$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/2f1823ea-88a6-3688-8d20-3d497228f9cc.roa File: 2f1823ea-88a6-3688-8d20-3d497228f9cc.roa (raw, json) Hash identifier: 1KGMpDJyic1RlQTCaq/pXl1SRQgj+hSctKg9pT0PmJI= Subject key identifier: DD:D1:3B:26:8A:5D:86:57:CA:10:EE:B4:CB:E6:99:18:29:EF:77:CD Certificate issuer: /CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Certificate serial: 010D0C9F4328584B33F1A3B3C56DA11257B41A00 Authority key identifier: AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/2f1823ea-88a6-3688-8d20-3d497228f9cc.roa Signing time: Mon 15 Sep 2025 13:00:40 +0000 ROA not before: Mon 15 Sep 2025 13:00:40 +0000 ROA not after: Sun 14 Dec 2025 14:00:40 +0000 asID: 40342 IP address blocks: 199.47.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:33:f1:a3:b3:c5:6d:a1:12:57:b4:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Validity Not Before: Sep 15 13:00:40 2025 GMT Not After : Dec 14 14:00:40 2025 GMT Subject: CN=84e04408-4f5f-4e4d-aa60-f5879aa29f51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e7:68:4b:17:42:7b:e1:49:e8:a6:c8:62:3a: 86:06:67:b7:42:35:42:f2:47:9b:f0:49:dc:e3:13: 18:de:e8:b9:90:0b:ed:46:ef:5a:7f:22:15:60:80: ac:4f:94:f9:aa:f7:4b:99:ef:66:a7:0b:19:09:c3: cd:d9:62:80:e4:2f:0b:5b:e2:ca:9d:63:47:18:db: e9:bf:5d:21:35:61:e9:34:c0:a7:f3:7a:60:b8:0b: 8f:cb:ee:a7:85:30:60:dd:87:20:43:ab:9a:81:2a: f5:1d:ff:64:1f:ba:95:45:e4:27:21:1b:96:25:41: 70:05:bb:e7:5d:42:b6:76:4d:e4:42:23:30:99:d5: 26:30:68:b4:2a:76:90:3e:b8:f0:74:3f:b7:08:5e: 52:3b:c1:ca:1c:b5:d5:39:a0:81:a4:c7:e2:d7:16: c4:0a:d2:15:76:04:f7:63:4e:44:b6:d0:3d:04:b5: 4e:46:db:d6:82:87:ab:10:80:42:ea:af:34:80:eb: 37:c6:23:e1:ad:63:5f:ad:6f:c2:45:18:59:9f:af: 5f:89:93:1d:d8:6f:05:a4:3a:70:37:73:50:d1:2a: c4:d6:d7:cf:e8:90:64:c0:90:d1:84:d3:77:43:f6: 10:18:f2:d3:cd:ba:d5:d3:c2:d6:96:39:39:24:9c: a7:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:D1:3B:26:8A:5D:86:57:CA:10:EE:B4:CB:E6:99:18:29:EF:77:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/2f1823ea-88a6-3688-8d20-3d497228f9cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl X509v3 Authority Key Identifier: keyid:AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer sbgp-ipAddrBlock: critical IPv4: 199.47.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:94:ad:b1:14:b0:55:bf:fb:b6:f8:fd:42:ba:d4:f2:37:f1: 0b:c0:74:e1:7e:ee:b3:0e:a0:9a:02:96:75:af:a3:9c:36:f1: fa:90:7d:a5:48:d2:93:29:23:4b:62:c7:66:c7:e5:d2:10:f1: f8:38:d4:36:f5:02:23:43:21:04:4c:06:fa:c1:fc:18:b4:1d: 90:a7:38:bc:ca:5b:ab:ec:f2:22:70:33:94:94:97:1c:46:37: fe:0b:af:6f:81:65:d4:c9:7f:88:bf:63:9d:da:34:dd:a2:8d: fc:f6:a9:75:03:8c:03:70:37:ce:ea:84:0f:e9:8d:54:a4:4c: 64:67:73:1b:fd:a5:91:aa:f8:1d:66:50:f9:3c:dc:4c:f4:5a: 74:3f:69:04:65:ba:6d:fd:a9:bf:7c:10:0e:90:df:13:83:1d: 57:b3:32:b2:b7:a0:b6:38:64:9f:28:e5:13:17:8a:4a:72:1e: 1d:3b:3b:36:af:67:1e:0c:9a:e7:30:70:7f:be:c9:6f:60:d3: 40:f5:d5:22:cf:8a:7a:cb:cc:19:cb:92:a5:7b:00:30:86:f5: 2a:c6:97:17:66:40:7b:4b:e9:98:bc:86:43:dc:17:0d:bc:24: 29:04:52:65:36:01:67:fe:72:61:76:2a:af:7e:da:ed:31:fc: 80:0b:6e:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsz8aOzxW2hEle0GgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYwYmZjZGUtZDk1OC00ZTkxLWFmNWQtOWZkMWQzM2E1 ODJhMB4XDTI1MDkxNTEzMDA0MFoXDTI1MTIxNDE0MDA0MFowLzEtMCsGA1UEAxMk ODRlMDQ0MDgtNGY1Zi00ZTRkLWFhNjAtZjU4NzlhYTI5ZjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+doSxdCe+FJ6KbIYjqGBme3QjVC8keb8Enc 4xMY3ui5kAvtRu9afyIVYICsT5T5qvdLme9mpwsZCcPN2WKA5C8LW+LKnWNHGNvp v10hNWHpNMCn83pguAuPy+6nhTBg3YcgQ6uagSr1Hf9kH7qVReQnIRuWJUFwBbvn XUK2dk3kQiMwmdUmMGi0KnaQPrjwdD+3CF5SO8HKHLXVOaCBpMfi1xbECtIVdgT3 Y05EttA9BLVORtvWgoerEIBC6q80gOs3xiPhrWNfrW/CRRhZn69fiZMd2G8FpDpw N3NQ0SrE1tfP6JBkwJDRhNN3Q/YQGPLTzbrV08LWljk5JJynNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3ROyaKXYZXyhDutMvmmRgp73fNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84ZjBi ZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQxZDMzYTU4MmEvMmYxODIzZWEtODhhNi0z Njg4LThkMjAtM2Q0OTcyMjhmOWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGYwYmZjZGUtZDk1OC00ZTkxLWFm NWQtOWZkMWQzM2E1ODJhLzhmMGJmY2RlLWQ5NTgtNGU5MS1hZjVkLTlmZDFkMzNh NTgyYS5jcmwwHwYDVR0jBBgwFoAUqiyJxCp6uKSVUYPDDM/jsPzjzgswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84ZjBiZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQx ZDMzYTU4MmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxy+LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKKUrbEUsFW/+7b4/UK61PI38QvAdOF+7rMOoJoClnWvo5w28fqQfaVI 0pMpI0tix2bH5dIQ8fg41Db1AiNDIQRMBvrB/Bi0HZCnOLzKW6vs8iJwM5SUlxxG N/4Lr2+BZdTJf4i/Y53aNN2ijfz2qXUDjANwN87qhA/pjVSkTGRncxv9pZGq+B1m UPk83Ez0WnQ/aQRlum39qb98EA6Q3xODHVezMrK3oLY4ZJ8o5RMXikpyHh07Ozav Zx4MmucwcH++yW9g00D11SLPinrLzBnLkqV7ADCG9SrGlxdmQHtL6Zi8hkPcFw28 JCkEUmU2AWf+cmF2Kq9+2u0x/IALbmM= -----END CERTIFICATE-----Generated at Tue Oct 21 07:10:05 2025 by rpki-client