$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/f40e0e47-941a-3211-9018-ea3a5bb33892.roa File: f40e0e47-941a-3211-9018-ea3a5bb33892.roa (raw, json) Hash identifier: bUAZWLkDC8GMSYvqP94mjLwsPaPmnSWLZI086PpvFVQ= Subject key identifier: 27:15:9B:31:05:CF:8B:6D:A8:C1:C4:A5:1E:33:97:DA:23:D2:2B:76 Certificate issuer: /CN=a3e00c5c-5e66-4d69-8173-b03c82880bc1 Certificate serial: 010D0C9F4328584B2A2C286FCE4558D71A803780 Authority key identifier: D4:74:D8:AD:B3:79:80:04:10:A4:04:FA:EC:10:CA:29:C1:49:53:E3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/f40e0e47-941a-3211-9018-ea3a5bb33892.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 26661 IP address blocks: 199.96.184.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/a3e00c5c-5e66-4d69-8173-b03c82880bc1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/a3e00c5c-5e66-4d69-8173-b03c82880bc1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:28:6f:ce:45:58:d7:1a:80:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3e00c5c-5e66-4d69-8173-b03c82880bc1 Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=1bd4c878-b80b-40dd-a526-0eeb720b1a13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:88:9b:8e:e6:99:b8:d8:7b:42:0e:df:60:44: de:48:db:4e:32:f6:02:87:b3:c1:06:a7:eb:eb:15: a9:10:75:21:49:07:7d:57:b7:f3:f4:17:c6:2f:38: 68:2f:52:44:05:8a:3d:50:15:89:5a:de:b9:1f:b4: 77:e2:41:6d:4d:92:e6:03:6a:dc:3d:41:ae:c1:7a: 08:21:0d:24:7d:8d:70:0d:9c:f8:1d:b4:f6:e9:08: d3:c6:e1:78:35:36:ae:51:95:2a:7e:15:f6:85:3e: ae:19:2e:eb:e7:7d:6f:14:5e:c7:2c:e3:80:61:d9: 1d:66:c7:8e:0a:66:46:8b:2d:09:48:98:40:62:f1: aa:b5:fa:ca:4e:b5:50:00:e5:f3:7c:6b:a1:d1:c8: 7b:c3:b0:d6:77:61:fb:20:1e:e0:2c:fe:69:0d:3e: ed:d1:5c:b0:c1:dc:ed:98:df:4d:e6:e5:e6:13:56: 26:6d:b1:61:66:fd:bb:83:f1:fd:8b:56:7c:a6:67: 9b:1a:fa:46:e1:68:8a:24:5d:06:1f:35:8f:a1:64: ff:fc:ad:09:0a:14:fb:eb:5c:49:6e:38:f7:8b:05: 58:38:22:9f:f7:a9:aa:89:a9:fd:4a:f5:0d:5a:70: b0:5c:39:a8:98:d9:47:ff:ff:c4:88:f5:2c:fb:54: 7e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:15:9B:31:05:CF:8B:6D:A8:C1:C4:A5:1E:33:97:DA:23:D2:2B:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/f40e0e47-941a-3211-9018-ea3a5bb33892.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/a3e00c5c-5e66-4d69-8173-b03c82880bc1.crl X509v3 Authority Key Identifier: keyid:D4:74:D8:AD:B3:79:80:04:10:A4:04:FA:EC:10:CA:29:C1:49:53:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1.cer sbgp-ipAddrBlock: critical IPv4: 199.96.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:35:4d:90:05:35:d0:65:82:e7:65:6d:95:c7:84:93:38:31: d5:68:4b:a6:81:14:e2:a0:13:83:74:87:16:89:39:94:22:ce: 94:a8:5d:d1:49:89:20:86:6d:27:1e:f1:b7:a4:0b:fc:d6:47: 84:da:47:4d:82:ea:0a:9f:c6:2f:a8:d6:96:ad:47:3c:fc:1c: 24:6d:dd:52:18:4f:2d:78:3e:08:dc:b7:b2:10:55:c5:ab:ac: cf:2d:9b:5a:84:78:ab:d7:e8:66:66:60:44:a5:40:47:dc:92: ce:cf:45:71:2f:2c:06:45:98:34:7d:57:aa:5d:3d:eb:d8:9e: 67:bf:da:e1:c5:a4:88:d6:78:60:92:b4:00:ee:32:1f:82:92: 12:aa:b7:3a:ba:a5:3c:93:79:50:67:02:52:dd:eb:72:e3:4b: 9a:20:52:80:c4:af:eb:b2:1e:f3:45:ad:e7:32:7a:d9:2f:8e: 3c:45:fb:d7:71:74:e4:5a:f3:d1:b8:bc:04:3d:51:66:65:67: ea:07:0c:db:0b:3c:a2:81:1e:b5:d6:02:83:36:a6:c2:1f:f3: 03:93:66:8d:26:fc:1b:de:38:a0:ac:59:0d:28:dd:b7:ec:d1: c1:92:b5:bd:97:96:b6:8b:eb:5b:2f:7e:b8:5d:69:14:5b:52: cb:8d:f1:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLChvzkVY1xqAN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNlMDBjNWMtNWU2Ni00ZDY5LTgxNzMtYjAzYzgyODgw YmMxMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk MWJkNGM4NzgtYjgwYi00MGRkLWE1MjYtMGVlYjcyMGIxYTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIibjuaZuNh7Qg7fYETeSNtOMvYCh7PBBqfr 6xWpEHUhSQd9V7fz9BfGLzhoL1JEBYo9UBWJWt65H7R34kFtTZLmA2rcPUGuwXoI IQ0kfY1wDZz4HbT26QjTxuF4NTauUZUqfhX2hT6uGS7r531vFF7HLOOAYdkdZseO CmZGiy0JSJhAYvGqtfrKTrVQAOXzfGuh0ch7w7DWd2H7IB7gLP5pDT7t0Vywwdzt mN9N5uXmE1YmbbFhZv27g/H9i1Z8pmebGvpG4WiKJF0GHzWPoWT//K0JChT761xJ bjj3iwVYOCKf96mqian9SvUNWnCwXDmomNlH///EiPUs+1R+LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCcVmzEFz4ttqMHEpR4zl9oj0it2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hM2Uw MGM1Yy01ZTY2LTRkNjktODE3My1iMDNjODI4ODBiYzEvZjQwZTBlNDctOTQxYS0z MjExLTkwMTgtZWEzYTViYjMzODkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTNlMDBjNWMtNWU2Ni00ZDY5LTgx NzMtYjAzYzgyODgwYmMxL2EzZTAwYzVjLTVlNjYtNGQ2OS04MTczLWIwM2M4Mjg4 MGJjMS5jcmwwHwYDVR0jBBgwFoAU1HTYrbN5gAQQpAT67BDKKcFJU+MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hM2UwMGM1Yy01ZTY2LTRkNjktODE3My1iMDNj ODI4ODBiYzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx2C4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQ1TZAFNdBlgudlbZXHhJM4MdVoS6aBFOKgE4N0hxaJOZQizpSoXdFJ iSCGbSce8bekC/zWR4TaR02C6gqfxi+o1patRzz8HCRt3VIYTy14Pgjct7IQVcWr rM8tm1qEeKvX6GZmYESlQEfcks7PRXEvLAZFmDR9V6pdPevYnme/2uHFpIjWeGCS tADuMh+CkhKqtzq6pTyTeVBnAlLd63LjS5ogUoDEr+uyHvNFrecyetkvjjxF+9dx dORa89G4vAQ9UWZlZ+oHDNsLPKKBHrXWAoM2psIf8wOTZo0m/BveOKCsWQ0o3bfs 0cGStb2XlraL61svfrhdaRRbUsuN8SA= -----END CERTIFICATE-----Generated at Sat Oct 11 05:18:26 2025 by rpki-client