$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/86d52164-647e-3414-9ea6-46b394b0d1a1.roa File: 86d52164-647e-3414-9ea6-46b394b0d1a1.roa (raw, json) Hash identifier: jVDlIpl7eJU5Bz1kGUAeVnIAedgg6SLvkbFJ6UsU27g= Subject key identifier: 8F:BC:E7:D2:BC:F4:2A:5E:99:CA:BA:36:0E:F9:4E:27:A7:B7:0A:F6 Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F4328584AB650DF643B0D88796E7EF100 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/86d52164-647e-3414-9ea6-46b394b0d1a1.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 12259 IP address blocks: 199.201.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:50:df:64:3b:0d:88:79:6e:7e:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=4bfcae8c-6c19-424d-87c0-1c8312c78bf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:3b:b9:d4:92:eb:8c:0b:2e:05:42:bd:15:cf: 61:86:c4:b2:3c:59:55:73:00:13:c7:e1:cb:4f:18: ea:b2:a1:be:95:f6:97:e5:84:5b:91:f2:29:3b:66: db:e4:20:e9:e5:ac:29:ec:48:31:f6:9f:54:b5:ee: fe:7a:87:88:a4:fd:f3:3c:41:30:4e:4c:aa:bf:a9: 00:e1:ba:72:79:77:b8:fc:fb:49:7c:fd:4a:99:d0: 12:07:17:41:aa:72:f5:ef:7d:28:1f:f5:cb:95:8a: 06:0c:48:e7:e1:f5:6e:a2:74:cb:25:78:ea:a7:da: 07:bb:33:e3:c8:fb:2d:e9:96:68:37:00:8e:fd:92: 38:13:d2:05:96:a9:6b:7b:e1:79:92:e7:2e:07:55: 04:64:97:29:72:9a:ca:8a:60:6f:c5:6a:15:f9:cd: c8:00:30:bc:ac:b6:35:5f:88:db:8e:fc:cd:5e:4c: 2e:98:49:d3:dc:e1:cd:f9:b9:97:0c:47:df:c1:6b: 74:12:20:9d:ff:62:d7:b1:bd:fc:e4:fb:5b:59:13: 6f:db:4a:f8:17:33:af:b7:69:d3:db:f1:02:50:cd: d7:e9:19:f2:f1:83:d1:95:cb:37:2c:b1:32:47:94: 56:4c:3b:62:49:19:b2:81:81:74:32:82:b4:22:4b: 33:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:BC:E7:D2:BC:F4:2A:5E:99:CA:BA:36:0E:F9:4E:27:A7:B7:0A:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/86d52164-647e-3414-9ea6-46b394b0d1a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv4: 199.201.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:c4:f7:31:6f:29:e9:c7:d7:c7:cb:c1:d9:c0:9f:b1:cc:87: ac:1f:11:bf:0a:27:9b:ca:a4:98:d1:2a:63:f2:96:f8:96:42: 65:7a:5a:88:bd:6a:66:e5:57:4d:cd:ac:8d:7a:d9:d1:87:8f: 3d:8b:41:7e:1c:22:9c:6f:70:96:3f:c3:15:38:2e:99:f2:34: 01:57:3c:2f:73:03:75:70:b7:61:cb:67:69:2b:2a:6c:d1:18: ba:38:53:0b:40:c8:a2:5f:81:00:cd:3d:f1:13:a5:0e:d6:c3: 6f:0b:0e:16:31:9d:a5:74:b5:54:13:87:cb:79:e2:fd:4d:b9: 63:17:97:5a:39:0a:90:4a:05:15:30:aa:cf:ff:92:d0:25:9c: b6:f3:be:04:2a:5a:68:17:ac:a5:b9:24:63:fc:51:aa:dc:5a: ae:38:75:98:25:93:d7:3e:ad:6b:4f:1a:00:7f:4a:21:dc:f5: 1b:53:bd:b2:c1:9b:7f:52:3c:ac:1c:ec:55:d2:d9:0f:e7:82: 7a:c0:8b:1b:f9:57:82:f6:d7:73:0a:9b:ac:d2:8b:0c:9a:ac: 44:93:fb:3d:15:e4:45:1a:b0:2c:d2:95:32:ef:e9:85:83:d0: 67:f7:2f:f9:af:63:07:0a:f3:bb:5b:9e:9d:26:f5:86:8f:97: 98:0b:b4:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq2UN9kOw2IeW5+8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk NGJmY2FlOGMtNmMxOS00MjRkLTg3YzAtMWM4MzEyYzc4YmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Du51JLrjAsuBUK9Fc9hhsSyPFlVcwATx+HL TxjqsqG+lfaX5YRbkfIpO2bb5CDp5awp7Egx9p9Ute7+eoeIpP3zPEEwTkyqv6kA 4bpyeXe4/PtJfP1KmdASBxdBqnL1730oH/XLlYoGDEjn4fVuonTLJXjqp9oHuzPj yPst6ZZoNwCO/ZI4E9IFlqlre+F5kucuB1UEZJcpcprKimBvxWoV+c3IADC8rLY1 X4jbjvzNXkwumEnT3OHN+bmXDEffwWt0EiCd/2LXsb385PtbWRNv20r4FzOvt2nT 2/ECUM3X6Rny8YPRlcs3LLEyR5RWTDtiSRmygYF0MoK0IkszOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI+859K89Cpemcq6Ng75Tientwr2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvODZkNTIxNjQtNjQ3ZS0z NDE0LTllYTYtNDZiMzk0YjBkMWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx8lvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3E9zFvKenH18fLwdnAn7HMh6wfEb8KJ5vKpJjRKmPylviWQmV6Woi9 amblV03NrI162dGHjz2LQX4cIpxvcJY/wxU4LpnyNAFXPC9zA3Vwt2HLZ2krKmzR GLo4UwtAyKJfgQDNPfETpQ7Ww28LDhYxnaV0tVQTh8t54v1NuWMXl1o5CpBKBRUw qs//ktAlnLbzvgQqWmgXrKW5JGP8UarcWq44dZglk9c+rWtPGgB/SiHc9RtTvbLB m39SPKwc7FXS2Q/ngnrAixv5V4L213MKm6zSiwyarEST+z0V5EUasCzSlTLv6YWD 0Gf3L/mvYwcK87tbnp0m9YaPl5gLtEM= -----END CERTIFICATE-----Generated at Sat Aug 23 20:10:25 2025 by rpki-client