$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/a3f0893a-35f0-324d-b592-cfd2098b1ae7.roa File: a3f0893a-35f0-324d-b592-cfd2098b1ae7.roa (raw, json) Hash identifier: a6lXI2QsZbLP76iRgo1MS0/9LGGTDIhOdn5GbEZGgO0= Subject key identifier: B6:46:FD:5B:C3:6E:08:66:4C:C8:F8:74:E5:F4:C1:2F:8D:2F:7E:77 Certificate issuer: /CN=e35c7007-7a33-480f-a32e-40481f8f1792 Certificate serial: 010D0C9F4328584B0746BB0DE2AFC90F48C315DA Authority key identifier: 69:C5:93:B3:CB:4A:4F:6B:F2:C7:1E:19:B2:7A:66:85:BA:C2:EA:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/a3f0893a-35f0-324d-b592-cfd2098b1ae7.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 204631 IP address blocks: 199.47.148.0/24 maxlen: 24 199.47.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/e35c7007-7a33-480f-a32e-40481f8f1792.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/e35c7007-7a33-480f-a32e-40481f8f1792.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:bb:0d:e2:af:c9:0f:48:c3:15:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e35c7007-7a33-480f-a32e-40481f8f1792 Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=9e4878c3-028c-4311-a50b-47bbf14718a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:73:6b:a6:5a:77:63:cb:84:47:40:96:08:46: f3:14:d5:86:8a:8c:a2:03:78:c4:7c:47:45:3e:69: 4c:bf:16:52:06:61:0f:56:b6:76:ba:61:f4:7b:69: 54:f1:26:4e:1d:07:ad:2f:f9:71:fa:1e:52:31:1b: 18:ef:19:44:e9:5d:26:f2:d7:4d:e4:fc:ae:de:ae: c7:90:f7:c7:87:46:82:10:c7:0b:35:54:c1:9f:64: c2:68:3a:bb:ab:04:60:79:b4:d0:80:da:09:82:ff: b6:3e:fa:4d:18:64:43:5c:b5:17:60:d3:0d:ea:de: b6:2b:08:06:97:ca:13:6a:ec:17:06:f4:6b:ed:9c: 45:2f:90:57:26:d8:cc:97:22:dd:21:3c:e7:bd:23: ba:2d:ac:ab:46:c9:f1:1d:92:2b:20:2f:af:83:90: ca:ee:16:48:50:0d:62:c3:1f:fd:33:e6:e7:4e:0e: 1f:fc:4f:29:2a:f6:1b:4a:15:bf:2a:d1:06:3e:0c: 84:96:7c:42:1b:8a:ba:1d:47:a3:eb:dc:9f:f3:12: fd:88:2f:6e:2b:18:a3:ae:a9:ee:c6:df:b9:49:32: ab:ff:dc:2e:d0:af:3f:7b:70:4d:a8:f5:8c:fe:67: 8c:fc:cb:50:3a:0f:b9:f3:b1:18:d5:a5:c0:3a:0f: 2d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:46:FD:5B:C3:6E:08:66:4C:C8:F8:74:E5:F4:C1:2F:8D:2F:7E:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/a3f0893a-35f0-324d-b592-cfd2098b1ae7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/e35c7007-7a33-480f-a32e-40481f8f1792.crl X509v3 Authority Key Identifier: keyid:69:C5:93:B3:CB:4A:4F:6B:F2:C7:1E:19:B2:7A:66:85:BA:C2:EA:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792.cer sbgp-ipAddrBlock: critical IPv4: 199.47.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:2d:01:38:65:ea:90:ca:26:05:9e:c7:b6:75:2c:07:fd:d1: 0e:0e:fa:5d:82:45:31:ab:5b:f6:47:c9:3b:fa:57:e7:c1:ee: ac:9d:c5:e8:79:40:80:dc:d9:cd:55:6f:cb:cb:36:35:22:05: ba:e4:ac:69:90:eb:83:f2:e0:37:4f:e9:aa:2a:56:c9:69:c2: e2:be:11:bb:07:25:22:5d:df:fe:d9:3f:e1:57:4c:a3:e1:c4: e6:29:3f:1c:34:06:0e:43:1b:1d:e2:fc:49:b6:97:18:ba:03: c5:06:9a:7a:92:ba:9b:94:66:34:0d:45:c8:3a:17:cb:5e:3b: ea:d2:5c:d2:3e:58:25:c6:ab:75:fc:83:13:47:70:6b:a3:19: fc:b7:88:8c:86:bc:9b:ca:50:04:a9:be:8a:3c:4a:83:91:be: cb:5d:f3:ea:ec:40:bd:18:d3:69:9d:52:38:49:96:c9:64:76: d8:96:63:8f:29:30:5b:d0:09:1f:55:20:e3:8a:fe:91:57:44: bf:81:4d:52:64:ae:25:bc:08:bd:2c:5b:0e:e1:83:b1:f6:e6: 2c:99:1a:b2:6b:f0:3d:24:cc:86:34:cd:9a:20:5a:e7:1a:69: 51:38:a9:c6:04:f8:f1:a4:8e:08:9c:14:16:0c:60:01:18:b4: be:8e:2b:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRrsN4q/JD0jDFdowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM1YzcwMDctN2EzMy00ODBmLWEzMmUtNDA0ODFmOGYx NzkyMB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk OWU0ODc4YzMtMDI4Yy00MzExLWE1MGItNDdiYmYxNDcxOGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHNrplp3Y8uER0CWCEbzFNWGioyiA3jEfEdF PmlMvxZSBmEPVrZ2umH0e2lU8SZOHQetL/lx+h5SMRsY7xlE6V0m8tdN5Pyu3q7H kPfHh0aCEMcLNVTBn2TCaDq7qwRgebTQgNoJgv+2PvpNGGRDXLUXYNMN6t62KwgG l8oTauwXBvRr7ZxFL5BXJtjMlyLdITznvSO6LayrRsnxHZIrIC+vg5DK7hZIUA1i wx/9M+bnTg4f/E8pKvYbShW/KtEGPgyElnxCG4q6HUej69yf8xL9iC9uKxijrqnu xt+5STKr/9wu0K8/e3BNqPWM/meM/MtQOg+587EY1aXAOg8t8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLZG/VvDbghmTMj4dOX0wS+NL353MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lMzVj NzAwNy03YTMzLTQ4MGYtYTMyZS00MDQ4MWY4ZjE3OTIvYTNmMDg5M2EtMzVmMC0z MjRkLWI1OTItY2ZkMjA5OGIxYWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTM1YzcwMDctN2EzMy00ODBmLWEz MmUtNDA0ODFmOGYxNzkyL2UzNWM3MDA3LTdhMzMtNDgwZi1hMzJlLTQwNDgxZjhm MTc5Mi5jcmwwHwYDVR0jBBgwFoAUacWTs8tKT2vyxx4ZsnpmhbrC6uwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lMzVjNzAwNy03YTMzLTQ4MGYtYTMyZS00MDQ4 MWY4ZjE3OTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxy+UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJItAThl6pDKJgWex7Z1LAf90Q4O+l2CRTGrW/ZHyTv6V+fB7qydxeh5 QIDc2c1Vb8vLNjUiBbrkrGmQ64Py4DdP6aoqVslpwuK+EbsHJSJd3/7ZP+FXTKPh xOYpPxw0Bg5DGx3i/Em2lxi6A8UGmnqSupuUZjQNRcg6F8teO+rSXNI+WCXGq3X8 gxNHcGujGfy3iIyGvJvKUASpvoo8SoORvstd8+rsQL0Y02mdUjhJlslkdtiWY48p MFvQCR9VIOOK/pFXRL+BTVJkriW8CL0sWw7hg7H25iyZGrJr8D0kzIY0zZogWuca aVE4qcYE+PGkjgicFBYMYAEYtL6OK8Y= -----END CERTIFICATE-----Generated at Mon Oct 20 19:08:55 2025 by rpki-client