$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/5a0ae7fa-e747-3e80-bbce-2e0f5ad57f24.roa File: 5a0ae7fa-e747-3e80-bbce-2e0f5ad57f24.roa (raw, json) Hash identifier: HED51lEGULBWpc6J5vhDoSJcmNEGQdlihxXojivc5m8= Subject key identifier: B5:C1:20:23:7C:14:21:83:97:36:C8:FF:95:6E:4C:9D:D2:7E:0C:E1 Certificate issuer: /CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Certificate serial: 010D0C9F4328584AC01625AAA66E16B78BD90E00 Authority key identifier: 5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/5a0ae7fa-e747-3e80-bbce-2e0f5ad57f24.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 21766 IP address blocks: 199.189.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:25:aa:a6:6e:16:b7:8b:d9:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=251cfb3e-e9a2-4136-8b5a-ceb7845d8c53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:77:da:8a:76:8a:39:56:2c:e9:e3:e4:6b:e7: 0a:a2:d5:43:d2:68:a8:6a:95:ec:cf:c7:a0:83:e1: 7b:fb:ec:40:cf:cc:0c:63:2e:df:7f:52:fd:5d:ff: 3f:27:ef:a1:7c:ac:b4:47:17:37:4f:3c:e6:b4:3b: 3e:69:54:63:de:65:47:99:53:cf:62:3d:40:ca:d4: 8c:55:3f:86:fa:7d:6b:f5:35:e7:fa:c2:8a:27:ab: 92:bc:b4:98:5d:59:4a:52:01:85:2e:b3:18:3b:b9: 63:d6:1c:c5:40:df:11:65:ee:87:2f:d8:40:f7:27: c7:b1:8d:33:05:3e:07:60:46:be:e6:e3:9a:8f:3c: fb:99:bb:00:1f:ed:e5:0d:c3:af:18:8c:c3:ee:ef: 25:60:1b:1d:20:d9:ff:c4:8a:aa:4d:76:1b:f2:20: 7f:b0:79:0f:85:bc:d1:0b:59:4c:6a:f6:70:42:c5: 57:e5:be:e2:1d:e1:b3:7d:67:9b:25:17:8d:89:a1: 17:d4:65:f1:6f:4d:c1:dc:2f:8b:e6:41:ab:aa:75: d8:9c:3f:0e:5d:ff:3f:19:02:10:73:a6:57:38:77: d5:e0:fe:13:e5:07:67:c9:e2:69:3b:fa:3e:66:5e: 69:6e:aa:1f:46:45:f8:0d:d0:83:a5:5d:e2:cc:13: bb:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:C1:20:23:7C:14:21:83:97:36:C8:FF:95:6E:4C:9D:D2:7E:0C:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/5a0ae7fa-e747-3e80-bbce-2e0f5ad57f24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl X509v3 Authority Key Identifier: keyid:5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer sbgp-ipAddrBlock: critical IPv4: 199.189.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:66:42:f5:36:85:7f:3a:a3:39:b8:37:28:05:20:a1:71:77: e7:8a:9d:6c:ea:61:e7:4b:c0:ed:23:22:68:40:ff:04:52:80: e7:7f:f9:58:6d:38:e8:ca:37:27:65:5f:5d:3f:a6:2d:64:23: 7d:ee:fa:fb:cf:22:3e:26:1b:51:2f:14:3e:73:2b:0b:01:e9: a5:e1:6c:59:b7:b6:b2:25:0c:2e:11:96:70:f1:c1:6b:20:dc: 82:5d:a2:7e:4a:7b:3c:24:49:2d:82:d1:9f:27:0c:8f:c8:c9: 69:f5:5c:7c:f3:d8:24:26:73:be:9f:ca:d8:e4:f7:3e:84:77: 12:87:77:30:6b:f5:19:1e:67:81:1e:f3:43:d5:42:b3:7d:2c: eb:47:1a:95:2b:73:fb:df:d5:d4:b4:1f:a8:f2:d6:88:c9:e6: 0e:02:77:b8:a0:70:15:63:c3:e6:1a:08:28:db:21:6d:22:9a: 0e:b1:c3:9e:5c:25:c0:c8:15:92:e3:cc:bc:bd:67:1d:ef:74: a7:f0:9c:28:40:be:5d:45:3f:15:20:9e:c5:4a:95:7d:9b:76: 73:55:96:76:ad:73:7a:3b:f8:b5:ba:80:7f:55:7a:76:70:a9: 47:fc:be:b0:59:cd:41:47:c8:98:76:86:8a:b7:99:55:d8:de: f1:5a:45:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFiWqpm4Wt4vZDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTdkN2YxNGUtNzJjNC00N2U0LWFkMDYtYTFiNzJmOTRj N2IxMB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk MjUxY2ZiM2UtZTlhMi00MTM2LThiNWEtY2ViNzg0NWQ4YzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXfainaKOVYs6ePka+cKotVD0mioapXsz8eg g+F7++xAz8wMYy7ff1L9Xf8/J++hfKy0Rxc3TzzmtDs+aVRj3mVHmVPPYj1AytSM VT+G+n1r9TXn+sKKJ6uSvLSYXVlKUgGFLrMYO7lj1hzFQN8RZe6HL9hA9yfHsY0z BT4HYEa+5uOajzz7mbsAH+3lDcOvGIzD7u8lYBsdINn/xIqqTXYb8iB/sHkPhbzR C1lMavZwQsVX5b7iHeGzfWebJReNiaEX1GXxb03B3C+L5kGrqnXYnD8OXf8/GQIQ c6ZXOHfV4P4T5QdnyeJpO/o+Zl5pbqofRkX4DdCDpV3izBO7yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLXBICN8FCGDlzbI/5VuTJ3SfgzhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3 ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3MmY5NGM3YjEvNWEwYWU3ZmEtZTc0Ny0z ZTgwLWJiY2UtMmUwZjVhZDU3ZjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTdkN2YxNGUtNzJjNC00N2U0LWFk MDYtYTFiNzJmOTRjN2IxL2E3ZDdmMTRlLTcyYzQtNDdlNC1hZDA2LWExYjcyZjk0 YzdiMS5jcmwwHwYDVR0jBBgwFoAUXtwOAtpu5BW/4iOR5NyjJ1ELeg0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3 MmY5NGM3YjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx73wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKJmQvU2hX86ozm4NygFIKFxd+eKnWzqYedLwO0jImhA/wRSgOd/+Vht OOjKNydlX10/pi1kI33u+vvPIj4mG1EvFD5zKwsB6aXhbFm3trIlDC4RlnDxwWsg 3IJdon5KezwkSS2C0Z8nDI/IyWn1XHzz2CQmc76fytjk9z6EdxKHdzBr9RkeZ4Ee 80PVQrN9LOtHGpUrc/vf1dS0H6jy1ojJ5g4Cd7igcBVjw+YaCCjbIW0img6xw55c JcDIFZLjzLy9Zx3vdKfwnChAvl1FPxUgnsVKlX2bdnNVlnatc3o7+LW6gH9VenZw qUf8vrBZzUFHyJh2hoq3mVXY3vFaRec= -----END CERTIFICATE-----Generated at Wed Aug 20 18:42:00 2025 by rpki-client