$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/a08ba1c9-38a7-31ad-a15e-0c70441029c0.roa File: a08ba1c9-38a7-31ad-a15e-0c70441029c0.roa (raw, json) Hash identifier: t1DuEhh2DW5CE6tcZ5kMLIoh9ryPoedO9qU6OFCf4MM= Subject key identifier: 79:C1:90:C3:48:86:9E:0C:D9:6A:90:1D:6C:3B:5F:81:3A:23:48:96 Certificate issuer: /CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76 Certificate serial: 010D0C9F4328584ADECBB24DE6F8542B2FDD4680 Authority key identifier: D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/a08ba1c9-38a7-31ad-a15e-0c70441029c0.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 16509 IP address blocks: 199.187.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:b2:4d:e6:f8:54:2b:2f:dd:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76 Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=ae757580-c2bf-4919-99be-1cc85e5d504e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:10:5c:23:26:53:85:26:95:94:8f:76:11:fb: 9d:22:03:21:8a:1e:8c:15:a0:c7:f5:d5:12:06:2a: 58:2e:26:84:80:91:14:d4:4f:86:56:4f:2b:61:42: 3d:cc:01:e3:d4:81:d4:aa:ff:76:e7:ee:f1:b0:6f: 32:4d:16:1b:8e:8d:8e:4a:00:4a:ce:15:28:88:9f: 6a:27:a7:3c:32:e4:bf:6a:8d:af:20:cd:cd:de:ec: ba:e1:37:64:67:a2:cc:9c:a6:ab:19:d4:2a:b3:96: 17:02:e3:eb:f2:0f:fd:f9:6a:8f:67:f1:72:29:a9: 98:7c:f5:5a:64:4e:d8:0b:98:b9:0d:8c:b0:e4:5b: 66:f7:02:a1:7c:ea:02:b9:13:49:62:c2:a1:85:1d: 42:47:fe:03:1d:86:fc:0e:28:af:6e:cf:06:32:33: de:63:3f:ea:1d:c0:fc:75:ca:d1:75:ed:8a:91:00: 51:a1:5d:02:be:8e:71:96:b3:49:13:c8:d6:63:7c: 34:19:0c:7b:74:6a:6b:e9:37:8e:82:92:ee:f9:91: 1b:b9:1f:0e:e5:49:4c:59:30:e0:ca:7e:f6:fc:1e: 0f:f6:c4:43:e1:da:61:4d:89:d1:05:37:c9:e5:87: 51:a1:b7:f8:78:30:be:2a:19:3f:d0:46:52:79:f3: 26:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:C1:90:C3:48:86:9E:0C:D9:6A:90:1D:6C:3B:5F:81:3A:23:48:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/a08ba1c9-38a7-31ad-a15e-0c70441029c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.crl X509v3 Authority Key Identifier: keyid:D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer sbgp-ipAddrBlock: critical IPv4: 199.187.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:dc:d1:6b:d6:f8:14:9e:8a:b7:ca:08:d4:8e:c4:cf:d8:d8: 1e:57:24:ec:60:9a:1d:18:93:4c:88:13:92:d3:0d:c7:da:3e: 4e:4f:80:08:f6:9f:9e:2d:4c:83:1d:08:81:fa:22:e9:fe:f8: 4b:21:76:00:2e:ab:5c:8d:b2:fe:b9:2f:f9:fc:a8:c6:d7:9d: ef:23:fc:bb:1b:e1:0b:ab:bb:52:c4:36:99:60:b5:f7:ed:f8: 5d:c3:90:41:bb:c4:6c:8e:50:47:df:fe:a7:13:1a:b1:54:68: 5f:32:57:05:56:43:c6:40:7e:fe:c9:10:57:cc:1c:a3:1f:db: 3f:37:44:c9:e5:f9:48:d5:36:9b:02:af:a3:a8:7e:6d:88:c7: 7f:d8:6a:66:3e:8c:71:8f:9b:6e:e4:79:3f:57:c0:55:30:0d: 72:fb:e6:65:ed:c6:f7:fc:c1:75:df:fd:5e:83:21:95:dd:ef: 3d:a7:5b:bb:8e:e6:65:9d:61:f5:68:f8:6d:6d:18:dd:b1:62: fa:f5:78:30:95:3a:97:da:21:15:9d:69:e8:23:01:94:b2:47: 62:5c:76:04:b6:47:64:c5:34:b6:14:a8:ae:be:e7:91:67:b5: 2f:8e:7d:4d:91:cd:bc:67:97:93:50:ee:dd:de:ae:0b:c2:11: 06:b3:00:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey7JN5vhUKy/dRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNmNDM1YzAtOWQyOC00NzdhLTkwYTktMWI0ZmQ3NWNk YTc2MB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk YWU3NTc1ODAtYzJiZi00OTE5LTk5YmUtMWNjODVlNWQ1MDRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBBcIyZThSaVlI92EfudIgMhih6MFaDH9dUS BipYLiaEgJEU1E+GVk8rYUI9zAHj1IHUqv925+7xsG8yTRYbjo2OSgBKzhUoiJ9q J6c8MuS/ao2vIM3N3uy64TdkZ6LMnKarGdQqs5YXAuPr8g/9+WqPZ/FyKamYfPVa ZE7YC5i5DYyw5Ftm9wKhfOoCuRNJYsKhhR1CR/4DHYb8Diivbs8GMjPeYz/qHcD8 dcrRde2KkQBRoV0Cvo5xlrNJE8jWY3w0GQx7dGpr6TeOgpLu+ZEbuR8O5UlMWTDg yn72/B4P9sRD4dphTYnRBTfJ5YdRobf4eDC+Khk/0EZSefMm+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHnBkMNIhp4M2WqQHWw7X4E6I0iWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xY2Y0 MzVjMC05ZDI4LTQ3N2EtOTBhOS0xYjRmZDc1Y2RhNzYvYTA4YmExYzktMzhhNy0z MWFkLWExNWUtMGM3MDQ0MTAyOWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMWNmNDM1YzAtOWQyOC00NzdhLTkw YTktMWI0ZmQ3NWNkYTc2LzFjZjQzNWMwLTlkMjgtNDc3YS05MGE5LTFiNGZkNzVj ZGE3Ni5jcmwwHwYDVR0jBBgwFoAU1T8UX0FTWvBBwtK/fTtQ5jUy/9QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xY2Y0MzVjMC05ZDI4LTQ3N2EtOTBhOS0xYjRm ZDc1Y2RhNzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7upMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLc0WvW+BSeirfKCNSOxM/Y2B5XJOxgmh0Yk0yIE5LTDcfaPk5PgAj2 n54tTIMdCIH6Iun++EshdgAuq1yNsv65L/n8qMbXne8j/Lsb4Quru1LENplgtfft +F3DkEG7xGyOUEff/qcTGrFUaF8yVwVWQ8ZAfv7JEFfMHKMf2z83RMnl+UjVNpsC r6Oofm2Ix3/YamY+jHGPm27keT9XwFUwDXL75mXtxvf8wXXf/V6DIZXd7z2nW7uO 5mWdYfVo+G1tGN2xYvr1eDCVOpfaIRWdaegjAZSyR2JcdgS2R2TFNLYUqK6+55Fn tS+OfU2Rzbxnl5NQ7t3ergvCEQazAKs= -----END CERTIFICATE-----Generated at Wed Aug 20 10:43:46 2025 by rpki-client