$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55/fa68b0de-950c-3c2b-93c2-0c01d381801f.roa File: fa68b0de-950c-3c2b-93c2-0c01d381801f.roa (raw, json) Hash identifier: oH1dN0jRqZW5mJGdTp/dx7Li1tHhV/0M1MF0dv7Loos= Subject key identifier: 9E:D3:41:88:17:97:43:88:DD:F6:97:26:2E:4C:A4:3E:73:EF:6E:4C Certificate issuer: /CN=1f5fe3e7-3c15-4742-a824-8c933974ab55 Certificate serial: 010D0C9F4328584AC2E0E44120A92237169B3000 Authority key identifier: 04:16:CB:E5:BD:0C:1A:59:30:EB:0E:72:5C:7A:4E:81:7C:0E:C5:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55/fa68b0de-950c-3c2b-93c2-0c01d381801f.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 16509 IP address blocks: 198.99.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55/1f5fe3e7-3c15-4742-a824-8c933974ab55.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55/1f5fe3e7-3c15-4742-a824-8c933974ab55.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:e4:41:20:a9:22:37:16:9b:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f5fe3e7-3c15-4742-a824-8c933974ab55 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=8d633bb8-d5ac-441f-b668-cc0ae8d00dca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:80:b0:dc:dd:9d:c9:22:41:d7:00:42:5d:de: ce:8c:0a:cf:9f:64:b9:cd:de:29:c7:ee:7e:a9:70: 35:91:fe:52:b2:5a:44:a4:dd:b7:f9:e2:99:8f:8f: 71:e7:f1:ca:ef:6d:9b:af:9a:89:63:2c:7f:0a:35: 90:09:b0:4c:5f:c7:cc:cb:e8:d2:56:72:5b:4c:bf: 8e:6a:16:00:ec:fd:a9:d3:1e:55:d8:49:9c:a3:6a: 6c:e9:40:f6:4e:ca:ca:36:9b:de:fa:12:24:78:b3: 0c:33:de:d1:71:23:b8:0d:05:51:6e:eb:e4:63:6f: 7e:ef:62:f2:bd:fb:d3:82:bc:3f:a7:b9:8f:80:a0: 93:02:20:c8:a0:be:51:a3:c8:05:89:62:48:4f:9a: fc:6e:b2:f6:02:a5:94:48:2e:7b:b8:bd:cb:90:de: e4:31:1c:60:79:59:34:0c:ac:b2:d6:e7:2c:26:ac: 7b:9d:d6:34:35:5a:4f:81:83:2a:92:98:a0:03:2d: 77:f0:d0:50:e3:7b:9b:93:2f:a5:7e:f7:eb:4e:d1: b2:60:29:83:cc:78:5e:a8:89:ef:62:62:6d:29:fd: 5c:3b:2d:ce:92:5e:f0:d5:4a:af:87:37:85:20:21: c1:88:54:6b:b7:1a:97:af:a9:77:f9:49:e7:d3:16: 3b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:D3:41:88:17:97:43:88:DD:F6:97:26:2E:4C:A4:3E:73:EF:6E:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55/fa68b0de-950c-3c2b-93c2-0c01d381801f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55/1f5fe3e7-3c15-4742-a824-8c933974ab55.crl X509v3 Authority Key Identifier: keyid:04:16:CB:E5:BD:0C:1A:59:30:EB:0E:72:5C:7A:4E:81:7C:0E:C5:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55.cer sbgp-ipAddrBlock: critical IPv4: 198.99.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:dd:7b:4f:e0:f8:67:d2:a7:e5:95:3b:dd:13:75:4e:fd:9b: de:5e:14:41:13:50:ff:bd:ae:e4:4e:c3:61:e4:e3:49:98:8f: 68:0e:a6:ee:f6:25:cd:6c:7e:88:d5:a4:ec:2d:a6:99:67:e5: 1c:25:09:24:28:ba:7f:45:3b:c3:15:05:34:90:22:9f:ed:ee: c9:98:77:bb:b9:aa:74:2b:39:6f:b2:47:c6:a5:ae:54:e1:37: ff:31:e2:59:38:cb:36:7a:a7:d8:08:9d:05:5d:69:b5:37:83: 2a:5d:ab:9b:bf:5a:87:8c:ad:f2:5c:0d:36:49:b3:0f:f0:13: d2:62:43:73:fb:84:91:67:5d:52:4c:26:68:11:1b:13:08:70: 5c:50:ae:0c:15:ab:69:0f:97:21:85:af:e1:c6:b9:3d:e0:b8: 65:ac:2d:e1:78:20:6d:b3:4c:29:45:f1:cf:99:21:47:eb:4e: 39:15:28:77:90:23:a6:54:22:c0:bf:76:f6:93:f9:5a:22:de: df:97:59:44:e5:9f:e2:7f:8e:f3:3a:9b:ab:ef:d5:d8:a9:24: 36:c6:a3:a5:68:8d:ce:f9:86:3c:19:fe:82:d0:a7:e9:6d:61: d5:87:00:df:f1:c4:3b:38:d6:1f:37:7f:39:ff:31:6e:e5:fa: 43:f9:ac:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4ORBIKkiNxabMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY1ZmUzZTctM2MxNS00NzQyLWE4MjQtOGM5MzM5NzRh YjU1MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk OGQ2MzNiYjgtZDVhYy00NDFmLWI2NjgtY2MwYWU4ZDAwZGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjICw3N2dySJB1wBCXd7OjArPn2S5zd4px+5+ qXA1kf5SslpEpN23+eKZj49x5/HK722br5qJYyx/CjWQCbBMX8fMy+jSVnJbTL+O ahYA7P2p0x5V2Emco2ps6UD2TsrKNpve+hIkeLMMM97RcSO4DQVRbuvkY29+72Ly vfvTgrw/p7mPgKCTAiDIoL5Ro8gFiWJIT5r8brL2AqWUSC57uL3LkN7kMRxgeVk0 DKyy1ucsJqx7ndY0NVpPgYMqkpigAy138NBQ43ubky+lfvfrTtGyYCmDzHheqInv YmJtKf1cOy3Okl7w1UqvhzeFICHBiFRrtxqXr6l3+Unn0xY7OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ7TQYgXl0OI3faXJi5MpD5z725MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xZjVm ZTNlNy0zYzE1LTQ3NDItYTgyNC04YzkzMzk3NGFiNTUvZmE2OGIwZGUtOTUwYy0z YzJiLTkzYzItMGMwMWQzODE4MDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWY1ZmUzZTctM2MxNS00NzQyLWE4 MjQtOGM5MzM5NzRhYjU1LzFmNWZlM2U3LTNjMTUtNDc0Mi1hODI0LThjOTMzOTc0 YWI1NS5jcmwwHwYDVR0jBBgwFoAUBBbL5b0MGlkw6w5yXHpOgXwOxfUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xZjVmZTNlNy0zYzE1LTQ3NDItYTgyNC04Yzkz Mzk3NGFiNTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmN7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjde0/g+GfSp+WVO90TdU79m95eFEETUP+9ruROw2Hk40mYj2gOpu72 Jc1sfojVpOwtppln5RwlCSQoun9FO8MVBTSQIp/t7smYd7u5qnQrOW+yR8alrlTh N/8x4lk4yzZ6p9gInQVdabU3gypdq5u/WoeMrfJcDTZJsw/wE9JiQ3P7hJFnXVJM JmgRGxMIcFxQrgwVq2kPlyGFr+HGuT3guGWsLeF4IG2zTClF8c+ZIUfrTjkVKHeQ I6ZUIsC/dvaT+Voi3t+XWUTln+J/jvM6m6vv1dipJDbGo6Vojc75hjwZ/oLQp+lt YdWHAN/xxDs41h83fzn/MW7l+kP5rBY= -----END CERTIFICATE-----Generated at Sat Aug 23 08:14:03 2025 by rpki-client