$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/00621ba6-99e5-4a17-9087-51ef82e92263/92e9ca67-b54e-3009-b93c-5a603a77d633.roa File: 92e9ca67-b54e-3009-b93c-5a603a77d633.roa (raw, json) Hash identifier: RQX9Ut7ZhC2yN9qNzIdw4y1xh5ymQKl/GzdlSchQNL4= Subject key identifier: A4:D4:07:41:7B:54:5A:EE:4A:B7:E3:3C:A0:1E:0B:BA:1D:4C:0C:05 Certificate issuer: /CN=00621ba6-99e5-4a17-9087-51ef82e92263 Certificate serial: 010D0C9F4328584AFC1BF009B8A4E92053C5C840 Authority key identifier: E2:D4:D4:B7:38:3B:4B:DF:D4:9A:F8:9D:17:6D:B3:29:A0:68:EF:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/00621ba6-99e5-4a17-9087-51ef82e92263.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/00621ba6-99e5-4a17-9087-51ef82e92263/92e9ca67-b54e-3009-b93c-5a603a77d633.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 36210 IP address blocks: 199.115.240.0/22 maxlen: 22 199.115.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/00621ba6-99e5-4a17-9087-51ef82e92263/00621ba6-99e5-4a17-9087-51ef82e92263.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/00621ba6-99e5-4a17-9087-51ef82e92263/00621ba6-99e5-4a17-9087-51ef82e92263.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/00621ba6-99e5-4a17-9087-51ef82e92263.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1b:f0:09:b8:a4:e9:20:53:c5:c8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00621ba6-99e5-4a17-9087-51ef82e92263 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=e52c9024-3f17-4ce9-9667-35059e46850d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:63:e8:ac:34:af:56:05:52:f8:bc:2e:c3:a8: 4d:f1:f6:33:b6:a6:5a:cc:4d:6d:e7:dc:e9:e6:01: df:07:4b:86:6e:48:be:85:67:91:57:58:e3:f7:a9: ff:e4:26:e9:c8:46:bf:23:06:b3:27:25:63:a8:07: 30:85:ed:05:a2:82:c5:cf:26:03:16:3d:87:bf:f2: 1a:44:57:c3:4c:34:45:2f:3c:0c:6e:f5:e2:4b:e5: 6c:a4:f2:ba:09:a2:57:86:87:ae:3e:a1:3a:0b:8b: 5a:af:30:5d:18:06:4a:3d:fb:aa:03:56:5b:74:cf: 44:8a:b3:0b:c8:43:3a:a9:5c:6c:27:36:e3:74:18: 27:2b:c9:16:bd:41:98:3a:d6:f5:43:96:20:2f:37: 8c:dd:0f:b2:30:8e:b3:be:33:9a:a9:6c:f2:c9:47: 20:a2:f8:a7:a0:3e:7d:3a:80:3b:9c:c4:61:34:50: ba:8c:c7:64:d9:bb:74:bb:ae:56:cb:49:50:2a:6a: 43:ae:31:0b:3a:87:fc:3c:06:0d:92:12:97:79:ca: 21:dc:7d:68:d6:f6:b9:be:a0:23:9e:13:54:47:51: 48:11:63:86:8b:b1:08:d7:b4:3c:2b:f9:20:28:0c: 9f:7f:3d:3d:3f:22:bd:43:20:1e:f0:e7:55:3d:4a: 0f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:D4:07:41:7B:54:5A:EE:4A:B7:E3:3C:A0:1E:0B:BA:1D:4C:0C:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/00621ba6-99e5-4a17-9087-51ef82e92263/92e9ca67-b54e-3009-b93c-5a603a77d633.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/00621ba6-99e5-4a17-9087-51ef82e92263/00621ba6-99e5-4a17-9087-51ef82e92263.crl X509v3 Authority Key Identifier: keyid:E2:D4:D4:B7:38:3B:4B:DF:D4:9A:F8:9D:17:6D:B3:29:A0:68:EF:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/00621ba6-99e5-4a17-9087-51ef82e92263.cer sbgp-ipAddrBlock: critical IPv4: 199.115.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:f5:de:87:aa:c0:fd:91:dd:4e:55:08:ca:8a:28:5b:a3:3d: 41:04:74:b7:02:02:ae:4f:87:b4:04:f6:68:39:a7:1c:1a:30: a9:e8:68:02:43:4d:fb:2e:3f:2a:46:42:1d:4b:d9:c6:a2:c4: b0:8a:92:8b:13:89:92:38:98:ea:04:29:c2:64:9b:d3:50:c2: 88:1d:ae:ec:61:79:de:14:79:1b:27:85:48:bf:f9:e0:3b:ac: 1d:49:9d:d1:3a:83:dc:b4:a5:68:10:7e:04:f4:2e:4f:3a:a0: 62:c0:45:7e:f0:08:b7:82:dc:ec:20:19:5f:ff:47:b7:c7:56: 54:dc:62:eb:cd:ff:0f:6b:f1:07:2c:96:c0:7f:21:d8:65:7d: d5:02:ec:2e:27:74:4b:5c:93:8a:58:20:8d:73:e9:21:8c:c6: eb:3e:e6:ee:27:90:06:26:40:7b:09:be:30:ce:ae:8a:7f:aa: c6:93:9e:75:80:96:fe:c5:4e:0e:d3:85:3f:5c:d8:55:9f:39: 1d:0f:04:7d:6a:24:8e:92:4b:dc:19:c6:1a:80:4a:9d:2d:cf: e6:48:2c:3d:59:11:ed:c9:6e:6b:3a:10:73:5b:e7:0c:4b:91: e0:6f:59:c0:27:13:dc:9d:4d:0c:63:c2:0f:0f:83:c7:70:d6: 70:c0:d8:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8G/AJuKTpIFPFyEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA2MjFiYTYtOTllNS00YTE3LTkwODctNTFlZjgyZTky MjYzMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk ZTUyYzkwMjQtM2YxNy00Y2U5LTk2NjctMzUwNTllNDY4NTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2PorDSvVgVS+Lwuw6hN8fYztqZazE1t59zp 5gHfB0uGbki+hWeRV1jj96n/5CbpyEa/IwazJyVjqAcwhe0FooLFzyYDFj2Hv/Ia RFfDTDRFLzwMbvXiS+VspPK6CaJXhoeuPqE6C4tarzBdGAZKPfuqA1ZbdM9EirML yEM6qVxsJzbjdBgnK8kWvUGYOtb1Q5YgLzeM3Q+yMI6zvjOaqWzyyUcgovinoD59 OoA7nMRhNFC6jMdk2bt0u65Wy0lQKmpDrjELOof8PAYNkhKXecoh3H1o1va5vqAj nhNUR1FIEWOGi7EI17Q8K/kgKAyffz09PyK9QyAe8OdVPUoPfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKTUB0F7VFruSrfjPKAeC7odTAwFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDYy MWJhNi05OWU1LTRhMTctOTA4Ny01MWVmODJlOTIyNjMvOTJlOWNhNjctYjU0ZS0z MDA5LWI5M2MtNWE2MDNhNzdkNjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA2MjFiYTYtOTllNS00YTE3LTkw ODctNTFlZjgyZTkyMjYzLzAwNjIxYmE2LTk5ZTUtNGExNy05MDg3LTUxZWY4MmU5 MjI2My5jcmwwHwYDVR0jBBgwFoAU4tTUtzg7S9/UmvidF22zKaBo7yAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDYyMWJhNi05OWU1LTRhMTctOTA4Ny01MWVm ODJlOTIyNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx3PwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADL13oeqwP2R3U5VCMqKKFujPUEEdLcCAq5Ph7QE9mg5pxwaMKnoaAJD TfsuPypGQh1L2caixLCKkosTiZI4mOoEKcJkm9NQwogdruxhed4UeRsnhUi/+eA7 rB1JndE6g9y0pWgQfgT0Lk86oGLARX7wCLeC3OwgGV//R7fHVlTcYuvN/w9r8Qcs lsB/IdhlfdUC7C4ndEtck4pYII1z6SGMxus+5u4nkAYmQHsJvjDOrop/qsaTnnWA lv7FTg7ThT9c2FWfOR0PBH1qJI6SS9wZxhqASp0tz+ZILD1ZEe3Jbms6EHNb5wxL keBvWcAnE9ydTQxjwg8Pg8dw1nDA2PU= -----END CERTIFICATE-----Generated at Thu Oct 9 19:59:40 2025 by rpki-client