$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/72e8c9b3-8829-39d0-be01-d850fdfe7dcb.roa File: 72e8c9b3-8829-39d0-be01-d850fdfe7dcb.roa (raw, json) Hash identifier: y/BjjR4qPtziRaW8mtL1yyAK76i1E5cA9EFUQXaSO4c= Subject key identifier: A6:2A:CA:38:36:83:21:F3:90:91:B5:E0:A3:5D:BE:8F:A9:05:80:2D Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584B68FC9B68AB90B53B3FB28500 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/72e8c9b3-8829-39d0-be01-d850fdfe7dcb.roa Signing time: Sat 04 Oct 2025 13:00:40 +0000 ROA not before: Sat 04 Oct 2025 13:00:40 +0000 ROA not after: Fri 02 Jan 2026 14:00:40 +0000 asID: 31898 IP address blocks: 199.36.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:68:fc:9b:68:ab:90:b5:3b:3f:b2:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Oct 4 13:00:40 2025 GMT Not After : Jan 2 14:00:40 2026 GMT Subject: CN=d502d076-148c-45f0-9abb-f18a26e2e7fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:69:b9:72:c9:67:3e:fd:f5:f5:d9:0f:93:39: 98:26:5c:f7:45:db:1c:c3:39:2e:24:dc:7c:71:45: e0:b3:e4:60:75:94:15:50:cf:99:2b:aa:b1:6f:2e: 33:d0:7e:03:25:35:32:9a:fe:4e:dc:58:c9:d0:07: 53:28:3e:22:99:b4:24:7a:cf:d3:87:46:32:65:6f: c6:8b:15:c4:40:b8:74:de:34:03:60:1f:f9:97:18: 0b:cb:0b:6d:bb:c4:d0:ca:f2:84:c2:b3:af:4a:de: 90:c0:59:1f:28:87:ee:45:ff:3c:56:09:7d:c8:22: f3:ac:6d:f6:89:13:a9:d4:11:66:3a:40:9e:aa:72: fc:fa:e9:85:e2:c4:99:29:a7:38:ef:b8:f3:53:5b: 0a:5c:09:b7:96:da:8d:c1:89:a1:95:95:aa:a1:ee: 0d:71:2a:b9:24:ed:06:6c:a7:a8:1b:56:e3:3f:f0: 5a:e3:0e:32:61:87:7e:4e:95:bc:20:c1:66:e5:91: c4:be:b8:c3:a4:ee:91:f5:3b:38:65:ef:f5:31:fb: 6a:86:27:ae:b3:36:31:71:e8:f5:99:fb:54:0a:5d: 66:d0:e7:e2:19:81:0a:33:3e:3c:f9:1d:da:65:57: bd:0b:b1:32:9e:31:51:9f:12:88:0e:e9:6b:3b:72: 0e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:2A:CA:38:36:83:21:F3:90:91:B5:E0:A3:5D:BE:8F:A9:05:80:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/72e8c9b3-8829-39d0-be01-d850fdfe7dcb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 199.36.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:9d:ba:7a:2d:53:2d:6d:62:ce:0f:00:c4:49:20:ef:74:d9: b2:e5:90:10:44:4c:3a:50:ce:24:0e:46:03:df:ed:bc:35:51: cd:d9:1d:cb:cf:c9:1d:96:7b:82:b4:65:a6:74:28:5a:a6:bc: e6:31:d1:a0:15:25:13:85:2b:d5:a5:54:03:2e:20:b8:33:3c: 62:0c:10:3e:a2:83:49:f3:d8:ca:57:85:fa:a1:38:d8:7d:d3: 2f:5e:60:03:31:0c:ef:26:e1:62:4c:89:56:0a:71:92:01:bf: 54:93:6c:f8:0c:7f:6e:4c:99:af:ab:ff:cc:ec:ff:41:74:bb: 60:2e:64:71:09:31:2b:dc:b1:06:4d:f7:d8:ee:f6:64:fc:08: 45:4e:bc:ee:56:95:7b:d3:cb:47:09:10:7a:9b:ae:45:24:98: aa:c6:db:0b:a5:71:e7:0f:d0:28:eb:0b:e5:e1:7c:e4:df:b2: d3:df:0e:1b:a2:42:b1:4e:5f:1b:1d:af:0e:3b:d6:20:24:0a: 23:1a:94:c5:fc:93:fa:ab:bd:69:06:db:dc:53:41:7c:38:c9: 82:96:4e:13:bb:72:c7:4f:da:c8:51:85:16:56:dd:a0:57:a9: 79:43:10:eb:e0:01:b2:b2:b7:78:99:e9:a9:8d:3f:22:bc:0b: 17:8e:22:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEto/Jtoq5C1Oz+yhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MTAwNDEzMDA0MFoXDTI2MDEwMjE0MDA0MFowLzEtMCsGA1UEAxMk ZDUwMmQwNzYtMTQ4Yy00NWYwLTlhYmItZjE4YTI2ZTJlN2ZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWm5cslnPv319dkPkzmYJlz3RdscwzkuJNx8 cUXgs+RgdZQVUM+ZK6qxby4z0H4DJTUymv5O3FjJ0AdTKD4imbQkes/Th0YyZW/G ixXEQLh03jQDYB/5lxgLywttu8TQyvKEwrOvSt6QwFkfKIfuRf88Vgl9yCLzrG32 iROp1BFmOkCeqnL8+umF4sSZKac477jzU1sKXAm3ltqNwYmhlZWqoe4NcSq5JO0G bKeoG1bjP/Ba4w4yYYd+TpW8IMFm5ZHEvrjDpO6R9Ts4Ze/1MftqhieuszYxcej1 mftUCl1m0OfiGYEKMz48+R3aZVe9C7EynjFRnxKIDulrO3IO9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKYqyjg2gyHzkJG14KNdvo+pBYAtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNzJlOGM5YjMtODgyOS0z OWQwLWJlMDEtZDg1MGZkZmU3ZGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyT6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACedunotUy1tYs4PAMRJIO902bLlkBBETDpQziQORgPf7bw1Uc3ZHcvP yR2We4K0ZaZ0KFqmvOYx0aAVJROFK9WlVAMuILgzPGIMED6ig0nz2MpXhfqhONh9 0y9eYAMxDO8m4WJMiVYKcZIBv1STbPgMf25Mma+r/8zs/0F0u2AuZHEJMSvcsQZN 99ju9mT8CEVOvO5WlXvTy0cJEHqbrkUkmKrG2wulcecP0CjrC+XhfOTfstPfDhui QrFOXxsdrw471iAkCiMalMX8k/qrvWkG29xTQXw4yYKWThO7csdP2shRhRZW3aBX qXlDEOvgAbKyt3iZ6amNPyK8CxeOIk8= -----END CERTIFICATE-----Generated at Mon Oct 20 05:27:57 2025 by rpki-client