$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/2c8c6ad3-e963-3175-a096-858ac3ef6191.roa File: 2c8c6ad3-e963-3175-a096-858ac3ef6191.roa (raw, json) Hash identifier: yeFXuhnPPg41wnEpRwg7/sHi+eKtX2M5sb1yoHdTOz4= Subject key identifier: 57:B2:15:78:92:CA:CA:9B:AB:01:85:1C:E1:C6:4A:36:28:E2:B4:49 Certificate issuer: /CN=e35c7007-7a33-480f-a32e-40481f8f1792 Certificate serial: 010D0C9F4328584AE8911F436E40FD3733F7E400 Authority key identifier: 69:C5:93:B3:CB:4A:4F:6B:F2:C7:1E:19:B2:7A:66:85:BA:C2:EA:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/2c8c6ad3-e963-3175-a096-858ac3ef6191.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 53636 IP address blocks: 199.47.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/e35c7007-7a33-480f-a32e-40481f8f1792.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/e35c7007-7a33-480f-a32e-40481f8f1792.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:1f:43:6e:40:fd:37:33:f7:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e35c7007-7a33-480f-a32e-40481f8f1792 Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=ec2e9912-74b2-4c14-bc7b-be178fa13768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:bb:fc:66:3e:7f:ab:87:d6:fa:45:7e:78:24: 3e:91:ff:4e:14:ce:04:fc:6f:c1:86:47:bb:85:36: 3c:1f:94:25:e9:65:a4:a7:a2:c4:02:40:27:9f:86: 6a:b1:ea:7d:33:ba:14:c5:09:39:03:03:99:94:83: fc:22:07:1b:b7:ef:84:b8:8c:d1:96:0b:f5:ef:d3: 0c:25:12:86:b7:8b:32:6d:d6:d3:7e:be:41:b0:25: 88:03:9f:e0:28:88:b8:43:70:f8:e6:58:de:08:82: 40:b0:8d:84:d2:33:04:a1:c3:40:42:02:f6:6c:8c: 2d:4d:db:97:a0:8d:aa:ad:d3:b9:b6:95:73:5f:ac: e3:82:f9:ec:05:fd:b0:1c:ec:48:8e:3a:bd:e7:51: 4b:68:38:1c:88:be:a4:02:7f:77:e2:67:c6:a4:d4: 03:fd:02:3b:29:4d:d4:ff:dc:5b:97:94:1f:9d:ce: 12:03:85:32:c0:86:bf:f5:c4:09:6b:81:aa:46:e9: 84:87:2a:04:02:4b:15:eb:2c:67:19:9e:23:fb:d6: 52:6f:9b:6e:0c:30:f4:b6:fd:d7:f8:92:9e:f0:65: 49:7f:15:8d:e4:2f:c6:4a:b0:0c:1d:5f:8e:5f:e3: 45:c1:dd:a3:cb:e8:0f:90:11:bd:28:8b:a4:37:5c: e7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:B2:15:78:92:CA:CA:9B:AB:01:85:1C:E1:C6:4A:36:28:E2:B4:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/2c8c6ad3-e963-3175-a096-858ac3ef6191.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/e35c7007-7a33-480f-a32e-40481f8f1792.crl X509v3 Authority Key Identifier: keyid:69:C5:93:B3:CB:4A:4F:6B:F2:C7:1E:19:B2:7A:66:85:BA:C2:EA:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792.cer sbgp-ipAddrBlock: critical IPv4: 199.47.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:15:24:58:46:d5:53:08:0c:43:4e:a2:c8:95:ea:70:40:4a: 6b:a8:02:66:c8:2f:9f:d5:34:82:6a:99:98:fe:d3:ef:a8:97: 8c:1c:4c:6d:38:00:e0:e2:ef:80:08:1f:52:f3:85:a7:45:d8: 17:7c:32:ba:66:97:41:de:7c:4d:5b:bf:58:62:05:50:95:5b: 7b:12:69:d6:ef:a2:99:8c:ef:34:83:14:e5:ca:d9:f2:36:bb: eb:60:19:06:42:ea:b7:23:03:36:1b:a8:cc:ee:4e:64:f2:87: 62:f9:12:62:29:91:0f:cf:30:f4:ae:75:fb:8b:b0:d8:54:37: 08:9b:80:d1:32:f7:96:5e:94:c4:8f:d9:21:12:78:d3:8f:0d: c0:9a:f0:9a:9c:ac:cf:ce:54:27:fe:a2:10:ef:01:3c:55:f1: 59:c3:0d:dd:92:c1:4a:1a:b9:2d:bf:8e:24:f7:3d:f8:a6:a2: a2:a7:af:bc:10:4c:d9:cb:28:0e:9c:5b:5c:4b:1d:25:cc:a5: a1:7b:be:79:b9:58:85:01:b4:80:eb:91:7d:a5:b6:d3:70:8b: 1d:24:cb:2a:3e:c5:69:ea:65:e3:5b:d5:b5:1a:1c:3f:76:27: 5a:f4:42:02:37:bf:4a:14:aa:40:42:65:9e:3d:99:33:35:f6: fe:2a:8d:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokR9DbkD9NzP35AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM1YzcwMDctN2EzMy00ODBmLWEzMmUtNDA0ODFmOGYx NzkyMB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk ZWMyZTk5MTItNzRiMi00YzE0LWJjN2ItYmUxNzhmYTEzNzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7v8Zj5/q4fW+kV+eCQ+kf9OFM4E/G/Bhke7 hTY8H5Ql6WWkp6LEAkAnn4Zqsep9M7oUxQk5AwOZlIP8Igcbt++EuIzRlgv179MM JRKGt4sybdbTfr5BsCWIA5/gKIi4Q3D45ljeCIJAsI2E0jMEocNAQgL2bIwtTduX oI2qrdO5tpVzX6zjgvnsBf2wHOxIjjq951FLaDgciL6kAn934mfGpNQD/QI7KU3U /9xbl5Qfnc4SA4UywIa/9cQJa4GqRumEhyoEAksV6yxnGZ4j+9ZSb5tuDDD0tv3X +JKe8GVJfxWN5C/GSrAMHV+OX+NFwd2jy+gPkBG9KIukN1znSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFeyFXiSysqbqwGFHOHGSjYo4rRJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lMzVj NzAwNy03YTMzLTQ4MGYtYTMyZS00MDQ4MWY4ZjE3OTIvMmM4YzZhZDMtZTk2My0z MTc1LWEwOTYtODU4YWMzZWY2MTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTM1YzcwMDctN2EzMy00ODBmLWEz MmUtNDA0ODFmOGYxNzkyL2UzNWM3MDA3LTdhMzMtNDgwZi1hMzJlLTQwNDgxZjhm MTc5Mi5jcmwwHwYDVR0jBBgwFoAUacWTs8tKT2vyxx4ZsnpmhbrC6uwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lMzVjNzAwNy03YTMzLTQ4MGYtYTMyZS00MDQ4 MWY4ZjE3OTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxy+XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUVJFhG1VMIDENOosiV6nBASmuoAmbIL5/VNIJqmZj+0++ol4wcTG04 AODi74AIH1LzhadF2Bd8Mrpml0HefE1bv1hiBVCVW3sSadbvopmM7zSDFOXK2fI2 u+tgGQZC6rcjAzYbqMzuTmTyh2L5EmIpkQ/PMPSudfuLsNhUNwibgNEy95ZelMSP 2SESeNOPDcCa8JqcrM/OVCf+ohDvATxV8VnDDd2SwUoauS2/jiT3PfimoqKnr7wQ TNnLKA6cW1xLHSXMpaF7vnm5WIUBtIDrkX2lttNwix0kyyo+xWnqZeNb1bUaHD92 J1r0QgI3v0oUqkBCZZ49mTM19v4qjdo= -----END CERTIFICATE-----Generated at Wed Aug 20 23:02:40 2025 by rpki-client