$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a1c6e189-8a41-30f5-a258-f411e87ea9bc.roa File: a1c6e189-8a41-30f5-a258-f411e87ea9bc.roa (raw, json) Hash identifier: vraAkenPIw3KgGM6rqhvdK/cPjVxe7cl8WzxGIgq7gM= Subject key identifier: 20:9E:C6:96:45:F0:E3:FF:2D:6A:CC:68:48:9C:3A:1C:2A:91:88:53 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584B36BC501CCB0BD289D225C830 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a1c6e189-8a41-30f5-a258-f411e87ea9bc.roa Signing time: Tue 16 Sep 2025 13:00:41 +0000 ROA not before: Tue 16 Sep 2025 13:00:41 +0000 ROA not after: Mon 15 Dec 2025 14:00:41 +0000 asID: 31898 IP address blocks: 199.87.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:36:bc:50:1c:cb:0b:d2:89:d2:25:c8:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Sep 16 13:00:41 2025 GMT Not After : Dec 15 14:00:41 2025 GMT Subject: CN=4ebd697b-6781-4146-ac6f-bfaefcfc7733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:2e:d7:65:95:d5:c5:40:50:a4:a1:e8:50:f7: 90:af:23:8e:37:72:d5:49:53:ad:18:8f:2c:e9:f6: 58:38:2a:59:dc:56:89:af:82:99:d9:33:3e:c2:f0: db:bc:e0:cb:45:9e:87:b0:38:78:b2:07:c0:b0:66: 24:5d:a8:6e:ed:8d:9b:80:d8:1b:5c:da:1a:42:8f: b8:48:c7:c5:3f:18:55:fb:59:8a:3f:19:90:dc:74: 56:75:a6:87:3c:c2:d9:02:e0:c4:d9:dc:e0:2c:28: e6:a5:5d:3b:11:ff:4a:fa:a2:86:0c:84:01:0d:07: eb:0c:ad:13:6e:a5:6b:e7:2a:0c:e8:5c:a9:00:0b: 40:8a:66:1a:be:4e:f9:32:86:df:88:9c:20:82:2b: 1a:ae:52:dd:8c:6e:ea:1f:2f:2a:b7:21:9e:e1:a2: 4c:41:66:c0:ae:b9:ef:b1:3b:82:5a:8e:3b:e4:fc: 7a:30:35:e0:e9:ce:20:6b:d3:9b:56:e5:54:14:07: 0f:7e:18:eb:7e:7d:58:b1:a1:63:90:d3:99:8b:b4: 5b:29:76:e7:85:05:52:17:8a:03:c5:a6:cc:b1:b1: 5d:ce:26:7b:6b:69:77:d8:75:53:fa:04:5a:ec:8b: e3:36:56:48:00:78:98:02:d7:c6:58:a7:ae:ff:86: a5:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:9E:C6:96:45:F0:E3:FF:2D:6A:CC:68:48:9C:3A:1C:2A:91:88:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a1c6e189-8a41-30f5-a258-f411e87ea9bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 199.87.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:e7:76:08:65:12:a3:39:63:3b:9b:b8:e2:f9:73:b6:6a:e3: 7f:12:f9:64:76:16:a2:9e:5a:10:d0:15:36:d0:32:7c:b0:22: 1d:fa:9f:f5:46:1d:4c:94:40:1f:28:3e:0f:4d:a2:98:1f:e5: 1f:b6:6b:47:80:24:ef:a1:0d:6a:d5:7f:fd:e7:f8:3c:fa:40: e1:c1:7c:3e:5c:df:fa:6f:b9:01:4f:c3:03:82:72:65:a8:40: d1:cd:cf:55:f3:f3:26:e2:e9:ea:9e:3b:11:e4:7d:60:7f:ca: 7d:d5:95:1f:30:d2:c6:f6:3d:c6:e9:77:19:c7:27:0b:d5:1b: 48:73:cf:15:bd:04:1a:59:a4:aa:2e:0d:a9:0f:99:8e:c5:65: 04:0c:1d:35:d4:d0:31:de:cb:0b:d2:5e:75:34:93:5a:ad:df: e2:dd:04:31:c7:94:8b:96:0c:8b:5e:d4:29:b0:96:54:71:90: 1e:b5:c8:ee:db:a5:a2:49:33:e2:f0:23:30:67:86:53:a6:31: 97:d5:71:3e:70:d8:42:09:14:7e:8e:0d:75:ed:13:a1:0f:6c: 6b:3c:3c:ed:bd:ec:9c:32:37:28:74:00:8f:26:68:43:77:94: 34:db:b4:78:18:61:32:c2:09:d8:ff:9a:a1:ef:36:d9:30:e5: 9f:a9:17:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs2vFAcywvSidIlyDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDkxNjEzMDA0MVoXDTI1MTIxNTE0MDA0MVowLzEtMCsGA1UEAxMk NGViZDY5N2ItNjc4MS00MTQ2LWFjNmYtYmZhZWZjZmM3NzMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlS7XZZXVxUBQpKHoUPeQryOON3LVSVOtGI8s 6fZYOCpZ3FaJr4KZ2TM+wvDbvODLRZ6HsDh4sgfAsGYkXahu7Y2bgNgbXNoaQo+4 SMfFPxhV+1mKPxmQ3HRWdaaHPMLZAuDE2dzgLCjmpV07Ef9K+qKGDIQBDQfrDK0T bqVr5yoM6FypAAtAimYavk75MobfiJwggisarlLdjG7qHy8qtyGe4aJMQWbArrnv sTuCWo475Px6MDXg6c4ga9ObVuVUFAcPfhjrfn1YsaFjkNOZi7RbKXbnhQVSF4oD xabMsbFdziZ7a2l32HVT+gRa7IvjNlZIAHiYAtfGWKeu/4alYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCCexpZF8OP/LWrMaEicOhwqkYhTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvYTFjNmUxODktOGE0MS0z MGY1LWEyNTgtZjQxMWU4N2VhOWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1d6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL3ndghlEqM5YzubuOL5c7Zq438S+WR2FqKeWhDQFTbQMnywIh36n/VG HUyUQB8oPg9Nopgf5R+2a0eAJO+hDWrVf/3n+Dz6QOHBfD5c3/pvuQFPwwOCcmWo QNHNz1Xz8ybi6eqeOxHkfWB/yn3VlR8w0sb2PcbpdxnHJwvVG0hzzxW9BBpZpKou DakPmY7FZQQMHTXU0DHeywvSXnU0k1qt3+LdBDHHlIuWDIte1CmwllRxkB61yO7b paJJM+LwIzBnhlOmMZfVcT5w2EIJFH6ODXXtE6EPbGs8PO297JwyNyh0AI8maEN3 lDTbtHgYYTLCCdj/mqHvNtkw5Z+pFxE= -----END CERTIFICATE-----Generated at Thu Sep 18 03:55:13 2025 by rpki-client