$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/4adad03b-afb7-37aa-b32f-c3fc097b8abe.roa File: 4adad03b-afb7-37aa-b32f-c3fc097b8abe.roa (raw, json) Hash identifier: LxclqdMu3WfzXbTCMO2WlSO7pOsOryKr9MYTcid1UzQ= Subject key identifier: AD:53:1E:9C:0E:8C:FA:AE:E8:B1:95:E2:6B:29:17:C9:CF:B8:4E:D1 Certificate issuer: /CN=688a78fa-2d94-478e-900a-a1fec661b769 Certificate serial: 010D0C9F4328584AD9364C5FA2946212C4DEC1C0 Authority key identifier: 90:5B:E8:2C:10:72:9B:04:06:F5:CA:5A:16:4C:22:B2:DF:64:86:B9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/4adad03b-afb7-37aa-b32f-c3fc097b8abe.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 13649 IP address blocks: 199.101.110.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:4c:5f:a2:94:62:12:c4:de:c1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688a78fa-2d94-478e-900a-a1fec661b769 Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=17ed0cdb-acf5-405f-a336-344c3cc0f8fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:9e:89:ec:f8:d4:f3:18:1c:ad:f0:2a:10:83: 11:d2:36:95:6f:35:f1:e6:3a:39:57:28:f7:48:9e: b4:8d:8b:d7:d7:4e:e0:bc:40:24:95:d4:37:4d:66: 5c:ee:f9:47:d7:73:78:c4:51:7a:0c:8f:82:b1:08: b6:6b:72:c2:5f:2d:3d:47:a0:48:d4:6e:b6:e2:4b: 42:9b:3e:1e:70:2d:61:fc:63:54:2a:91:f8:51:02: 71:05:82:a2:09:2a:ef:d0:92:d7:82:85:e4:5c:50: e8:77:3f:c4:2f:81:c2:e4:c6:2d:c0:e5:d1:2c:7f: 08:5b:e5:51:d2:d1:dc:04:ec:22:5f:53:64:bd:b0: 05:5b:af:01:89:42:59:2d:d8:98:88:a7:f4:42:5c: ff:6f:a3:2b:31:9d:da:1a:42:78:b5:a9:13:1d:f7: c9:d4:de:93:a6:d6:48:d8:49:68:06:72:ff:d0:01: 4b:df:fd:30:b7:3c:03:7a:ee:bc:1f:ea:59:ca:f1: db:ec:48:b5:39:5d:97:b5:25:d4:f0:49:f7:a0:c7: 09:5a:7e:c8:36:0d:40:9c:0b:37:28:20:98:9c:78: c7:ca:73:93:59:19:a4:56:f7:21:a5:31:69:4d:29: 36:63:5a:7c:b4:45:5f:79:61:f5:cd:99:e2:dc:51: 6f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:53:1E:9C:0E:8C:FA:AE:E8:B1:95:E2:6B:29:17:C9:CF:B8:4E:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/4adad03b-afb7-37aa-b32f-c3fc097b8abe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.crl X509v3 Authority Key Identifier: keyid:90:5B:E8:2C:10:72:9B:04:06:F5:CA:5A:16:4C:22:B2:DF:64:86:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer sbgp-ipAddrBlock: critical IPv4: 199.101.110.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:5a:7e:6a:55:d0:c2:fd:f4:ff:f7:a0:e7:d4:01:8e:87:29: 05:28:c9:ff:16:22:2c:18:dd:77:98:5d:8a:71:59:f5:ea:d1: 0c:6f:b0:32:d1:fa:ee:64:59:40:42:50:ad:e8:0d:64:6d:32: 60:92:e2:e6:de:92:29:92:f6:14:b7:5e:30:1a:c2:f0:bb:3c: 3e:f7:bd:0f:53:35:43:ef:c9:46:38:a5:39:57:c5:4e:9b:0b: fa:4d:d4:03:c2:75:63:be:fe:49:e9:7d:77:96:c7:6a:9e:10: 0f:91:9e:64:28:ac:93:aa:07:21:92:a3:7d:b1:4f:32:97:28: 42:83:5b:0b:48:ae:98:11:54:7a:fc:8b:88:50:cb:89:2d:30: 4f:27:58:64:3b:12:2b:39:c7:fb:0f:31:70:3c:7e:75:a0:5c: 53:41:1c:28:68:a7:43:e1:0a:14:7c:97:ee:cf:60:8f:9e:8b: 23:c7:2e:b6:82:d2:3c:09:c7:39:68:29:80:c9:19:90:08:08: dd:97:f2:97:ab:fc:fd:aa:67:eb:a8:68:7d:34:e8:47:b0:ac: 0e:c0:ac:cf:49:94:f0:3d:87:22:77:4e:02:09:19:ae:96:a8: 32:90:de:4a:28:09:dc:54:5e:e1:ba:76:d9:3f:cf:0a:e3:3c: f6:b7:da:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErZNkxfopRiEsTewcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjg4YTc4ZmEtMmQ5NC00NzhlLTkwMGEtYTFmZWM2NjFi NzY5MB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk MTdlZDBjZGItYWNmNS00MDVmLWEzMzYtMzQ0YzNjYzBmOGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjp6J7PjU8xgcrfAqEIMR0jaVbzXx5jo5Vyj3 SJ60jYvX107gvEAkldQ3TWZc7vlH13N4xFF6DI+CsQi2a3LCXy09R6BI1G624ktC mz4ecC1h/GNUKpH4UQJxBYKiCSrv0JLXgoXkXFDodz/EL4HC5MYtwOXRLH8IW+VR 0tHcBOwiX1NkvbAFW68BiUJZLdiYiKf0Qlz/b6MrMZ3aGkJ4takTHffJ1N6TptZI 2EloBnL/0AFL3/0wtzwDeu68H+pZyvHb7Ei1OV2XtSXU8En3oMcJWn7INg1AnAs3 KCCYnHjHynOTWRmkVvchpTFpTSk2Y1p8tEVfeWH1zZni3FFvfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK1THpwOjPqu6LGV4mspF8nPuE7RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ODhh NzhmYS0yZDk0LTQ3OGUtOTAwYS1hMWZlYzY2MWI3NjkvNGFkYWQwM2ItYWZiNy0z N2FhLWIzMmYtYzNmYzA5N2I4YWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjg4YTc4ZmEtMmQ5NC00NzhlLTkw MGEtYTFmZWM2NjFiNzY5LzY4OGE3OGZhLTJkOTQtNDc4ZS05MDBhLWExZmVjNjYx Yjc2OS5jcmwwHwYDVR0jBBgwFoAUkFvoLBBymwQG9cpaFkwist9khrkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ODhhNzhmYS0yZDk0LTQ3OGUtOTAwYS1hMWZl YzY2MWI3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx2VuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBafmpV0ML99P/3oOfUAY6HKQUoyf8WIiwY3XeYXYpxWfXq0QxvsDLR +u5kWUBCUK3oDWRtMmCS4ubekimS9hS3XjAawvC7PD73vQ9TNUPvyUY4pTlXxU6b C/pN1APCdWO+/knpfXeWx2qeEA+RnmQorJOqByGSo32xTzKXKEKDWwtIrpgRVHr8 i4hQy4ktME8nWGQ7Eis5x/sPMXA8fnWgXFNBHChop0PhChR8l+7PYI+eiyPHLraC 0jwJxzloKYDJGZAICN2X8per/P2qZ+uoaH006EewrA7ArM9JlPA9hyJ3TgIJGa6W qDKQ3kooCdxUXuG6dtk/zwrjPPa32rI= -----END CERTIFICATE-----Generated at Thu Aug 21 03:53:58 2025 by rpki-client