$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/c683473a-1972-3ef3-bd9d-67878b86a477.roa File: c683473a-1972-3ef3-bd9d-67878b86a477.roa (raw, json) Hash identifier: HmHwbTmnlL3cLDYQWYpos+XujfBekVpB2qt2TDnE91M= Subject key identifier: 1A:6A:92:95:DA:3B:C2:C6:4C:B9:AB:D5:65:77:C5:99:B4:28:A0:9A Certificate issuer: /CN=39695c91-50ed-402c-b896-6056bbde88df Certificate serial: 010D0C9F4328584B2FC19478E3860432FA2FFAA0 Authority key identifier: FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/c683473a-1972-3ef3-bd9d-67878b86a477.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 14445 IP address blocks: 199.127.152.0/24 maxlen: 24 199.127.153.0/24 maxlen: 24 199.127.154.0/24 maxlen: 24 199.127.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:94:78:e3:86:04:32:fa:2f:fa:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39695c91-50ed-402c-b896-6056bbde88df Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=afa99044-957b-4f9a-b886-c5231c41a476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e5:27:64:cb:52:76:55:da:28:f6:de:fa:87: 6e:7f:bd:cf:14:6d:44:7f:5e:d5:d3:c2:9c:93:6a: b5:59:20:20:fa:81:2c:7e:cb:4f:a0:5a:96:7d:97: 5c:42:2e:79:05:56:f6:2b:16:d4:57:c7:cc:c1:19: cb:43:de:8a:b2:d6:1f:ee:cc:d3:66:c5:2a:01:d1: ce:2b:25:ba:20:eb:b0:fb:0c:80:72:cf:e2:58:e1: c0:12:7a:b8:94:77:c4:ba:8b:e8:7a:63:7a:59:14: 8d:c2:ba:2c:cd:f5:52:94:70:42:b1:49:4e:fe:d6: ff:ce:dd:4e:a5:57:72:f0:80:55:9c:84:0c:a9:c0: 00:cf:09:af:2d:a1:3e:58:23:a9:07:36:7a:68:b1: 96:98:f7:97:c6:9b:59:d8:e6:00:bb:9e:98:92:96: 67:8a:f1:12:34:cb:7b:6f:e4:45:f5:d8:cc:48:84: b9:e6:bd:fa:cf:f4:07:91:2f:42:4f:ab:14:92:a7: 9a:b9:d3:db:8a:3e:ee:de:68:fd:ce:f3:7e:13:2c: c0:ed:fe:8a:a4:ec:b5:2e:78:8d:39:24:93:9b:08: 19:b7:db:c0:e3:79:93:d0:6c:61:bc:8f:37:56:37: d6:95:36:bd:cf:43:45:38:22:a1:69:b1:9f:0c:97: 0a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:6A:92:95:DA:3B:C2:C6:4C:B9:AB:D5:65:77:C5:99:B4:28:A0:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/c683473a-1972-3ef3-bd9d-67878b86a477.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl X509v3 Authority Key Identifier: keyid:FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer sbgp-ipAddrBlock: critical IPv4: 199.127.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:c4:33:21:ff:df:6b:3c:be:fa:48:5a:11:3d:bf:c3:65:6f: 2c:10:58:48:38:0c:6a:e1:e5:2d:3c:e4:53:3f:e6:d3:08:ce: 0e:ef:00:4c:e5:df:8a:5d:5a:3d:1f:75:b5:a9:7b:9a:5d:12: 22:7e:93:43:97:87:3c:f0:23:4b:b4:8e:87:fc:84:5c:d7:a2: ca:60:dc:c1:33:86:a3:bc:a3:37:5d:90:3d:3f:7d:a9:9a:1e: 97:6d:cc:f1:fc:f1:70:57:34:02:bf:20:2d:ef:00:82:be:da: 6f:da:d0:98:66:ab:10:50:06:50:d0:75:18:7c:cc:68:a7:96: 22:0d:27:56:16:c6:39:16:d2:eb:36:99:d0:c8:d7:57:5c:a7: 20:88:c3:75:4f:9e:df:1e:4a:86:3b:3a:de:1e:71:4b:3e:28: a9:a7:fa:47:6d:be:d9:59:e0:60:1e:ea:8a:6d:ac:04:3c:36: 8d:d8:2c:6e:9f:be:33:ec:cc:51:c2:5e:01:9b:5a:9e:d7:8b: 3e:80:ef:86:d7:7b:26:8e:93:2d:ff:b6:2b:c4:91:b8:3c:5f: 17:46:2c:bb:81:ec:e3:02:69:1a:c5:81:9c:1b:14:1a:6a:40: 28:cd:16:f1:10:c3:c2:a0:45:14:3d:e3:fc:4d:81:1a:63:95: 82:67:2f:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsvwZR444YEMvov+qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk2OTVjOTEtNTBlZC00MDJjLWI4OTYtNjA1NmJiZGU4 OGRmMB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk YWZhOTkwNDQtOTU3Yi00ZjlhLWI4ODYtYzUyMzFjNDFhNDc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuUnZMtSdlXaKPbe+oduf73PFG1Ef17V08Kc k2q1WSAg+oEsfstPoFqWfZdcQi55BVb2KxbUV8fMwRnLQ96KstYf7szTZsUqAdHO KyW6IOuw+wyAcs/iWOHAEnq4lHfEuovoemN6WRSNwroszfVSlHBCsUlO/tb/zt1O pVdy8IBVnIQMqcAAzwmvLaE+WCOpBzZ6aLGWmPeXxptZ2OYAu56YkpZnivESNMt7 b+RF9djMSIS55r36z/QHkS9CT6sUkqeaudPbij7u3mj9zvN+EyzA7f6KpOy1LniN OSSTmwgZt9vA43mT0GxhvI83VjfWlTa9z0NFOCKhabGfDJcKbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBpqkpXaO8LGTLmr1WV3xZm0KKCaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY5 NWM5MS01MGVkLTQwMmMtYjg5Ni02MDU2YmJkZTg4ZGYvYzY4MzQ3M2EtMTk3Mi0z ZWYzLWJkOWQtNjc4NzhiODZhNDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzk2OTVjOTEtNTBlZC00MDJjLWI4 OTYtNjA1NmJiZGU4OGRmLzM5Njk1YzkxLTUwZWQtNDAyYy1iODk2LTYwNTZiYmRl ODhkZi5jcmwwHwYDVR0jBBgwFoAU+vU6ER4AXbycYWexl2vVDekdgbQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY5NWM5MS01MGVkLTQwMmMtYjg5Ni02MDU2 YmJkZTg4ZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx3+YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI3EMyH/32s8vvpIWhE9v8NlbywQWEg4DGrh5S085FM/5tMIzg7vAEzl 34pdWj0fdbWpe5pdEiJ+k0OXhzzwI0u0jof8hFzXospg3MEzhqO8ozddkD0/fama HpdtzPH88XBXNAK/IC3vAIK+2m/a0JhmqxBQBlDQdRh8zGinliINJ1YWxjkW0us2 mdDI11dcpyCIw3VPnt8eSoY7Ot4ecUs+KKmn+kdtvtlZ4GAe6optrAQ8No3YLG6f vjPszFHCXgGbWp7Xiz6A74bXeyaOky3/tivEkbg8XxdGLLuB7OMCaRrFgZwbFBpq QCjNFvEQw8KgRRQ94/xNgRpjlYJnL6Y= -----END CERTIFICATE-----Generated at Tue Sep 16 20:41:08 2025 by rpki-client