$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/486b3896-2841-391a-bebe-039803db5d71.roa File: 486b3896-2841-391a-bebe-039803db5d71.roa (raw, json) Hash identifier: VpEhN+faOO8CX4VI1R5zXbqyB6HsJf9NHr1yk0L29JU= Subject key identifier: C8:28:E4:B2:D1:06:95:97:88:5A:33:94:1E:58:0A:4E:1C:E4:6C:09 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584A4C3B07E9CDBB91D96DD26700 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/486b3896-2841-391a-bebe-039803db5d71.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 6643 IP address blocks: 199.87.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:07:e9:cd:bb:91:d9:6d:d2:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=46ebdc50-4575-4bc1-aff2-e881ceecf0ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ca:9c:2f:c6:d9:0a:73:48:bc:13:44:66:97: c6:14:ac:62:6f:ed:f6:0f:a1:e6:08:ba:50:e9:e2: ea:c0:a4:3b:1d:65:6a:b2:d9:5c:ae:57:66:99:88: 9a:8c:dd:eb:5a:ac:23:0e:9c:a0:42:6a:9f:f6:b9: 88:ca:b6:e8:cc:64:4a:a4:4e:01:f4:7a:03:84:1d: 46:39:5d:7a:e5:59:b2:ce:8c:57:36:73:84:61:8d: 79:2e:0b:d2:03:23:b7:54:8a:34:18:61:07:59:1a: 26:47:57:57:e8:2c:34:0f:6e:76:98:cf:0b:ca:fe: 0c:6a:bf:b0:5f:7e:a1:2c:c9:e4:0a:c1:06:5b:74: 2c:f4:5a:30:77:4f:4c:b7:ae:a8:3f:80:3a:24:2f: 3c:c9:7c:e9:4c:da:3b:b9:c8:f3:7a:13:97:c1:e7: ba:ff:c3:ab:65:d5:5a:47:f7:96:ec:63:99:45:68: f1:a5:c8:bd:eb:5f:5d:58:b2:33:34:a0:90:66:2d: e0:43:10:ac:3e:d6:8c:ac:8b:d6:dc:9f:91:83:1b: f1:7d:fa:84:5b:0e:4a:15:8a:05:e0:58:b8:5d:c8: d0:4f:62:21:cc:cd:c5:c2:18:1d:9e:ed:07:3c:37: fa:13:80:7b:0f:3e:6f:4f:d1:93:b3:0f:e0:73:a1: fb:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:28:E4:B2:D1:06:95:97:88:5A:33:94:1E:58:0A:4E:1C:E4:6C:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/486b3896-2841-391a-bebe-039803db5d71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 199.87.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:b6:4f:6d:ca:26:a2:ea:fd:35:f0:6f:b5:33:fc:6c:d0:7a: b8:78:db:99:f4:54:85:09:e4:d3:1c:9b:77:49:e2:b1:ae:44: 46:0c:79:0b:86:9b:1c:ff:58:15:33:0f:2d:e3:9a:cd:ff:b9: 1e:3a:86:31:d3:79:89:2f:63:2e:78:52:31:71:7d:af:50:12: d8:b8:e1:43:db:4a:89:9c:3b:ae:84:fa:ef:b2:d6:c9:43:14: da:c3:27:5e:0f:82:3f:21:d2:5e:a0:5a:3b:3a:83:ed:98:e3: c0:35:12:fc:b8:b2:d1:16:84:ad:86:03:95:fa:7c:80:c2:92: 1e:e8:6b:99:09:2c:4a:15:36:ed:1a:6a:e3:95:ce:7f:88:68: 99:32:59:db:0f:3c:77:e4:1b:25:81:94:c8:67:13:3c:a3:ab: 92:2c:c6:1b:b3:76:da:ac:b4:0b:16:a8:f4:e3:82:49:63:f0: 3c:a7:5d:13:fa:8c:5d:02:20:f3:cc:2f:c5:ae:56:c6:69:38: 0c:9e:04:99:4f:65:a4:09:44:de:95:90:d9:5c:b4:4f:7b:cd: 36:25:9b:04:6c:04:97:cf:03:90:3c:0d:c8:e0:02:da:a5:5d: 45:e6:d3:f5:3e:24:bd:f1:f5:85:ae:ce:9f:73:56:fb:17:60: ed:55:af:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMOwfpzbuR2W3SZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk NDZlYmRjNTAtNDU3NS00YmMxLWFmZjItZTg4MWNlZWNmMGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMqcL8bZCnNIvBNEZpfGFKxib+32D6HmCLpQ 6eLqwKQ7HWVqstlcrldmmYiajN3rWqwjDpygQmqf9rmIyrbozGRKpE4B9HoDhB1G OV165VmyzoxXNnOEYY15LgvSAyO3VIo0GGEHWRomR1dX6Cw0D252mM8Lyv4Mar+w X36hLMnkCsEGW3Qs9Fowd09Mt66oP4A6JC88yXzpTNo7ucjzehOXwee6/8OrZdVa R/eW7GOZRWjxpci9619dWLIzNKCQZi3gQxCsPtaMrIvW3J+RgxvxffqEWw5KFYoF 4Fi4XcjQT2IhzM3Fwhgdnu0HPDf6E4B7Dz5vT9GTsw/gc6H7UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMgo5LLRBpWXiFozlB5YCk4c5GwJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNDg2YjM4OTYtMjg0MS0z OTFhLWJlYmUtMDM5ODAzZGI1ZDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx1d4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJG2T23KJqLq/TXwb7Uz/GzQerh425n0VIUJ5NMcm3dJ4rGuREYMeQuG mxz/WBUzDy3jms3/uR46hjHTeYkvYy54UjFxfa9QEti44UPbSomcO66E+u+y1slD FNrDJ14Pgj8h0l6gWjs6g+2Y48A1Evy4stEWhK2GA5X6fIDCkh7oa5kJLEoVNu0a auOVzn+IaJkyWdsPPHfkGyWBlMhnEzyjq5IsxhuzdtqstAsWqPTjgklj8DynXRP6 jF0CIPPML8WuVsZpOAyeBJlPZaQJRN6VkNlctE97zTYlmwRsBJfPA5A8DcjgAtql XUXm0/U+JL3x9YWuzp9zVvsXYO1VrxM= -----END CERTIFICATE-----Generated at Wed Jul 2 21:02:10 2025 by rpki-client