$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/d1e734e2-ce89-3dd5-9697-dab100cd0408.roa File: d1e734e2-ce89-3dd5-9697-dab100cd0408.roa (raw, json) Hash identifier: ypr4xVXLoMSMQLPYnu8MuYnawgFBpy/FTVQbOrXd1dU= Subject key identifier: 80:2B:B4:06:34:42:DC:7B:57:FF:C1:CA:E5:39:27:8D:47:36:57:A7 Certificate issuer: /CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969 Certificate serial: 010D0C9F4328584AC5AB81F7F6664543BB37AE80 Authority key identifier: DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/d1e734e2-ce89-3dd5-9697-dab100cd0408.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 14618 IP address blocks: 199.47.128.0/24 maxlen: 24 199.47.129.0/24 maxlen: 24 199.47.130.0/24 maxlen: 24 199.47.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:81:f7:f6:66:45:43:bb:37:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969 Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=3794a85d-8730-4f95-9c67-b45a34e76a6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d6:65:0c:4b:12:2f:1f:ec:74:cf:8b:a3:95: 28:df:97:7e:54:ed:b2:9f:c6:3c:e5:76:66:2c:a4: a2:ff:61:21:2e:e3:ba:ca:6f:5f:03:d5:9c:89:67: d6:f3:9f:43:77:35:a2:15:fe:33:14:26:b5:72:2e: 65:0b:c8:cc:cc:32:57:29:0e:09:78:67:22:54:ec: 7c:7b:91:53:a9:34:ef:94:56:32:20:54:ea:1c:c1: db:69:83:8e:ad:56:8e:2d:12:b0:25:e4:88:9b:b3: cc:77:8a:d6:87:32:f0:5e:5c:ca:db:95:2d:58:c9: 9e:f4:38:17:2b:93:c9:a1:6d:fb:81:35:e1:b0:62: a3:4a:ee:49:ee:64:a9:0b:f3:23:61:b9:ec:8b:5d: 55:8f:ac:eb:3d:7f:6e:86:4c:44:ba:ad:54:6d:c0: b8:26:7e:78:5d:98:27:02:40:7d:a5:7b:ec:b7:85: 1a:2f:8b:2a:dd:e9:34:90:ce:13:0a:cb:c8:b2:b9: 70:a5:b9:50:15:8b:68:23:ee:7b:eb:85:56:24:4b: c3:9f:fc:19:08:ef:8f:ec:b8:88:f5:17:40:f3:88: 31:4e:1e:6b:7f:a9:ec:e9:27:37:3d:62:89:b6:cc: a4:ec:e5:d7:15:7f:f0:fd:8a:88:5b:48:18:35:89: 55:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:2B:B4:06:34:42:DC:7B:57:FF:C1:CA:E5:39:27:8D:47:36:57:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/d1e734e2-ce89-3dd5-9697-dab100cd0408.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.crl X509v3 Authority Key Identifier: keyid:DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer sbgp-ipAddrBlock: critical IPv4: 199.47.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:27:0a:97:82:b2:e6:6b:d0:63:30:b1:b2:f4:1f:e7:a6:92: 6e:07:cf:78:b9:16:b1:f7:c0:7a:ac:df:1b:bf:19:c9:d9:00: 65:28:66:2b:3e:3a:1b:93:bf:0c:86:1e:e1:8d:1c:49:21:3f: a0:4b:fe:c3:ee:60:f1:7a:c0:49:8f:21:35:7a:41:b8:8a:62: 81:35:59:10:22:5c:d2:43:20:c5:9f:b3:f1:fd:43:6a:dc:d7: 35:b6:da:8a:6d:02:77:45:11:c6:c8:fe:77:42:73:ed:5d:a9: 81:66:cc:4c:d4:fe:49:75:ea:4e:10:6e:a9:49:19:41:5c:87: bc:9e:45:fb:01:f6:64:cd:83:00:b2:57:41:22:5c:1a:71:29: 9f:1d:6c:1a:5c:21:c0:2d:86:f7:e9:98:53:01:fb:67:d0:2f: 47:13:61:5d:50:c0:b5:1f:ee:91:8b:df:c7:b3:53:88:33:a5: 7e:10:72:7a:81:bb:97:fb:ce:ea:38:b4:cb:21:5e:7f:9a:9e: cf:78:24:4d:17:ee:a6:d8:f5:d3:a1:c9:8d:20:fb:41:95:ca: 78:c8:5c:f3:28:5a:8a:48:be:31:51:cf:38:04:7e:c6:dd:b9: 3f:37:42:b7:bb:6e:ca:b4:29:7f:f1:4d:7a:4b:7d:97:24:3a: 86:30:82:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq4H39mZFQ7s3roAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZiY2RhNjgtMTVmZC00YzdkLTk4ODctZDlkNjdmMmNh OTY5MB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk Mzc5NGE4NWQtODczMC00Zjk1LTljNjctYjQ1YTM0ZTc2YTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotZlDEsSLx/sdM+Lo5Uo35d+VO2yn8Y85XZm LKSi/2EhLuO6ym9fA9WciWfW859DdzWiFf4zFCa1ci5lC8jMzDJXKQ4JeGciVOx8 e5FTqTTvlFYyIFTqHMHbaYOOrVaOLRKwJeSIm7PMd4rWhzLwXlzK25UtWMme9DgX K5PJoW37gTXhsGKjSu5J7mSpC/MjYbnsi11Vj6zrPX9uhkxEuq1UbcC4Jn54XZgn AkB9pXvst4UaL4sq3ek0kM4TCsvIsrlwpblQFYtoI+5764VWJEvDn/wZCO+P7LiI 9RdA84gxTh5rf6ns6Sc3PWKJtsyk7OXXFX/w/YqIW0gYNYlVgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIArtAY0Qtx7V//ByuU5J41HNlenMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84NmJj ZGE2OC0xNWZkLTRjN2QtOTg4Ny1kOWQ2N2YyY2E5NjkvZDFlNzM0ZTItY2U4OS0z ZGQ1LTk2OTctZGFiMTAwY2QwNDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODZiY2RhNjgtMTVmZC00YzdkLTk4 ODctZDlkNjdmMmNhOTY5Lzg2YmNkYTY4LTE1ZmQtNGM3ZC05ODg3LWQ5ZDY3ZjJj YTk2OS5jcmwwHwYDVR0jBBgwFoAU3aPE+YsUoOm+qk9Hqd0Wrjr3/jEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84NmJjZGE2OC0xNWZkLTRjN2QtOTg4Ny1kOWQ2 N2YyY2E5NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxy+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMnCpeCsuZr0GMwsbL0H+emkm4Hz3i5FrH3wHqs3xu/GcnZAGUoZis+ OhuTvwyGHuGNHEkhP6BL/sPuYPF6wEmPITV6QbiKYoE1WRAiXNJDIMWfs/H9Q2rc 1zW22optAndFEcbI/ndCc+1dqYFmzEzU/kl16k4QbqlJGUFch7yeRfsB9mTNgwCy V0EiXBpxKZ8dbBpcIcAthvfpmFMB+2fQL0cTYV1QwLUf7pGL38ezU4gzpX4QcnqB u5f7zuo4tMshXn+ans94JE0X7qbY9dOhyY0g+0GVynjIXPMoWopIvjFRzzgEfsbd uT83Qre7bsq0KX/xTXpLfZckOoYwglY= -----END CERTIFICATE-----Generated at Sat Aug 23 06:53:07 2025 by rpki-client