$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd/9b028df0-ef35-3987-ae87-6cfc3001a9f7.roa File: 9b028df0-ef35-3987-ae87-6cfc3001a9f7.roa (raw, json) Hash identifier: 33snDVCbxuYHePSFkSDnmC918V1e+ekJk6g7WJhYEQ4= Subject key identifier: 85:F7:D1:D6:E8:8A:10:B4:98:30:15:8D:FB:6F:86:35:2F:11:D9:64 Certificate issuer: /CN=ecc87e4f-7e3a-437b-9f59-2f2863b974dd Certificate serial: 010D0C9F4328584B0E414D723DFBD0D3508A7580 Authority key identifier: B4:C5:18:9D:6C:7A:9B:3C:C8:5B:75:A6:6D:C3:8A:A2:F0:F1:C0:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd/9b028df0-ef35-3987-ae87-6cfc3001a9f7.roa Signing time: Tue 02 Sep 2025 01:00:32 +0000 ROA not before: Tue 02 Sep 2025 01:00:32 +0000 ROA not after: Mon 01 Dec 2025 02:00:32 +0000 asID: 16509 IP address blocks: 199.43.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd/ecc87e4f-7e3a-437b-9f59-2f2863b974dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd/ecc87e4f-7e3a-437b-9f59-2f2863b974dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0e:41:4d:72:3d:fb:d0:d3:50:8a:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecc87e4f-7e3a-437b-9f59-2f2863b974dd Validity Not Before: Sep 2 01:00:32 2025 GMT Not After : Dec 1 02:00:32 2025 GMT Subject: CN=5e23f935-2b89-4c0e-b8b5-1a6bce336507 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:57:9f:2b:09:5a:a2:42:d5:cf:7e:d7:0e:07: ee:22:fa:17:ad:b5:d4:51:7c:4a:7a:6a:f3:77:11: 24:11:2b:06:a0:94:90:79:e8:12:97:cf:cf:cd:b7: bd:89:9e:3f:09:b5:3c:3a:40:5b:13:f6:b3:b1:e2: 81:5d:4f:ea:6a:de:01:12:05:2f:4e:5f:59:cf:57: b7:a2:28:c5:7c:61:4e:2e:d5:67:0c:a5:67:e9:08: 28:96:8e:3c:53:11:19:8d:af:2c:49:79:c5:14:f7: fc:f5:33:91:83:6a:3b:e6:74:8a:f4:76:45:80:41: 16:be:e9:ca:e0:72:71:d0:78:5a:31:d8:ad:0a:98: 10:95:c2:fd:74:5f:87:b3:c6:7b:ca:c5:09:10:8f: 08:fe:83:bc:28:5f:1f:0d:a1:44:35:0a:9d:e0:5f: 04:c4:9e:bc:61:17:b0:3a:0a:8b:01:1e:5f:83:1c: cc:05:08:a2:5a:ef:19:5e:d7:88:02:67:2d:39:b7: a5:27:d1:2c:35:c9:45:d4:ca:82:91:22:82:ce:31: ec:66:da:33:f6:52:a6:86:36:53:c3:81:cf:46:7c: 40:45:75:bf:2a:75:f1:4c:f3:3c:0d:a1:5b:94:bc: ad:0f:1c:9c:cd:cd:60:74:ac:2e:b7:09:e1:5e:30: 1e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:F7:D1:D6:E8:8A:10:B4:98:30:15:8D:FB:6F:86:35:2F:11:D9:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd/9b028df0-ef35-3987-ae87-6cfc3001a9f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd/ecc87e4f-7e3a-437b-9f59-2f2863b974dd.crl X509v3 Authority Key Identifier: keyid:B4:C5:18:9D:6C:7A:9B:3C:C8:5B:75:A6:6D:C3:8A:A2:F0:F1:C0:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd.cer sbgp-ipAddrBlock: critical IPv4: 199.43.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:e2:af:bc:b7:0c:01:87:04:80:21:cb:7e:9d:8c:3a:d3:be: d3:4b:76:f0:04:bb:79:7c:5e:ac:b6:cb:21:f8:51:a0:75:eb: f5:ca:f1:7a:8f:66:93:90:a6:ae:5f:a8:96:9b:8b:2f:fc:fb: fc:39:dc:70:31:e7:20:56:89:9e:c6:fb:db:e9:67:0c:0a:26: 5f:e1:a5:e8:78:06:30:77:70:4e:fa:b9:38:79:69:da:ca:ce: 75:6e:84:f5:07:0b:0f:04:8b:f7:3e:88:d4:fc:71:e7:cb:b4: 97:69:9a:d6:1d:a1:e6:69:42:2e:b9:34:7b:91:bc:09:2b:99: c6:36:b4:70:c2:c6:3a:5b:97:3c:e6:c8:6d:a0:17:72:56:f8: b4:f6:bb:de:d3:a9:3c:1d:27:d4:28:d1:3e:65:7c:aa:2a:5f: a5:fe:ac:33:3e:d2:39:d9:92:7d:80:38:da:c1:bc:99:6c:df: 7d:34:3e:15:e8:e1:cd:26:57:b2:23:0c:a1:f4:22:2c:14:9e: af:88:b0:48:7e:6a:bc:30:64:fa:39:66:fb:7c:2a:04:a5:c0: ec:c5:27:75:29:14:51:ea:a8:73:ff:1e:6b:bc:fd:c8:cd:b2: 4f:93:d9:e9:39:88:c0:9e:8b:13:3b:2f:d9:55:f8:66:45:3c: 43:f7:2b:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsOQU1yPfvQ01CKdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWNjODdlNGYtN2UzYS00MzdiLTlmNTktMmYyODYzYjk3 NGRkMB4XDTI1MDkwMjAxMDAzMloXDTI1MTIwMTAyMDAzMlowLzEtMCsGA1UEAxMk NWUyM2Y5MzUtMmI4OS00YzBlLWI4YjUtMWE2YmNlMzM2NTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVefKwlaokLVz37XDgfuIvoXrbXUUXxKemrz dxEkESsGoJSQeegSl8/Pzbe9iZ4/CbU8OkBbE/azseKBXU/qat4BEgUvTl9Zz1e3 oijFfGFOLtVnDKVn6Qgolo48UxEZja8sSXnFFPf89TORg2o75nSK9HZFgEEWvunK 4HJx0HhaMditCpgQlcL9dF+Hs8Z7ysUJEI8I/oO8KF8fDaFENQqd4F8ExJ68YRew OgqLAR5fgxzMBQiiWu8ZXteIAmctObelJ9EsNclF1MqCkSKCzjHsZtoz9lKmhjZT w4HPRnxARXW/KnXxTPM8DaFblLytDxyczc1gdKwutwnhXjAeswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIX30dboihC0mDAVjftvhjUvEdlkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lY2M4 N2U0Zi03ZTNhLTQzN2ItOWY1OS0yZjI4NjNiOTc0ZGQvOWIwMjhkZjAtZWYzNS0z OTg3LWFlODctNmNmYzMwMDFhOWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZWNjODdlNGYtN2UzYS00MzdiLTlm NTktMmYyODYzYjk3NGRkL2VjYzg3ZTRmLTdlM2EtNDM3Yi05ZjU5LTJmMjg2M2I5 NzRkZC5jcmwwHwYDVR0jBBgwFoAUtMUYnWx6mzzIW3WmbcOKovDxwOswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lY2M4N2U0Zi03ZTNhLTQzN2ItOWY1OS0yZjI4 NjNiOTc0ZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyu6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrir7y3DAGHBIAhy36djDrTvtNLdvAEu3l8Xqy2yyH4UaB16/XK8XqP ZpOQpq5fqJabiy/8+/w53HAx5yBWiZ7G+9vpZwwKJl/hpeh4BjB3cE76uTh5adrK znVuhPUHCw8Ei/c+iNT8cefLtJdpmtYdoeZpQi65NHuRvAkrmcY2tHDCxjpblzzm yG2gF3JW+LT2u97TqTwdJ9Qo0T5lfKoqX6X+rDM+0jnZkn2AONrBvJls3300PhXo 4c0mV7IjDKH0IiwUnq+IsEh+arwwZPo5Zvt8KgSlwOzFJ3UpFFHqqHP/Hmu8/cjN sk+T2ek5iMCeixM7L9lV+GZFPEP3K3M= -----END CERTIFICATE-----Generated at Fri Sep 5 02:01:29 2025 by rpki-client