$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/bb479e79-d118-3ff0-b4ac-117cfb090054.roa File: bb479e79-d118-3ff0-b4ac-117cfb090054.roa (raw, json) Hash identifier: ncF8ecjQERjEcpnIBzdq6gfjba9RaeOOSfg/sIFGcXM= Subject key identifier: 8E:A0:C3:4B:55:37:87:F0:80:B8:07:C9:76:D0:BF:4D:08:AB:54:22 Certificate issuer: /CN=c727dab7-c852-4d24-82ff-cf171b24f2f9 Certificate serial: 010D0C9F4328584AECC12B02853A0FCD1F510BA0 Authority key identifier: 61:1F:5A:5F:17:55:FD:D5:D0:A3:4E:20:8D:D4:8C:CC:1D:AF:69:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/bb479e79-d118-3ff0-b4ac-117cfb090054.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 394161 IP address blocks: 199.120.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/c727dab7-c852-4d24-82ff-cf171b24f2f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/c727dab7-c852-4d24-82ff-cf171b24f2f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:2b:02:85:3a:0f:cd:1f:51:0b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c727dab7-c852-4d24-82ff-cf171b24f2f9 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=e23e7f78-d043-4778-b05c-964597c1eff9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8c:b4:b5:c5:3a:c3:af:f3:30:4e:f1:ef:01: 8d:27:29:30:da:0a:3a:eb:38:00:f0:71:9e:f6:24: 24:8b:ba:ff:ae:b0:fc:0a:cb:f6:d1:69:89:1b:19: 41:dd:b0:17:dd:01:6e:98:db:95:bf:7d:5e:aa:b2: 18:3f:5e:cf:53:71:41:e8:b5:a8:e1:aa:d3:e3:89: d7:d4:d1:b8:b1:f7:58:41:ff:5a:9f:0b:0b:0e:aa: da:45:86:69:85:02:13:8d:92:23:27:c9:8f:ca:78: f0:4c:3e:19:43:e9:ae:a3:96:62:cb:63:e0:38:64: 9a:c5:d1:67:82:76:20:08:fd:75:a2:f3:07:36:50: fc:c7:27:1e:59:62:2f:95:70:fe:16:64:1b:b2:58: ad:dc:0b:10:3c:fc:dc:18:45:7f:75:b6:9c:ef:f5: 48:f4:70:50:5d:0a:d4:9d:cd:bc:39:75:e0:16:2f: 1e:fb:88:c6:e0:c7:5b:fa:07:19:82:20:0c:85:70: e4:22:da:b0:f0:a8:4c:9a:44:93:5d:2f:4d:69:1d: 2b:9b:5b:53:7e:a1:92:11:2a:b5:28:8f:14:83:eb: 39:ce:03:37:a0:0f:10:49:56:6e:66:5d:2a:fc:73: 14:1e:d6:f7:57:7d:10:fe:98:17:f3:8a:8f:68:2b: 8b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:A0:C3:4B:55:37:87:F0:80:B8:07:C9:76:D0:BF:4D:08:AB:54:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/bb479e79-d118-3ff0-b4ac-117cfb090054.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/c727dab7-c852-4d24-82ff-cf171b24f2f9.crl X509v3 Authority Key Identifier: keyid:61:1F:5A:5F:17:55:FD:D5:D0:A3:4E:20:8D:D4:8C:CC:1D:AF:69:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9.cer sbgp-ipAddrBlock: critical IPv4: 199.120.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:ad:fc:cc:98:40:01:f6:47:d2:c7:47:f8:b2:ee:be:d6:c1: 0c:ef:e3:a8:7b:5c:2b:37:76:1a:b5:14:ae:90:96:c2:8a:19: 76:c6:91:65:4d:8a:89:61:e7:c5:5c:05:21:aa:13:22:ef:4f: bd:a5:64:7f:08:b1:98:fb:f3:52:6c:83:fb:43:58:36:85:2a: bb:da:74:30:fd:7f:8d:a5:ef:2b:02:3e:39:6e:0e:81:b7:6d: 3c:23:df:4f:b4:9b:14:ba:c7:a8:e8:d6:20:18:60:24:89:b5: 59:e3:19:a3:1e:10:61:c4:fe:de:38:c8:b2:84:2b:bb:57:06: 10:49:0e:1e:81:6e:51:90:57:6a:c0:24:1a:18:da:13:f6:7b: e9:dd:1b:c9:aa:83:5d:89:07:1c:6c:ea:0a:88:97:3e:8a:10: 69:de:af:12:21:3d:a0:3f:50:56:db:62:db:66:c7:cf:86:32: ba:07:04:11:1d:7c:77:ef:9e:18:b9:b7:34:bb:c3:a1:57:05: 8d:4b:ba:20:3c:54:81:62:bb:ac:2e:1c:0b:0c:14:75:41:49: f7:5f:26:08:91:1a:e1:ee:8a:3c:b8:ad:71:65:c4:94:ce:85: bb:3f:26:3c:32:1e:78:1c:b1:a0:c9:a1:2a:10:5e:37:3b:f6: 43:9b:cf:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswSsChToPzR9RC6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzcyN2RhYjctYzg1Mi00ZDI0LTgyZmYtY2YxNzFiMjRm MmY5MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZTIzZTdmNzgtZDA0My00Nzc4LWIwNWMtOTY0NTk3YzFlZmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIy0tcU6w6/zME7x7wGNJykw2go66zgA8HGe 9iQki7r/rrD8Csv20WmJGxlB3bAX3QFumNuVv31eqrIYP17PU3FB6LWo4arT44nX 1NG4sfdYQf9anwsLDqraRYZphQITjZIjJ8mPynjwTD4ZQ+muo5Ziy2PgOGSaxdFn gnYgCP11ovMHNlD8xyceWWIvlXD+FmQbslit3AsQPPzcGEV/dbac7/VI9HBQXQrU nc28OXXgFi8e+4jG4Mdb+gcZgiAMhXDkItqw8KhMmkSTXS9NaR0rm1tTfqGSESq1 KI8Ug+s5zgM3oA8QSVZuZl0q/HMUHtb3V30Q/pgX84qPaCuLqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6gw0tVN4fwgLgHyXbQv00Iq1QiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jNzI3 ZGFiNy1jODUyLTRkMjQtODJmZi1jZjE3MWIyNGYyZjkvYmI0NzllNzktZDExOC0z ZmYwLWI0YWMtMTE3Y2ZiMDkwMDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYzcyN2RhYjctYzg1Mi00ZDI0LTgy ZmYtY2YxNzFiMjRmMmY5L2M3MjdkYWI3LWM4NTItNGQyNC04MmZmLWNmMTcxYjI0 ZjJmOS5jcmwwHwYDVR0jBBgwFoAUYR9aXxdV/dXQo04gjdSMzB2vaRowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jNzI3ZGFiNy1jODUyLTRkMjQtODJmZi1jZjE3 MWIyNGYyZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEx3ggMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACat/MyYQAH2R9LHR/iy7r7WwQzv46h7XCs3dhq1FK6QlsKKGXbGkWVN iolh58VcBSGqEyLvT72lZH8IsZj781Jsg/tDWDaFKrvadDD9f42l7ysCPjluDoG3 bTwj30+0mxS6x6jo1iAYYCSJtVnjGaMeEGHE/t44yLKEK7tXBhBJDh6BblGQV2rA JBoY2hP2e+ndG8mqg12JBxxs6gqIlz6KEGnerxIhPaA/UFbbYttmx8+GMroHBBEd fHfvnhi5tzS7w6FXBY1LuiA8VIFiu6wuHAsMFHVBSfdfJgiRGuHuijy4rXFlxJTO hbs/JjwyHngcsaDJoSoQXjc79kObz74= -----END CERTIFICATE-----Generated at Sat Aug 23 21:57:31 2025 by rpki-client