$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/76d8390e-aab4-4081-a682-eebfe9ed3dde/1ec803cb-f96d-3d90-b088-6d5713ba0049.roa File: 1ec803cb-f96d-3d90-b088-6d5713ba0049.roa (raw, json) Hash identifier: SiCYX+FFnR0dHJVftwFVjk8mL5HtclAKNkHzE2wtyho= Subject key identifier: 42:88:81:29:65:88:C9:C2:29:47:97:0F:34:A0:B1:63:DC:18:5B:D0 Certificate issuer: /CN=76d8390e-aab4-4081-a682-eebfe9ed3dde Certificate serial: 010D0C9F4328584AA160DFE119A8D48E9A0FA880 Authority key identifier: 85:CE:01:62:B7:DC:93:B9:0A:57:B6:B4:56:7B:D6:F8:92:24:88:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/76d8390e-aab4-4081-a682-eebfe9ed3dde.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/76d8390e-aab4-4081-a682-eebfe9ed3dde/1ec803cb-f96d-3d90-b088-6d5713ba0049.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 396982 IP address blocks: 199.60.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/76d8390e-aab4-4081-a682-eebfe9ed3dde/76d8390e-aab4-4081-a682-eebfe9ed3dde.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/76d8390e-aab4-4081-a682-eebfe9ed3dde/76d8390e-aab4-4081-a682-eebfe9ed3dde.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/76d8390e-aab4-4081-a682-eebfe9ed3dde.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 03 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:60:df:e1:19:a8:d4:8e:9a:0f:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76d8390e-aab4-4081-a682-eebfe9ed3dde Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=277e7c15-9243-4635-bee0-e013e576471d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9f:7a:4c:0a:cf:7c:98:f8:34:ca:82:cf:a4: 7e:81:0c:ff:ea:8a:1e:f7:69:bb:10:14:77:5a:b7: f9:8a:63:a2:86:d7:5a:f5:8f:e3:fc:48:d1:33:53: 9d:40:44:84:21:54:3a:50:3d:41:31:f5:11:df:7f: b3:c1:ed:7e:28:ad:7c:3c:55:97:d4:ae:43:98:b6: 6f:d9:56:99:4e:18:df:aa:db:84:f3:1d:9f:02:c9: be:2d:21:38:4e:01:42:00:30:30:a2:a1:f2:48:cb: b6:4d:86:2f:1c:5a:49:94:49:00:61:84:de:a5:77: e2:f4:ec:f7:7a:dc:21:d4:be:38:af:02:0e:0f:a2: 72:62:7b:a3:bc:a4:43:ef:42:e2:9d:39:35:16:3e: 71:c2:2a:a5:29:05:7c:13:0a:e1:b9:93:cb:93:26: 1d:91:2e:ca:bf:c9:2a:8d:57:b4:6d:30:27:91:27: 4c:3e:fa:63:f6:93:5a:1e:fc:b0:08:7a:94:06:4d: 5a:0c:5a:92:f7:9a:ce:d6:10:17:f3:7b:e4:46:7b: 83:94:d7:5c:6c:e8:6e:45:90:20:97:be:24:4e:d2: b0:7e:d3:2b:49:0e:3e:12:c3:dd:35:b1:65:38:3e: 39:3a:af:66:1c:47:e6:a7:8e:bd:40:38:e3:03:76: 02:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:88:81:29:65:88:C9:C2:29:47:97:0F:34:A0:B1:63:DC:18:5B:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/76d8390e-aab4-4081-a682-eebfe9ed3dde/1ec803cb-f96d-3d90-b088-6d5713ba0049.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/76d8390e-aab4-4081-a682-eebfe9ed3dde/76d8390e-aab4-4081-a682-eebfe9ed3dde.crl X509v3 Authority Key Identifier: keyid:85:CE:01:62:B7:DC:93:B9:0A:57:B6:B4:56:7B:D6:F8:92:24:88:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/76d8390e-aab4-4081-a682-eebfe9ed3dde.cer sbgp-ipAddrBlock: critical IPv4: 199.60.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:e7:a1:09:b6:9c:18:33:29:19:6b:86:92:33:ea:f7:59:9f: e0:92:95:7f:58:e7:e8:3f:a8:a9:82:43:c5:95:0c:6c:00:60: a2:6f:a6:8e:89:26:6f:6a:0e:71:f1:16:30:52:5e:5e:75:32: 7c:c3:e1:fc:52:3b:24:4e:e9:7d:d6:b6:9d:33:70:56:c1:7e: 05:80:c2:38:0b:98:9f:a8:a7:63:71:fe:e1:c9:89:2f:00:18: f3:20:d8:59:dc:93:19:4e:d6:b1:d9:49:ac:09:36:b8:31:92: 21:58:7a:d0:85:5e:59:d7:84:9c:e6:cf:ac:f4:d2:40:e0:65: a0:ee:52:0c:43:da:a8:94:53:e0:34:bb:b5:81:1b:bf:b9:0c: 76:67:50:41:93:7b:6d:3f:1e:7c:02:86:4e:f0:4c:09:84:cc: 60:4c:9b:c2:48:5e:95:ed:d2:16:16:3a:0a:28:03:49:c3:ea: f2:b6:d2:5b:7d:bd:ae:51:36:8e:33:83:7a:4c:c0:e7:26:27: e8:37:ff:74:11:cd:f2:ff:0c:72:a6:bd:08:fe:e5:4f:c3:9d: ee:75:4c:25:a6:a8:c8:b1:2a:e4:7f:29:40:68:5b:6f:4f:64: 63:36:f1:c0:4c:cf:3d:0f:ff:e7:11:70:d1:17:51:d3:85:a4: f3:f6:f4:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYN/hGajUjpoPqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZkODM5MGUtYWFiNC00MDgxLWE2ODItZWViZmU5ZWQz ZGRlMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk Mjc3ZTdjMTUtOTI0My00NjM1LWJlZTAtZTAxM2U1NzY0NzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt596TArPfJj4NMqCz6R+gQz/6ooe92m7EBR3 Wrf5imOihtda9Y/j/EjRM1OdQESEIVQ6UD1BMfUR33+zwe1+KK18PFWX1K5DmLZv 2VaZThjfqtuE8x2fAsm+LSE4TgFCADAwoqHySMu2TYYvHFpJlEkAYYTepXfi9Oz3 etwh1L44rwIOD6JyYnujvKRD70LinTk1Fj5xwiqlKQV8EwrhuZPLkyYdkS7Kv8kq jVe0bTAnkSdMPvpj9pNaHvywCHqUBk1aDFqS95rO1hAX83vkRnuDlNdcbOhuRZAg l74kTtKwftMrSQ4+EsPdNbFlOD45Oq9mHEfmp469QDjjA3YCvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKIgSlliMnCKUeXDzSgsWPcGFvQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83NmQ4 MzkwZS1hYWI0LTQwODEtYTY4Mi1lZWJmZTllZDNkZGUvMWVjODAzY2ItZjk2ZC0z ZDkwLWIwODgtNmQ1NzEzYmEwMDQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzZkODM5MGUtYWFiNC00MDgxLWE2 ODItZWViZmU5ZWQzZGRlLzc2ZDgzOTBlLWFhYjQtNDA4MS1hNjgyLWVlYmZlOWVk M2RkZS5jcmwwHwYDVR0jBBgwFoAUhc4BYrfck7kKV7a0VnvW+JIkiKowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83NmQ4MzkwZS1hYWI0LTQwODEtYTY4Mi1lZWJm ZTllZDNkZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzzoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/noQm2nBgzKRlrhpIz6vdZn+CSlX9Y5+g/qKmCQ8WVDGwAYKJvpo6J Jm9qDnHxFjBSXl51MnzD4fxSOyRO6X3Wtp0zcFbBfgWAwjgLmJ+op2Nx/uHJiS8A GPMg2FnckxlO1rHZSawJNrgxkiFYetCFXlnXhJzmz6z00kDgZaDuUgxD2qiUU+A0 u7WBG7+5DHZnUEGTe20/HnwChk7wTAmEzGBMm8JIXpXt0hYWOgooA0nD6vK20lt9 va5RNo4zg3pMwOcmJ+g3/3QRzfL/DHKmvQj+5U/Dne51TCWmqMixKuR/KUBoW29P ZGM28cBMzz0P/+cRcNEXUdOFpPP29C8= -----END CERTIFICATE-----Generated at Sat Aug 2 05:35:02 2025 by rpki-client