$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8/4cafbfd2-35b0-3d07-8d13-11f6bdba266a.roa File: 4cafbfd2-35b0-3d07-8d13-11f6bdba266a.roa (raw, json) Hash identifier: mx3nB1/FHIamRERiUjwAgSUGRk1EGoccE1HbyHcfQH8= Subject key identifier: DA:79:6A:4E:06:B5:94:25:81:21:5D:64:B0:CB:31:12:7B:92:33:EF Certificate issuer: /CN=204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8 Certificate serial: 010D0C9F4328584AD7C523947D7F7ED18A14CC00 Authority key identifier: 15:B2:2C:F6:31:D3:B7:CC:32:8D:89:F6:E1:EB:14:5C:B0:3D:22:FD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8/4cafbfd2-35b0-3d07-8d13-11f6bdba266a.roa Signing time: Wed 13 Aug 2025 12:36:46 +0000 ROA not before: Wed 13 Aug 2025 12:36:46 +0000 ROA not after: Tue 11 Nov 2025 13:36:46 +0000 asID: 396982 IP address blocks: 199.88.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:c5:23:94:7d:7f:7e:d1:8a:14:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8 Validity Not Before: Aug 13 12:36:46 2025 GMT Not After : Nov 11 13:36:46 2025 GMT Subject: CN=c5041c08-f1ea-4000-8199-685fe43537a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:35:85:be:98:b2:af:cb:8b:b6:58:f9:79:70: 55:92:b1:cb:19:c0:76:7c:4b:22:3a:04:4c:9e:c2: d9:18:5d:3a:9c:74:3d:0e:51:fb:d0:e1:cd:0f:16: 6f:57:e1:41:ec:96:04:3f:bc:62:aa:9d:8a:27:ed: c9:a3:3f:bc:1b:3d:98:6e:49:d0:e0:ed:0c:21:8d: 17:3e:91:f9:fc:37:2d:91:5b:0c:af:64:a9:ef:2d: 40:04:b7:56:23:08:ec:0c:4d:4d:90:8f:20:99:3b: 69:7b:40:2a:27:67:b3:bb:c9:28:ea:4c:8e:c8:23: 84:a4:57:e7:92:60:43:2c:82:d5:24:47:40:62:93: cf:0d:75:7b:2f:fa:60:f0:36:ca:b6:23:00:44:6e: 6f:3b:04:68:76:09:c0:35:50:61:b0:64:44:a2:f1: b5:51:2f:a9:6b:ef:ba:ba:66:ed:0e:13:73:1a:bc: 68:40:c5:40:97:13:18:a1:85:8c:1e:81:19:f4:94: 78:5e:45:0d:ed:e2:49:c5:90:80:d1:4b:9f:a4:57: c6:de:41:56:8b:dd:81:d5:8e:0b:14:c7:bb:80:37: 4e:81:ee:30:05:9b:7f:72:e8:05:b7:f4:f1:cd:35: 5e:a2:44:01:d8:bd:26:6e:b6:9f:e9:39:f6:db:d0: 6e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:79:6A:4E:06:B5:94:25:81:21:5D:64:B0:CB:31:12:7B:92:33:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8/4cafbfd2-35b0-3d07-8d13-11f6bdba266a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8.crl X509v3 Authority Key Identifier: keyid:15:B2:2C:F6:31:D3:B7:CC:32:8D:89:F6:E1:EB:14:5C:B0:3D:22:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8.cer sbgp-ipAddrBlock: critical IPv4: 199.88.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:32:d8:5a:45:d0:7c:e5:81:7c:36:20:1d:ad:da:7c:6a:0f: fa:6c:ba:b7:7d:d2:f6:65:e3:eb:60:d9:61:5d:17:59:42:c4: 8c:15:3e:35:e7:13:34:9f:41:31:a8:eb:3e:22:fe:20:a4:ab: 77:04:45:41:cd:79:0e:65:f8:85:e9:e5:24:23:8d:cd:26:8e: bb:89:58:a0:40:fe:33:2c:04:54:e8:df:4d:99:64:68:f4:da: 46:7c:3e:df:e4:94:e0:6c:e4:8e:c8:75:a4:4b:57:69:d0:4d: e2:ba:ef:27:25:4d:6c:ef:f7:d0:19:06:b7:d4:36:57:6f:1e: 39:aa:a4:29:c3:1a:66:fe:23:78:45:2b:0e:5b:2d:96:6a:2d: c9:1a:ed:bc:50:93:84:96:89:c6:da:22:60:e0:5c:08:15:b1: b2:95:a2:86:12:80:0c:4a:00:6b:96:92:0d:c2:e2:6e:67:24: 42:05:a7:b3:a3:39:3d:92:f8:b5:e6:e8:ce:ad:f2:8f:e8:1b: e6:cb:d1:1f:e2:b8:60:04:45:07:ff:87:9a:36:99:02:9b:60: f3:bd:42:74:3b:1c:b2:34:b3:d1:a9:9b:44:33:3c:a9:ae:5b: 04:2f:ee:80:3a:df:e1:0f:51:40:20:72:22:ef:2c:a7:95:3e: 0b:d0:01:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErXxSOUfX9+0YoUzAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA0YjZlMzUtYzJiNS00MDg0LTljNzAtZGQ1ZTdjN2Q4 Y2Y4MB4XDTI1MDgxMzEyMzY0NloXDTI1MTExMTEzMzY0NlowLzEtMCsGA1UEAxMk YzUwNDFjMDgtZjFlYS00MDAwLTgxOTktNjg1ZmU0MzUzN2E1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDWFvpiyr8uLtlj5eXBVkrHLGcB2fEsiOgRM nsLZGF06nHQ9DlH70OHNDxZvV+FB7JYEP7xiqp2KJ+3Joz+8Gz2YbknQ4O0MIY0X PpH5/DctkVsMr2Sp7y1ABLdWIwjsDE1NkI8gmTtpe0AqJ2ezu8ko6kyOyCOEpFfn kmBDLILVJEdAYpPPDXV7L/pg8DbKtiMARG5vOwRodgnANVBhsGREovG1US+pa++6 umbtDhNzGrxoQMVAlxMYoYWMHoEZ9JR4XkUN7eJJxZCA0UufpFfG3kFWi92B1Y4L FMe7gDdOge4wBZt/cugFt/TxzTVeokQB2L0mbraf6Tn229BuyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNp5ak4GtZQlgSFdZLDLMRJ7kjPvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMDRi NmUzNS1jMmI1LTQwODQtOWM3MC1kZDVlN2M3ZDhjZjgvNGNhZmJmZDItMzViMC0z ZDA3LThkMTMtMTFmNmJkYmEyNjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjA0YjZlMzUtYzJiNS00MDg0LTlj NzAtZGQ1ZTdjN2Q4Y2Y4LzIwNGI2ZTM1LWMyYjUtNDA4NC05YzcwLWRkNWU3Yzdk OGNmOC5jcmwwHwYDVR0jBBgwFoAUFbIs9jHTt8wyjYn24esUXLA9Iv0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMDRiNmUzNS1jMmI1LTQwODQtOWM3MC1kZDVl N2M3ZDhjZjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1j8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0y2FpF0HzlgXw2IB2t2nxqD/psurd90vZl4+tg2WFdF1lCxIwVPjXn EzSfQTGo6z4i/iCkq3cERUHNeQ5l+IXp5SQjjc0mjruJWKBA/jMsBFTo302ZZGj0 2kZ8Pt/klOBs5I7IdaRLV2nQTeK67yclTWzv99AZBrfUNldvHjmqpCnDGmb+I3hF Kw5bLZZqLcka7bxQk4SWicbaImDgXAgVsbKVooYSgAxKAGuWkg3C4m5nJEIFp7Oj OT2S+LXm6M6t8o/oG+bL0R/iuGAERQf/h5o2mQKbYPO9QnQ7HLI0s9Gpm0QzPKmu WwQv7oA63+EPUUAgciLvLKeVPgvQAXw= -----END CERTIFICATE-----Generated at Wed Aug 20 08:36:58 2025 by rpki-client