$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/39e0bfa3-b9dd-382b-a7e7-1c0c4445fa26.roa File: 39e0bfa3-b9dd-382b-a7e7-1c0c4445fa26.roa (raw, json) Hash identifier: 4SJ4VHa0jyrGmVhRSA9/3TBavmUgk4H2GPB+DRpUl9Q= Subject key identifier: BE:0B:3F:EC:F8:26:9D:92:E0:53:6B:EE:C1:B0:5D:D8:6C:1C:2B:90 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF9515C8598D0677C92C6EFE3 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/39e0bfa3-b9dd-382b-a7e7-1c0c4445fa26.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 200005 IP address blocks: 170.199.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:5c:85:98:d0:67:7c:92:c6:ef:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=bad4ee21-f581-4318-9f78-2a8d54eb9270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2f:3c:6a:05:d3:ec:ee:bf:98:74:0a:e6:4e: 6c:23:95:bb:ea:7a:35:f3:09:c5:19:57:77:2e:01: 7e:25:4e:00:67:e1:3e:a1:b0:db:d1:17:ae:ac:56: 54:c9:e6:a3:e0:e3:8d:61:39:3b:1d:25:71:db:da: ab:bd:a9:d4:42:59:03:8b:5d:a3:53:86:8d:e8:1e: bc:d7:da:94:54:e5:93:30:0e:91:61:a1:2d:1b:ef: 91:5b:23:c6:38:ad:37:82:37:cc:2e:e1:c3:82:4f: e4:c8:17:df:ea:d9:96:7b:c6:66:79:51:3a:21:00: a0:52:e3:01:c7:f9:f6:97:92:91:a7:98:43:75:a7: b5:4b:49:08:ed:88:52:6d:8e:73:b5:28:5e:fb:b8: e7:d5:c5:73:fc:08:50:46:b2:f0:fb:ac:61:dd:50: 12:43:ca:f9:78:1f:be:83:53:24:71:a7:8b:1e:57: 5d:34:2c:83:55:0a:1d:a1:cb:ea:e6:0a:ea:8d:be: 11:1b:a0:f4:2a:e4:22:b8:33:70:e0:45:b0:80:c9: b6:2e:93:88:41:d1:58:92:27:bf:d6:03:c1:8c:23: cc:5a:32:36:b7:89:b8:d6:fc:38:24:32:c6:9e:36: 63:f5:06:eb:c0:31:c4:79:3b:7d:af:d0:71:e2:97: f4:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:0B:3F:EC:F8:26:9D:92:E0:53:6B:EE:C1:B0:5D:D8:6C:1C:2B:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/39e0bfa3-b9dd-382b-a7e7-1c0c4445fa26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 170.199.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:3d:75:e0:5c:aa:50:b5:48:60:75:e9:f3:73:40:57:7c:a1: eb:6b:22:c4:c3:1a:82:44:34:e3:41:e6:0b:98:ab:b4:56:ab: 47:c7:3b:7b:d5:ba:fe:3a:22:76:4b:f1:f4:c7:07:a4:a6:3f: 65:00:35:62:e3:aa:e3:8b:5b:7b:7d:e6:66:94:43:a6:5e:30: b3:55:9d:ad:95:55:d8:e7:16:e3:09:57:e8:b3:d4:8e:39:c5: 99:25:8d:41:3d:88:a7:2e:e3:1a:88:7d:59:ab:24:c9:ba:09: 6e:45:44:de:18:e2:26:9f:9e:0a:29:0b:fa:cc:9d:1f:12:4f: 1a:04:a5:1e:f8:0f:f3:63:00:1f:33:51:e4:fe:68:d6:67:a0: 1e:61:48:5e:54:bb:bd:48:1f:69:4f:be:84:e6:a0:d0:03:68: 6d:40:cc:cc:de:d5:27:a9:12:20:f7:c3:4c:ec:67:49:e6:52: db:66:47:04:8b:c6:95:ab:27:9c:12:4b:37:72:2f:7d:9a:02: 19:73:07:64:bd:2a:23:6e:80:8b:b0:92:da:51:87:28:c8:41: 26:1b:de:52:a8:2c:c9:2e:b3:f8:e2:df:ce:5c:58:d2:91:0f: 8f:be:75:db:d0:ce:2e:b7:8b:13:59:da:e8:7c:32:64:bf:5d: 8d:e6:2a:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UVyFmNBnfJLG7+MwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk YmFkNGVlMjEtZjU4MS00MzE4LTlmNzgtMmE4ZDU0ZWI5MjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvy88agXT7O6/mHQK5k5sI5W76no18wnFGVd3 LgF+JU4AZ+E+obDb0ReurFZUyeaj4OONYTk7HSVx29qrvanUQlkDi12jU4aN6B68 19qUVOWTMA6RYaEtG++RWyPGOK03gjfMLuHDgk/kyBff6tmWe8ZmeVE6IQCgUuMB x/n2l5KRp5hDdae1S0kI7YhSbY5ztShe+7jn1cVz/AhQRrLw+6xh3VASQ8r5eB++ g1MkcaeLHlddNCyDVQodocvq5grqjb4RG6D0KuQiuDNw4EWwgMm2LpOIQdFYkie/ 1gPBjCPMWjI2t4m41vw4JDLGnjZj9QbrwDHEeTt9r9Bx4pf0LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL4LP+z4Jp2S4FNr7sGwXdhsHCuQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzllMGJmYTMtYjlkZC0z ODJiLWE3ZTctMWMwYzQ0NDVmYTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqsfHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACs9deBcqlC1SGB16fNzQFd8oetrIsTDGoJENONB5guYq7RWq0fHO3vV uv46InZL8fTHB6SmP2UANWLjquOLW3t95maUQ6ZeMLNVna2VVdjnFuMJV+iz1I45 xZkljUE9iKcu4xqIfVmrJMm6CW5FRN4Y4iafngopC/rMnR8STxoEpR74D/NjAB8z UeT+aNZnoB5hSF5Uu71IH2lPvoTmoNADaG1AzMze1SepEiD3w0zsZ0nmUttmRwSL xpWrJ5wSSzdyL32aAhlzB2S9KiNugIuwktpRhyjIQSYb3lKoLMkus/ji385cWNKR D4++ddvQzi63ixNZ2uh8MmS/XY3mKt0= -----END CERTIFICATE-----Generated at Sat Sep 6 05:05:29 2025 by rpki-client