$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0aed97d-7073-4206-b05c-18a84d3f256d/b23bc881-8b25-3c26-8e95-80bf92a0ec33.roa File: b23bc881-8b25-3c26-8e95-80bf92a0ec33.roa (raw, json) Hash identifier: OjxHELGu7KpdSs7ZIj8xkNY1NmC4QknPbFq//OQfuSs= Subject key identifier: 57:6D:2E:20:96:D6:8A:01:E7:96:4A:E9:2C:8C:F4:06:F8:82:18:25 Certificate issuer: /CN=c0aed97d-7073-4206-b05c-18a84d3f256d Certificate serial: 010D0C9F4328584B03168DDBC19B2D8FBCBE18E0 Authority key identifier: 89:7F:03:30:67:E4:3D:E8:6D:FC:A9:72:8E:4B:37:8F:AF:87:0C:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0aed97d-7073-4206-b05c-18a84d3f256d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0aed97d-7073-4206-b05c-18a84d3f256d/b23bc881-8b25-3c26-8e95-80bf92a0ec33.roa Signing time: Fri 29 Aug 2025 01:00:32 +0000 ROA not before: Fri 29 Aug 2025 01:00:32 +0000 ROA not after: Thu 27 Nov 2025 02:00:32 +0000 asID: 209242 IP address blocks: 199.34.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0aed97d-7073-4206-b05c-18a84d3f256d/c0aed97d-7073-4206-b05c-18a84d3f256d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0aed97d-7073-4206-b05c-18a84d3f256d/c0aed97d-7073-4206-b05c-18a84d3f256d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0aed97d-7073-4206-b05c-18a84d3f256d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:03:16:8d:db:c1:9b:2d:8f:bc:be:18:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0aed97d-7073-4206-b05c-18a84d3f256d Validity Not Before: Aug 29 01:00:32 2025 GMT Not After : Nov 27 02:00:32 2025 GMT Subject: CN=43931e91-f3e7-4239-88a9-bde5eecaba34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d1:0a:9a:c6:ed:85:42:43:6d:0c:d8:dd:ef: 38:e9:da:0e:4f:92:d0:71:08:ff:29:52:46:d1:1b: c7:67:83:d6:e8:3d:1a:e6:96:e2:e5:68:a9:e2:b7: 2b:06:f0:56:af:94:5d:51:19:15:97:94:5c:42:fe: e5:3a:01:6a:74:ea:b4:3b:b6:04:71:4b:b4:e5:09: 00:c3:29:8a:f0:df:66:de:2a:3c:00:c7:4a:da:5b: e9:22:3d:75:39:69:45:46:19:04:f2:42:fe:fb:23: 7c:85:fb:d3:b4:e1:59:41:98:db:fd:35:29:d1:5a: b6:08:23:05:e6:d3:3e:0a:5e:b6:37:5c:52:3e:a0: 8d:c4:c3:09:b8:6a:a1:1a:98:39:ae:f5:f5:65:8b: f0:9f:e3:f2:ca:c4:51:63:bc:10:05:1d:18:27:29: e1:95:30:5a:ea:b5:2b:92:12:56:b0:2a:20:6a:94: c9:06:f7:4e:ad:a3:28:93:f5:a0:02:35:61:be:d3: 96:5b:c1:06:f4:86:02:58:4a:6a:88:1b:f6:17:90: b2:f9:cb:b6:25:3c:4b:6e:1c:3c:18:41:a5:5d:73: 73:9b:0b:42:3d:d6:d7:e4:48:37:d4:55:18:3e:88: 33:f6:ac:2f:82:b3:8f:08:df:53:43:ff:2b:ae:a5: 03:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:6D:2E:20:96:D6:8A:01:E7:96:4A:E9:2C:8C:F4:06:F8:82:18:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0aed97d-7073-4206-b05c-18a84d3f256d/b23bc881-8b25-3c26-8e95-80bf92a0ec33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0aed97d-7073-4206-b05c-18a84d3f256d/c0aed97d-7073-4206-b05c-18a84d3f256d.crl X509v3 Authority Key Identifier: keyid:89:7F:03:30:67:E4:3D:E8:6D:FC:A9:72:8E:4B:37:8F:AF:87:0C:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0aed97d-7073-4206-b05c-18a84d3f256d.cer sbgp-ipAddrBlock: critical IPv4: 199.34.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:6a:0c:de:49:f3:47:fa:d9:1a:76:8c:d3:21:9a:35:9d:08: c6:b6:6b:40:30:e9:ec:e8:18:d1:89:e8:5a:8b:ae:69:17:dd: a7:7f:a1:a6:0e:82:20:00:70:ba:08:f6:8f:61:93:3a:c4:17: 92:35:ee:71:fe:46:36:a9:86:0c:32:18:32:ce:8b:35:23:1e: 3f:3c:87:3f:56:55:b7:37:6d:9e:52:71:5e:38:a5:ce:f1:af: 45:22:ce:f2:27:c1:8b:00:7c:be:3d:32:e1:03:b3:ed:e3:3b: 69:59:29:5a:25:7b:32:a6:d4:ae:0d:1b:16:58:7d:eb:64:5a: 0a:4d:00:b2:d5:6a:34:1a:e3:ba:2c:20:33:10:b0:18:8d:60: 58:21:e5:96:cc:64:6f:0d:b4:4e:d9:12:65:fe:33:58:9e:9e: 5f:d1:94:05:78:92:19:a4:ba:57:15:66:aa:0d:5c:73:d1:63: fd:98:18:ce:1d:6a:d3:a2:24:8d:98:eb:2a:d0:d1:fa:8c:0b: 0e:23:cb:66:da:00:55:6b:c8:03:3d:1e:58:8c:e3:bd:4d:89: ba:c4:d3:2b:8a:98:a3:f9:a7:ee:ac:cd:20:a8:f3:61:d7:b0: 88:88:bd:99:2b:07:da:e6:55:0e:0c:b6:0b:56:e1:47:6c:ac: 13:84:43:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsDFo3bwZstj7y+GOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzBhZWQ5N2QtNzA3My00MjA2LWIwNWMtMThhODRkM2Yy NTZkMB4XDTI1MDgyOTAxMDAzMloXDTI1MTEyNzAyMDAzMlowLzEtMCsGA1UEAxMk NDM5MzFlOTEtZjNlNy00MjM5LTg4YTktYmRlNWVlY2FiYTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9EKmsbthUJDbQzY3e846doOT5LQcQj/KVJG 0RvHZ4PW6D0a5pbi5Wip4rcrBvBWr5RdURkVl5RcQv7lOgFqdOq0O7YEcUu05QkA wymK8N9m3io8AMdK2lvpIj11OWlFRhkE8kL++yN8hfvTtOFZQZjb/TUp0Vq2CCMF 5tM+Cl62N1xSPqCNxMMJuGqhGpg5rvX1ZYvwn+PyysRRY7wQBR0YJynhlTBa6rUr khJWsCogapTJBvdOraMok/WgAjVhvtOWW8EG9IYCWEpqiBv2F5Cy+cu2JTxLbhw8 GEGlXXNzmwtCPdbX5Eg31FUYPogz9qwvgrOPCN9TQ/8rrqUDmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFdtLiCW1ooB55ZK6SyM9Ab4ghglMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jMGFl ZDk3ZC03MDczLTQyMDYtYjA1Yy0xOGE4NGQzZjI1NmQvYjIzYmM4ODEtOGIyNS0z YzI2LThlOTUtODBiZjkyYTBlYzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzBhZWQ5N2QtNzA3My00MjA2LWIw NWMtMThhODRkM2YyNTZkL2MwYWVkOTdkLTcwNzMtNDIwNi1iMDVjLTE4YTg0ZDNm MjU2ZC5jcmwwHwYDVR0jBBgwFoAUiX8DMGfkPeht/Klyjks3j6+HDPkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jMGFlZDk3ZC03MDczLTQyMDYtYjA1Yy0xOGE4 NGQzZjI1NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxyLkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5qDN5J80f62Rp2jNMhmjWdCMa2a0Aw6ezoGNGJ6FqLrmkX3ad/oaYO giAAcLoI9o9hkzrEF5I17nH+RjaphgwyGDLOizUjHj88hz9WVbc3bZ5ScV44pc7x r0UizvInwYsAfL49MuEDs+3jO2lZKVolezKm1K4NGxZYfetkWgpNALLVajQa47os IDMQsBiNYFgh5ZbMZG8NtE7ZEmX+M1ienl/RlAV4khmkulcVZqoNXHPRY/2YGM4d atOiJI2Y6yrQ0fqMCw4jy2baAFVryAM9HliM471NibrE0yuKmKP5p+6szSCo82HX sIiIvZkrB9rmVQ4MtgtW4UdsrBOEQ2c= -----END CERTIFICATE-----Generated at Mon Nov 3 14:50:18 2025 by rpki-client