$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/f1b37e34-0530-3d7a-bf38-76831b59972d.roa File: f1b37e34-0530-3d7a-bf38-76831b59972d.roa (raw, json) Hash identifier: f8xL+jlQQlPC4F0hUz1p/wIMb9zaJK5Y+A5/FuZcPv8= Subject key identifier: 46:FE:87:8D:0C:5B:12:7E:53:84:71:0A:4F:37:AA:3E:DE:8D:52:B4 Certificate issuer: /CN=53e30d85-4474-43ab-95e5-8d5d53560b6e Certificate serial: 010D0C9F4328584AECC128C58D68938228F03D80 Authority key identifier: E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/f1b37e34-0530-3d7a-bf38-76831b59972d.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 22612 IP address blocks: 199.85.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:28:c5:8d:68:93:82:28:f0:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53e30d85-4474-43ab-95e5-8d5d53560b6e Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=c0a45bc0-d98d-4692-be3c-d01c42783edb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:8b:41:71:db:64:4e:76:50:21:ee:cd:85:c4: 60:e2:de:ac:8b:62:b5:73:46:c3:03:b4:01:de:32: 58:79:f1:f3:aa:d3:45:2c:20:ba:10:41:15:a1:08: a2:fc:43:a6:19:12:d5:3f:aa:0a:99:d3:18:ba:d7: 0f:6b:13:70:25:6b:5d:ed:f4:e2:d7:be:37:72:86: d4:11:48:9f:ed:f4:73:14:26:85:c9:0e:e5:7a:8f: d1:65:5d:c7:82:af:c0:ac:e8:33:a4:86:14:16:e3: a7:5a:7f:13:c2:a7:63:8f:5d:c7:24:49:02:32:d3: a9:f5:b3:e0:ee:8d:91:b8:46:78:25:2e:d6:ba:e6: 04:ef:50:1a:aa:4f:ab:2a:b3:a4:bd:10:38:ad:9c: a7:00:38:be:8b:b8:f7:39:a6:62:1f:66:b8:7c:02: 05:72:e6:1b:9d:ab:63:24:5a:4d:e9:0c:5a:83:20: 57:35:8e:40:94:54:01:ba:5d:0b:5a:5a:1a:1d:c2: d7:4d:bc:6e:96:81:b4:83:26:ec:83:db:6a:88:b5: f6:ff:f1:33:bb:f4:44:ca:d8:c8:16:2f:4a:b2:5e: 8f:35:ab:1e:14:26:ae:ac:c5:01:55:08:d8:59:5e: bb:8c:c9:38:24:93:52:3d:82:2f:19:8c:43:9b:b3: 7d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:FE:87:8D:0C:5B:12:7E:53:84:71:0A:4F:37:AA:3E:DE:8D:52:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/f1b37e34-0530-3d7a-bf38-76831b59972d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl X509v3 Authority Key Identifier: keyid:E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer sbgp-ipAddrBlock: critical IPv4: 199.85.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:dd:8e:9e:4e:62:03:1d:ac:1b:ce:5a:a3:e3:87:c7:0b:ae: 3a:19:76:f5:2a:9a:89:58:79:08:7d:77:e5:d3:e8:6c:28:9e: d1:ab:78:18:73:0e:ca:c7:e2:14:a7:e3:6c:b6:9d:bc:51:f1: f4:14:54:7c:47:d8:69:ee:32:31:53:72:fd:bb:de:40:20:58: cd:d2:79:c6:4c:76:43:34:71:3d:06:85:cb:14:e2:b8:4e:63: 20:ea:fb:16:50:2a:8e:88:16:77:1d:64:86:54:8b:c4:4c:ce: 34:90:6c:eb:70:4d:d3:bb:74:16:51:92:27:24:8b:8f:5c:d7: 1f:f1:57:5a:91:c6:56:2c:8c:5a:46:1c:0d:1d:d5:3f:4f:2f: 47:fa:f9:44:f9:a8:39:3e:69:8a:d2:06:0b:2f:61:3c:ec:8b: 99:99:a7:cc:fa:15:3c:d5:df:3d:9b:c4:10:e1:93:59:44:dc: e5:79:5f:4a:b1:cc:66:ab:23:ef:e3:e2:70:74:e3:65:8d:41: fd:30:2d:e3:6d:ea:3f:f0:ad:fe:7c:f8:70:1d:7e:cd:ff:05: 4c:8d:ca:66:1d:43:83:90:71:bf:68:41:dd:88:af:f2:14:a8: ba:b8:7c:25:20:36:dd:75:97:38:9d:a0:73:99:5e:a1:cb:6c: 71:2c:f1:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswSjFjWiTgijwPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNlMzBkODUtNDQ3NC00M2FiLTk1ZTUtOGQ1ZDUzNTYw YjZlMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YzBhNDViYzAtZDk4ZC00NjkyLWJlM2MtZDAxYzQyNzgzZWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYtBcdtkTnZQIe7NhcRg4t6si2K1c0bDA7QB 3jJYefHzqtNFLCC6EEEVoQii/EOmGRLVP6oKmdMYutcPaxNwJWtd7fTi1743cobU EUif7fRzFCaFyQ7leo/RZV3Hgq/ArOgzpIYUFuOnWn8Twqdjj13HJEkCMtOp9bPg 7o2RuEZ4JS7WuuYE71Aaqk+rKrOkvRA4rZynADi+i7j3OaZiH2a4fAIFcuYbnatj JFpN6QxagyBXNY5AlFQBul0LWloaHcLXTbxuloG0gybsg9tqiLX2//Ezu/REytjI Fi9Ksl6PNaseFCaurMUBVQjYWV67jMk4JJNSPYIvGYxDm7N95QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEb+h40MWxJ+U4RxCk83qj7ejVK0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81M2Uz MGQ4NS00NDc0LTQzYWItOTVlNS04ZDVkNTM1NjBiNmUvZjFiMzdlMzQtMDUzMC0z ZDdhLWJmMzgtNzY4MzFiNTk5NzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTNlMzBkODUtNDQ3NC00M2FiLTk1 ZTUtOGQ1ZDUzNTYwYjZlLzUzZTMwZDg1LTQ0NzQtNDNhYi05NWU1LThkNWQ1MzU2 MGI2ZS5jcmwwHwYDVR0jBBgwFoAU560e7n/zMygIqI/CZ68Dq4bocGIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81M2UzMGQ4NS00NDc0LTQzYWItOTVlNS04ZDVk NTM1NjBiNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx1XQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKXdjp5OYgMdrBvOWqPjh8cLrjoZdvUqmolYeQh9d+XT6GwontGreBhz DsrH4hSn42y2nbxR8fQUVHxH2GnuMjFTcv273kAgWM3SecZMdkM0cT0GhcsU4rhO YyDq+xZQKo6IFncdZIZUi8RMzjSQbOtwTdO7dBZRkicki49c1x/xV1qRxlYsjFpG HA0d1T9PL0f6+UT5qDk+aYrSBgsvYTzsi5mZp8z6FTzV3z2bxBDhk1lE3OV5X0qx zGarI+/j4nB042WNQf0wLeNt6j/wrf58+HAdfs3/BUyNymYdQ4OQcb9oQd2Ir/IU qLq4fCUgNt11lzidoHOZXqHLbHEs8RE= -----END CERTIFICATE-----Generated at Sat Aug 23 20:57:00 2025 by rpki-client