$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/b4075263-5a25-377f-ac40-317be5b66415.roa File: b4075263-5a25-377f-ac40-317be5b66415.roa (raw, json) Hash identifier: uyHAlJ2j14BlPPmwt8UeHW4GK0r9LafEaShqPIUFzh8= Subject key identifier: 04:CA:75:19:49:F9:3C:27:3D:25:30:23:EE:8A:1B:AE:42:DF:22:F7 Certificate issuer: /CN=74a9db22-8d49-4938-9c6f-e3fd428c158e Certificate serial: 010D0C9F4328584B13D6AF2CF841AA89F9500C80 Authority key identifier: 98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/b4075263-5a25-377f-ac40-317be5b66415.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 134521 IP address blocks: 199.27.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:af:2c:f8:41:aa:89:f9:50:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74a9db22-8d49-4938-9c6f-e3fd428c158e Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=c0498619-577c-4707-8158-4999eb77d269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e0:c1:1a:66:b8:87:7c:1c:47:dd:bb:a6:a0: ff:c2:66:a9:9b:5e:b3:9a:92:7a:cf:fb:8b:2c:e8: 3a:b3:e2:45:06:85:f0:30:c7:10:0a:f0:7b:0d:12: 11:77:85:20:cc:61:5b:c0:82:d6:a5:d8:74:2e:b8: 04:c6:cb:42:45:32:61:ff:85:00:ec:24:a5:88:ab: 5b:1e:8d:12:a8:4b:95:c8:30:0b:ef:ca:08:17:99: dc:ba:72:12:e5:1a:ac:31:e3:44:60:ff:09:63:ef: ef:4e:0a:fd:2a:44:f6:83:0c:f2:12:74:af:01:95: a0:fe:fc:45:b1:e4:98:1d:3e:a5:1e:80:4d:42:43: 67:44:c4:f9:ec:5b:c2:81:39:35:b1:4f:80:74:c4: d7:4b:f7:88:e1:78:ce:81:60:f0:bf:41:f0:18:78: bd:bd:73:01:d0:1f:84:5a:ca:f1:6f:85:40:08:d8: 77:7e:8d:49:fa:0d:69:d4:a9:03:01:14:ba:7a:9a: 06:f2:c4:db:eb:84:52:c6:25:a8:0d:f6:ce:42:41: 47:a9:bc:df:b9:ad:cb:47:4c:88:9d:ff:ea:03:e3: f0:64:22:44:70:42:fa:f1:cb:fe:a0:30:e3:23:38: 97:5d:f2:cd:6b:74:6a:95:0c:96:ab:5a:bc:44:09: ff:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:CA:75:19:49:F9:3C:27:3D:25:30:23:EE:8A:1B:AE:42:DF:22:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/b4075263-5a25-377f-ac40-317be5b66415.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.crl X509v3 Authority Key Identifier: keyid:98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer sbgp-ipAddrBlock: critical IPv4: 199.27.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:0e:0c:9e:fb:27:96:74:08:07:2b:20:2a:1b:60:6a:72:c2: 67:c7:34:85:74:f2:5d:77:da:24:04:13:80:4e:e7:e8:7d:49: af:d8:1d:55:ba:06:45:ec:bd:29:ea:28:78:e2:2c:e2:bd:07: bc:41:f8:04:54:bb:fd:6d:ce:4d:15:91:6f:03:6c:73:9f:63: d5:04:a8:e6:ce:20:74:dd:8b:22:fc:12:a8:9f:62:f4:5a:9e: 94:3a:81:9a:39:8c:6b:f7:4e:01:fa:c6:ca:bb:15:bb:c5:0a: 51:22:e9:f1:60:67:58:12:de:2a:27:f2:c0:f0:c8:e0:9c:84: 47:44:e8:09:9c:50:d1:11:f4:88:14:b6:55:49:59:c5:ee:30: 54:e3:b4:56:c5:62:62:69:07:1a:5f:c7:fb:68:bf:76:26:13: 11:5b:fe:a7:45:7f:50:d5:0c:67:21:44:9f:da:43:51:b9:66: 05:da:48:b9:8f:74:34:61:2e:e1:bf:b3:42:e7:02:54:ac:05: a7:d1:b7:d1:af:79:4d:3c:d4:31:df:80:76:64:5b:ab:48:73: 3b:a3:ec:d5:9a:3e:91:e4:61:63:8e:51:82:76:43:8d:27:df: 2c:2c:34:4f:2b:ed:96:da:08:12:b1:0b:24:60:c4:c9:38:d6: 98:5b:a1:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1q8s+EGqiflQDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRhOWRiMjItOGQ0OS00OTM4LTljNmYtZTNmZDQyOGMx NThlMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk YzA0OTg2MTktNTc3Yy00NzA3LTgxNTgtNDk5OWViNzdkMjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteDBGma4h3wcR927pqD/wmapm16zmpJ6z/uL LOg6s+JFBoXwMMcQCvB7DRIRd4UgzGFbwILWpdh0LrgExstCRTJh/4UA7CSliKtb Ho0SqEuVyDAL78oIF5ncunIS5RqsMeNEYP8JY+/vTgr9KkT2gwzyEnSvAZWg/vxF seSYHT6lHoBNQkNnRMT57FvCgTk1sU+AdMTXS/eI4XjOgWDwv0HwGHi9vXMB0B+E Wsrxb4VACNh3fo1J+g1p1KkDARS6epoG8sTb64RSxiWoDfbOQkFHqbzfua3LR0yI nf/qA+PwZCJEcEL68cv+oDDjIziXXfLNa3RqlQyWq1q8RAn/KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFATKdRlJ+TwnPSUwI+6KG65C3yL3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NGE5 ZGIyMi04ZDQ5LTQ5MzgtOWM2Zi1lM2ZkNDI4YzE1OGUvYjQwNzUyNjMtNWEyNS0z NzdmLWFjNDAtMzE3YmU1YjY2NDE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzRhOWRiMjItOGQ0OS00OTM4LTlj NmYtZTNmZDQyOGMxNThlLzc0YTlkYjIyLThkNDktNDkzOC05YzZmLWUzZmQ0Mjhj MTU4ZS5jcmwwHwYDVR0jBBgwFoAUmPupDsV3auhpmoOFV1QuM6AcJkEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NGE5ZGIyMi04ZDQ5LTQ5MzgtOWM2Zi1lM2Zk NDI4YzE1OGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxxuXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYODJ77J5Z0CAcrICobYGpywmfHNIV08l132iQEE4BO5+h9Sa/YHVW6 BkXsvSnqKHjiLOK9B7xB+ARUu/1tzk0VkW8DbHOfY9UEqObOIHTdiyL8EqifYvRa npQ6gZo5jGv3TgH6xsq7FbvFClEi6fFgZ1gS3ion8sDwyOCchEdE6AmcUNER9IgU tlVJWcXuMFTjtFbFYmJpBxpfx/tov3YmExFb/qdFf1DVDGchRJ/aQ1G5ZgXaSLmP dDRhLuG/s0LnAlSsBafRt9GveU081DHfgHZkW6tIczuj7NWaPpHkYWOOUYJ2Q40n 3ywsNE8r7ZbaCBKxCyRgxMk41phbof0= -----END CERTIFICATE-----Generated at Tue Sep 16 02:36:25 2025 by rpki-client