$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/71c6e432-107d-3898-91c1-e099ea6ba141.roa File: 71c6e432-107d-3898-91c1-e099ea6ba141.roa (raw, json) Hash identifier: WNouLBRU1CtebgM1EYNR1iA4FIehzgJb9mMvIqcSAVA= Subject key identifier: B2:EC:FA:19:BA:96:CB:B3:21:90:A6:14:99:28:B3:79:B8:0A:F4:B6 Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F4328584ACE0B982132A260DC7FB5FC80 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/71c6e432-107d-3898-91c1-e099ea6ba141.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 53605 IP address blocks: 199.201.104.0/22 maxlen: 32 199.201.108.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:98:21:32:a2:60:dc:7f:b5:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=d3ce60f4-eff1-4f04-8019-c58c0999ee16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:19:da:a0:f7:cd:89:cd:78:56:af:9f:bb:70: 78:8d:b4:93:18:ef:ea:1b:17:ec:e9:45:20:66:ff: 96:cb:50:aa:60:96:54:af:23:bf:c3:f2:48:12:af: ef:21:f0:3e:71:3c:75:47:61:a2:d3:ba:3d:a8:dc: 30:ab:e1:d8:18:b3:0b:76:86:a8:13:1c:7a:38:9d: 2c:aa:3d:d9:05:ac:09:62:9f:09:34:cc:12:5e:99: 0c:db:ca:28:0e:7c:81:ee:df:d2:f3:4b:f8:04:91: 5f:b2:93:46:f8:12:74:f7:08:4d:96:f7:da:b6:98: d6:7b:57:02:cb:1d:2a:ca:08:6e:50:27:7b:d3:59: 42:bb:37:92:9b:88:94:23:6e:de:89:fd:92:08:b2: 8b:08:c2:c7:39:5d:53:58:63:d9:3f:cf:6b:b5:67: 6e:54:bc:02:b0:11:fc:ab:6b:2f:14:7a:e6:a2:f7: 77:5b:2f:30:1f:d6:8f:ba:d2:41:0c:39:50:12:4d: eb:4d:80:25:d2:b0:14:be:29:cd:f8:0f:e2:31:51: 95:55:51:15:23:3c:4e:36:b8:da:06:aa:df:9f:6b: 13:0d:50:86:44:27:63:f9:6d:17:d0:61:a4:dc:f5: 04:ba:5f:b1:19:25:d2:35:52:e6:0d:2f:2f:e6:77: a3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:EC:FA:19:BA:96:CB:B3:21:90:A6:14:99:28:B3:79:B8:0A:F4:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/71c6e432-107d-3898-91c1-e099ea6ba141.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv4: 199.201.104.0-199.201.109.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:54:d0:2b:06:af:ee:69:53:c4:79:62:fd:fc:25:37:21:ea: d6:75:4f:be:5f:97:6f:ea:7b:6a:a4:a1:b4:dc:26:b1:34:5a: 70:b2:20:8f:ab:7d:74:88:f0:72:d4:ca:97:1a:3d:80:48:2d: bc:1d:64:95:17:04:d0:81:82:01:6c:a9:4f:fa:3c:62:51:7f: 0d:27:35:ba:95:58:0b:fb:64:c5:1b:ee:48:34:00:f2:0e:2c: 5e:5c:78:87:78:32:bc:4c:8e:e8:d5:1c:7b:8e:7b:36:62:9b: ed:b4:78:78:dc:e7:be:f3:82:ae:ba:38:d8:46:0e:e1:83:1b: 81:89:9e:c2:0e:80:fe:15:73:bd:2c:a8:ae:6e:59:2f:07:41: 06:ef:bf:71:45:a7:f3:0c:41:46:1e:c0:98:4c:ee:fb:93:65: 15:6d:10:27:69:f9:70:79:6d:41:93:ca:f5:a1:ba:61:52:e5: 9e:71:39:9d:76:4a:c4:3b:15:51:f4:84:db:5c:d2:40:5a:80: 38:a5:ff:e4:65:83:8e:29:17:22:fc:58:69:51:61:bb:03:19: 42:25:65:62:de:e4:c8:94:28:76:bb:e7:5a:47:d2:24:98:34: fe:cf:a9:95:e2:f4:64:dc:e7:97:26:75:2b:26:01:d9:a6:ed: 1e:5f:a4:3b -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWErOC5ghMqJg3H+1/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk ZDNjZTYwZjQtZWZmMS00ZjA0LTgwMTktYzU4YzA5OTllZTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhnaoPfNic14Vq+fu3B4jbSTGO/qGxfs6UUg Zv+Wy1CqYJZUryO/w/JIEq/vIfA+cTx1R2Gi07o9qNwwq+HYGLMLdoaoExx6OJ0s qj3ZBawJYp8JNMwSXpkM28ooDnyB7t/S80v4BJFfspNG+BJ09whNlvfatpjWe1cC yx0qyghuUCd701lCuzeSm4iUI27eif2SCLKLCMLHOV1TWGPZP89rtWduVLwCsBH8 q2svFHrmovd3Wy8wH9aPutJBDDlQEk3rTYAl0rAUvinN+A/iMVGVVVEVIzxONrja Bqrfn2sTDVCGRCdj+W0X0GGk3PUEul+xGSXSNVLmDS8v5nejaQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFLLs+hm6lsuzIZCmFJkos3m4CvS2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvNzFjNmU0MzItMTA3ZC0z ODk4LTkxYzEtZTA5OWVhNmJhMTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAPHyWgD BAHHyWwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAmlTQKwav7mlTxHli/fwlNyHq1nVPvl+Xb+p7aqShtNwm sTRacLIgj6t9dIjwctTKlxo9gEgtvB1klRcE0IGCAWypT/o8YlF/DSc1upVYC/tk xRvuSDQA8g4sXlx4h3gyvEyO6NUce457NmKb7bR4eNznvvOCrro42EYO4YMbgYme wg6A/hVzvSyorm5ZLwdBBu+/cUWn8wxBRh7AmEzu+5NlFW0QJ2n5cHltQZPK9aG6 YVLlnnE5nXZKxDsVUfSE21zSQFqAOKX/5GWDjikXIvxYaVFhuwMZQiVlYt7kyJQo drvnWkfSJJg0/s+pleL0ZNznlyZ1KyYB2abtHl+kOw== -----END CERTIFICATE-----Generated at Sun Aug 24 00:34:55 2025 by rpki-client