$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a8e92fcb-845a-4526-b1f5-8d456add74c4/bfa67036-51e3-3813-bbdd-cba852d71663.roa File: bfa67036-51e3-3813-bbdd-cba852d71663.roa (raw, json) Hash identifier: WdeXIq2z2oAaHSrt0bwePT36ne5ENnPxjCDfpOmeUr8= Subject key identifier: 9D:ED:48:2D:BD:C5:A1:1F:F3:74:49:71:16:2E:3E:98:7F:0B:41:6B Certificate issuer: /CN=a8e92fcb-845a-4526-b1f5-8d456add74c4 Certificate serial: 010D0C9F4328584AE21B42734B3553F4C53F4A80 Authority key identifier: F0:BA:EC:D0:86:48:1E:FC:C5:89:BA:7D:B9:55:A9:10:8E:D6:BF:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a8e92fcb-845a-4526-b1f5-8d456add74c4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a8e92fcb-845a-4526-b1f5-8d456add74c4/bfa67036-51e3-3813-bbdd-cba852d71663.roa Signing time: Sun 17 Aug 2025 05:28:22 +0000 ROA not before: Sun 17 Aug 2025 05:28:22 +0000 ROA not after: Sat 15 Nov 2025 06:28:22 +0000 asID: 30600 IP address blocks: 199.167.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a8e92fcb-845a-4526-b1f5-8d456add74c4/a8e92fcb-845a-4526-b1f5-8d456add74c4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a8e92fcb-845a-4526-b1f5-8d456add74c4/a8e92fcb-845a-4526-b1f5-8d456add74c4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a8e92fcb-845a-4526-b1f5-8d456add74c4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e2:1b:42:73:4b:35:53:f4:c5:3f:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8e92fcb-845a-4526-b1f5-8d456add74c4 Validity Not Before: Aug 17 05:28:22 2025 GMT Not After : Nov 15 06:28:22 2025 GMT Subject: CN=056022b3-2863-4d31-a02c-84346097a8f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:e9:62:27:95:28:9b:ef:4c:7f:a9:0c:1e:40: 41:2d:c8:4d:06:dd:09:5b:60:5b:5c:ce:b6:80:14: 3a:72:9d:51:c7:a3:f2:7d:46:79:d8:16:1c:9d:13: f1:93:e6:05:d5:35:96:57:c2:c1:fd:30:9d:e6:40: cd:74:f7:35:9c:44:45:5b:a1:ab:35:8e:da:4a:a7: 8b:aa:d8:b0:5d:6d:cd:9e:40:72:9d:57:97:7e:c9: 5f:9c:21:89:aa:57:df:8f:6d:4e:26:7d:d3:04:b7: 95:aa:4e:56:98:d3:77:28:a0:d8:cc:54:15:00:48: 6d:88:49:fd:e9:70:47:74:ec:e0:46:78:5e:00:76: e5:08:5c:04:fd:f7:67:64:16:15:07:26:06:17:f1: 63:35:da:0a:b8:d4:d2:3f:18:ce:e6:fc:93:0e:8c: 05:1b:12:2a:45:17:94:97:4e:0c:84:51:84:e5:3e: 06:c7:ef:0b:6c:ee:4e:85:c2:1e:8a:91:53:2b:f3: 30:9f:e2:ab:23:fa:09:94:25:8f:c1:63:6a:89:42: c8:d3:ff:1b:c7:e0:75:a2:1e:8d:0e:88:23:c1:5a: f4:b4:cf:78:a0:ac:63:f2:24:0e:5e:3e:41:7a:33: 75:a1:0e:9f:34:c9:6c:e2:c9:16:e7:54:8d:16:c2: 99:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:ED:48:2D:BD:C5:A1:1F:F3:74:49:71:16:2E:3E:98:7F:0B:41:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a8e92fcb-845a-4526-b1f5-8d456add74c4/bfa67036-51e3-3813-bbdd-cba852d71663.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a8e92fcb-845a-4526-b1f5-8d456add74c4/a8e92fcb-845a-4526-b1f5-8d456add74c4.crl X509v3 Authority Key Identifier: keyid:F0:BA:EC:D0:86:48:1E:FC:C5:89:BA:7D:B9:55:A9:10:8E:D6:BF:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a8e92fcb-845a-4526-b1f5-8d456add74c4.cer sbgp-ipAddrBlock: critical IPv4: 199.167.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:6d:51:3c:86:aa:95:dd:ab:8b:61:97:cf:12:25:27:a1:39: dd:4f:00:48:2a:7c:6b:03:d9:f4:64:10:da:8b:dc:ed:db:17: 98:85:9c:3d:d5:b1:8c:76:4d:51:da:c4:ed:5a:c2:1e:02:5d: 84:e2:56:77:a3:80:2d:d6:f5:67:95:5a:96:db:3b:93:a7:6b: 22:af:14:80:1b:2d:fb:c8:82:ff:fc:6a:f9:d1:b7:3a:0e:17: e0:1f:38:c3:f9:63:46:d3:f7:97:cd:81:a0:15:7a:7c:c0:d4: 9b:43:b2:8a:8a:6f:ed:3f:88:da:37:15:86:cb:c5:37:48:5e: 88:75:ed:8e:0f:ac:a1:36:30:ad:2e:df:28:ac:b2:05:07:b6: b9:ba:b6:6b:0a:6e:e6:aa:6b:1f:8b:d7:69:a4:a9:35:e8:95: 3d:a9:fc:e6:2e:ff:96:ab:ba:35:88:35:20:ea:ea:29:06:3a: e7:2a:3a:26:5f:49:6b:1d:61:99:44:78:e6:9b:46:59:c6:7d: 35:c7:3a:99:e0:78:1a:0c:8a:7d:14:e1:d1:c7:64:6e:71:0f: 46:51:f4:be:50:b9:b8:8a:23:84:21:41:89:1d:ca:0b:33:30: 59:ed:c7:d6:1f:bb:54:91:42:5d:9b:ea:14:30:36:1f:e3:5b: 6d:23:1a:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEriG0JzSzVT9MU/SoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYThlOTJmY2ItODQ1YS00NTI2LWIxZjUtOGQ0NTZhZGQ3 NGM0MB4XDTI1MDgxNzA1MjgyMloXDTI1MTExNTA2MjgyMlowLzEtMCsGA1UEAxMk MDU2MDIyYjMtMjg2My00ZDMxLWEwMmMtODQzNDYwOTdhOGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6eliJ5Uom+9Mf6kMHkBBLchNBt0JW2BbXM62 gBQ6cp1Rx6PyfUZ52BYcnRPxk+YF1TWWV8LB/TCd5kDNdPc1nERFW6GrNY7aSqeL qtiwXW3NnkBynVeXfslfnCGJqlffj21OJn3TBLeVqk5WmNN3KKDYzFQVAEhtiEn9 6XBHdOzgRnheAHblCFwE/fdnZBYVByYGF/FjNdoKuNTSPxjO5vyTDowFGxIqRReU l04MhFGE5T4Gx+8LbO5OhcIeipFTK/Mwn+KrI/oJlCWPwWNqiULI0/8bx+B1oh6N DogjwVr0tM94oKxj8iQOXj5BejN1oQ6fNMls4skW51SNFsKZxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ3tSC29xaEf83RJcRYuPph/C0FrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hOGU5 MmZjYi04NDVhLTQ1MjYtYjFmNS04ZDQ1NmFkZDc0YzQvYmZhNjcwMzYtNTFlMy0z ODEzLWJiZGQtY2JhODUyZDcxNjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYThlOTJmY2ItODQ1YS00NTI2LWIx ZjUtOGQ0NTZhZGQ3NGM0L2E4ZTkyZmNiLTg0NWEtNDUyNi1iMWY1LThkNDU2YWRk NzRjNC5jcmwwHwYDVR0jBBgwFoAU8Lrs0IZIHvzFibp9uVWpEI7Wv8EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hOGU5MmZjYi04NDVhLTQ1MjYtYjFmNS04ZDQ1 NmFkZDc0YzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6e/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKJtUTyGqpXdq4thl88SJSehOd1PAEgqfGsD2fRkENqL3O3bF5iFnD3V sYx2TVHaxO1awh4CXYTiVnejgC3W9WeVWpbbO5OnayKvFIAbLfvIgv/8avnRtzoO F+AfOMP5Y0bT95fNgaAVenzA1JtDsoqKb+0/iNo3FYbLxTdIXoh17Y4PrKE2MK0u 3yissgUHtrm6tmsKbuaqax+L12mkqTXolT2p/OYu/5arujWINSDq6ikGOucqOiZf SWsdYZlEeOabRlnGfTXHOpngeBoMin0U4dHHZG5xD0ZR9L5QubiKI4QhQYkdygsz MFntx9Yfu1SRQl2b6hQwNh/jW20jGkM= -----END CERTIFICATE-----Generated at Wed Aug 20 03:51:08 2025 by rpki-client