$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae/991e404f-8d3f-3233-a41d-35ee0ba90723.roa File: 991e404f-8d3f-3233-a41d-35ee0ba90723.roa (raw, json) Hash identifier: SWId2wSV0Z0r/+2As5VNnNa8ID9WGfbzlfAWcvjowe0= Subject key identifier: C8:20:18:A2:38:38:0E:22:5A:25:5C:3E:BC:08:EC:81:1F:D3:8E:43 Certificate issuer: /CN=d050b4de-f4c8-4ee7-907a-4df39253e1ae Certificate serial: 010D0C9F4328584ADD6680D1E768504A53ECEEF0 Authority key identifier: 5B:81:B6:A9:BC:F1:89:7D:05:CD:44:0D:F3:EA:0E:EF:1D:4D:78:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae/991e404f-8d3f-3233-a41d-35ee0ba90723.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 400725 IP address blocks: 199.45.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae/d050b4de-f4c8-4ee7-907a-4df39253e1ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae/d050b4de-f4c8-4ee7-907a-4df39253e1ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:80:d1:e7:68:50:4a:53:ec:ee:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d050b4de-f4c8-4ee7-907a-4df39253e1ae Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=58a82f67-cf77-4be9-b747-1821b57e2700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:dc:ba:13:2f:8f:83:d5:27:32:0b:7b:ba:50: 14:8b:4b:4d:52:9e:ba:76:28:c7:17:d3:3f:12:ce: 3f:21:be:5d:85:74:52:4a:ab:d5:d0:c1:5a:0b:b7: 86:f8:12:e0:38:0a:d5:93:4f:36:c5:ae:6a:67:4c: 44:92:af:cc:d1:21:88:07:37:4b:c4:5f:13:8c:d0: 66:25:6a:dc:1b:76:5e:d4:de:b4:c1:09:cb:0a:69: 71:4d:6e:bc:40:ef:45:3f:9a:87:4e:af:91:e8:8e: 23:2b:01:f3:0b:2a:ab:74:a1:7f:61:27:ee:47:83: 32:96:03:35:a2:02:46:4d:f2:c3:46:64:e2:9f:96: f5:05:f1:d0:fc:91:c7:dd:2b:90:18:ad:3d:8a:90: 5b:df:4a:3e:37:7a:16:13:a3:ea:be:71:04:8b:cf: de:e5:ad:93:63:c7:dc:48:d5:1d:c5:df:1d:3c:3d: 24:09:3d:a3:c6:03:2a:b0:9b:22:f8:27:8a:05:cf: 87:b2:3f:37:c3:52:3b:21:15:79:c3:b0:57:c6:04: 5a:4c:46:86:b0:0d:d6:94:ea:ee:69:24:b4:bd:de: de:11:5a:f2:7f:10:39:19:27:c2:96:43:09:1b:8b: 42:c0:f4:71:6f:6e:49:c9:e5:65:2b:3e:2b:8b:57: 1d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:20:18:A2:38:38:0E:22:5A:25:5C:3E:BC:08:EC:81:1F:D3:8E:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae/991e404f-8d3f-3233-a41d-35ee0ba90723.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae/d050b4de-f4c8-4ee7-907a-4df39253e1ae.crl X509v3 Authority Key Identifier: keyid:5B:81:B6:A9:BC:F1:89:7D:05:CD:44:0D:F3:EA:0E:EF:1D:4D:78:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae.cer sbgp-ipAddrBlock: critical IPv4: 199.45.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:e8:31:2b:bf:10:81:c1:02:77:0b:54:f0:f7:8a:b4:53:75: 2c:9c:e4:6a:86:3a:6a:de:59:9c:23:e3:e6:e0:36:02:89:02: 8b:54:5d:06:8a:1d:21:c0:73:7a:3f:17:39:66:24:6c:64:fa: 65:05:dc:c0:a5:da:eb:90:b1:38:29:6c:c5:e8:70:ed:fa:b1: 36:40:47:aa:1e:a5:9c:1c:d3:e7:67:0a:b4:81:91:d5:62:b3: 6a:a2:60:85:73:28:08:0e:10:79:10:ae:89:54:48:3c:71:25: 31:6d:8b:7a:a6:0f:d0:e6:75:71:e6:69:c7:60:35:0f:a6:d4: 71:25:62:c3:d0:4f:c3:f2:8d:83:09:40:a2:76:71:75:a7:70: e9:db:f3:f2:fb:09:4c:1d:a8:6c:96:61:1f:92:de:04:5f:d0: 5a:50:2a:b2:6e:35:c2:f4:e7:3f:15:cb:d6:c8:a2:61:6b:bf: 31:0b:f9:ea:b6:81:60:f8:d7:ee:ae:80:3c:13:e9:fd:2b:78: e2:fd:f5:37:5d:97:b3:58:9c:cd:53:e8:6a:96:da:3f:fe:8e: 28:af:76:7a:d8:f5:a2:af:93:6e:d2:9d:9a:f7:f7:8f:c9:d1: 9c:ec:6c:77:54:c9:57:dc:8b:14:ec:25:18:70:fe:11:8e:53: 29:3f:4a:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZoDR52hQSlPs7vAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDA1MGI0ZGUtZjRjOC00ZWU3LTkwN2EtNGRmMzkyNTNl MWFlMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk NThhODJmNjctY2Y3Ny00YmU5LWI3NDctMTgyMWI1N2UyNzAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9y6Ey+Pg9UnMgt7ulAUi0tNUp66dijHF9M/ Es4/Ib5dhXRSSqvV0MFaC7eG+BLgOArVk082xa5qZ0xEkq/M0SGIBzdLxF8TjNBm JWrcG3Ze1N60wQnLCmlxTW68QO9FP5qHTq+R6I4jKwHzCyqrdKF/YSfuR4MylgM1 ogJGTfLDRmTin5b1BfHQ/JHH3SuQGK09ipBb30o+N3oWE6PqvnEEi8/e5a2TY8fc SNUdxd8dPD0kCT2jxgMqsJsi+CeKBc+Hsj83w1I7IRV5w7BXxgRaTEaGsA3WlOru aSS0vd7eEVryfxA5GSfClkMJG4tCwPRxb25JyeVlKz4ri1cdbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMggGKI4OA4iWiVcPrwI7IEf045DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kMDUw YjRkZS1mNGM4LTRlZTctOTA3YS00ZGYzOTI1M2UxYWUvOTkxZTQwNGYtOGQzZi0z MjMzLWE0MWQtMzVlZTBiYTkwNzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDA1MGI0ZGUtZjRjOC00ZWU3LTkw N2EtNGRmMzkyNTNlMWFlL2QwNTBiNGRlLWY0YzgtNGVlNy05MDdhLTRkZjM5MjUz ZTFhZS5jcmwwHwYDVR0jBBgwFoAUW4G2qbzxiX0FzUQN8+oO7x1NeOYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kMDUwYjRkZS1mNGM4LTRlZTctOTA3YS00ZGYz OTI1M2UxYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxy3xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEroMSu/EIHBAncLVPD3irRTdSyc5GqGOmreWZwj4+bgNgKJAotUXQaK HSHAc3o/FzlmJGxk+mUF3MCl2uuQsTgpbMXocO36sTZAR6oepZwc0+dnCrSBkdVi s2qiYIVzKAgOEHkQrolUSDxxJTFti3qmD9DmdXHmacdgNQ+m1HElYsPQT8PyjYMJ QKJ2cXWncOnb8/L7CUwdqGyWYR+S3gRf0FpQKrJuNcL05z8Vy9bIomFrvzEL+eq2 gWD41+6ugDwT6f0reOL99Tddl7NYnM1T6GqW2j/+jiivdnrY9aKvk27SnZr394/J 0ZzsbHdUyVfcixTsJRhw/hGOUyk/Suc= -----END CERTIFICATE-----Generated at Mon Aug 25 03:03:02 2025 by rpki-client