$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/ec292e02-7232-3433-8836-8e0f1005d2fd.roa File: ec292e02-7232-3433-8836-8e0f1005d2fd.roa (raw, json) Hash identifier: c+Bzjn+wrvpeOnYovJO8e56Thz50lGPaKJhgE8uyRLo= Subject key identifier: 9F:BE:FD:6C:E1:12:90:FF:8D:26:A6:8D:5C:6A:3E:53:4A:0D:E8:2B Certificate issuer: /CN=2a71f00e-0200-48df-9cb4-008df9a4a854 Certificate serial: 010D0C9F4328584B155A411280AF4D226557EB00 Authority key identifier: 38:0D:64:C0:FC:18:06:FB:A2:13:99:2A:01:58:BD:19:46:77:76:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/ec292e02-7232-3433-8836-8e0f1005d2fd.roa Signing time: Thu 04 Sep 2025 14:01:32 +0000 ROA not before: Thu 04 Sep 2025 14:01:32 +0000 ROA not after: Wed 03 Dec 2025 15:01:32 +0000 asID: 22539 IP address blocks: 199.230.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/2a71f00e-0200-48df-9cb4-008df9a4a854.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/2a71f00e-0200-48df-9cb4-008df9a4a854.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Sep 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:5a:41:12:80:af:4d:22:65:57:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a71f00e-0200-48df-9cb4-008df9a4a854 Validity Not Before: Sep 4 14:01:32 2025 GMT Not After : Dec 3 15:01:32 2025 GMT Subject: CN=a5c5ba68-559d-410e-8140-5e104373970c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:0a:bd:f5:fc:95:ff:e5:93:75:42:f5:7f:c7: 95:75:3d:b5:aa:74:dc:85:59:7e:78:ed:64:55:44: ba:a4:2c:af:01:0f:c1:f0:5c:5e:ca:11:1b:dd:09: 25:d1:a3:9e:e0:2e:6b:9c:1b:e7:b1:42:b4:91:a1: f9:cd:01:fb:15:d1:a7:dc:b3:98:03:c2:1a:63:68: d7:2a:92:9d:a7:18:0a:0d:58:45:50:fd:25:6f:9b: 3f:7c:a1:65:50:ed:ae:a7:41:eb:82:2a:9d:37:cb: 71:d1:41:86:3b:ec:9a:e6:43:0c:96:1e:b9:c7:82: 1c:8d:4a:72:c7:18:d1:7a:e3:8c:53:35:2b:9e:d8: f5:8d:3a:d2:c0:c2:11:b6:73:62:78:b4:24:10:c4: 62:ed:9c:7d:92:b0:3b:d6:18:16:2f:3f:fc:ff:19: 29:36:d3:67:ef:7b:83:43:04:2e:36:b6:af:62:68: 88:a8:5e:ba:e0:ed:5a:e7:85:a6:1d:26:f0:d4:3b: 4c:69:da:60:d0:48:2b:f8:ec:79:6a:c3:67:86:ae: 20:e9:bf:32:9f:55:3e:4a:f1:8d:ef:af:85:05:dd: 5d:be:57:b6:f1:29:1e:66:f1:67:c8:49:85:18:92: e0:24:f5:1e:80:57:2a:ce:e6:d9:67:fc:2d:eb:74: 19:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:BE:FD:6C:E1:12:90:FF:8D:26:A6:8D:5C:6A:3E:53:4A:0D:E8:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/ec292e02-7232-3433-8836-8e0f1005d2fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/2a71f00e-0200-48df-9cb4-008df9a4a854.crl X509v3 Authority Key Identifier: keyid:38:0D:64:C0:FC:18:06:FB:A2:13:99:2A:01:58:BD:19:46:77:76:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854.cer sbgp-ipAddrBlock: critical IPv4: 199.230.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:bd:83:80:c3:01:de:90:c1:09:5c:68:0e:cd:60:ff:d9:6d: 75:28:db:a1:0a:57:74:54:9b:83:dd:f8:7d:b5:bc:6b:6a:81: 21:7c:06:77:b6:09:4b:65:6b:db:ee:4f:55:0b:f0:54:cd:3b: cb:65:70:17:03:39:2f:c7:5e:3a:fd:ad:1a:65:70:99:02:85: 2e:c4:bf:aa:35:57:79:f3:74:a1:fe:0d:8f:bb:7e:cf:fb:20: f5:93:fc:13:03:3d:a5:6d:ed:35:83:33:90:06:9f:2d:5c:92: 88:1c:45:34:8b:0e:f5:7f:88:f2:0c:d7:32:57:14:f5:73:cb: 21:f8:83:b8:33:87:33:33:9e:10:9d:25:bf:9a:99:ff:c0:2a: 7c:04:33:9a:55:ab:02:86:53:c3:6f:e8:3a:91:80:b3:81:7c: 31:e3:a8:d6:8c:e3:88:1b:02:e9:af:b8:ca:79:6c:8e:9a:d5: 1e:1d:1c:94:2b:8e:03:46:2f:b0:6f:37:3e:f3:a8:ac:88:63: 13:3f:38:3e:33:d3:c6:ae:bf:ad:3d:35:1e:85:69:b0:f7:a0: 70:97:40:20:7f:b9:5a:4a:75:8a:f6:72:02:9d:b8:9f:b8:c2: 82:60:60:0c:b3:b6:1e:32:82:60:3d:ce:5d:f8:81:f1:8b:24: dd:76:1d:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsVWkESgK9NImVX6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE3MWYwMGUtMDIwMC00OGRmLTljYjQtMDA4ZGY5YTRh ODU0MB4XDTI1MDkwNDE0MDEzMloXDTI1MTIwMzE1MDEzMlowLzEtMCsGA1UEAxMk YTVjNWJhNjgtNTU5ZC00MTBlLTgxNDAtNWUxMDQzNzM5NzBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwq99fyV/+WTdUL1f8eVdT21qnTchVl+eO1k VUS6pCyvAQ/B8FxeyhEb3Qkl0aOe4C5rnBvnsUK0kaH5zQH7FdGn3LOYA8IaY2jX KpKdpxgKDVhFUP0lb5s/fKFlUO2up0HrgiqdN8tx0UGGO+ya5kMMlh65x4IcjUpy xxjReuOMUzUrntj1jTrSwMIRtnNieLQkEMRi7Zx9krA71hgWLz/8/xkpNtNn73uD QwQuNravYmiIqF664O1a54WmHSbw1DtMadpg0Egr+Ox5asNnhq4g6b8yn1U+SvGN 76+FBd1dvle28SkeZvFnyEmFGJLgJPUegFcqzubZZ/wt63QZWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ++/WzhEpD/jSamjVxqPlNKDegrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yYTcx ZjAwZS0wMjAwLTQ4ZGYtOWNiNC0wMDhkZjlhNGE4NTQvZWMyOTJlMDItNzIzMi0z NDMzLTg4MzYtOGUwZjEwMDVkMmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMmE3MWYwMGUtMDIwMC00OGRmLTlj YjQtMDA4ZGY5YTRhODU0LzJhNzFmMDBlLTAyMDAtNDhkZi05Y2I0LTAwOGRmOWE0 YTg1NC5jcmwwHwYDVR0jBBgwFoAUOA1kwPwYBvuiE5kqAVi9GUZ3do0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yYTcxZjAwZS0wMjAwLTQ4ZGYtOWNiNC0wMDhk ZjlhNGE4NTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx+aoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADq9g4DDAd6QwQlcaA7NYP/ZbXUo26EKV3RUm4Pd+H21vGtqgSF8Bne2 CUtla9vuT1UL8FTNO8tlcBcDOS/HXjr9rRplcJkChS7Ev6o1V3nzdKH+DY+7fs/7 IPWT/BMDPaVt7TWDM5AGny1ckogcRTSLDvV/iPIM1zJXFPVzyyH4g7gzhzMznhCd Jb+amf/AKnwEM5pVqwKGU8Nv6DqRgLOBfDHjqNaM44gbAumvuMp5bI6a1R4dHJQr jgNGL7BvNz7zqKyIYxM/OD4z08auv609NR6FabD3oHCXQCB/uVpKdYr2cgKduJ+4 woJgYAyzth4ygmA9zl34gfGLJN12HQc= -----END CERTIFICATE-----Generated at Wed Sep 17 09:28:00 2025 by rpki-client