$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/013edf5d-efca-3680-af49-d48007b23477.roa File: 013edf5d-efca-3680-af49-d48007b23477.roa (raw, json) Hash identifier: M9Sro9XhzczxjR1Ae8c+JgOqlJCUhS5fg8aURc5LnxM= Subject key identifier: C4:BC:28:48:61:B8:6C:DE:9A:61:35:19:9B:C9:05:DE:EB:F6:D8:6A Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f Certificate serial: 010D0C9F4328584B1806D88B7C563EDA05825B48 Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/013edf5d-efca-3680-af49-d48007b23477.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 53356 IP address blocks: 200.229.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:d8:8b:7c:56:3e:da:05:82:5b:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=a7049ff3-33d7-492c-a3fc-2f47b65a27aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:5f:ba:dc:46:55:19:c8:b8:66:bc:73:66:55: e6:0d:a0:73:6e:5c:d4:bd:97:76:7b:0f:07:7a:a3: 23:f1:76:ff:fd:6c:45:eb:10:69:3a:6a:a1:85:c8: 6e:97:eb:0a:da:f9:a3:25:19:dc:7c:8b:e2:8e:92: b8:44:20:a3:43:74:c7:62:77:c0:dc:8e:e9:5c:5e: d9:46:8a:d4:a5:3c:05:02:78:0a:18:cf:53:72:45: 90:26:25:fb:88:1b:91:6c:9b:80:5c:c0:82:ef:cc: 49:aa:c6:54:99:78:89:f5:dd:0d:d3:25:b5:d9:ca: 4f:b8:41:ce:9f:67:81:16:c0:3b:cc:54:06:59:d6: d2:52:cf:32:a6:bc:4b:1d:0a:98:9f:e4:35:4c:77: 17:61:34:0a:b9:15:c8:08:af:80:c3:e4:1e:50:a0: 64:68:8c:62:b9:14:36:dd:5c:56:66:8b:f5:3e:91: 50:0f:2d:6b:07:67:02:38:48:f2:63:e0:20:e6:7a: b1:47:15:cd:a5:5d:aa:ea:83:0a:66:c7:a9:e3:b3: 06:a2:57:73:98:81:15:5b:f8:ec:5d:ec:32:1f:f5: 84:06:fa:64:fd:0c:cf:e9:d8:da:b3:81:be:f6:82: 95:ff:82:6b:c7:b7:3f:1b:1d:6b:58:41:90:4f:e7: 84:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:BC:28:48:61:B8:6C:DE:9A:61:35:19:9B:C9:05:DE:EB:F6:D8:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/013edf5d-efca-3680-af49-d48007b23477.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl X509v3 Authority Key Identifier: keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer sbgp-ipAddrBlock: critical IPv4: 200.229.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:6c:f6:f4:e7:e9:85:85:ae:32:07:8d:bf:e7:6b:d8:79:a7: cd:1a:1f:e9:16:54:f6:b9:49:56:e8:20:02:14:e5:01:ba:e8: ef:d5:5f:17:c3:d2:9a:81:d7:f9:48:45:0b:d3:b0:64:f5:08: 18:02:b5:b3:26:c6:1d:45:e8:ea:cc:2f:80:09:ec:eb:b0:38: 0a:02:02:09:88:56:0b:a7:26:64:2b:b9:b5:43:2d:b3:9b:72: f7:5e:bd:75:fc:06:19:11:ae:0e:0a:d0:69:0d:28:df:7b:c9: 1d:db:64:f3:a6:9d:52:ed:04:2d:38:a2:60:0e:25:f5:84:d7: 4e:84:ff:d1:23:df:32:ee:1e:c8:15:cb:d5:6c:07:9a:df:14: 37:43:12:e2:37:0b:fb:cd:65:27:2e:85:2e:c3:71:38:25:63: 78:20:a7:f8:73:a1:83:0a:8e:de:54:bc:00:99:2b:9b:73:b2: 17:ff:a1:8d:f6:0e:5e:07:5a:53:89:5a:a8:b4:34:f8:c1:92: 64:1e:95:50:dc:3e:01:1c:3e:07:7f:2d:a7:be:ef:b3:6f:54: eb:08:29:10:85:c1:b7:39:3b:21:ef:92:49:db:68:a6:0f:30: a0:9d:9f:8a:05:f8:de:88:77:6f:78:a1:b4:06:69:84:e1:72: b9:e7:ac:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBtiLfFY+2gWCW0gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2 ZjNmMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk YTcwNDlmZjMtMzNkNy00OTJjLWEzZmMtMmY0N2I2NWEyN2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkF+63EZVGci4ZrxzZlXmDaBzblzUvZd2ew8H eqMj8Xb//WxF6xBpOmqhhchul+sK2vmjJRncfIvijpK4RCCjQ3THYnfA3I7pXF7Z RorUpTwFAngKGM9TckWQJiX7iBuRbJuAXMCC78xJqsZUmXiJ9d0N0yW12cpPuEHO n2eBFsA7zFQGWdbSUs8yprxLHQqYn+Q1THcXYTQKuRXICK+Aw+QeUKBkaIxiuRQ2 3VxWZov1PpFQDy1rB2cCOEjyY+Ag5nqxRxXNpV2q6oMKZsep47MGoldzmIEVW/js XewyH/WEBvpk/QzP6djas4G+9oKV/4Jrx7c/Gx1rWEGQT+eEywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMS8KEhhuGzemmE1GZvJBd7r9thqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvMDEzZWRmNWQtZWZjYS0z NjgwLWFmNDktZDQ4MDA3YjIzNDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyOURMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1s9vTn6YWFrjIHjb/na9h5p80aH+kWVPa5SVboIAIU5QG66O/VXxfD 0pqB1/lIRQvTsGT1CBgCtbMmxh1F6OrML4AJ7OuwOAoCAgmIVgunJmQrubVDLbOb cvdevXX8BhkRrg4K0GkNKN97yR3bZPOmnVLtBC04omAOJfWE106E/9Ej3zLuHsgV y9VsB5rfFDdDEuI3C/vNZScuhS7DcTglY3ggp/hzoYMKjt5UvACZK5tzshf/oY32 Dl4HWlOJWqi0NPjBkmQelVDcPgEcPgd/Lae+77NvVOsIKRCFwbc5OyHvkknbaKYP MKCdn4oF+N6Id294obQGaYThcrnnrJE= -----END CERTIFICATE-----Generated at Fri Sep 5 19:55:20 2025 by rpki-client