$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/bd8c4790-3fa7-3392-86ba-87e9adece526.roa File: bd8c4790-3fa7-3392-86ba-87e9adece526.roa (raw, json) Hash identifier: T/De4jhaQixhOInBnmg7Kjt5JIlFNWxebKOY7URUKf8= Subject key identifier: 0A:3D:C5:30:ED:CD:16:55:A7:85:28:4E:C8:F4:BC:84:C9:D0:29:79 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584AF7EBDA3EE19974AC94E4AD60 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/bd8c4790-3fa7-3392-86ba-87e9adece526.roa Signing time: Mon 25 Aug 2025 01:00:33 +0000 ROA not before: Mon 25 Aug 2025 01:00:33 +0000 ROA not after: Sun 23 Nov 2025 02:00:33 +0000 asID: 14618 IP address blocks: 199.36.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:eb:da:3e:e1:99:74:ac:94:e4:ad:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Aug 25 01:00:33 2025 GMT Not After : Nov 23 02:00:33 2025 GMT Subject: CN=3c4eed3f-7d54-4a41-b362-cf122c25634d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:1b:81:e2:20:20:a7:e0:41:02:e0:c4:4b:ca: 81:aa:d0:06:7c:b5:a4:f9:ca:1a:17:40:37:61:8c: 31:42:32:f6:2b:cb:ef:ca:5f:fa:56:4c:43:9d:8f: 98:8e:a7:00:67:31:3f:3b:5d:2f:b2:05:fc:89:3b: fd:fe:7a:5a:24:dd:59:7b:8c:55:32:08:74:d7:3b: 2a:5b:22:9c:04:98:7d:fa:b1:11:ed:a4:1b:89:21: 35:a5:ad:d8:98:95:b6:4b:fa:f0:e7:2c:59:15:df: e1:bc:59:13:c8:50:d0:fb:5b:2c:38:9d:17:67:c1: 47:ab:78:65:eb:cc:ba:f1:b0:73:82:7b:a5:aa:a7: 4b:65:5b:85:27:4b:30:9c:3d:f8:f1:0d:ce:a6:2d: 79:c0:16:90:41:2f:af:03:b0:2d:af:17:25:be:bb: 07:b8:b4:92:85:e5:bb:7b:22:a9:95:44:4f:a0:9c: 0c:7c:a7:25:5b:a8:77:cf:33:77:64:86:f5:8d:7d: 29:d9:a7:51:df:20:a6:59:7d:5a:9a:95:da:51:7a: be:05:88:a7:4c:de:ae:bf:5d:07:12:01:2a:9f:48: 41:db:5a:ab:b4:88:dd:58:23:98:b0:0f:5e:e2:0d: 41:4b:1f:b5:0b:bc:18:76:da:8b:1c:47:5d:a0:28: 8f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:3D:C5:30:ED:CD:16:55:A7:85:28:4E:C8:F4:BC:84:C9:D0:29:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/bd8c4790-3fa7-3392-86ba-87e9adece526.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 199.36.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption db:55:a4:9f:3c:b7:c6:b3:fd:e1:b6:4f:85:74:b8:a7:6f:1e: 30:f5:2a:8d:89:c5:09:8d:09:64:67:81:97:1d:90:3a:14:e5: 8a:d5:1c:a8:fc:1d:ff:3c:d4:3c:15:2c:fc:24:c6:07:a4:7f: 06:43:dc:9c:ac:f8:87:c5:3d:7f:89:bf:d0:b0:f9:0a:6b:b6: 70:08:74:a3:2f:e4:f8:be:85:f0:3f:43:54:49:a4:3d:c0:91: a4:2d:95:90:00:04:24:33:f6:0f:d1:1c:cc:5e:33:73:59:18: fa:20:da:db:b7:94:0e:fc:62:47:45:a6:59:1f:59:2e:5c:b7: aa:fe:9d:1c:f4:76:7e:62:fd:5f:67:08:e8:3f:8d:15:b5:ae: c5:c7:8f:9d:8b:36:cd:2e:d8:69:06:dd:4b:41:9e:09:48:45: be:22:fc:71:0e:9d:31:fd:ee:d2:26:79:fe:d3:de:a5:97:78: 2a:77:81:f0:ef:7b:f8:c6:7b:7f:43:05:3b:14:d2:06:ee:68: 41:3d:64:b6:92:0f:55:04:d5:7f:26:aa:61:43:b8:90:88:b1: 18:12:13:ae:ee:9f:58:46:a0:34:f4:c0:fe:ba:3e:f7:33:ac: 06:e5:9f:28:de:ee:8b:40:0b:82:98:79:b8:86:95:d6:13:ae: 79:f5:b5:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr369o+4Zl0rJTkrWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDgyNTAxMDAzM1oXDTI1MTEyMzAyMDAzM1owLzEtMCsGA1UEAxMk M2M0ZWVkM2YtN2Q1NC00YTQxLWIzNjItY2YxMjJjMjU2MzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRuB4iAgp+BBAuDES8qBqtAGfLWk+coaF0A3 YYwxQjL2K8vvyl/6VkxDnY+YjqcAZzE/O10vsgX8iTv9/npaJN1Ze4xVMgh01zsq WyKcBJh9+rER7aQbiSE1pa3YmJW2S/rw5yxZFd/hvFkTyFDQ+1ssOJ0XZ8FHq3hl 68y68bBzgnulqqdLZVuFJ0swnD348Q3Opi15wBaQQS+vA7AtrxclvrsHuLSSheW7 eyKplURPoJwMfKclW6h3zzN3ZIb1jX0p2adR3yCmWX1ampXaUXq+BYinTN6uv10H EgEqn0hB21qrtIjdWCOYsA9e4g1BSx+1C7wYdtqLHEddoCiPhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAo9xTDtzRZVp4UoTsj0vITJ0Cl5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvYmQ4YzQ3OTAtM2ZhNy0z MzkyLTg2YmEtODdlOWFkZWNlNTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyT4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANtVpJ88t8az/eG2T4V0uKdvHjD1Ko2JxQmNCWRngZcdkDoU5YrVHKj8 Hf881DwVLPwkxgekfwZD3Jys+IfFPX+Jv9Cw+QprtnAIdKMv5Pi+hfA/Q1RJpD3A kaQtlZAABCQz9g/RHMxeM3NZGPog2tu3lA78YkdFplkfWS5ct6r+nRz0dn5i/V9n COg/jRW1rsXHj52LNs0u2GkG3UtBnglIRb4i/HEOnTH97tImef7T3qWXeCp3gfDv e/jGe39DBTsU0gbuaEE9ZLaSD1UE1X8mqmFDuJCIsRgSE67un1hGoDT0wP66Pvcz rAblnyje7otAC4KYebiGldYTrnn1tZU= -----END CERTIFICATE-----Generated at Mon Oct 27 12:02:40 2025 by rpki-client