$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6bbd9f4b-4a94-4f33-8f7b-4372f7e43443/eb2971b3-00ec-3401-a6df-68d370b9c1d9.roa File: eb2971b3-00ec-3401-a6df-68d370b9c1d9.roa (raw, json) Hash identifier: /Zi2D+rHuknXYA46xlrHjwe0gp3xGASUj1bp7CMasQk= Subject key identifier: 7A:2D:69:68:AB:E7:C5:49:A3:4E:6B:C5:85:D9:16:44:50:6F:9B:73 Certificate issuer: /CN=6bbd9f4b-4a94-4f33-8f7b-4372f7e43443 Certificate serial: 010D0C9F4328584AF5216FCCD80C7C94D1529780 Authority key identifier: 39:41:91:70:BC:76:AD:15:EF:26:F2:A4:72:9B:13:C4:29:DA:AC:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6bbd9f4b-4a94-4f33-8f7b-4372f7e43443.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6bbd9f4b-4a94-4f33-8f7b-4372f7e43443/eb2971b3-00ec-3401-a6df-68d370b9c1d9.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 394962 IP address blocks: 199.87.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6bbd9f4b-4a94-4f33-8f7b-4372f7e43443/6bbd9f4b-4a94-4f33-8f7b-4372f7e43443.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6bbd9f4b-4a94-4f33-8f7b-4372f7e43443/6bbd9f4b-4a94-4f33-8f7b-4372f7e43443.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6bbd9f4b-4a94-4f33-8f7b-4372f7e43443.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:6f:cc:d8:0c:7c:94:d1:52:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbd9f4b-4a94-4f33-8f7b-4372f7e43443 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=13078841-ad0f-4daf-858e-1a423030a2f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0a:24:9b:21:f5:ce:eb:10:e5:e0:23:66:7d: 13:88:99:8e:c2:8e:fa:66:b1:22:ba:8c:c7:7f:41: 1f:f4:b1:c0:1a:a4:44:a4:89:03:b2:55:5c:68:ca: 2c:3f:f8:ad:74:3e:f0:c7:eb:1e:69:05:0a:ac:9f: ca:17:36:1c:77:c1:ba:1c:ac:6d:3e:4d:8e:9a:59: 24:86:5e:2d:e2:9e:65:a3:fc:5e:02:45:df:73:1f: cb:5b:88:e5:15:91:32:63:e4:16:e9:d5:62:fe:13: e1:b1:72:a4:68:94:01:08:fe:63:df:d0:1a:5d:29: b1:42:fa:29:63:80:7d:3a:e5:7f:33:59:64:7c:68: 0a:a2:74:09:e1:b8:c5:87:c7:7b:83:50:57:be:98: 7b:d1:73:37:61:2a:93:f2:7f:ab:bc:cf:63:82:a9: c2:17:0f:82:a9:5c:8a:3c:73:62:6f:02:43:07:6a: d3:a1:a6:0e:3b:55:bb:14:79:d4:da:b9:50:63:ce: 8f:97:82:b8:c2:dc:12:1d:78:ed:39:ed:53:b8:0d: f1:37:c1:40:bb:07:4c:54:f9:e6:57:55:a4:4c:a9: f8:f9:7e:bb:57:7f:2f:73:7e:0a:7f:ad:f9:f2:ec: 57:03:21:ca:b2:50:ea:28:bb:9f:25:54:8e:62:35: 5c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:2D:69:68:AB:E7:C5:49:A3:4E:6B:C5:85:D9:16:44:50:6F:9B:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6bbd9f4b-4a94-4f33-8f7b-4372f7e43443/eb2971b3-00ec-3401-a6df-68d370b9c1d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6bbd9f4b-4a94-4f33-8f7b-4372f7e43443/6bbd9f4b-4a94-4f33-8f7b-4372f7e43443.crl X509v3 Authority Key Identifier: keyid:39:41:91:70:BC:76:AD:15:EF:26:F2:A4:72:9B:13:C4:29:DA:AC:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6bbd9f4b-4a94-4f33-8f7b-4372f7e43443.cer sbgp-ipAddrBlock: critical IPv4: 199.87.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:2f:41:88:3a:d8:7e:08:1c:3f:94:ed:6c:19:a9:22:ee:50: da:73:05:51:d1:02:80:59:e0:fc:83:88:ca:18:32:9d:d2:b4: 7c:b4:f6:e3:67:68:cd:3d:10:9d:a9:85:06:50:7d:32:9b:2a: eb:3f:4f:c3:41:94:52:82:96:7a:cd:de:23:82:78:0e:e4:9a: ab:a7:83:29:43:38:e2:0a:8e:04:c2:87:b9:95:cd:a7:10:71: c2:19:5a:5a:73:46:d8:02:be:ac:5c:6d:af:17:10:92:27:d1: 5a:09:94:3a:9b:9a:32:dd:95:50:9d:26:17:9f:98:18:66:6a: 7a:61:b9:a6:c5:a1:3c:1f:10:12:81:fd:cb:cb:6d:da:6c:a5: e4:cc:9e:7b:e1:46:88:b5:53:85:5a:18:95:09:5b:cb:d3:5e: c1:97:03:c0:a5:5b:f1:1c:6a:85:d9:ea:49:94:82:c7:54:ca: be:86:2e:dd:30:8d:b8:22:46:99:cd:b9:9e:10:3a:19:5d:a6: 8d:e6:a9:7f:48:d2:9d:6b:dc:b1:d7:60:3e:9e:7d:b2:be:a6: ee:42:6e:25:74:55:9d:cf:91:80:18:61:a1:55:a3:6a:38:a7: e4:26:07:14:d5:e8:5b:3e:ae:2d:73:7f:ee:00:2a:c4:92:31: e1:b8:c4:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IW/M2Ax8lNFSl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiZDlmNGItNGE5NC00ZjMzLThmN2ItNDM3MmY3ZTQz NDQzMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk MTMwNzg4NDEtYWQwZi00ZGFmLTg1OGUtMWE0MjMwMzBhMmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQokmyH1zusQ5eAjZn0TiJmOwo76ZrEiuozH f0Ef9LHAGqREpIkDslVcaMosP/itdD7wx+seaQUKrJ/KFzYcd8G6HKxtPk2Omlkk hl4t4p5lo/xeAkXfcx/LW4jlFZEyY+QW6dVi/hPhsXKkaJQBCP5j39AaXSmxQvop Y4B9OuV/M1lkfGgKonQJ4bjFh8d7g1BXvph70XM3YSqT8n+rvM9jgqnCFw+CqVyK PHNibwJDB2rToaYOO1W7FHnU2rlQY86Pl4K4wtwSHXjtOe1TuA3xN8FAuwdMVPnm V1WkTKn4+X67V38vc34Kf6358uxXAyHKslDqKLufJVSOYjVcpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHotaWir58VJo05rxYXZFkRQb5tzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82YmJk OWY0Yi00YTk0LTRmMzMtOGY3Yi00MzcyZjdlNDM0NDMvZWIyOTcxYjMtMDBlYy0z NDAxLWE2ZGYtNjhkMzcwYjljMWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNmJiZDlmNGItNGE5NC00ZjMzLThm N2ItNDM3MmY3ZTQzNDQzLzZiYmQ5ZjRiLTRhOTQtNGYzMy04ZjdiLTQzNzJmN2U0 MzQ0My5jcmwwHwYDVR0jBBgwFoAUOUGRcLx2rRXvJvKkcpsTxCnarAYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy82YmJkOWY0Yi00YTk0LTRmMzMtOGY3Yi00Mzcy ZjdlNDM0NDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1cBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABkvQYg62H4IHD+U7WwZqSLuUNpzBVHRAoBZ4PyDiMoYMp3StHy09uNn aM09EJ2phQZQfTKbKus/T8NBlFKClnrN3iOCeA7kmqungylDOOIKjgTCh7mVzacQ ccIZWlpzRtgCvqxcba8XEJIn0VoJlDqbmjLdlVCdJhefmBhmanphuabFoTwfEBKB /cvLbdpspeTMnnvhRoi1U4VaGJUJW8vTXsGXA8ClW/EcaoXZ6kmUgsdUyr6GLt0w jbgiRpnNuZ4QOhldpo3mqX9I0p1r3LHXYD6efbK+pu5CbiV0VZ3PkYAYYaFVo2o4 p+QmBxTV6Fs+ri1zf+4AKsSSMeG4xNs= -----END CERTIFICATE-----Generated at Mon Oct 20 10:17:53 2025 by rpki-client