$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/486b3896-2841-391a-bebe-039803db5d71.roa File: 486b3896-2841-391a-bebe-039803db5d71.roa (raw, json) Hash identifier: 3IFHg8xlroLtO8nOYge9Qno318gJrUe6AQ2cWhhpSHo= Subject key identifier: F9:00:8B:EC:85:5B:28:83:DE:C9:41:60:7C:BD:D6:09:2C:65:F4:05 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584B2CF6D7F5B5FE705207B422C0 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/486b3896-2841-391a-bebe-039803db5d71.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 6643 IP address blocks: 199.87.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:d7:f5:b5:fe:70:52:07:b4:22:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=5d974224-51b8-4704-a894-4dcad7b78946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ac:65:e5:6a:13:f3:a8:e8:c5:6b:fc:08:1f: 94:0d:c2:91:61:75:d3:59:df:44:67:a4:31:b9:f2: d3:62:6a:77:8e:4b:3a:da:7a:bd:1a:a9:f4:da:a9: be:b4:e2:62:61:98:2e:0a:07:6b:e7:dc:80:97:65: 3e:20:b0:32:d3:e2:18:6e:e5:fc:4e:57:0d:ba:3c: 33:cb:e6:ab:32:86:89:ef:81:78:38:7a:1c:05:78: 87:2b:12:9d:f0:87:eb:f3:1a:39:82:a0:1e:28:87: 68:90:b3:dd:3d:5c:03:82:cc:df:69:26:d7:bf:66: a6:2a:15:71:05:c0:f3:bc:3c:87:e9:62:d5:48:3d: 68:a8:94:6b:f9:a6:71:3e:c5:ee:04:55:a6:f7:1c: 93:b7:be:b6:d6:7f:78:34:b3:96:76:08:94:36:1f: 02:bf:08:08:f4:a1:6f:26:d9:62:d5:ea:b7:91:12: e0:d6:ec:8c:61:5e:49:1d:ef:58:82:4b:71:23:a2: 66:30:f3:0f:b8:22:fc:fb:ec:e7:d7:dd:6b:dd:a5: 74:56:2f:e9:72:0a:ef:7b:99:c0:3b:11:ad:96:0c: 9a:b4:49:5e:ce:db:88:31:32:0a:07:8e:e7:73:f5: d7:23:8f:4e:ee:f4:d8:aa:77:ee:d0:f5:0b:42:c5: c2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:00:8B:EC:85:5B:28:83:DE:C9:41:60:7C:BD:D6:09:2C:65:F4:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/486b3896-2841-391a-bebe-039803db5d71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 199.87.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:54:37:d7:b4:a4:52:82:6b:31:27:b2:fc:79:21:9a:05:50: dd:f0:75:5b:e8:3a:5e:04:78:68:84:e6:b0:da:fc:c4:99:c6: d3:0f:ab:71:f4:ba:19:ff:6c:d6:a2:05:d2:39:db:61:dd:ac: cf:bb:8b:c8:1c:1e:cb:b7:27:0d:4b:44:c5:e5:ba:ca:ec:17: 37:5f:59:3d:88:97:ab:9c:6c:af:11:70:f3:1d:83:95:ec:c0: cc:b8:36:fa:23:34:91:d8:6f:a0:2a:32:7f:0e:2b:f6:a0:30: 6f:cd:83:c7:a1:f0:6b:f9:e1:7e:d7:5f:c8:1a:87:5d:f6:26: c6:49:5b:1c:51:2e:a5:3b:e4:c5:43:04:c4:d9:b6:69:99:24: 95:1c:a9:19:36:05:81:09:95:cb:1c:80:35:01:02:8b:85:5e: d1:44:2f:b2:34:e3:71:26:a4:46:89:54:b7:fe:6b:2f:3d:1d: df:99:f2:d8:67:da:fb:a4:83:cf:af:1e:b8:d4:11:69:50:24: c1:ce:3a:44:38:c4:50:5a:a8:2c:6c:31:9a:46:fb:d4:b3:f2: 62:d4:a3:7e:96:6a:de:97:60:d3:77:fa:2c:1d:54:e6:81:4e: 16:8d:22:c2:2d:2a:22:b5:de:57:0d:01:23:bf:8c:66:4e:64: 01:a9:c5:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9tf1tf5wUge0IsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk NWQ5NzQyMjQtNTFiOC00NzA0LWE4OTQtNGRjYWQ3Yjc4OTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKxl5WoT86joxWv8CB+UDcKRYXXTWd9EZ6Qx ufLTYmp3jks62nq9Gqn02qm+tOJiYZguCgdr59yAl2U+ILAy0+IYbuX8TlcNujwz y+arMoaJ74F4OHocBXiHKxKd8Ifr8xo5gqAeKIdokLPdPVwDgszfaSbXv2amKhVx BcDzvDyH6WLVSD1oqJRr+aZxPsXuBFWm9xyTt7621n94NLOWdgiUNh8CvwgI9KFv Jtli1eq3kRLg1uyMYV5JHe9YgktxI6JmMPMPuCL8++zn191r3aV0Vi/pcgrve5nA OxGtlgyatEleztuIMTIKB47nc/XXI49O7vTYqnfu0PULQsXCgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPkAi+yFWyiD3slBYHy91gksZfQFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNDg2YjM4OTYtMjg0MS0z OTFhLWJlYmUtMDM5ODAzZGI1ZDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx1d4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtUN9e0pFKCazEnsvx5IZoFUN3wdVvoOl4EeGiE5rDa/MSZxtMPq3H0 uhn/bNaiBdI522HdrM+7i8gcHsu3Jw1LRMXlusrsFzdfWT2Il6ucbK8RcPMdg5Xs wMy4NvojNJHYb6AqMn8OK/agMG/Ng8eh8Gv54X7XX8gah132JsZJWxxRLqU75MVD BMTZtmmZJJUcqRk2BYEJlcscgDUBAouFXtFEL7I043EmpEaJVLf+ay89Hd+Z8thn 2vukg8+vHrjUEWlQJMHOOkQ4xFBaqCxsMZpG+9Sz8mLUo36Wat6XYNN3+iwdVOaB ThaNIsItKiK13lcNASO/jGZOZAGpxW8= -----END CERTIFICATE-----Generated at Thu Sep 18 05:29:28 2025 by rpki-client