$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a456a73-032d-4675-8f0a-2db7b1e58168/825702a4-e267-3fed-801c-e21c3ef74911.roa File: 825702a4-e267-3fed-801c-e21c3ef74911.roa (raw, json) Hash identifier: FYzKdzaieZiDZSTtIj8pbP3yT5MY0CD9awst9OBy3mE= Subject key identifier: 05:5C:89:1F:2C:44:5B:A5:98:56:FD:4E:64:41:9D:7D:11:50:97:5B Certificate issuer: /CN=5a456a73-032d-4675-8f0a-2db7b1e58168 Certificate serial: 010D0C9F4328584AC01633C8DBBFA7EBACD3C880 Authority key identifier: 85:9F:34:F5:35:BE:D5:53:DD:C1:EF:BB:7F:3D:49:7A:46:55:57:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a456a73-032d-4675-8f0a-2db7b1e58168.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a456a73-032d-4675-8f0a-2db7b1e58168/825702a4-e267-3fed-801c-e21c3ef74911.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 53594 IP address blocks: 198.200.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a456a73-032d-4675-8f0a-2db7b1e58168/5a456a73-032d-4675-8f0a-2db7b1e58168.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a456a73-032d-4675-8f0a-2db7b1e58168/5a456a73-032d-4675-8f0a-2db7b1e58168.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a456a73-032d-4675-8f0a-2db7b1e58168.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:33:c8:db:bf:a7:eb:ac:d3:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a456a73-032d-4675-8f0a-2db7b1e58168 Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=bd3725be-c677-40ac-8a51-b7b9291c4fb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7d:1f:81:ba:55:e2:7e:91:9d:f5:cf:ea:b0: 14:4f:b2:77:60:c9:f2:30:c0:7c:d3:6f:13:7e:b3: f6:42:9b:34:dd:a7:c1:71:fa:4b:e8:22:cd:bd:4e: 68:a2:5c:4f:15:b6:3b:25:3b:f1:8f:a3:c0:01:e9: c8:62:78:4b:aa:d0:80:13:9e:c4:db:f5:26:67:62: f6:c1:96:15:0a:bf:33:b6:d7:88:2f:c8:b0:14:6e: ff:27:58:7f:f0:a1:ac:eb:f4:2d:b4:1e:f4:ba:0d: 01:f7:fa:1b:45:ea:d9:78:9d:47:3d:19:0e:94:bc: 7e:6b:3d:56:2a:d1:f9:d1:c1:e7:cc:ba:96:d3:e4: d6:e5:4e:d6:1c:39:e8:6e:bb:df:4c:47:5b:ab:d0: 5c:75:cd:3b:86:58:80:97:5d:eb:8d:8a:4f:1e:1d: 90:3a:1b:cc:62:53:ec:13:b1:0b:b9:9d:f8:f1:8f: ab:cb:73:7d:3b:5d:45:ec:df:1e:1e:4f:7d:40:ec: a8:40:b7:5d:16:e8:8a:ba:b8:06:98:6f:ed:95:38: 2c:6c:dd:a5:7b:1f:ad:d3:03:78:31:c4:66:66:9e: fe:1c:f6:50:4b:d3:6a:41:cb:78:fc:4d:68:86:7a: a0:45:92:4b:63:a6:54:03:2d:d1:33:1a:57:d9:07: 43:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:5C:89:1F:2C:44:5B:A5:98:56:FD:4E:64:41:9D:7D:11:50:97:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a456a73-032d-4675-8f0a-2db7b1e58168/825702a4-e267-3fed-801c-e21c3ef74911.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a456a73-032d-4675-8f0a-2db7b1e58168/5a456a73-032d-4675-8f0a-2db7b1e58168.crl X509v3 Authority Key Identifier: keyid:85:9F:34:F5:35:BE:D5:53:DD:C1:EF:BB:7F:3D:49:7A:46:55:57:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a456a73-032d-4675-8f0a-2db7b1e58168.cer sbgp-ipAddrBlock: critical IPv4: 198.200.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:70:7f:0d:09:7b:70:0f:f5:83:e9:a9:ea:4b:02:bb:50:51: 90:aa:78:14:fa:18:af:dc:9e:32:5c:12:3c:9f:18:57:1a:66: f6:cb:70:d7:b0:73:16:4d:42:e2:e3:22:07:c5:d0:5d:b8:e2: 13:9d:47:35:46:86:4e:52:34:ff:62:fd:f9:b2:20:4a:29:dc: 8f:49:c1:78:b7:7f:ca:09:89:a6:74:1b:5c:7d:99:54:04:0f: 66:80:8b:f3:6d:6e:b6:69:ec:16:51:50:70:83:87:af:b3:f6: 42:bd:f7:ba:63:5b:19:7d:3d:d2:62:44:ba:fa:57:02:32:88: f7:44:5f:67:69:0f:6d:e5:ce:ed:5d:ce:94:34:dc:7d:41:be: 04:dd:35:09:2b:6a:1e:33:3c:32:36:5d:95:76:48:e3:ac:cf: 09:e0:2d:33:e0:c1:70:07:67:46:1b:22:23:91:9f:10:be:1c: 4a:b8:66:73:39:e6:bd:43:a2:a2:44:13:ca:c9:be:7e:46:69: 8f:16:34:46:6d:d0:80:ab:1d:4b:0c:22:b4:e0:8b:19:f9:87: a7:b4:73:d3:ed:62:e7:e8:2d:28:f0:f3:f5:bf:ce:e1:b1:0c: fb:9a:0b:3c:23:c3:5e:b0:58:af:39:35:bb:75:9b:7f:f5:20: f8:ab:19:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFjPI27+n66zTyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWE0NTZhNzMtMDMyZC00Njc1LThmMGEtMmRiN2IxZTU4 MTY4MB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk YmQzNzI1YmUtYzY3Ny00MGFjLThhNTEtYjdiOTI5MWM0ZmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw30fgbpV4n6RnfXP6rAUT7J3YMnyMMB8028T frP2Qps03afBcfpL6CLNvU5oolxPFbY7JTvxj6PAAenIYnhLqtCAE57E2/UmZ2L2 wZYVCr8ztteIL8iwFG7/J1h/8KGs6/QttB70ug0B9/obRerZeJ1HPRkOlLx+az1W KtH50cHnzLqW0+TW5U7WHDnobrvfTEdbq9Bcdc07hliAl13rjYpPHh2QOhvMYlPs E7ELuZ348Y+ry3N9O11F7N8eHk99QOyoQLddFuiKurgGmG/tlTgsbN2lex+t0wN4 McRmZp7+HPZQS9NqQct4/E1ohnqgRZJLY6ZUAy3RMxpX2QdDgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAVciR8sRFulmFb9TmRBnX0RUJdbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81YTQ1 NmE3My0wMzJkLTQ2NzUtOGYwYS0yZGI3YjFlNTgxNjgvODI1NzAyYTQtZTI2Ny0z ZmVkLTgwMWMtZTIxYzNlZjc0OTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNWE0NTZhNzMtMDMyZC00Njc1LThm MGEtMmRiN2IxZTU4MTY4LzVhNDU2YTczLTAzMmQtNDY3NS04ZjBhLTJkYjdiMWU1 ODE2OC5jcmwwHwYDVR0jBBgwFoAUhZ809TW+1VPdwe+7fz1JekZVV8gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81YTQ1NmE3My0wMzJkLTQ2NzUtOGYwYS0yZGI3 YjFlNTgxNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxsgcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNwfw0Je3AP9YPpqepLArtQUZCqeBT6GK/cnjJcEjyfGFcaZvbLcNew cxZNQuLjIgfF0F244hOdRzVGhk5SNP9i/fmyIEop3I9JwXi3f8oJiaZ0G1x9mVQE D2aAi/NtbrZp7BZRUHCDh6+z9kK997pjWxl9PdJiRLr6VwIyiPdEX2dpD23lzu1d zpQ03H1BvgTdNQkrah4zPDI2XZV2SOOszwngLTPgwXAHZ0YbIiORnxC+HEq4ZnM5 5r1DoqJEE8rJvn5GaY8WNEZt0ICrHUsMIrTgixn5h6e0c9PtYufoLSjw8/W/zuGx DPuaCzwjw16wWK85Nbt1m3/1IPirGXg= -----END CERTIFICATE-----Generated at Sun Aug 24 04:31:20 2025 by rpki-client