$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/91f245d2-ace9-4f2b-ab8e-927934d9805f/c1cbc946-fa38-376c-910a-70a850448b50.roa File: c1cbc946-fa38-376c-910a-70a850448b50.roa (raw, json) Hash identifier: lP1QHLXrjG3DhQySpZqva3ReOaj6hM8zEvugvN4fLzs= Subject key identifier: AE:E7:DB:15:40:75:A7:21:23:7B:77:22:21:C9:AC:A6:4F:E4:F6:98 Certificate issuer: /CN=91f245d2-ace9-4f2b-ab8e-927934d9805f Certificate serial: 010D0C9F4328584AC2E0E01E5D44073E94843CE0 Authority key identifier: 7B:81:F3:E6:29:C6:08:6B:E8:1A:B4:36:4F:D1:89:2E:37:B5:0C:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/91f245d2-ace9-4f2b-ab8e-927934d9805f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/91f245d2-ace9-4f2b-ab8e-927934d9805f/c1cbc946-fa38-376c-910a-70a850448b50.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 16509 IP address blocks: 172.99.14.0/24 maxlen: 24 172.99.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/91f245d2-ace9-4f2b-ab8e-927934d9805f/91f245d2-ace9-4f2b-ab8e-927934d9805f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/91f245d2-ace9-4f2b-ab8e-927934d9805f/91f245d2-ace9-4f2b-ab8e-927934d9805f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/91f245d2-ace9-4f2b-ab8e-927934d9805f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:e0:1e:5d:44:07:3e:94:84:3c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91f245d2-ace9-4f2b-ab8e-927934d9805f Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=19bec4c0-fd0a-4eab-8e06-1928af1c4720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:bf:bd:c3:b0:8c:e6:33:d7:b3:b9:bf:4a:f0: 11:57:fc:b4:44:a2:f9:a1:48:fd:a3:4a:75:13:9a: 00:46:4f:ae:a7:76:c8:4c:f8:6b:bd:c2:0e:c7:b4: ae:24:4f:a7:85:5c:66:cc:d6:84:b4:8a:6a:47:b8: 35:e8:88:a5:e8:98:8a:e9:67:ea:37:ab:b5:df:73: 30:d8:0e:1e:56:52:ad:0f:25:93:31:b9:17:5f:41: ea:c4:c2:8d:39:f3:66:77:c5:a6:b0:f8:d2:8a:0e: bc:6c:ea:2f:79:01:07:c4:96:4e:01:18:f0:63:74: dd:03:07:e7:71:1e:68:ee:19:27:70:de:96:ec:f9: 83:0d:54:0f:4f:ce:02:8c:14:2f:91:94:51:1b:91: e0:9e:eb:1b:ed:c9:0f:64:65:11:9a:35:3e:b9:a5: e0:0a:f0:5b:d8:5b:6d:2c:65:b8:48:15:1d:76:40: d8:6a:ca:76:fc:b3:73:2c:33:0c:ca:2b:f6:a4:95: 0d:6a:44:dd:75:66:a6:f9:11:5f:a6:75:f6:9d:93: 72:de:62:d9:3b:d1:fc:b0:55:a6:d6:ca:30:f7:f8: 63:13:6b:bf:b1:09:53:0f:13:4a:b1:35:bb:e1:e8: c4:d5:9d:8c:bf:45:d9:59:b5:8f:1e:a4:e9:d8:78: da:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:E7:DB:15:40:75:A7:21:23:7B:77:22:21:C9:AC:A6:4F:E4:F6:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/91f245d2-ace9-4f2b-ab8e-927934d9805f/c1cbc946-fa38-376c-910a-70a850448b50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/91f245d2-ace9-4f2b-ab8e-927934d9805f/91f245d2-ace9-4f2b-ab8e-927934d9805f.crl X509v3 Authority Key Identifier: keyid:7B:81:F3:E6:29:C6:08:6B:E8:1A:B4:36:4F:D1:89:2E:37:B5:0C:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/91f245d2-ace9-4f2b-ab8e-927934d9805f.cer sbgp-ipAddrBlock: critical IPv4: 172.99.14.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:82:8d:e2:7e:ca:cf:bb:65:81:ea:4e:50:0a:7f:7c:95:6f: 91:2b:95:0c:20:5a:db:c9:7c:1c:ed:32:94:0d:ee:00:40:4e: dd:f2:e9:40:81:25:35:69:44:96:dd:d0:c3:e1:df:55:1a:d7: cd:d1:62:8c:32:64:bd:6a:99:8f:ad:84:0c:31:16:ec:3e:31: 4a:9d:29:68:eb:27:4d:9f:1f:af:b1:57:91:e7:b8:7c:8c:19: d9:68:8e:47:8c:00:93:d4:b1:96:4e:d7:5f:e5:60:29:93:17: 83:88:29:88:81:27:7b:52:4b:ba:0f:5b:cf:01:55:44:b2:ca: 63:73:80:fa:38:7e:9f:04:e9:2b:53:45:b7:0f:bf:ca:fe:ad: 6d:15:c2:b3:96:07:ec:5b:df:5c:d7:65:24:bb:9a:75:1a:b0: e4:42:2f:44:a8:ee:09:35:30:e2:27:e4:e3:17:b6:a5:48:6e: e6:3e:d6:2b:8f:ae:f7:a6:e5:e4:4f:15:7d:3f:39:7a:7b:f8: 42:7c:88:55:c4:8c:0b:5f:75:ee:5a:39:a6:d6:e8:dd:91:f2: 88:8f:77:af:2c:91:d0:4d:ea:84:ff:ad:d6:d6:05:37:81:1c: 1d:ab:cf:6a:d0:b9:45:6b:2a:ef:7c:b8:e6:9c:bc:1a:d6:de: 33:05:44:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4OAeXUQHPpSEPOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTFmMjQ1ZDItYWNlOS00ZjJiLWFiOGUtOTI3OTM0ZDk4 MDVmMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk MTliZWM0YzAtZmQwYS00ZWFiLThlMDYtMTkyOGFmMWM0NzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnL+9w7CM5jPXs7m/SvARV/y0RKL5oUj9o0p1 E5oARk+up3bITPhrvcIOx7SuJE+nhVxmzNaEtIpqR7g16Iil6JiK6WfqN6u133Mw 2A4eVlKtDyWTMbkXX0HqxMKNOfNmd8WmsPjSig68bOoveQEHxJZOARjwY3TdAwfn cR5o7hkncN6W7PmDDVQPT84CjBQvkZRRG5Hgnusb7ckPZGURmjU+uaXgCvBb2Ftt LGW4SBUddkDYasp2/LNzLDMMyiv2pJUNakTddWam+RFfpnX2nZNy3mLZO9H8sFWm 1sow9/hjE2u/sQlTDxNKsTW74ejE1Z2Mv0XZWbWPHqTp2HjalwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK7n2xVAdachI3t3IiHJrKZP5PaYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85MWYy NDVkMi1hY2U5LTRmMmItYWI4ZS05Mjc5MzRkOTgwNWYvYzFjYmM5NDYtZmEzOC0z NzZjLTkxMGEtNzBhODUwNDQ4YjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTFmMjQ1ZDItYWNlOS00ZjJiLWFi OGUtOTI3OTM0ZDk4MDVmLzkxZjI0NWQyLWFjZTktNGYyYi1hYjhlLTkyNzkzNGQ5 ODA1Zi5jcmwwHwYDVR0jBBgwFoAUe4Hz5inGCGvoGrQ2T9GJLje1DJQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85MWYyNDVkMi1hY2U5LTRmMmItYWI4ZS05Mjc5 MzRkOTgwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGMOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuCjeJ+ys+7ZYHqTlAKf3yVb5ErlQwgWtvJfBztMpQN7gBATt3y6UCB JTVpRJbd0MPh31Ua183RYowyZL1qmY+thAwxFuw+MUqdKWjrJ02fH6+xV5HnuHyM GdlojkeMAJPUsZZO11/lYCmTF4OIKYiBJ3tSS7oPW88BVUSyymNzgPo4fp8E6StT RbcPv8r+rW0VwrOWB+xb31zXZSS7mnUasORCL0So7gk1MOIn5OMXtqVIbuY+1iuP rvem5eRPFX0/OXp7+EJ8iFXEjAtfde5aOabW6N2R8oiPd68skdBN6oT/rdbWBTeB HB2rz2rQuUVrKu98uOacvBrW3jMFRPI= -----END CERTIFICATE-----Generated at Sat Aug 23 10:18:12 2025 by rpki-client