$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/5b5be480-44ed-31ee-80f8-4d078a62e541.roa File: 5b5be480-44ed-31ee-80f8-4d078a62e541.roa (raw, json) Hash identifier: k3xu31HvVS2n7Ai+Dmr/HOJsrmJXTfKZPoEoGZnO5ag= Subject key identifier: 03:5C:FC:36:2F:3E:C8:93:E6:71:3E:C7:EC:45:FC:0C:A0:B8:EC:7C Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584AFEE6A8C0E895F7BEC09827C0 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/5b5be480-44ed-31ee-80f8-4d078a62e541.roa Signing time: Wed 27 Aug 2025 13:00:41 +0000 ROA not before: Wed 27 Aug 2025 13:00:41 +0000 ROA not after: Tue 25 Nov 2025 14:00:41 +0000 asID: 14061 IP address blocks: 199.4.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e6:a8:c0:e8:95:f7:be:c0:98:27:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Aug 27 13:00:41 2025 GMT Not After : Nov 25 14:00:41 2025 GMT Subject: CN=2cc4f307-84fe-4dab-8b10-02e9b4edb9ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:13:66:a5:2c:38:53:4d:b1:65:03:91:1e:4c: 0a:8c:62:d7:25:6e:98:a8:2a:d9:4e:6a:cf:ee:99: 8e:75:77:07:70:c5:74:8e:dd:af:96:40:e2:ba:6b: 83:ab:a5:cf:19:61:62:d4:fb:3e:13:78:28:f4:c3: 0a:af:99:44:b6:68:a4:32:3f:99:9d:fc:ea:33:3e: fd:ee:e3:39:6f:ef:e8:d3:c8:a6:16:ae:2b:8b:2d: 3c:ba:7e:cf:08:b1:72:69:0c:51:cc:86:4b:dd:8d: 75:a5:09:3a:60:61:61:52:a6:4e:7f:d6:67:d8:96: 3d:f3:ff:e2:ac:45:a6:d0:0c:dd:20:e9:81:2c:db: 21:77:7c:cf:c6:4c:5c:2d:af:18:8a:2c:02:df:88: 46:00:a5:c3:54:97:a9:d9:ef:08:dc:2d:69:25:1e: 89:a8:97:f8:62:fa:6e:0a:3a:42:aa:98:42:89:84: 38:da:9c:78:2a:19:df:19:ec:da:b4:f5:47:41:9b: 93:4e:6f:43:de:03:0c:17:13:b2:49:18:5b:78:9c: 08:5b:e9:6d:0f:2f:f7:44:0d:ea:74:88:ff:6e:81: ab:b3:ff:97:6b:f4:b1:53:c9:02:ba:dc:79:90:81: 26:9d:3b:18:ff:74:65:34:a6:07:49:b1:da:77:96: 72:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:5C:FC:36:2F:3E:C8:93:E6:71:3E:C7:EC:45:FC:0C:A0:B8:EC:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/5b5be480-44ed-31ee-80f8-4d078a62e541.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 199.4.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:12:56:88:5b:a9:7d:18:4f:27:5f:0d:82:02:1c:e0:ae:e2: e0:a7:f0:d1:e6:6e:2f:e8:ef:8c:84:04:fb:cf:f0:d9:22:49: 8b:f3:c8:04:72:70:cb:4b:fc:39:68:60:a6:36:5e:a4:ae:55: 00:0d:61:95:d2:95:59:e3:66:a9:1f:4d:4e:57:0e:0b:c6:87: 68:6e:69:d8:4d:ea:29:ca:e2:65:3a:e5:ca:e6:6f:95:54:96: c0:cc:1b:f8:41:c8:18:20:dc:e4:60:13:e5:fb:44:40:2c:7e: 31:e8:b6:bc:2b:48:82:90:14:89:ea:71:2a:80:aa:6e:b7:24: 42:61:3e:88:83:2f:5b:4b:5a:9f:bf:46:ce:28:eb:f0:fa:b0: 80:b1:00:6d:6f:0e:cc:19:62:c0:64:83:b3:b4:49:2d:d6:eb: 19:9e:d2:ea:16:e7:13:49:c6:2f:32:14:aa:d3:37:47:25:1a: 50:33:c2:fb:61:b3:66:60:bb:ba:58:85:52:dc:01:77:59:94: e9:ec:b9:ae:37:54:25:7b:27:44:f9:3c:d0:f7:a9:1f:21:82: e8:29:f4:d9:c1:f7:54:33:f1:65:df:1c:4a:38:05:b3:87:6c: 28:d5:9f:28:07:24:bf:98:d7:53:7d:51:c4:18:9b:8a:df:b1: 9a:04:03:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+5qjA6JX3vsCYJ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk MmNjNGYzMDctODRmZS00ZGFiLThiMTAtMDJlOWI0ZWRiOWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxNmpSw4U02xZQORHkwKjGLXJW6YqCrZTmrP 7pmOdXcHcMV0jt2vlkDiumuDq6XPGWFi1Ps+E3go9MMKr5lEtmikMj+ZnfzqMz79 7uM5b+/o08imFq4riy08un7PCLFyaQxRzIZL3Y11pQk6YGFhUqZOf9Zn2JY98//i rEWm0AzdIOmBLNshd3zPxkxcLa8YiiwC34hGAKXDVJep2e8I3C1pJR6JqJf4Yvpu CjpCqphCiYQ42px4KhnfGezatPVHQZuTTm9D3gMMFxOySRhbeJwIW+ltDy/3RA3q dIj/boGrs/+Xa/SxU8kCutx5kIEmnTsY/3RlNKYHSbHad5Zy7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFANc/DYvPsiT5nE+x+xF/AyguOx8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvNWI1YmU0ODAtNDRlZC0z MWVlLTgwZjgtNGQwNzhhNjJlNTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwTfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL4SVohbqX0YTydfDYICHOCu4uCn8NHmbi/o74yEBPvP8NkiSYvzyARy cMtL/DloYKY2XqSuVQANYZXSlVnjZqkfTU5XDgvGh2huadhN6inK4mU65crmb5VU lsDMG/hByBgg3ORgE+X7REAsfjHotrwrSIKQFInqcSqAqm63JEJhPoiDL1tLWp+/ Rs4o6/D6sICxAG1vDswZYsBkg7O0SS3W6xme0uoW5xNJxi8yFKrTN0clGlAzwvth s2Zgu7pYhVLcAXdZlOnsua43VCV7J0T5PND3qR8hgugp9NnB91Qz8WXfHEo4BbOH bCjVnygHJL+Y11N9UcQYm4rfsZoEA/c= -----END CERTIFICATE-----Generated at Sun Sep 7 12:36:43 2025 by rpki-client