$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/2ef613c6-a522-306e-bd8c-fc8133312b16.roa File: 2ef613c6-a522-306e-bd8c-fc8133312b16.roa (raw, json) Hash identifier: 9j3c9Mn9EqUc9qWLZdpzVjhWTvLoVo5hwUekz7TysKE= Subject key identifier: 9C:CF:28:D0:18:39:BA:97:C9:24:1F:23:96:21:A0:8E:5C:46:96:A7 Certificate issuer: /CN=a3e00c5c-5e66-4d69-8173-b03c82880bc1 Certificate serial: 010D0C9F4328584B2A2C30739E5428501DF8B260 Authority key identifier: D4:74:D8:AD:B3:79:80:04:10:A4:04:FA:EC:10:CA:29:C1:49:53:E3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/2ef613c6-a522-306e-bd8c-fc8133312b16.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 14041 IP address blocks: 199.96.184.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/a3e00c5c-5e66-4d69-8173-b03c82880bc1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/a3e00c5c-5e66-4d69-8173-b03c82880bc1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:30:73:9e:54:28:50:1d:f8:b2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3e00c5c-5e66-4d69-8173-b03c82880bc1 Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=b7ce886c-0839-42bc-8ec4-253e51f66754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b2:42:90:c2:dc:77:58:6d:fa:ac:23:06:9a: b6:48:cc:d2:f9:3c:75:79:dc:34:e6:1d:11:ed:ee: fc:45:87:61:39:20:7b:93:ad:e9:60:0f:da:63:c7: 3e:66:73:d2:ed:cc:f7:1e:5f:f2:64:51:fd:cf:79: aa:d0:d1:bb:e9:74:21:34:c1:de:7c:8f:52:6e:3a: 61:24:db:1c:42:2a:09:3e:be:ce:67:7c:a1:72:8a: 0c:87:1d:58:7b:a8:57:cf:8d:64:57:f7:10:22:84: 5e:ea:05:68:e6:30:69:6e:99:90:e0:52:39:d5:a3: 10:99:70:12:6d:58:8b:b2:f4:c1:fc:b1:07:8d:13: 22:d4:b6:7a:81:32:1d:0d:c3:b4:66:e6:a3:3d:9a: 95:4c:8c:db:bf:da:08:a3:e4:e9:90:53:46:f7:d7: 14:a2:e3:15:91:73:af:6d:41:7e:f1:5f:19:16:4d: 44:ac:32:5c:69:ef:8f:73:b3:4f:af:61:64:65:bc: 22:1d:be:e2:e3:4b:d0:b0:54:f0:35:77:f2:ac:64: e4:91:7e:fd:b2:1f:62:3c:4d:7f:ec:ea:03:7a:50: 99:d1:47:62:76:47:35:71:b8:07:d5:b1:af:3c:d9: c7:25:b3:b8:dd:88:a0:ee:9f:38:b8:52:cc:39:a1: 76:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:CF:28:D0:18:39:BA:97:C9:24:1F:23:96:21:A0:8E:5C:46:96:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/2ef613c6-a522-306e-bd8c-fc8133312b16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/a3e00c5c-5e66-4d69-8173-b03c82880bc1.crl X509v3 Authority Key Identifier: keyid:D4:74:D8:AD:B3:79:80:04:10:A4:04:FA:EC:10:CA:29:C1:49:53:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1.cer sbgp-ipAddrBlock: critical IPv4: 199.96.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:a4:05:62:94:34:0a:ac:1e:aa:9f:63:c8:60:81:fd:02:a5: ac:5e:78:53:83:1f:d2:4e:a1:7f:a1:b2:09:25:c2:80:7b:82: 50:55:2b:87:3d:57:e6:18:0b:f0:27:db:00:a5:28:5c:f6:23: fd:8b:e2:81:8a:3b:8a:e5:e6:bc:90:be:13:0f:37:d7:cf:43: 0f:57:ee:73:f3:d8:75:56:98:1f:2a:81:42:a3:fe:65:cc:88: fe:45:44:fd:06:aa:02:aa:12:54:a7:0c:f5:a0:97:bb:b2:fb: 1f:e7:23:dc:75:0a:ce:f0:b1:ef:d5:f4:2b:d9:af:48:14:43: ec:cc:16:bf:d3:61:eb:ab:e0:df:2b:ce:bf:39:f1:40:09:4a: 71:03:51:e8:ad:4a:3b:b8:6a:ac:59:6a:a5:20:5f:14:f5:aa: 1f:92:6e:00:d4:20:80:f2:e6:5a:b6:bb:08:99:01:11:45:22: 1b:dd:0f:48:a2:1f:14:52:2a:79:f7:ec:b5:57:c1:bf:b8:13: ca:e7:11:e6:cc:ae:74:cc:d4:98:86:40:e3:73:47:4d:a7:0b: 80:1e:f9:5d:83:45:4e:00:04:69:9e:45:e7:36:6f:b8:0c:f9: 56:6a:7a:b5:56:03:f4:8b:31:d2:ef:5f:6e:d6:87:5a:aa:8b: dd:18:79:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLDBznlQoUB34smAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNlMDBjNWMtNWU2Ni00ZDY5LTgxNzMtYjAzYzgyODgw YmMxMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk YjdjZTg4NmMtMDgzOS00MmJjLThlYzQtMjUzZTUxZjY2NzU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLJCkMLcd1ht+qwjBpq2SMzS+Tx1edw05h0R 7e78RYdhOSB7k63pYA/aY8c+ZnPS7cz3Hl/yZFH9z3mq0NG76XQhNMHefI9Sbjph JNscQioJPr7OZ3yhcooMhx1Ye6hXz41kV/cQIoRe6gVo5jBpbpmQ4FI51aMQmXAS bViLsvTB/LEHjRMi1LZ6gTIdDcO0ZuajPZqVTIzbv9oIo+TpkFNG99cUouMVkXOv bUF+8V8ZFk1ErDJcae+Pc7NPr2FkZbwiHb7i40vQsFTwNXfyrGTkkX79sh9iPE1/ 7OoDelCZ0Udidkc1cbgH1bGvPNnHJbO43Yig7p84uFLMOaF2CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJzPKNAYObqXySQfI5YhoI5cRpanMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hM2Uw MGM1Yy01ZTY2LTRkNjktODE3My1iMDNjODI4ODBiYzEvMmVmNjEzYzYtYTUyMi0z MDZlLWJkOGMtZmM4MTMzMzEyYjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTNlMDBjNWMtNWU2Ni00ZDY5LTgx NzMtYjAzYzgyODgwYmMxL2EzZTAwYzVjLTVlNjYtNGQ2OS04MTczLWIwM2M4Mjg4 MGJjMS5jcmwwHwYDVR0jBBgwFoAU1HTYrbN5gAQQpAT67BDKKcFJU+MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hM2UwMGM1Yy01ZTY2LTRkNjktODE3My1iMDNj ODI4ODBiYzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx2C4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2kBWKUNAqsHqqfY8hggf0CpaxeeFODH9JOoX+hsgklwoB7glBVK4c9 V+YYC/An2wClKFz2I/2L4oGKO4rl5ryQvhMPN9fPQw9X7nPz2HVWmB8qgUKj/mXM iP5FRP0GqgKqElSnDPWgl7uy+x/nI9x1Cs7wse/V9CvZr0gUQ+zMFr/TYeur4N8r zr858UAJSnEDUeitSju4aqxZaqUgXxT1qh+SbgDUIIDy5lq2uwiZARFFIhvdD0ii HxRSKnn37LVXwb+4E8rnEebMrnTM1JiGQONzR02nC4Ae+V2DRU4ABGmeRec2b7gM +VZqerVWA/SLMdLvX27Wh1qqi90YeVg= -----END CERTIFICATE-----Generated at Sat Oct 11 05:18:26 2025 by rpki-client