$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/cae92603-341e-3d54-9fda-0cf1e572484c.roa File: cae92603-341e-3d54-9fda-0cf1e572484c.roa (raw, json) Hash identifier: ddhRx+IsH8f7RcCQmEm6bRk63OsVJTLDU4nzsqYyDRQ= Subject key identifier: 63:5A:04:70:5B:C0:4C:7C:94:EB:BC:1C:08:59:51:A0:73:8A:F0:7C Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584AA42B8617F4A12415D03E6480 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/cae92603-341e-3d54-9fda-0cf1e572484c.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 21949 IP address blocks: 199.247.192.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 02 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:86:17:f4:a1:24:15:d0:3e:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=c67dbdcf-3424-41fb-894e-ca437c6f3821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:db:28:c0:6a:60:f9:04:43:17:fb:75:d5:2e: 44:d1:41:d4:02:25:9d:64:f9:21:49:28:66:b9:1b: 09:62:c8:e2:22:84:66:40:8d:47:88:0b:17:67:c4: 92:73:20:cc:fa:11:50:82:e4:3f:9e:7c:a8:b5:97: a6:a5:e7:1a:3d:f5:18:ea:3c:00:01:ec:65:a7:d9: 9a:95:16:27:25:31:1a:17:ba:e3:a8:24:f0:13:b0: bf:50:ff:20:c2:c1:89:85:4a:74:a3:65:45:3d:b3: 5e:01:4e:3e:7d:7f:e0:d7:3f:f2:93:ce:65:dc:f3: 18:f6:a6:99:af:a7:a9:43:f9:9d:62:18:a0:bb:c3: 0b:6d:9a:fe:38:00:ee:7c:5b:9a:db:10:71:ea:9e: 69:65:e7:98:aa:84:5b:1b:88:88:3a:a0:08:34:fa: 1a:62:e4:cc:4b:a8:7c:1e:34:67:37:43:9a:ab:5d: 0b:a1:e8:55:fa:5a:31:dc:78:62:5b:2a:b1:e4:88: c6:fb:4d:db:ad:bc:91:66:62:34:9d:9b:42:b2:da: a1:5e:f0:8f:1c:60:64:4a:76:36:34:10:69:a8:45: d0:fb:62:60:63:ed:d1:74:bf:f4:eb:f4:1c:4e:e1: eb:c6:42:ab:f2:c0:a4:f9:02:54:35:c7:63:dd:9a: bb:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:5A:04:70:5B:C0:4C:7C:94:EB:BC:1C:08:59:51:A0:73:8A:F0:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/cae92603-341e-3d54-9fda-0cf1e572484c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 199.247.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:6b:01:12:8b:ec:db:97:7b:e3:0a:78:df:70:a5:04:58:e0: de:de:f1:52:d5:02:b6:b0:51:0a:bb:1a:f4:4c:4f:96:a6:99: de:aa:16:ec:da:62:99:9b:71:b4:55:39:f8:e8:dd:2e:63:2e: d0:62:fd:0a:a3:50:c9:8f:9d:b7:ed:dc:82:f5:5c:9f:2a:ab: 4f:a6:76:b4:c9:63:d4:78:03:9c:98:0c:22:6f:e4:f7:c0:6f: 08:80:56:0a:d1:55:21:85:00:22:72:22:15:de:47:d4:cd:d5: a0:d2:9f:26:7e:f2:ac:fc:23:4d:f2:0a:b6:fe:87:bc:c2:85: e2:a8:0a:31:2d:18:a7:04:d6:91:43:ee:c6:5c:2c:30:20:ca: a1:85:18:9f:58:9c:2e:a6:3e:a2:4a:b9:95:bb:c8:8a:e3:be: 76:8d:b3:1d:55:0e:98:27:c0:d9:8b:ad:b6:8b:be:15:82:1b: 29:02:78:24:d3:18:57:77:da:09:f4:72:28:27:21:d8:65:b7: 12:32:bf:21:06:24:c6:84:df:33:a8:f6:55:d8:66:aa:d3:44: 36:2d:bb:de:26:69:03:1d:7b:a6:6e:aa:c6:73:8d:38:12:67: 80:17:d5:dc:2c:af:96:3f:87:c8:be:16:2a:f0:a4:3c:50:b0: aa:23:0f:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqkK4YX9KEkFdA+ZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk YzY3ZGJkY2YtMzQyNC00MWZiLTg5NGUtY2E0MzdjNmYzODIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNsowGpg+QRDF/t11S5E0UHUAiWdZPkhSShm uRsJYsjiIoRmQI1HiAsXZ8SScyDM+hFQguQ/nnyotZempecaPfUY6jwAAexlp9ma lRYnJTEaF7rjqCTwE7C/UP8gwsGJhUp0o2VFPbNeAU4+fX/g1z/yk85l3PMY9qaZ r6epQ/mdYhigu8MLbZr+OADufFua2xBx6p5pZeeYqoRbG4iIOqAINPoaYuTMS6h8 HjRnN0Oaq10LoehV+lox3HhiWyqx5IjG+03brbyRZmI0nZtCstqhXvCPHGBkSnY2 NBBpqEXQ+2JgY+3RdL/06/QcTuHrxkKr8sCk+QJUNcdj3Zq7jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGNaBHBbwEx8lOu8HAhZUaBzivB8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvY2FlOTI2MDMtMzQxZS0z ZDU0LTlmZGEtMGNmMWU1NzI0ODRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx/fAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFrARKL7NuXe+MKeN9wpQRY4N7e8VLVArawUQq7GvRMT5ammd6qFuza YpmbcbRVOfjo3S5jLtBi/QqjUMmPnbft3IL1XJ8qq0+mdrTJY9R4A5yYDCJv5PfA bwiAVgrRVSGFACJyIhXeR9TN1aDSnyZ+8qz8I03yCrb+h7zCheKoCjEtGKcE1pFD 7sZcLDAgyqGFGJ9YnC6mPqJKuZW7yIrjvnaNsx1VDpgnwNmLrbaLvhWCGykCeCTT GFd32gn0cignIdhltxIyvyEGJMaE3zOo9lXYZqrTRDYtu94maQMde6ZuqsZzjTgS Z4AX1dwsr5Y/h8i+FirwpDxQsKojDwQ= -----END CERTIFICATE-----Generated at Thu Jul 31 14:58:18 2025 by rpki-client