrHP3Y4mNQQvRDvGGr+OQDr6Yp0KZwMzTTlr sKMMnscvBlzt0gQ3kpNJ5C4h0bHJ8QtKkfRrrpbQn2rLtbD5Rj3y7P1EvJgA46D6 R/A/nd1eOWvOe27O3SkYoDwBhZtK2eeRxhHjjPPMPIRWUk+8AaaVbgR/64frt0s/ f382RWGMim5nXJ4s/iF3s56X5mc6zFM= -----END CERTIFICATE-----Generated at Sat Aug 23 08:16:44 2025 by rpki-client