$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/828f5560-8643-3618-befe-cdea85db6497.roa File: 828f5560-8643-3618-befe-cdea85db6497.roa (raw, json) Hash identifier: BSrLjMl+0JqYvVc/E7sNxlY8Wtnl3uUAcjBvxjPnuIY= Subject key identifier: AE:CA:26:39:63:69:B1:82:CE:69:CA:18:E5:84:00:11:3F:CA:7A:06 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584AF0F1532969AABD4FE5738D80 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/828f5560-8643-3618-befe-cdea85db6497.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 31898 IP address blocks: 199.87.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:53:29:69:aa:bd:4f:e5:73:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=c6e1557c-2b52-4ce1-97dd-c085fb952d63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:35:88:97:d1:21:7e:82:33:70:04:c6:15:53: df:59:9f:33:0c:bc:13:24:bc:6a:24:41:78:90:66: e3:8e:52:0b:ce:6b:1c:16:e7:ce:46:d5:0a:5e:64: 20:50:33:ee:43:cb:9f:6e:d2:a6:b5:b0:ae:f5:ab: cb:75:f3:16:b7:15:02:8f:1a:b5:1e:10:b8:43:7c: 33:cf:d3:ca:5b:6b:09:38:a9:85:7b:70:2a:1c:8a: 28:cb:64:c2:ec:44:4e:e7:33:21:cd:ce:c7:14:7b: 28:b4:0c:0e:a7:11:52:5a:06:f5:1b:86:81:d9:34: e7:c9:f0:d3:4a:f3:21:ff:d0:80:64:67:75:e7:b0: d1:64:11:bd:4c:d3:ed:d4:8b:50:2b:d1:ba:97:9f: db:67:0a:dd:8c:80:96:65:98:51:97:1b:c2:19:5d: 09:9e:f4:d0:8e:7e:95:46:cd:16:a8:a5:af:6f:08: 9a:83:a1:f6:23:6e:13:9b:d4:44:c0:a4:d4:1f:2f: ef:e8:d3:bd:bc:c4:91:66:33:e8:6f:7b:ef:db:d8: bf:a8:4d:70:96:81:9a:4e:ef:57:69:84:3d:d5:9f: b0:f5:f0:ab:2e:bf:e6:f9:e3:e5:c2:bb:c8:05:07: 1d:d4:92:58:21:51:64:27:ef:b2:32:1f:2a:a0:b2: 06:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:CA:26:39:63:69:B1:82:CE:69:CA:18:E5:84:00:11:3F:CA:7A:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/828f5560-8643-3618-befe-cdea85db6497.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 199.87.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:ef:09:e8:c1:7b:7f:ac:64:65:75:b6:99:37:dc:ab:2b:14: 84:43:de:b6:d4:55:2f:f1:3b:f4:85:90:c1:b7:10:e8:e0:13: c7:1e:b5:b1:0e:db:d2:a7:88:ac:bb:fc:c9:bc:fb:26:ac:d0: 7e:e0:56:0b:e8:48:08:3c:da:4b:0b:03:eb:b4:7a:8e:8c:dc: ff:d9:d2:fe:1a:44:e5:d3:65:64:b5:ac:92:f6:ca:05:38:63: 1e:83:ab:3e:09:fa:50:b1:aa:ee:cf:6f:7f:4a:df:64:da:06: 41:bc:d2:3a:1a:28:7b:c1:fc:08:6e:03:db:3e:f1:53:bd:ee: cf:93:94:2d:31:9d:85:fa:74:66:03:b4:0f:3f:14:f0:1c:ad: 97:c7:f5:b1:3c:a4:b0:45:58:17:a5:21:fb:34:86:5c:96:f0: bd:5e:e3:bc:f8:ce:a6:8b:39:15:47:a5:3f:ec:4e:00:24:5d: c4:d9:2b:f7:48:54:56:13:11:66:44:40:29:59:ba:54:7d:1e: 7d:bb:ed:37:56:c7:f9:3e:9a:c9:b0:b0:b8:f6:46:20:e5:ea: f4:b2:33:24:b7:bc:87:63:4e:5c:d1:13:ad:e2:c5:9b:aa:cf: ea:26:aa:cf:5e:e0:43:a9:5e:7c:95:ea:6d:72:88:85:a2:70: 0e:3c:27:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8VMpaaq9T+VzjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk YzZlMTU1N2MtMmI1Mi00Y2UxLTk3ZGQtYzA4NWZiOTUyZDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTWIl9EhfoIzcATGFVPfWZ8zDLwTJLxqJEF4 kGbjjlILzmscFufORtUKXmQgUDPuQ8ufbtKmtbCu9avLdfMWtxUCjxq1HhC4Q3wz z9PKW2sJOKmFe3AqHIooy2TC7ERO5zMhzc7HFHsotAwOpxFSWgb1G4aB2TTnyfDT SvMh/9CAZGd157DRZBG9TNPt1ItQK9G6l5/bZwrdjICWZZhRlxvCGV0JnvTQjn6V Rs0WqKWvbwiag6H2I24Tm9REwKTUHy/v6NO9vMSRZjPob3vv29i/qE1wloGaTu9X aYQ91Z+w9fCrLr/m+ePlwrvIBQcd1JJYIVFkJ++yMh8qoLIGUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK7KJjljabGCzmnKGOWEABE/ynoGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvODI4ZjU1NjAtODY0My0z NjE4LWJlZmUtY2RlYTg1ZGI2NDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1d7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfvCejBe3+sZGV1tpk33KsrFIRD3rbUVS/xO/SFkMG3EOjgE8cetbEO 29KniKy7/Mm8+yas0H7gVgvoSAg82ksLA+u0eo6M3P/Z0v4aROXTZWS1rJL2ygU4 Yx6Dqz4J+lCxqu7Pb39K32TaBkG80joaKHvB/AhuA9s+8VO97s+TlC0xnYX6dGYD tA8/FPAcrZfH9bE8pLBFWBelIfs0hlyW8L1e47z4zqaLORVHpT/sTgAkXcTZK/dI VFYTEWZEQClZulR9Hn277TdWx/k+msmwsLj2RiDl6vSyMyS3vIdjTlzRE63ixZuq z+omqs9e4EOpXnyV6m1yiIWicA48Jzc= -----END CERTIFICATE-----Generated at Sat Aug 23 21:06:28 2025 by rpki-client